Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Facebook virus pls help - ntb

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
J3ck3sss
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 28 říj 2011 20:32

Facebook virus pls help - ntb

#1 Příspěvek od J3ck3sss »

log z NT


Logfile of random's system information tool 1.09 (written by random/random)
Run by J3ck3sss at 2011-10-28 22:09:06
Microsoft Windows 7 Ultimate
System drive C: has 155 GB (26%) free of 598 GB
Total RAM: 3959 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:09:13, on 28. 10. 2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16869)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe
C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\datamngrUI.exe
C:\Windows\update.tray-8-0\svchost.exe
C:\Windows\sysdriver32_.exe
C:\Windows\update.tray-12-0\svchost.exe
C:\Windows\update.tray-15-0\svchost.exe
C:\Users\J3ck3sss\Desktop\Programs\Skype.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 5\Asc.exe
C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\J3ck3sss\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Users\J3ck3sss\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\trend micro\J3ck3sss.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_ss ... ffID=17981
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/?babsrc=SP_ss ... ffID=17981
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: YouTube Downloader Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.7\youtubedownloaderToolbarIE.dll
R3 - URLSearchHook: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files (x86)\IObit Toolbar\IE\4.7\iobitToolbarIE.dll
R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
R3 - URLSearchHook: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files (x86)\IObit Toolbar\IE\4.7\iobitToolbarIE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\WI3C8A~1\ToolBar\searchqudtx.dll
O2 - BHO: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
O2 - BHO: UrlHelper Class - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} - C:\PROGRA~2\WI3C8A~1\Datamngr\IEBHO.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: YouTube Downloader Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.7\youtubedownloaderToolbarIE.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\WI3C8A~1\ToolBar\searchqudtx.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
O3 - Toolbar: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files (x86)\IObit Toolbar\IE\4.7\iobitToolbarIE.dll
O3 - Toolbar: YouTube Downloader Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.7\youtubedownloaderToolbarIE.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG10\avgtray.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe
O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~2\WI3C8A~1\Datamngr\DATAMN~1.EXE
O4 - HKLM\..\Run: [tray_ico2] C:\Windows\update.tray-8-0\svchost.exe
O4 - HKLM\..\Run: [2334188.exe] "C:\Windows\Temp\2334188.exe"
O4 - HKLM\..\Run: [sysdriver32.exe] "C:\Windows\sysdriver32.exe" rezerv
O4 - HKLM\..\Run: [sysdriver32_.exe] "C:\Windows\sysdriver32_.exe" rezerv
O4 - HKLM\..\Run: [2129169.exe] "C:\Users\J3ck3sss\AppData\Local\Temp\2129169.exe"
O4 - HKLM\..\Run: [4837713.exe] "C:\Windows\Temp\4837713.exe"
O4 - HKLM\..\Run: [wxpdrv] C:\Windows\services32.exe
O4 - HKLM\..\Run: [tray_ico0] C:\Windows\update.tray-12-0\svchost.exe
O4 - HKLM\..\Run: [tray_ico1] C:\Windows\update.tray-15-0\svchost.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Advanced SystemCare 5] "C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Download Using &BitSpirit - C:\Program Files (x86)\BitSpirit\bsurl.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - (no file)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O20 - AppInit_DLLs: C:\PROGRA~2\WI3C8A~1\Datamngr\datamngr.dll C:\PROGRA~2\WI3C8A~1\Datamngr\IEBHO.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Unknown owner - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (file missing)
O23 - Service: Avira Realtime Protection (AntiVirService) - Unknown owner - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (file missing)
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
O23 - Service: AtherosSvc - Unknown owner - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: AVG WatchDog (avgwd) - Unknown owner - (no file)
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: srviecheck - Unknown owner - C:\Windows\update.2\svchost.exe
O23 - Service: srvsysdriver32 - Unknown owner - C:\Windows\sysdriver32.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Mobile Broadband Core Service (WMCoreService) - Unknown owner - C:\Program Files (x86)\Mobile Broadband Drivers\WMCore\mini_WMCore.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: wxpdrivers - Cronosoft - C:\Windows\update.1\svchost.exe

--
End of file - 14254 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\system32\WLANExt.exe 23649264
\??\C:\Windows\system32\conhost.exe "-6823247671495141026-1905454088859916913-2090741586-749239321-326716806-1792071226
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\update.2\svchost.exe srv
"taskhost.exe"
taskeng.exe {5573B37E-A545-4331-A905-9E155DEB7230}
"C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe" /STARTUP
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Mobile Broadband Drivers\WMCore\mini_WMCore.exe" servicemode
C:\Windows\update.1\svchost.exe srv
"C:\Windows\update.2\svchost.exe" stand
WLIDSvcM.exe 1076
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files\Zune\ZuneLauncher.exe"
"C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
"C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\datamngrUI.exe"
"C:\Windows\update.tray-8-0\svchost.exe"
"C:\Windows\sysdriver32_.exe" rezerv
"C:\Windows\update.tray-12-0\svchost.exe"
"C:\Windows\update.tray-15-0\svchost.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\update.2\svchost.exe" spamer
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\update.2\svchost.exe" spamer
"C:\Users\J3ck3sss\Desktop\Programs\Skype.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Windows\update.2\svchost.exe" spamer
"C:\Program Files (x86)\IObit\Advanced SystemCare 5\Asc.exe"
"C:\Windows\update.2\svchost.exe" spamer
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe" -- "http://www.viry.cz/forum/viewtopic.php?f=13&t=105895"
"C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=sk --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Default_Prefix/WarmSocketImpact/warmest_socket/ --disable-client-side-phishing-detection --enable-print-preview --channel=4416.010E3160.2081152182 --ignored=" --type=renderer " /prefetch:3
"C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=sk --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Default_Prefix/WarmSocketImpact/warmest_socket/ --disable-client-side-phishing-detection --enable-print-preview --channel=4416.010E3840.1401099343 --ignored=" --type=renderer " /prefetch:3
"C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Default_Prefix/WarmSocketImpact/warmest_socket/ --disable-client-side-phishing-detection --enable-print-preview --channel=4416.06EE4B00.1023988725 /prefetch:3
"C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Default_Prefix/WarmSocketImpact/warmest_socket/ --disable-client-side-phishing-detection --enable-print-preview --channel=4416.06F472C0.1781190156 /prefetch:3
"C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\J3ck3sss\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\BabylonChromePI.dll" --lang=sk --channel=4416.0952AE00.50105264 /prefetch:4
C:\Windows\system32\sppsvc.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
wmiadap.exe /F /T /R
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Default_Prefix/WarmSocketImpact/warmest_socket/ --disable-client-side-phishing-detection --enable-print-preview --channel=4416.094D42C0.247986777 /prefetch:3
C:\Users\J3ck3sss\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
"C:\Users\J3ck3sss\AppData\Local\Google\Update\GoogleUpdate.exe" -Embedding
"C:\Users\J3ck3sss\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\FirewallControlPanel.dll,ShowNotificationDialog /configure /ETOnly 0 /OnProfiles 6 /OtherAllowed 0 /OtherBlocked 0 /OtherEdgeAllowed 0 /NewBlocked 2 "C:\windows\sysdriver32_.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3427954366-3406222959-2106377572-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3427954366-3406222959-2106377572-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}]
UrlHelper Class - C:\PROGRA~2\WI3C8A~1\Datamngr\x64\IEBHO.dll [2011-03-24 1058712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0BDA0769-FD72-49F4-9266-E1FB004F4D8F}]
IObit Toolbar - C:\Program Files (x86)\IObit Toolbar\IE\4.7\iobitToolbarIE.dll [2011-09-27 1050464]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}]
CescrtHlpr Object - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll [2010-11-07 225720]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
BitTorrentBar Toolbar - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}]
Searchqu Toolbar - C:\PROGRA~2\WI3C8A~1\ToolBar\searchqudtx.dll [2011-03-02 88976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}]
UrlHelper Class - C:\PROGRA~2\WI3C8A~1\Datamngr\IEBHO.dll [2011-03-24 722840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-02-01 1487240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3FEE66E-E034-436a-86E4-9690573BEE8A}]
YouTube Downloader Toolbar - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.7\youtubedownloaderToolbarIE.dll [2011-09-27 1050464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2011-01-20 1581376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-02-01 1487240]
{88c7f2aa-f93f-432c-8f0e-b7d85967a527} - BitTorrentBar Toolbar - C:\Program Files (x86)\BitTorrentBar\tbBitT.dll [2010-12-09 3911776]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2011-01-20 988480]
{99079a25-328f-4bd4-be04-00955acaa0a7} - Searchqu Toolbar - C:\PROGRA~2\WI3C8A~1\ToolBar\searchqudtx.dll [2011-03-02 88976]
{98889811-442D-49dd-99D7-DC866BE87DBC} - Babylon Toolbar - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll [2010-11-07 184760]
{0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - IObit Toolbar - C:\Program Files (x86)\IObit Toolbar\IE\4.7\iobitToolbarIE.dll [2011-09-27 1050464]
{F3FEE66E-E034-436a-86E4-9690573BEE8A} - YouTube Downloader Toolbar - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.7\youtubedownloaderToolbarIE.dll [2011-09-27 1050464]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-01-13 635784]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-10-19 2185032]
"Zune Launcher"=c:\Program Files\Zune\ZuneLauncher.exe [2011-08-05 163552]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 5"=C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe [2011-09-09 607576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\9178288.exe]
c:\windows\temp\9178288.exe [2011-10-28 1944576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer ePower Management]
c:\program files\acer\acer epower management\epowertray.exe [2010-01-18 832544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe [2011-06-06 937920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtherosBtStack]
c:\program files (x86)\bluetooth suite\btvstack.exe [2009-12-30 393256]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BabylonToolbar]
c:\program files (x86)\babylontoolbar\babylontoolbar\1.4.19.19\babylontoolbarsrv.exe [2010-11-07 286720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
c:\program files (x86)\bittorrent\bittorrent.exe [2011-01-28 4771184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cacaoweb]
c:\users\j3ck3sss\appdata\roaming\cacaoweb\cacaoweb.exe [2011-10-09 398576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
c:\program files (x86)\canon\solutionmenu\cnslmain.exe [2009-09-04 767312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
c:\program files (x86)\daemon tools lite\dtlite.exe [2011-01-20 1305408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivX Download Manager]
c:\program files (x86)\divx\divx plus web player\ddmservice.exe [2011-02-08 63360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
c:\program files (x86)\divx\divx update\divxupdate.exe [2011-07-29 1259376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Driver Updater]
c:\program files (x86)\carambis\driver updater\dupdater.exe [2010-11-25 4793856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
c:\users\j3ck3sss\appdata\local\google\update\googleupdate.exe [2010-12-14 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAStorIcon]
c:\program files (x86)\intel\intel(r) rapid storage technology\iastoricon.exe [2009-12-23 284696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper]
c:\program files (x86)\samsung\kies\kieshelper.exe [2011-03-17 896912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR]
c:\program files (x86)\samsung\kies\external\firmwareupdate\kiespdlr.exe [2011-03-17 19872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
c:\program files (x86)\samsung\kies\kiestrayagent.exe [2011-03-17 3373456]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
c:\program files (x86)\launch manager\lmanager.exe [2010-01-22 1287760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchSettings]
c:\program files (x86)\common files\spigot\search settings\searchsettings.exe [2011-09-27 894304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
c:\program files\windows sidebar\sidebar.exe [2009-07-14 1475072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\synaptics\syntp\syntpenh.exe [2009-12-10 1890088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\wxpdrv]
c:\windows\services32.exe [2011-10-28 1201152]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"AVG_TRAY"=C:\Program Files (x86)\AVG\AVG10\avgtray.exe []
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-12-10 98304]
"IJNetworkScanUtility"=C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [2009-05-19 136544]
"DATAMNGR"=C:\PROGRA~2\WI3C8A~1\Datamngr\DATAMN~1.EXE [2011-03-24 1115536]
""= []
"tray_ico"= []
"tray_ico2"=C:\Windows\update.tray-8-0\svchost.exe [2011-10-28 1201152]
"tray_ico3"= []
"tray_ico4"= []
"2334188.exe"=C:\Windows\Temp\2334188.exe [2011-10-28 258048]
"sysdriver32.exe"=C:\Windows\sysdriver32.exe rezerv []
"sysdriver32_.exe"=C:\Windows\sysdriver32_.exe [2011-10-28 258048]
"2129169.exe"=C:\Users\J3ck3sss\AppData\Local\Temp\2129169.exe [2011-10-28 258048]
"4837713.exe"=C:\Windows\Temp\4837713.exe [2011-10-28 258048]
"wxpdrv"=C:\Windows\services32.exe [2011-10-28 1201152]
"tray_ico0"=C:\Windows\update.tray-12-0\svchost.exe [2011-10-28 1201152]
"tray_ico1"=C:\Windows\update.tray-15-0\svchost.exe [2011-10-28 1201152]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe /min []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~2\WI3C8A~1\Datamngr\x64\datamngr.dll C:\PROGRA~2\WI3C8A~1\Datamngr\x64\IEBHO.dll "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wxpdrivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\wxpdrivers]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableSecureUIAPaths"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-10-28 22:09:06 ----D---- C:\rsit
2011-10-28 22:09:06 ----D---- C:\Program Files\trend micro
2011-10-28 22:01:37 ----HD---- C:\Windows\update.tray-8-0-lnk
2011-10-28 22:01:37 ----HD---- C:\Windows\update.tray-8-0
2011-10-28 21:59:24 ----A---- C:\Windows\system32\drivers\avkmgr.sys
2011-10-28 21:59:24 ----A---- C:\Windows\system32\drivers\avipbb.sys
2011-10-28 21:59:24 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2011-10-28 21:52:36 ----N---- C:\bootsqm.dat
2011-10-28 20:30:45 ----HD---- C:\Windows\update.tray-15-0-lnk
2011-10-28 20:30:45 ----HD---- C:\Windows\update.tray-15-0
2011-10-28 20:19:46 ----A---- C:\Windows\unrar.exe
2011-10-28 20:17:50 ----A---- C:\Windows\iecheck_iplist.txt
2011-10-28 20:17:24 ----HD---- C:\Windows\update.2
2011-10-28 20:16:50 ----A---- C:\Windows\iplist.txt
2011-10-28 20:16:14 ----A---- C:\Windows\sysdriver32_.exe
2011-10-28 20:16:12 ----D---- C:\Windows\av_ico
2011-10-28 20:15:43 ----A---- C:\Windows\front_ip_list.txt
2011-10-28 20:14:07 ----HD---- C:\Windows\update.1
2011-10-28 20:13:58 ----HD---- C:\Windows\update.tray-12-0-lnk
2011-10-28 20:13:58 ----HD---- C:\Windows\update.tray-12-0
2011-10-28 20:02:19 ----A---- C:\Windows\winlog-ids.txt
2011-10-28 20:02:19 ----A---- C:\Windows\winlog-dirs.txt
2011-10-28 20:02:13 ----A---- C:\Windows\services32.exe
2011-10-23 20:26:58 ----D---- C:\Program Files (x86)\EAGLE-5.4.0
2011-10-23 20:26:41 ----D---- C:\Users\J3ck3sss\AppData\Roaming\CadSoft
2011-10-21 21:56:21 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2011-10-21 21:55:42 ----D---- C:\Program Files (x86)\Microsoft Expression
2011-10-21 21:55:38 ----D---- C:\Program Files (x86)\WPF Toolkit
2011-10-21 21:51:04 ----D---- C:\Program Files (x86)\Microsoft XNA
2011-10-21 21:40:38 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 10.0
2011-10-21 21:39:55 ----D---- C:\Program Files (x86)\Microsoft XDE
2011-10-21 21:38:35 ----D---- C:\Windows\symbols
2011-10-21 21:38:34 ----D---- C:\Program Files\Microsoft Visual Studio 10.0
2011-10-21 21:38:33 ----D---- C:\Program Files\Microsoft Help Viewer
2011-10-21 21:38:33 ----D---- C:\Program Files (x86)\Microsoft SDKs
2011-10-16 15:23:06 ----D---- C:\Program Files (x86)\Phone7Market
2011-10-16 11:49:59 ----D---- C:\Windows\system32\ms-MY
2011-10-14 23:27:00 ----D---- C:\Program Files (x86)\YouTube Downloader Toolbar
2011-10-14 22:55:51 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2011-10-14 22:54:44 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe
2011-10-12 21:03:03 ----A---- C:\Windows\system32\win32k.sys
2011-10-12 21:02:49 ----A---- C:\Windows\system32\ieframe.dll
2011-10-12 21:02:45 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-10-12 21:02:43 ----A---- C:\Windows\system32\mshtml.dll
2011-10-12 21:02:42 ----A---- C:\Windows\system32\urlmon.dll
2011-10-12 21:02:39 ----A---- C:\Windows\system32\wininet.dll
2011-10-12 21:02:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-10-12 21:02:37 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-10-12 21:02:36 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-10-12 21:02:32 ----A---- C:\Windows\SYSWOW64\mstime.dll
2011-10-12 21:02:32 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-10-12 21:02:32 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-10-12 21:02:32 ----A---- C:\Windows\system32\mstime.dll
2011-10-12 21:02:32 ----A---- C:\Windows\system32\msfeeds.dll
2011-10-12 21:02:32 ----A---- C:\Windows\system32\ieui.dll
2011-10-12 21:02:32 ----A---- C:\Windows\system32\iedkcs32.dll
2011-10-12 21:02:31 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-10-12 21:02:31 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-10-12 21:02:31 ----A---- C:\Windows\system32\iertutil.dll
2011-10-12 21:02:31 ----A---- C:\Windows\system32\iepeers.dll
2011-10-12 21:02:30 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-10-12 21:02:30 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-10-12 21:02:30 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-10-12 21:02:30 ----A---- C:\Windows\system32\mshtmled.dll
2011-10-12 21:02:30 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-10-12 21:02:23 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-10-12 21:02:23 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-10-12 21:02:23 ----A---- C:\Windows\system32\url.dll
2011-10-12 21:02:23 ----A---- C:\Windows\system32\licmgr10.dll
2011-10-12 21:02:23 ----A---- C:\Windows\system32\jsproxy.dll
2011-10-12 21:02:22 ----A---- C:\Windows\SYSWOW64\url.dll
2011-10-12 21:02:22 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-10-12 21:02:22 ----A---- C:\Windows\system32\msfeedssync.exe
2011-10-12 20:54:22 ----A---- C:\Windows\system32\psisdecd.dll
2011-10-12 20:54:21 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2011-10-12 20:54:12 ----A---- C:\Windows\system32\oleacc.dll
2011-10-12 20:54:11 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2011-10-12 20:54:11 ----A---- C:\Windows\system32\oleaut32.dll
2011-10-12 20:54:10 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2011-10-11 17:44:11 ----D---- C:\Program Files (x86)\Counter-Strike Source
2011-10-09 19:27:35 ----D---- C:\Program Files (x86)\IObit Toolbar

======List of files/folders modified in the last 1 month======

2011-10-28 22:09:12 ----D---- C:\Windows\Temp
2011-10-28 22:09:06 ----RD---- C:\Program Files
2011-10-28 22:08:33 ----D---- C:\Users\J3ck3sss\AppData\Roaming\Skype
2011-10-28 22:03:02 ----A---- C:\Windows\SYSWOW64\log.txt
2011-10-28 22:01:43 ----HD---- C:\ProgramData
2011-10-28 22:01:42 ----RD---- C:\Program Files (x86)
2011-10-28 22:01:37 ----D---- C:\Windows
2011-10-28 21:59:41 ----D---- C:\Windows\system32\catroot
2011-10-28 21:59:38 ----D---- C:\Windows\system32\DriverStore
2011-10-28 21:59:38 ----D---- C:\Windows\inf
2011-10-28 21:59:24 ----D---- C:\Windows\system32\drivers
2011-10-28 21:36:32 ----D---- C:\Users\J3ck3sss\AppData\Roaming\BitTorrent
2011-10-28 21:15:05 ----D---- C:\Windows\system32\config
2011-10-28 20:49:24 ----D---- C:\ProgramData\boost_interprocess
2011-10-28 20:17:51 ----D---- C:\Windows\system32\drivers\etc
2011-10-28 20:02:18 ----D---- C:\Windows\Prefetch
2011-10-28 19:20:30 ----D---- C:\Windows\SysWOW64
2011-10-28 16:58:23 ----D---- C:\Users\J3ck3sss\AppData\Roaming\vlc
2011-10-28 12:38:51 ----D---- C:\Users\J3ck3sss\AppData\Roaming\cacaoweb
2011-10-28 11:32:49 ----D---- C:\Windows\system32\drivers\AVG
2011-10-27 19:47:56 ----SHD---- C:\Windows\Installer
2011-10-27 19:47:52 ----SHD---- C:\Config.Msi
2011-10-27 19:43:07 ----D---- C:\Windows\winsxs
2011-10-27 19:42:57 ----D---- C:\Program Files (x86)\Internet Explorer
2011-10-27 19:42:56 ----D---- C:\Program Files\Internet Explorer
2011-10-27 19:42:45 ----SHD---- C:\System Volume Information
2011-10-26 18:49:39 ----D---- C:\Windows\system32\catroot2
2011-10-24 20:54:03 ----D---- C:\Windows\System32
2011-10-24 20:54:03 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-10-23 14:53:22 ----D---- C:\Windows\Tasks
2011-10-23 14:53:22 ----D---- C:\Windows\system32\Tasks
2011-10-23 14:52:51 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-10-21 22:06:09 ----D---- C:\Windows\Microsoft.NET
2011-10-21 22:06:08 ----RSD---- C:\Windows\assembly
2011-10-21 21:55:46 ----RSD---- C:\Windows\Fonts
2011-10-21 21:55:42 ----SD---- C:\ProgramData\Microsoft
2011-10-21 21:51:09 ----D---- C:\Windows\Logs
2011-10-21 21:49:51 ----SD---- C:\Users\J3ck3sss\AppData\Roaming\Microsoft
2011-10-21 21:49:09 ----D---- C:\Program Files (x86)\MSBuild
2011-10-21 21:38:35 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-10-21 20:26:17 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2011-10-21 20:22:40 ----D---- C:\Windows\SYSWOW64\en-US
2011-10-21 20:22:40 ----D---- C:\Windows\system32\en-US
2011-10-16 11:50:15 ----D---- C:\Windows\system32\pt-PT
2011-10-16 11:50:15 ----D---- C:\Windows\system32\nl-NL
2011-10-16 11:50:15 ----D---- C:\Windows\system32\drivers\UMDF
2011-10-16 11:50:15 ----D---- C:\Windows\system32\da-DK
2011-10-16 11:50:14 ----D---- C:\Windows\system32\ru-RU
2011-10-16 11:50:14 ----D---- C:\Windows\system32\pl-PL
2011-10-16 11:50:14 ----D---- C:\Windows\system32\ko-KR
2011-10-16 11:50:13 ----D---- C:\Windows\system32\zh-TW
2011-10-16 11:50:13 ----D---- C:\Windows\system32\sv-SE
2011-10-16 11:50:13 ----D---- C:\Windows\system32\nb-NO
2011-10-16 11:50:13 ----D---- C:\Windows\system32\ja-JP
2011-10-16 11:50:13 ----D---- C:\Windows\system32\it-IT
2011-10-16 11:50:13 ----D---- C:\Windows\system32\hu-HU
2011-10-16 11:50:13 ----D---- C:\Windows\system32\fr-FR
2011-10-16 11:50:13 ----D---- C:\Windows\system32\fi-FI
2011-10-16 11:50:13 ----D---- C:\Windows\system32\el-GR
2011-10-16 11:50:12 ----D---- C:\Windows\system32\zh-CN
2011-10-16 11:50:12 ----D---- C:\Windows\system32\pt-BR
2011-10-16 11:50:12 ----D---- C:\Windows\system32\es-ES
2011-10-16 11:50:12 ----D---- C:\Windows\system32\de-DE
2011-10-16 11:50:12 ----D---- C:\Windows\system32\cs-CZ
2011-10-16 11:46:47 ----D---- C:\Program Files\Zune
2011-10-16 11:42:07 ----D---- C:\ProgramData\YouTube Downloader
2011-10-16 11:42:04 ----D---- C:\Program Files (x86)\YouTube Downloader
2011-10-15 18:48:11 ----D---- C:\Users\J3ck3sss\AppData\Roaming\DivX
2011-10-15 12:54:53 ----D---- C:\ProgramData\CanonIJPLM
2011-10-15 12:54:53 ----D---- C:\ProgramData\CanonIJ
2011-10-15 12:05:25 ----D---- C:\ProgramData\Skype
2011-10-15 12:05:23 ----D---- C:\Program Files (x86)\Common Files
2011-10-14 22:57:29 ----D---- C:\Windows\SYSWOW64\drivers
2011-10-14 22:54:48 ----D---- C:\Windows\debug
2011-10-14 22:14:53 ----D---- C:\ProgramData\IObit
2011-10-14 22:14:38 ----D---- C:\Users\J3ck3sss\AppData\Roaming\IObit
2011-10-14 22:14:34 ----D---- C:\Program Files (x86)\IObit
2011-10-14 22:13:11 ----D---- C:\ProgramData\DivX
2011-10-14 22:13:11 ----D---- C:\Program Files (x86)\DivX
2011-10-14 22:12:39 ----D---- C:\Program Files\DivX
2011-10-13 07:51:19 ----D---- C:\Windows\SYSWOW64\migration
2011-10-13 07:51:18 ----D---- C:\Windows\system32\migration
2011-10-13 07:44:28 ----A---- C:\Windows\system32\MRT.exe
2011-10-13 07:41:01 ----D---- C:\ProgramData\Microsoft Help
2011-10-13 07:32:49 ----D---- C:\Windows\ehome
2011-10-11 14:41:31 ----D---- C:\Program Files (x86)\Valve
2011-10-10 17:34:21 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-10-09 19:27:35 ----D---- C:\Program Files (x86)\Application Updater
2011-10-05 17:47:17 ----D---- C:\Program Files (x86)\Warcraft III

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSEH;AVGIDSEH; C:\Windows\system32\DRIVERS\AVGIDSEH.Sys [2011-02-22 26704]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2011-03-16 37456]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-12-17 538136]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 17720]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-12-21 834544]
R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2011-01-07 304720]
R1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2011-03-01 41552]
R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2011-04-05 377936]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2011-09-18 130760]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2011-09-15 27760]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-03-13 254528]
R1 vmm;Virtual Machine Monitor; \??\C:\Windows\system32\Drivers\vmm.sys [2011-07-19 295272]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2011-09-15 97312]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-12-10 6179328]
R3 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys [2011-05-27 118864]
R3 AVGIDSFilter;AVGIDSFilter; C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys [2011-02-10 29264]
R3 BCM43XX;Broadcom 802.11 - ovládač sieťového adaptéru; C:\Windows\system32\DRIVERS\bcmwl664.sys [2010-12-14 2978296]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2009-12-30 31784]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 k57nd;Broadcom NetLink Gigabit Ethernet; C:\Windows\system32\DRIVERS\k57amd64.sys [2010-03-21 334376]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-12-10 301104]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2010-12-21 36328]
S3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys []
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2009-12-30 38440]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2009-12-30 336424]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2009-12-30 246824]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2009-12-30 133672]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552448]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btusbflt;Bluetooth USB Filter; C:\Windows\system32\drivers\btusbflt.sys [2009-07-01 52264]
S3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2010-02-03 135560]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
S3 massfilter;ZTE Mass Storage Filter Driver; C:\Windows\system32\drivers\massfilter.sys [2011-01-29 11776]
S3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\Windows\system32\DRIVERS\mcdbus.sys [2009-02-24 255552]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-12-11 232992]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys []
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-01-03 157160]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-01-03 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-01-03 177128]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2011-01-03 145384]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AdvancedSystemCareService5;Advanced SystemCare Service 5; C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe [2011-09-09 478040]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-12-10 202752]
R2 Application Updater;Application Updater; C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe [2011-09-27 745880]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2009-12-30 23592]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-01-22 310352]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-01-18 842784]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-12-23 13336]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2009-02-10 116104]
R2 IMFservice;IMF Service; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2011-07-20 820568]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-12-09 268824]
R2 srviecheck;srviecheck; C:\Windows\update.2\svchost.exe [2011-10-28 1944576]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-12-09 2320920]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R2 WMCoreService;Mobile Broadband Core Service; C:\Program Files (x86)\Mobile Broadband Drivers\WMCore\mini_WMCore.exe [2009-12-01 448512]
S2 AntiVirService;Avira Realtime Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe []
S2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe []
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 srvsysdriver32;srvsysdriver32; C:\Windows\sysdriver32.exe srv []
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-12-14 1255736]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------
Naposledy upravil(a) vyosek dne 29 říj 2011 06:53, celkem upraveno 1 x.
Důvod: pridana poznamka "ntb" do predmetu
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Facebook virus pls help - ntb

#2 Příspěvek od vyosek »

Zdravim a pekny den preji :)

:arrow: log z ntb jsem vam dal do noveho tematu at se nam to neplete

:arrow: Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
  • Ukoncete vsechny programy
  • Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
  • Zvolte moznost 2 a potvrte enterem
  • Utilita provede svou cinnost a da log - ten sem vlozte
  • Nyni znovu, ale zvolte moznost 3 a pote jeste 4 - logy opet vlozte
PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
:arrow: Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  • Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
  • Pokud mate Win XP spustte pod uctem Spravce\Administratora
  • Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
  • Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
  • Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
  • Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
  • Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
  • Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
  • Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
J3ck3sss
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 28 říj 2011 20:32

Re: Facebook virus pls help - ntb

#3 Příspěvek od J3ck3sss »

Roguekiller moznost 2


RogueKiller V6.1.4 [10/22/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html
Blog: http://tigzyrk.blogspot.com

Operating System: Windows 7 (6.1.7600 ) 64 bits version
Started in : Normal mode
User: J3ck3sss [Admin rights]
Mode: Remove -- Date : 10/29/2011 10:38:35

Bad processes: 15
[HJ NAME] svchost.exe -- c:\windows\update.2\svchost.exe -> KILLED [TermProc]
[HJ NAME] svchost.exe -- c:\windows\update.1\svchost.exe -> KILLED [TermProc]
[SVCHOST] svchost.exe -- c:\windows\update.2\svchost.exe -> KILLED [TermProc]
[SUSP PATH] cacaoweb.exe -- c:\users\j3ck3sss\appdata\roaming\cacaoweb\cacaoweb.exe -> KILLED [TermProc]
[SVCHOST] svchost.exe -- c:\windows\update.tray-8-0\svchost.exe -> KILLED [TermProc]
[SUSP PATH] sysdriver32_.exe -- c:\windows\sysdriver32_.exe -> KILLED [TermProc]
[SVCHOST] svchost.exe -- c:\windows\update.tray-12-0\svchost.exe -> KILLED [TermProc]
[SVCHOST] svchost.exe -- c:\windows\update.tray-15-0\svchost.exe -> KILLED [TermProc]
[SVCHOST] svchost.exe -- c:\windows\update.2\svchost.exe -> KILLED [TermProc]
[SVCHOST] svchost.exe -- c:\windows\update.2\svchost.exe -> KILLED [TermProc]
[SVCHOST] svchost.exe -- c:\windows\update.2\svchost.exe -> KILLED [TermProc]
[SVCHOST] svchost.exe -- c:\windows\update.2\svchost.exe -> KILLED [TermProc]
[SERVICE] srviecheck -- C:\Windows\update.2\svchost.exe srv -> STOPPED
[SERVICE] srvsysdriver32 -- C:\Windows\sysdriver32.exe srv -> STOPPED
[SERVICE] wxpdrivers -- C:\Windows\update.1\svchost.exe srv -> STOPPED

Registry Entries: 10
[SUSP PATH] HKCU\[...]\Run : cacaoweb ("C:\Users\J3ck3sss\AppData\Roaming\cacaoweb\cacaoweb.exe" -noplayer) -> DELETED
[BLACKLIST] HKLM\[...]\services : srviecheck (C:\Windows\update.2\svchost.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\services : srvsysdriver32 (C:\Windows\sysdriver32.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\services : wxpdrivers (C:\Windows\update.1\svchost.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\services : srviecheck (C:\Windows\update.2\svchost.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\services : srvsysdriver32 (C:\Windows\sysdriver32.exe srv) -> DELETED
[BLACKLIST] HKLM\[...]\services : wxpdrivers (C:\Windows\update.1\svchost.exe srv) -> DELETED
[HJ] HKLM\[...]\System : EnableLUA (0) -> REPLACED ()
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED ()
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED ()

Particular Files / Folders:

Driver: [NOT LOADED]

HOSTS File:
127.0.0.1 localhost
127.0.0.1 facebook.com
127.0.0.1 www.facebook.com
127.0.0.1 af-za.facebook.com
127.0.0.1 az-az.facebook.com
127.0.0.1 id-id.facebook.com
127.0.0.1 ms-my.facebook.com
127.0.0.1 bs-ba.facebook.com
127.0.0.1 ca-es.facebook.com
127.0.0.1 cs-cz.facebook.com
127.0.0.1 cy-gb.facebook.com
127.0.0.1 da-dk.facebook.com
127.0.0.1 de-de.facebook.com
127.0.0.1 et-ee.facebook.com
127.0.0.1 en-gb.facebook.com
127.0.0.1 es-la.facebook.com
127.0.0.1 eo-eo.facebook.com
127.0.0.1 eu-es.facebook.com
127.0.0.1 tl-ph.facebook.com
127.0.0.1 fo-fo.facebook.com
[...]


Finished : << RKreport[1].txt >>
RKreport[1].txt
Nahoru
J3ck3sss
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 28 říj 2011 20:32

Re: Facebook virus pls help - ntb

#4 Příspěvek od J3ck3sss »

roguekiller mosznost 3

RogueKiller V6.1.4 [10/22/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html
Blog: http://tigzyrk.blogspot.com

Operating System: Windows 7 (6.1.7600 ) 64 bits version
Started in : Normal mode
User: J3ck3sss [Admin rights]
Mode: HOSTSFix -- Date : 10/29/2011 10:43:01

Bad processes: 0

Driver: [NOT LOADED]

HOSTS File:
127.0.0.1 localhost
127.0.0.1 facebook.com
127.0.0.1 www.facebook.com
127.0.0.1 af-za.facebook.com
127.0.0.1 az-az.facebook.com
127.0.0.1 id-id.facebook.com
127.0.0.1 ms-my.facebook.com
127.0.0.1 bs-ba.facebook.com
127.0.0.1 ca-es.facebook.com
127.0.0.1 cs-cz.facebook.com
127.0.0.1 cy-gb.facebook.com
127.0.0.1 da-dk.facebook.com
127.0.0.1 de-de.facebook.com
127.0.0.1 et-ee.facebook.com
127.0.0.1 en-gb.facebook.com
127.0.0.1 es-la.facebook.com
127.0.0.1 eo-eo.facebook.com
127.0.0.1 eu-es.facebook.com
127.0.0.1 tl-ph.facebook.com
127.0.0.1 fo-fo.facebook.com
[...]


Resetted HOSTS:
127.0.0.1 localhost

Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt
Nahoru
J3ck3sss
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 28 říj 2011 20:32

Re: Facebook virus pls help - ntb

#5 Příspěvek od J3ck3sss »

roguekiller moznost 4


RogueKiller V6.1.4 [10/22/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html
Blog: http://tigzyrk.blogspot.com

Operating System: Windows 7 (6.1.7600 ) 64 bits version
Started in : Normal mode
User: J3ck3sss [Admin rights]
Mode: ProxyFix -- Date : 10/29/2011 10:44:09

Bad processes: 0

Driver: [NOT LOADED]

Registry Entries: 0

Finished : << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Facebook virus pls help - ntb

#6 Příspěvek od vyosek »

Super, vzhuru do ComboFixu
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
J3ck3sss
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 28 říj 2011 20:32

Re: Facebook virus pls help - ntb

#7 Příspěvek od J3ck3sss »

Combo


ComboFix 11-10-29.03 - J3ck3sss . 10. 2011 10:51:41.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.421.1051.18.3959.2730 [GMT 2:00]
Running from: c:\users\J3ck3sss\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\CleanupFiles.exe
c:\users\J3ck3sss\AppData\Local\Temp\e3c74ee6-7482-4280-b9c3-f233b390296e\CliSecureRT.dll
c:\users\J3ck3sss\AppData\Roaming\cacaoweb
c:\users\J3ck3sss\AppData\Roaming\cacaoweb\cacaoweb.exe
c:\users\J3ck3sss\AppData\Roaming\cacaoweb\npdfile.dat
c:\users\J3ck3sss\AppData\Roaming\cacaoweb\storage.db
c:\windows\front_ip_list.txt
c:\windows\geoiplist
c:\windows\geoiplist.rar
c:\windows\iecheck_iplist.txt
c:\windows\info1
c:\windows\iplist.txt
c:\windows\loader2.exe_ok
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\proc_list1.log
c:\windows\services32.exe
c:\windows\sysdriver32_.exe
c:\windows\system32\drivers\etc\HSTS~1
c:\windows\SysWow64\muzapp.exe
c:\windows\Temp\2334188.exe
c:\windows\Temp\4837713.exe
c:\windows\update.1
c:\windows\update.1\svchost.exe
c:\windows\update.2
c:\windows\update.2\svchost.exe
c:\windows\update.5.0
c:\windows\winlog-dirs.txt
c:\windows\winlog-ids.txt
c:\windows\winsetupapi.log
.
.
((((((((((((((((((((((((( Files Created from 2011-09-28 to 2011-10-29 )))))))))))))))))))))))))))))))
.
.
2011-10-29 09:01 . 2011-10-29 09:01 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-10-28 20:09 . 2011-10-28 20:09 -------- d-----w- C:\rsit
2011-10-28 20:09 . 2011-10-28 20:09 -------- d-----w- c:\program files\trend micro
2011-10-28 20:01 . 2011-10-28 20:01 -------- d--h--w- c:\windows\update.tray-8-0
2011-10-28 20:01 . 2011-10-28 20:01 -------- d--h--w- c:\windows\update.tray-8-0-lnk
2011-10-28 19:59 . 2011-09-18 06:39 130760 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-10-28 19:59 . 2011-09-15 21:55 97312 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-10-28 19:59 . 2011-09-15 21:55 27760 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2011-10-28 18:30 . 2011-10-28 18:30 -------- d--h--w- c:\windows\update.tray-15-0
2011-10-28 18:30 . 2011-10-28 18:30 -------- d--h--w- c:\windows\update.tray-15-0-lnk
2011-10-28 18:19 . 2011-10-28 18:27 246272 ----a-w- c:\windows\unrar.exe
2011-10-28 18:16 . 2011-10-28 20:03 -------- d-----w- c:\windows\av_ico
2011-10-28 18:13 . 2011-10-28 18:13 -------- d--h--w- c:\windows\update.tray-12-0
2011-10-28 18:13 . 2011-10-28 18:13 -------- d--h--w- c:\windows\update.tray-12-0-lnk
2011-10-26 16:51 . 2011-08-15 05:08 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2011-10-26 16:51 . 2011-08-15 04:25 6144 ----a-w- c:\program files (x86)\Internet Explorer\iecompat.dll
2011-10-23 18:26 . 2011-10-23 18:27 -------- d-----w- c:\program files (x86)\EAGLE-5.4.0
2011-10-23 18:26 . 2011-10-23 18:26 -------- d-----w- c:\users\J3ck3sss\AppData\Roaming\CadSoft
2011-10-21 19:56 . 2008-07-12 06:18 3851784 ----a-w- c:\windows\SysWow64\D3DX9_39.dll
2011-10-21 19:55 . 2011-10-21 19:55 -------- d-----w- c:\program files (x86)\Microsoft Expression
2011-10-21 19:55 . 2011-10-21 19:55 -------- d-----w- c:\program files (x86)\WPF Toolkit
2011-10-21 19:51 . 2011-10-21 19:51 -------- d-----w- c:\program files (x86)\Microsoft XNA
2011-10-21 19:50 . 2011-10-21 19:50 192768 ----a-w- c:\programdata\Microsoft\VPDExpress\10.0\1033\ResourceCache.dll
2011-10-21 19:40 . 2011-10-21 19:49 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 10.0
2011-10-21 19:39 . 2011-10-21 19:39 -------- d-----w- c:\program files (x86)\Microsoft XDE
2011-10-21 19:38 . 2011-10-21 19:38 -------- d-----w- c:\windows\symbols
2011-10-21 19:38 . 2011-10-21 19:38 -------- d-----w- c:\program files\Microsoft Visual Studio 10.0
2011-10-21 19:38 . 2011-10-21 19:55 -------- d-----w- c:\program files (x86)\Microsoft SDKs
2011-10-21 19:38 . 2011-10-21 19:38 -------- d-----w- c:\program files\Microsoft Help Viewer
2011-10-16 13:29 . 2011-10-16 13:39 -------- d-----w- c:\users\J3ck3sss\AppData\Local\Ried.cl
2011-10-16 13:23 . 2011-10-16 13:23 -------- d-----w- c:\program files (x86)\Phone7Market
2011-10-16 09:49 . 2011-10-16 09:50 -------- d-----w- c:\windows\system32\ms-MY
2011-10-14 21:27 . 2011-10-14 21:27 -------- d-----w- c:\program files (x86)\YouTube Downloader Toolbar
2011-10-14 20:55 . 2011-10-14 20:55 14336 ----a-w- c:\windows\system32\drivers\sffp_sd.sys
2011-10-14 20:54 . 2011-09-09 15:35 22872 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2011-10-12 19:03 . 2011-09-06 03:07 3134976 ----a-w- c:\windows\system32\win32k.sys
2011-10-12 18:54 . 2011-08-17 05:32 613888 ----a-w- c:\windows\system32\psisdecd.dll
2011-10-11 15:44 . 2011-10-11 16:02 -------- d-----w- c:\program files (x86)\Counter-Strike Source
2011-10-11 12:38 . 2003-09-03 00:28 724992 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iKernel.dll
2011-10-11 12:38 . 2003-09-03 00:27 69715 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\ctor.dll
2011-10-11 12:38 . 2003-09-03 00:26 266240 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iscript.dll
2011-10-11 12:38 . 2003-09-03 00:26 192512 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iuser.dll
2011-10-11 12:38 . 2003-09-03 00:25 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\DotNetInstaller.exe
2011-10-11 12:38 . 2003-09-03 00:23 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\Objectps.dll
2011-10-11 12:38 . 2011-10-11 12:38 311428 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\Setup.dll
2011-10-11 12:38 . 2011-10-11 12:38 184452 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iGdi.dll
2011-10-09 17:27 . 2011-10-09 17:27 -------- d-----w- c:\program files (x86)\IObit Toolbar
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-15 15:04 . 2011-09-15 15:04 8024 ----a-w- c:\programdata\Microsoft\Phone Tools\CoreCon\10.0\SDKFilesVer.dll
2011-09-15 15:04 . 2011-09-15 15:04 8024 ----a-w- c:\programdata\Microsoft\Phone Tools\CoreCon\10.0\addons\NonSDKAddonVer.dll
2011-09-15 15:04 . 2011-09-15 15:04 8024 ----a-w- c:\programdata\Microsoft\Phone Tools\CoreCon\10.0\1033\NonSDKAddonLangVer.dll
2011-09-15 15:04 . 2011-09-15 15:04 8016 ----a-w- c:\programdata\Microsoft\Phone Tools\CoreCon\10.0\addons\WPSDKVer.dll
2011-09-15 13:38 . 2011-09-15 13:38 81744 ----a-w- c:\windows\SysWow64\mfcm100u.dll
2011-09-15 13:38 . 2011-09-15 13:38 81744 ----a-w- c:\windows\SysWow64\mfcm100.dll
2011-09-15 13:38 . 2011-09-15 13:38 773968 ----a-w- c:\windows\SysWow64\msvcr100.dll
2011-09-15 13:38 . 2011-09-15 13:38 4422992 ----a-w- c:\windows\SysWow64\mfc100u.dll
2011-09-15 13:38 . 2011-09-15 13:38 4397384 ----a-w- c:\windows\SysWow64\mfc100.dll
2011-09-15 13:38 . 2011-09-15 13:38 421200 ----a-w- c:\windows\SysWow64\msvcp100.dll
2011-09-15 13:38 . 2011-09-15 13:38 138056 ----a-w- c:\windows\SysWow64\atl100.dll
2011-08-19 14:33 . 2011-09-25 17:21 27992 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{88c7f2aa-f93f-432c-8f0e-b7d85967a527}"= "c:\program files (x86)\BitTorrentBar\tbBitT.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-12-09 11:51 3911776 ----a-w- c:\program files (x86)\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
2010-12-09 11:51 3911776 ----a-w- c:\program files (x86)\BitTorrentBar\tbBitT.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2011-02-01 17:17 1487240 ----a-w- c:\program files (x86)\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2011-02-01 1487240]
"{88c7f2aa-f93f-432c-8f0e-b7d85967a527}"= "c:\program files (x86)\BitTorrentBar\tbBitT.dll" [2010-12-09 3911776]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CLASSES_ROOT\clsid\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 5"="c:\program files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" [2011-09-09 607576]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]
"BitTorrent"="c:\program files (x86)\BITTORRENT\BITTORRENT.EXE" [2011-01-28 4771184]
"KiesPDLR"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-03-17 19872]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-12-10 98304]
"IJNetworkScanUtility"="c:\program files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe" [2009-05-19 136544]
"tray_ico2"="c:\windows\update.tray-8-0\svchost.exe" [2011-10-28 1201152]
"tray_ico0"="c:\windows\update.tray-12-0\svchost.exe" [2011-10-28 1201152]
"tray_ico1"="c:\windows\update.tray-15-0\svchost.exe" [2011-10-28 1201152]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableSecureUIAPaths"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~2\WI3C8A~1\Datamngr\datamngr.dll c:\progra~2\WI3C8A~1\Datamngr\IEBHO.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"midi2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000001
"DisableThumbnailCache"=dword:00000001
.
R2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
R2 AVGIDSAgent;AVGIDSAgent; [x]
R2 avgwd;AVG WatchDog; [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [x]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [x]
R3 AVG Security Toolbar Service;AVG Security Toolbar Service; [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [x]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [x]
R3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x]
R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [x]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 WMZuneComm;Zune Windows Mobile Connectivity Service;c:\program files\Zune\WMZuneComm.exe [2011-08-05 306400]
S0 AVGIDSEH;AVGIDSEH;c:\windows\system32\DRIVERS\AVGIDSEH.Sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [x]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files (x86)\IObit\Advanced SystemCare 5\ASCService.exe [2011-09-09 478040]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 Application Updater;Application Updater;c:\program files (x86)\Application Updater\ApplicationUpdater.exe [2011-09-27 745880]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2009-12-30 23592]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-01-22 310352]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2010-01-18 842784]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-12-23 13336]
S2 IMFservice;IMF Service;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2011-07-20 820568]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-12-09 2320920]
S2 WMCoreService;Mobile Broadband Core Service;c:\program files (x86)\Mobile Broadband Drivers\WMCore\mini_WMCore.exe servicemode [x]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\AVGIDSDriver.Sys [x]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\AVGIDSFilter.Sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 k57nd;Broadcom NetLink Gigabit Ethernet;c:\windows\system32\DRIVERS\k57amd64.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2011-10-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3427954366-3406222959-2106377572-1000Core.job
- c:\users\J3ck3sss\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-14 18:59]
.
2011-10-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3427954366-3406222959-2106377572-1000UA.job
- c:\users\J3ck3sss\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-14 18:59]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}]
2011-03-24 12:30 1058712 ----a-w- c:\progra~2\WI3C8A~1\Datamngr\x64\IEBHO.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-10-19 2185032]
"Zune Launcher"="c:\program files\Zune\ZuneLauncher.exe" [2011-08-05 163552]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\progra~2\WI3C8A~1\Datamngr\x64\datamngr.dll c:\progra~2\WI3C8A~1\Datamngr\x64\IEBHO.dll
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://search.babylon.com/?babsrc=HP_ss&mntrId=80e51b32000000000000f07bcb1ff042&tlver=1.4.19.19&ss=1&affID=17981
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Download Using &BitSpirit - c:\program files (x86)\BitSpirit\bsurl.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.254 192.168.1.1
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
BHO-{A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
Toolbar-10 - (no file)
Wow6432Node-HKLM-Run-AVG_TRAY - c:\program files (x86)\AVG\AVG10\avgtray.exe
Wow6432Node-HKLM-Run-tray_ico - (no file)
Wow6432Node-HKLM-Run-tray_ico3 - (no file)
Wow6432Node-HKLM-Run-tray_ico4 - (no file)
Wow6432Node-HKLM-Run-wxpdrv - c:\windows\services32.exe
Wow6432Node-HKLM-Run-avgnt - c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe
Toolbar-10 - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{88C7F2AA-F93F-432C-8F0E-B7D85967A527} - (no file)
HKLM-Run-ETDWare - c:\program files (x86)\Elantech\ETDCtrl.exe
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-Avira AntiVir Desktop - c:\program files (x86)\Avira\AntiVir Desktop\setup.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{6EF568F4-D437-4466-AA63-A3645136D93E}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}]
@Denied: (A 2) (Everyone)
@="IFlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib]
@="{6EF568F4-D437-4466-AA63-A3645136D93E}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
@Denied: (A 2) (Everyone)
@="IFlashBroker2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
@="{6EF568F4-D437-4466-AA63-A3645136D93E}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Mobile Broadband Drivers\WMCore\mini_WMCore.exe
c:\program files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
c:\program files (x86)\Windows iLivid Toolbar\Datamngr\datamngrUI.exe
.
**************************************************************************
.
Completion time: 2011-10-29 11:11:53 - machine was rebooted
ComboFix-quarantined-files.txt 2011-10-29 09:11
.
Pre-Run: 162 523 004 928 bytes free
Post-Run: 162 001 350 656 bytes free
.
- - End Of File - - A3D01BC870A6310DAB2770CD3AC6F919
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Facebook virus pls help - ntb

#8 Příspěvek od vyosek »

:arrow: Odinstalujte Smart Defrag 2, Advanced SystemCare 5 a nasledne i vse od IOBit - jsou to cinske smejdy s nulovym ucinkem na PC - po ukonceni leceni tam dame neco lepsiho

:arrow: Pokud nemate, tak presunte Combofix na plochu
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    KillAll::

File::
c:\windows\unrar.exe
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3427954366-3406222959-2106377572-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3427954366-3406222959-2106377572-1000UA.job
c:\windows\temp\9178288.exe

Folder::
c:\program files (x86)\common files\spigot
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar
C:\PROGRA~2\WI3C8A~1\ToolBar
C:\Program Files (x86)\DAEMON Tools Toolbar
c:\program files (x86)\Application Updater
c:\program files (x86)\IObit
c:\windows\update.tray-8-0
c:\windows\update.tray-8-0-lnk
c:\windows\update.tray-15-0
c:\windows\update.tray-15-0-lnk
c:\windows\av_ico
c:\windows\update.tray-12-0
c:\windows\update.tray-12-0-lnk
c:\program files (x86)\YouTube Downloader Toolbar
c:\program files (x86)\IObit Toolbar
c:\program files (x86)\BitTorrentBar
c:\program files (x86)\Ask.com

DDS::
uStart Page = hxxp://search.babylon.com/?babsrc=HP_ss ... ffID=17981

Registry::
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{88c7f2aa-f93f-432c-8f0e-b7d85967a527}"=-
[-HKEY_CLASSES_ROOT\clsid\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
[-HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
[-HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
[-HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
"{88c7f2aa-f93f-432c-8f0e-b7d85967a527}"=-
"{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
[-HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[-HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[-HKEY_CLASSES_ROOT\clsid\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
[-HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 5"=-
"BitTorrent"=-
"DAEMON Tools Lite"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=-
"tray_ico2"=-
"tray_ico0"=-
"tray_ico1"=-
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000000
"DisableThumbnailCache"=dword:00000000
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BabylonToolbar]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BabylonToolbar]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cacaoweb]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivX Download Manager]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Driver Updater]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchSettings]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\wxpdrv]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\9178288.exe]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 5"=-

Driver::
AdvancedSystemCareService5
Application Updater

RegLock::
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  • Ulozte vytvoreny TXT jako CFScript.txt
  • Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
    Obrázek
  • Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte
:arrow: Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
J3ck3sss
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 28 říj 2011 20:32

Re: Facebook virus pls help - ntb

#9 Příspěvek od J3ck3sss »

ok udelal sem to stejne a posielam log na 2x lebo sa to nemesti.

ComboFix 11-10-29.03 - J3ck3sss . 10. 2011 11:47:16.2.4 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.421.1051.18.3959.2712 [GMT 2:00]
Running from: c:\users\J3ck3sss\Desktop\ComboFix.exe
Command switches used :: c:\users\J3ck3sss\Desktop\CFScript.txt
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3427954366-3406222959-2106377572-1000Core.job"
"c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3427954366-3406222959-2106377572-1000UA.job"
"c:\windows\temp\9178288.exe"
"c:\windows\unrar.exe"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\progra~2\WI3C8A~1\ToolBar
c:\progra~2\WI3C8A~1\ToolBar\as_guid.dat
c:\progra~2\WI3C8A~1\ToolBar\components\windowmediator.js
c:\progra~2\WI3C8A~1\ToolBar\dtUser.exe
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\bandoocode.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\data\search\engines.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\data\search\search.xsl
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\imeshcode.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\lib\about.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\lib\bandoocode.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\lib\dtxpanel.xul
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\lib\dtxpanelwin.xul
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\lib\dtxprefwin.xul
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\lib\dtxtransparentwin.xul
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\lib\dtxwin.xul
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\lib\emailnotifierproviders.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\lib\external.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\lib\imeshcode.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\lib\neterror.xhtml
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\lib\nsDragAndDrop.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\lib\vmncode.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\lib\wmpstreamer.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\modules\datastore.jsm
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\neterror.xhtml
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\partner.coupons.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\preferences.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\radiobeta.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\template.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\toolbar.htm
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\toolbar.xul
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\vmncode.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\vmnrsswin.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\alert_coupon.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\arrow-next-off.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\arrow-next.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\arrow-previous-off.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\arrow-previous.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\bg-coupon-blue.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\bg-save.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\btn-getcoupon.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\btn-next-blue.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\btn-previous-blue.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\btn-wide-close-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\btn-wide-close.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\coupon-activated.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\couponTooltip.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\css\dialog.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\css\ie7style.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\ico-coupon.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\ico-dollar.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\arrow-grey.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\arrows_grey-left.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\arrows_grey-right.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\bg_top.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\btn-back.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\btn-getcoupon.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\btn-search.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\coupon-activated.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\delete.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\loader.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\scrollb-disable.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\scrollb-down.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\scrollb.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\scrollt-disable.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\scrollt-down.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\scrollt.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\sprite.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-arrow-hover.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-arrow.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-off-l.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-off-l_BAK.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-off-r.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-off-r_BAK.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-on-l.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-on-r.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-over-l.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-over-r.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-white-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-white-mdl.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-white-right.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\vid-bg.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\index.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\jquery.contextMenu.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\jquery.contextMenu.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\js\jquery-1.4.2.min.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\js\jquery.event.wheel.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\js\jquery.scrollTo-min.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\js\JSON.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\js\listnav.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\js\main.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\page_white_copy.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\panel.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\partner.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\placeholder-logo.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\css\dialog.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\bg.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\btn-wide-close-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\btn-wide-close.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\default.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\transparent.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\win-btm-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\win-btm-mdl.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\win-btm-right-resize.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\win-btm-right.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\main.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\scripts\defscript.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\tb_icon.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\widget.jsw
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\widget.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\widget_version.txt
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\css\dialog.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\arrow-grey.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\arrows_grey-left.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\arrows_grey-right.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\back.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\btn-search-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\btn-search.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\delete.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollb-disable.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollb-down.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollb.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollt-disable.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollt-down.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollt.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-arrow-hover.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-arrow.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-off-l.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-off-r.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-on-l.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-on-r.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-over-l.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-over-r.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-red-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-red-mdl.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-red-right.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-white-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-white-mdl.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-white-right.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\throbber.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\vid-bg.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\youtube.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\index.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\js\function.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\js\jquery-1.4.2.min.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\js\JSON.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\css\dialog.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\bg-facebook.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\blank.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\btn-wide-close-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\btn-wide-close.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\default.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\transparent.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\win-btm-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\win-btm-mdl.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\win-btm-right-resize.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\win-btm-right.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\main.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\scripts\defscript.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\scripts\jquery-1.4.2.min.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\tb_icon.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\widget.jsw
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\widget.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\widget_version.txt
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.PPCBully\tb_icon.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.PPCBully\widget.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.PPCBully\widget.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.PPCBully\widget_version
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\css\twitter.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\btn-login-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\btn-login.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\btn-submit.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\loginbg.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\refresh-over.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\refresh.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\scrollbottom-disable.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\scrollbottom-down.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\scrollbottom-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\scrollbottom.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\scrolltop-disable.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\scrolltop-down.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\scrolltop-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\scrolltop.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\tab-off-l.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\tab-off-r.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\tab-on-l.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\tab-on-r.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\throbber.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\twitter-logo48.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\twitter_top.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\js\jquery.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\js\scripts.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\css\dialog.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\bg.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\btn-wide-close-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\btn-wide-close.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\default.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\transparent.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\win-btm-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\win-btm-mdl.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\win-btm-right-resize.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\win-btm-right.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\main.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\scripts\defscript.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\tb_icon.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\widget.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\widget.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\widget_version.txt
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\css\autocomplete.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\css\dialog.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\arrow-grey.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\arrows_grey-left.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\arrows_grey-right.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\bg.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\btn-search-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\btn-search.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\powered-by-youtube.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-off-l.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-off-r.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-on-l.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-on-r.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-red-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-red-mdl.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-red-right.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-white-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-white-mdl.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-white-right.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\throbber.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\vid-bg.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\youtube.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\index.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\js\autocomplete.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\js\jquery-1.4.3.min.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\js\paginator.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\js\youtube.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\css\dialog.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\bg.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\btn-search.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\btn-wide-close-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\btn-wide-close.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\default.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\tab-off-l.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\tab-off-r.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\tab-on-l.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\tab-on-r.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\transparent.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\win-btm-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\win-btm-mdl.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\win-btm-right-resize.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\win-btm-right.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\main.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\scripts\defscript.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\tb_icon.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\widget.jsw
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\widget.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\widget_version.txt
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\babylon_logo.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\bandoo.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\bluelite.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\bluesky.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\btn-search-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\btn-search.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\btn-settings-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\btn-settings.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\btn-widgets-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\btn-widgets.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\btn_settings.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\ca.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\dictionary.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\divider.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\downloadcom.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\dtxlogo.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\ebay.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\email.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\email_on.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\facebook.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\games.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\graphred0.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\graphred0_5.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\graphred1.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\graphred1_5.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\graphred2.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\graphred2_5.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\graphred3.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\graphred3_5.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\graphred4.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\graphred4_5.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\graphred5.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\graphredna.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\grey.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\ico-shield.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\icon_radio_png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\icon_seperator_png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\images.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\imesh.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\add.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\aol.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\arrow-dn.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\arrow-right-disabled.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\arrow-right.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\arrow-up.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\bg-btn-divider.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\bg-btn-end.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\bg-btn-mdl.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\bg-btn-mdl_ff.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\bg-btn-start.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\bg-btnover-divider.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\bg-btnover-end.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\bg-btnover-mdl.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\bg-btnover-mdl_ff.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\bg-btnover-start.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\blank.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\btn-widgets-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\btn-widgets.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\btn_slider.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\btnback-down-vista.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\btnback-vista.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\btnleft-down-vista.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\btnleft-vista.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\btnright-down-vista.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\btnright-vista.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\button-splitter-down-vista.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\button-splitter-vista.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\collapse.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\comcast.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\dtx.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\edit-back-hot.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\edit-back.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\expand.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\found.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\gmail.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\highlight.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\highlight_blue.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\highlight_cyan.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\highlight_lime.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\highlight_magenta.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\highlight_yellow.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\hotmail.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\checkmark.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\chevron.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\ico-check.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\imap.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\lastsearch-thumb-back.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\loadingMid.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\lock.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\logo-separator.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\mailcom.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\menu_bg-basic.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\menu_separator_bar.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\menu_separator_white.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\menuitem-splitter.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\menuitemback-down-vista.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\menuitemback-vista.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\menuitemleft-down-vista.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\menuitemleft-vista.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\menuitemright-down-vista.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\menuitemright-vista.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\modify.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\move.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\movetarget.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\css\panels.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\css\popupAbout.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\css\popupGames.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\css\popupRSS.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\css\popupWidgets.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\css\dialog.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\bg.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\btn-search.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\btn-wide-close-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\btn-wide-close.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\default.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\tab-off-l.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\tab-off-r.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\tab-on-l.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\tab-on-r.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\transparent.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\ttlbar-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\ttlbar-mdl.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\ttlbar-right.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\win-btm-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\win-btm-mdl.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\win-btm-right-resize.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\win-btm-right.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\win-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\images\win-right.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\main.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\default\scripts\defscript.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\footer.htm
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\gamecategory.xsl
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\gameData.js
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\gameList.xsl
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\games.xsl
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\gametype.xsl
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\arrow-dn.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\arrow-sml-drop.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\arrow-sml.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\arrow-up.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\arrowr-bluew5.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\bg-aboutbox.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\bg-btnover.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\bg-pnl520x390.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-addtoolbar-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-addtoolbar-right.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-back.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-close-grey.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-close-greyover.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-drag.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-mdl-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-mdl.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-moredetails.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-next-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-next.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-play-left-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-play-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-previous-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-previous.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-right-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-try-left-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\btn-try-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\bullet-orange.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\gamethumb-on.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\gamethumb2-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\ico-calendar.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\ico-dollar.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\ico-download.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\ico-joystick24.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\ico-news24.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\ico-play.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\ico-tags.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\icon-Add.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\icon-download.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\icon-Info.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\icon-play.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\icon-shop.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\menul-bgon.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\menul-bgover.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\panel-botm-noscroll.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\scroll-bg-206.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\scroll-bg.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\scroll-topwin.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\scrollb-disable.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\scrollb-down.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\scrollb-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\scrollb.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\scrollt-disable.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\scrollt-down.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\scrollt-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\scrollt.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\searchbox-pnlbtm.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\star_x_grey.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\star_x_orange.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\TRUSTe_about.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\view-detailed-on.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\view-detailed-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\view-thumb-on.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\view-thumb-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\widgets-square-16px.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\widgets-square-24px.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\images\widgets.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\initHTML.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\popupGames.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\popupHTML.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\popupRSS.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\popupWidgets.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\panels\scroll.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\pop.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\css\manager.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\css\slider.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\bg-pnl.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\btn-close-grey.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\btn-close-greyover.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\collapsed_button.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\expanded_button.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\ico-playstation-down.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\ico-playstation-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\ico-playstation.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\ico-radio.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\music-note.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause-on.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-btn-play-on.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-btn-play.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-eq-bg.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-eq-buffer.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-eq-busy.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-eq-off.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-eq-on.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-eq-warning.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-options-design-on.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-options-design.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-options-on.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-options.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-volume-0.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-volume-1.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-volume-2.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-volume-3.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\radio-volume-mute.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\scrollbar-handle.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\scrollbar-track.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\slider.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\slideron.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\images\track.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\managerpanel.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radio\volumeslider.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radiobeta-buffering.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radiobeta-connecting.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radiobeta-playing.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radiobeta-stopped.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\radiobeta.ico
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\reload.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\remove.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\rename.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\resize-box.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\rss.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\rsschannelback.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\RSSLogo.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\rsstabdivider.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\scroll-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\scroll-right.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\search-go.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\search.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\text-ellipsis.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\throbber.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\toolbarsplitter.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\transparent_1px.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_02.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_03.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_04.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_06.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_07.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_08.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_09.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_10.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_11.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_12.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_13.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_14.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_15.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_16.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_18.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_19.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_20.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\border_21.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\btn-close-grey.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\btn-close-greyover.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\close-hot.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\close-normal.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\loadingMid.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\proxy.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\template.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\template.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\templateFF.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\uwa\throbber.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\icons\cond999.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\icons\icons.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\icons\na-s.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\icons\na-t.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\icons\na.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\add.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-check.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-check.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\options-weather.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-blue.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-orange.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.html
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lib\yahoo.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\lichen.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\logo-about.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\logo-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\logo-separator.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\logo.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\mail.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\maps.bmp
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\menuseparatorback.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\modify-save.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\modify.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\modifyhot.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\music.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\news.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\options\options-main.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\options\options-search.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\options\options-weather.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\options\options-weather.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\options\options-widgets.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\orange.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\pixsy.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\protect-id.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\radiobeta-buffering.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\radiobeta-connecting.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\radiobeta-playing.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\radiobeta-stopped.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\radiobeta.ico
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\relatedlinks.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\rss-collapse.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\rss-delete.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\rss-expand.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\rss-feed.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\rss-folder-remove.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\rss-folder-rename.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\rss-folder.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\rss-found.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\rss-reload.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\rss-subscribe.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\rss.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\rssback.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\rsstopback.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\search-over.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\search.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\search_button_over_png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\search_button_png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\searchbar\searchbar-background-left.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\searchbar\searchbar-background-middle.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\searchbar\searchbar-background-right.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\settings.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\shopping.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\siteinfo.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\skin-bluelite.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\skin-bluesky.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\skin-grey.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\skin-lichen.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\skin-orange.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\skin-yellow.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\skin.xml
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\technorati.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\throbber.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\toolbarsplitter.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\translate.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\video.bmp
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\vmn.css
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\vmn.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\weather.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\web.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\widgets-square-16px.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\wikipedia.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\yahoosearch.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\yellow.gif
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\youtube.png
c:\progra~2\WI3C8A~1\ToolBar\chrome\skin\zoom.png
c:\progra~2\WI3C8A~1\ToolBar\manifest.xml
c:\progra~2\WI3C8A~1\ToolBar\searchquband.dll
c:\progra~2\WI3C8A~1\ToolBar\searchqudtx.dll
c:\progra~2\WI3C8A~1\ToolBar\uninstall.exe
c:\program files (x86)\Application Updater
c:\program files (x86)\Application Updater\ApplicationUpdater.exe
c:\program files (x86)\Application Updater\config.ini
c:\program files (x86)\Ask.com
c:\program files (x86)\Ask.com\assets\oobe\b.png
c:\program files (x86)\Ask.com\assets\oobe\bl.png
c:\program files (x86)\Ask.com\assets\oobe\br.png
c:\program files (x86)\Ask.com\assets\oobe\l.png
c:\program files (x86)\Ask.com\assets\oobe\pointer.png
c:\program files (x86)\Ask.com\assets\oobe\r.png
c:\program files (x86)\Ask.com\assets\oobe\t.png
c:\program files (x86)\Ask.com\assets\oobe\tl.png
c:\program files (x86)\Ask.com\assets\oobe\tr.png
c:\program files (x86)\Ask.com\cobrand.ico
c:\program files (x86)\Ask.com\config.xml
c:\program files (x86)\Ask.com\favicon.ico
c:\program files (x86)\Ask.com\fv_70f3.ico
c:\program files (x86)\Ask.com\GenericAskToolbar.dll
c:\program files (x86)\Ask.com\mupcfg.xml
c:\program files (x86)\Ask.com\SaUpdate.exe
c:\program files (x86)\Ask.com\UpdateTask.exe
c:\program files (x86)\BabylonToolbar\BabylonToolbar
c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx
c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarApp.dll
c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarEng.dll
c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe
c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\uninstall.exe
c:\program files (x86)\BitTorrentBar
c:\program files (x86)\BitTorrentBar\BitTorrentBarToolbarHelper.exe
c:\program files (x86)\BitTorrentBar\GottenAppsContextMenu.xml
c:\program files (x86)\BitTorrentBar\INSTALL.LOG
c:\program files (x86)\BitTorrentBar\OtherAppsContextMenu.xml
c:\program files (x86)\BitTorrentBar\SharedAppsContextMenu.xml
c:\program files (x86)\BitTorrentBar\tbBitT.dll
c:\program files (x86)\BitTorrentBar\toolbar.cfg
c:\program files (x86)\BitTorrentBar\ToolbarContextMenu.xml
c:\program files (x86)\BitTorrentBar\UNWISE.EXE
c:\program files (x86)\common files\spigot
c:\program files (x86)\common files\spigot\Search Settings\baidu_ff.xml
c:\program files (x86)\common files\spigot\Search Settings\baidu_ie.xml
c:\program files (x86)\common files\spigot\Search Settings\config.ini
c:\program files (x86)\common files\spigot\Search Settings\Lang\res1031.ini
c:\program files (x86)\common files\spigot\Search Settings\Lang\res1033.ini
c:\program files (x86)\common files\spigot\Search Settings\Lang\res1034.ini
c:\program files (x86)\common files\spigot\Search Settings\Lang\res1036.ini
c:\program files (x86)\common files\spigot\Search Settings\Lang\res1040.ini
c:\program files (x86)\common files\spigot\Search Settings\SearchSettings.exe
c:\program files (x86)\common files\spigot\Search Settings\yahoo_ff.xml
c:\program files (x86)\common files\spigot\Search Settings\yahoo_ie.xml
c:\program files (x86)\common files\spigot\Search Settings\yandex_ff.xml
c:\program files (x86)\common files\spigot\Search Settings\yandex_ie.xml
c:\program files (x86)\DAEMON Tools Toolbar
c:\program files (x86)\DAEMON Tools Toolbar\_DTLite.xml
c:\program files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
c:\program files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll
c:\program files (x86)\DAEMON Tools Toolbar\Resources\about.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\AboutWindow.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\accept.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\AddRadioStation.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\ARA.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\as.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\as.png
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astro.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astro_audio.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astro_buy.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astro_download.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astro_feedback.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astro_forum.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astro_home.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astro_lite.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astroburn_site.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\astroLite_16.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\az.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\AZE.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\b1.png
c:\program files (x86)\DAEMON Tools Toolbar\Resources\burn_files.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\burn_image.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\burn_imgs.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\BurnImage.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\buy.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\cal.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Config.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\d.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\d2.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\daemon_search.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\daemon_search_site.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\DEU.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dot_disabled.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dot_enabled.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dot_on_over.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\download.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\ds.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dsearch.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt-home.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_about.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_buy.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_download.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_faq.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_feedback.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_forum.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_line.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_lite.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_manual.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dt_pro.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\DTPro.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dtt16.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\dtt32.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Dwnl.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\emulation.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\ENG.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\faq.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\favicon.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\fb.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\features.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\feedback.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\forum.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\FRA.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\GameCentrix.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\GameCentrixCristals.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\GameCentrixDownload.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\GameCentrixPlayOnline.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\GameCentrixTop.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\GameS.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\games_search.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\games_search_SA.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\GameSA.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\gct16.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\gd.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\genre.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\globe.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\GrabImage.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\hb.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\hb.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\help.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\hide.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\home.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\CHS.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\CHT.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\image_search.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\image_search_SA.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\ImageS.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\ImageSA.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\ip.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\ITA.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\JPN.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\KOR.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\lang.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\lingvo.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\m.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mail.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mail_disable.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mail_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mail_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mail_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mailc.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mailc_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mailc_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mailc_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\manual.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\map.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\MenuRadioConfig.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\MenuRadioStation.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\MenuRSCur.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\MenuTr.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mount.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\mount_n_drive.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\next.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\next_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\next_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\next_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\none.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\none_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\op.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\play.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\play.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\play_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\play_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\play_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\pragma.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\prev.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\prev_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\prev_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\prev_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\prod.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Radio.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioBg.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioBg.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioBgMask.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioDisp.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioDisp_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioDown.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioDown.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioDown_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioDown_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioDown_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioE.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioG.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioL.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioLDotMask.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioLeft.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioLeftMask.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioLM.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioM.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioN.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioR.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioR.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioRM.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioRU.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioVolume.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioVolume_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioVolume_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioVolume_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RadioW.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\rbcheck.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\rbtxt.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\refresh.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\refresh_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\refresh_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\refresh_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Rss.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Rss1.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RssA.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RssA1.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\rssClose.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\rssL.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\rssOpen.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RssRefresh.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\RUS.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\s2.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\show.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\size.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\size_lr.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\size_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\size_rl.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\skins.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\soft24.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\soft24_SA.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\spt.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\stop.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\stop.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\stop_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\stop_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\stop_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\style.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\SupportRequest.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\timer.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\TitleIcon.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\toolbar.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\trans.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Trash.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Trash_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Trash_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\Trash_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\u.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\UKR.xml
c:\program files (x86)\DAEMON Tools Toolbar\Resources\unmount-all.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol_back.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol_dott.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol_dott_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol_mute.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol_mute_check.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\vol_under.bmp
Nahoru
J3ck3sss
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 28 říj 2011 20:32

Re: Facebook virus pls help - ntb

#10 Příspěvek od J3ck3sss »

c:\program files (x86)\DAEMON Tools Toolbar\Resources\wBtClose.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wBtText.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
c:\program files (x86)\DAEMON Tools Toolbar\Resources\web_resources.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\web_search.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\web_search_SA.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\WebS.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\WebSa.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi0.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi1.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi10.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi11.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi12.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi13.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi14.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi2.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi3.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi4.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi5.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi6.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi7.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi8.ico
c:\program files (x86)\DAEMON Tools Toolbar\Resources\wi9.ico
c:\program files (x86)\DAEMON Tools Toolbar\uninst.exe
c:\program files (x86)\IObit Toolbar
c:\program files (x86)\IObit Toolbar\IE\4.7\config.ini
c:\program files (x86)\IObit Toolbar\IE\4.7\iobitToolbarIE.dll
c:\program files (x86)\IObit Toolbar\Res\amazon.gif
c:\program files (x86)\IObit Toolbar\Res\btnClose.gif
c:\program files (x86)\IObit Toolbar\Res\btnMinimize.gif
c:\program files (x86)\IObit Toolbar\Res\ebay.gif
c:\program files (x86)\IObit Toolbar\Res\facebook.gif
c:\program files (x86)\IObit Toolbar\Res\googleplus.gif
c:\program files (x86)\IObit Toolbar\Res\icon_settings.gif
c:\program files (x86)\IObit Toolbar\Res\iobit_logo.gif
c:\program files (x86)\IObit Toolbar\Res\iobit_logo_hover.gif
c:\program files (x86)\IObit Toolbar\Res\Lang\res1031.ini
c:\program files (x86)\IObit Toolbar\Res\Lang\res1033.ini
c:\program files (x86)\IObit Toolbar\Res\Lang\res1034.ini
c:\program files (x86)\IObit Toolbar\Res\Lang\res1036.ini
c:\program files (x86)\IObit Toolbar\Res\Lang\res1040.ini
c:\program files (x86)\IObit Toolbar\Res\radiobeta.gif
c:\program files (x86)\IObit Toolbar\Res\search-button-hover.gif
c:\program files (x86)\IObit Toolbar\Res\search-button.gif
c:\program files (x86)\IObit Toolbar\Res\search-chevron-hover.gif
c:\program files (x86)\IObit Toolbar\Res\search-chevron.gif
c:\program files (x86)\IObit Toolbar\Res\search_amazon.gif
c:\program files (x86)\IObit Toolbar\Res\search_baidu.gif
c:\program files (x86)\IObit Toolbar\Res\search_ebay.gif
c:\program files (x86)\IObit Toolbar\Res\search_yahoo.gif
c:\program files (x86)\IObit Toolbar\Res\search_yandex.gif
c:\program files (x86)\IObit Toolbar\Res\security.gif
c:\program files (x86)\IObit Toolbar\Res\system.gif
c:\program files (x86)\IObit Toolbar\Res\twitter.gif
c:\program files (x86)\IObit Toolbar\Res\widgets.xml
c:\program files (x86)\IObit Toolbar\WidgiHelper.exe
c:\program files (x86)\IObit
c:\program files (x86)\IObit\Advanced SystemCare 4\DiskScan.log
c:\program files (x86)\IObit\Advanced SystemCare 4\checkinfo.txt
c:\program files (x86)\IObit\Advanced SystemCare 4\LatestNews\imagenews.png
c:\program files (x86)\IObit\Advanced SystemCare 4\LatestNews\LatestNews.ini
c:\program files (x86)\IObit\Advanced SystemCare 4\License.dat
c:\program files (x86)\IObit\Advanced SystemCare 4\services.ini
c:\program files (x86)\IObit\Advanced SystemCare 4\TBconfig.ini
c:\program files (x86)\IObit\Advanced SystemCare 4\Update\Update.Ini
c:\program files (x86)\IObit\Advanced SystemCare 5\ASCServiceLog\2011-10-14.log
c:\program files (x86)\IObit\Advanced SystemCare 5\ASCServiceLog\2011-10-15.log
c:\program files (x86)\IObit\Advanced SystemCare 5\ASCServiceLog\2011-10-16.log
c:\program files (x86)\IObit\Advanced SystemCare 5\ASCServiceLog\2011-10-17.log
c:\program files (x86)\IObit\Advanced SystemCare 5\ASCServiceLog\2011-10-18.log
c:\program files (x86)\IObit\Advanced SystemCare 5\ASCServiceLog\2011-10-19.log
c:\program files (x86)\IObit\Advanced SystemCare 5\ASCServiceLog\2011-10-20.log
c:\program files (x86)\IObit\Advanced SystemCare 5\ASCServiceLog\2011-10-21.log
c:\program files (x86)\IObit\Advanced SystemCare 5\ASCServiceLog\2011-10-22.log
c:\program files (x86)\IObit\Advanced SystemCare 5\ASCServiceLog\2011-10-23.log
c:\program files (x86)\IObit\Advanced SystemCare 5\ASCServiceLog\2011-10-24.log
c:\program files (x86)\IObit\Advanced SystemCare 5\ASCServiceLog\2011-10-26.log
c:\program files (x86)\IObit\Advanced SystemCare 5\ASCServiceLog\2011-10-27.log
c:\program files (x86)\IObit\Advanced SystemCare 5\ASCServiceLog\2011-10-28.log
c:\program files (x86)\IObit\Advanced SystemCare 5\ASCServiceLog\2011-10-29.log
c:\program files (x86)\IObit\Advanced SystemCare 5\BootTimeLog\Defrag2011-10-14(22-58-42).log
c:\program files (x86)\IObit\Advanced SystemCare 5\checkinfo.txt
c:\program files (x86)\IObit\Advanced SystemCare 5\LatestNews\imagenews.png
c:\program files (x86)\IObit\Advanced SystemCare 5\LatestNews\LatestNews.ini
c:\program files (x86)\IObit\Advanced SystemCare 5\NewAutoUpdate.exe
c:\program files (x86)\IObit\Advanced SystemCare 5\Scan.dll.temp
c:\program files (x86)\IObit\Advanced SystemCare 5\SecurityHole_Backup\KB976422.cab
c:\program files (x86)\IObit\Advanced SystemCare 5\SecurityHoleScan.log
c:\program files (x86)\IObit\Advanced SystemCare 5\sh.dat
c:\program files (x86)\IObit\Advanced SystemCare 5\Update\asc5-update.zlb
c:\program files (x86)\IObit\Advanced SystemCare 5\Update\Update.Ini
c:\program files (x86)\IObit\Advanced SystemCare 5\UpdateHelp.exe
c:\program files (x86)\IObit\Advanced SystemCare 5\UpdateHistory.txt
c:\program files (x86)\IObit\Advanced SystemCare 5\WizardLog.log
c:\program files (x86)\IObit\Game Booster\AutoUpdate.exe
c:\program files (x86)\IObit\Game Booster\Boost.exe
c:\program files (x86)\IObit\Game Booster\GameBooster.exe
c:\program files (x86)\IObit\Game Booster\gbinit.exe
c:\program files (x86)\IObit\Game Booster\gbtray.exe
c:\program files (x86)\IObit\Game Booster\Language\Arabic.lng
c:\program files (x86)\IObit\Game Booster\Language\Catalan.lng
c:\program files (x86)\IObit\Game Booster\Language\Croatian.lng
c:\program files (x86)\IObit\Game Booster\Language\Czech.lng
c:\program files (x86)\IObit\Game Booster\Language\Dansk.lng
c:\program files (x86)\IObit\Game Booster\Language\Dutch.lng
c:\program files (x86)\IObit\Game Booster\Language\English.lng
c:\program files (x86)\IObit\Game Booster\Language\Finnish.lng
c:\program files (x86)\IObit\Game Booster\Language\French.lng
c:\program files (x86)\IObit\Game Booster\Language\German.lng
c:\program files (x86)\IObit\Game Booster\Language\Hungarian.lng
c:\program files (x86)\IObit\Game Booster\Language\ChineseSimp.lng
c:\program files (x86)\IObit\Game Booster\Language\ChineseTrad.lng
c:\program files (x86)\IObit\Game Booster\Language\Indonesian.lng
c:\program files (x86)\IObit\Game Booster\Language\Italian.lng
c:\program files (x86)\IObit\Game Booster\Language\Japanese.lng
c:\program files (x86)\IObit\Game Booster\Language\Korean.lng
c:\program files (x86)\IObit\Game Booster\Language\Polish.lng
c:\program files (x86)\IObit\Game Booster\Language\Portuguese(BRAZIL).lng
c:\program files (x86)\IObit\Game Booster\Language\Romanian.lng
c:\program files (x86)\IObit\Game Booster\Language\Russian.lng
c:\program files (x86)\IObit\Game Booster\Language\Slovenian.lng
c:\program files (x86)\IObit\Game Booster\Language\Spanish.lng
c:\program files (x86)\IObit\Game Booster\Language\Swedish.lng
c:\program files (x86)\IObit\Game Booster\Language\Turkish.lng
c:\program files (x86)\IObit\Game Booster\LatestNews\LatestNews.ini
c:\program files (x86)\IObit\Game Booster\license.dat
c:\program files (x86)\IObit\Game Booster\PowerConfig.dll
c:\program files (x86)\IObit\Game Booster\rtl120.bpl
c:\program files (x86)\IObit\Game Booster\sqlite3.dll
c:\program files (x86)\IObit\Game Booster\taskMgr.dll
c:\program files (x86)\IObit\Game Booster\TaskSchedule.exe
c:\program files (x86)\IObit\Game Booster\unins000.dat
c:\program files (x86)\IObit\Game Booster\unins000.exe
c:\program files (x86)\IObit\Game Booster\unins000.msg
c:\program files (x86)\IObit\Game Booster\Update\Update.Ini
c:\program files (x86)\IObit\Game Booster\vcl120.bpl
c:\program files (x86)\IObit\Game Booster\vclx120.bpl
c:\program files (x86)\IObit\IObit Malware Fighter\BlueBirdInit.exe
c:\program files (x86)\IObit\IObit Malware Fighter\datastate.dll
c:\program files (x86)\IObit\IObit Malware Fighter\db\core000.def
c:\program files (x86)\IObit\IObit Malware Fighter\db\core001.def
c:\program files (x86)\IObit\IObit Malware Fighter\db\core002.def
c:\program files (x86)\IObit\IObit Malware Fighter\db\core003.def
c:\program files (x86)\IObit\IObit Malware Fighter\db\core004.def
c:\program files (x86)\IObit\IObit Malware Fighter\db\core005.def
c:\program files (x86)\IObit\IObit Malware Fighter\db\core006.def
c:\program files (x86)\IObit\IObit Malware Fighter\db\core007.def
c:\program files (x86)\IObit\IObit Malware Fighter\db\core008.def
c:\program files (x86)\IObit\IObit Malware Fighter\db\core009.def
c:\program files (x86)\IObit\IObit Malware Fighter\db\core010.def
c:\program files (x86)\IObit\IObit Malware Fighter\db\core011.def
c:\program files (x86)\IObit\IObit Malware Fighter\db\core012.def
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\RegFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\UrlFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_ia64\FileMonitor.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_ia64\RegFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_ia64\UrlFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_x86\RegFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_x86\UrlFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wlh_amd64\FileMonitor.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wlh_amd64\RegFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wlh_amd64\UrlFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wlh_ia64\FileMonitor.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wlh_ia64\RegFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wlh_ia64\UrlFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wlh_x86\FileMonitor.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wlh_x86\RegFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wlh_x86\UrlFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wnet_amd64\FileMonitor.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wnet_amd64\RegFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wnet_amd64\UrlFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wnet_ia64\FileMonitor.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wnet_ia64\RegFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wnet_ia64\UrlFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wnet_x86\FileMonitor.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wnet_x86\RegFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wnet_x86\UrlFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wxp_ia64\UrlFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wxp_x86\FileMonitor.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wxp_x86\RegFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\wxp_x86\UrlFilter.sys
c:\program files (x86)\IObit\IObit Malware Fighter\EULA.rtf
c:\program files (x86)\IObit\IObit Malware Fighter\FileMonitor.dll
c:\program files (x86)\IObit\IObit Malware Fighter\help\help.html
c:\program files (x86)\IObit\IObit Malware Fighter\help\img\cloud.png
c:\program files (x86)\IObit\IObit Malware Fighter\help\img\main-cloud.png
c:\program files (x86)\IObit\IObit Malware Fighter\help\img\main-free.png
c:\program files (x86)\IObit\IObit Malware Fighter\help\img\main-pro.png
c:\program files (x86)\IObit\IObit Malware Fighter\help\img\main-protect.png
c:\program files (x86)\IObit\IObit Malware Fighter\help\img\main-scan.png
c:\program files (x86)\IObit\IObit Malware Fighter\help\img\overview.png
c:\program files (x86)\IObit\IObit Malware Fighter\help\img\protect.png
c:\program files (x86)\IObit\IObit Malware Fighter\help\img\scan.png
c:\program files (x86)\IObit\IObit Malware Fighter\IMF.exe
c:\program files (x86)\IObit\IObit Malware Fighter\IMFShellExt.dll
c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
c:\program files (x86)\IObit\IObit Malware Fighter\IMFUpdater.exe
c:\program files (x86)\IObit\IObit Malware Fighter\IntegrateFilter.dll
c:\program files (x86)\IObit\IObit Malware Fighter\IObitUninstal.exe
c:\program files (x86)\IObit\IObit Malware Fighter\Language\Arabic.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\Czech.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\English.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\French.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\German.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\Hungarian.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\ChineseSimp.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\ChineseTrad.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\Italian.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\Japanese.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\Korean.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\Latvian.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\Polish.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\Portuguese(PT-BR).lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\Russian.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\Serbian.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\Spanish.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\Swedish.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\Turkish.lng
c:\program files (x86)\IObit\IObit Malware Fighter\Language\Vietnamese.lng
c:\program files (x86)\IObit\IObit Malware Fighter\license.dat
c:\program files (x86)\IObit\IObit Malware Fighter\Quarantine Zone\info.db
c:\program files (x86)\IObit\IObit Malware Fighter\RegFilter.dll
c:\program files (x86)\IObit\IObit Malware Fighter\rtl120.bpl
c:\program files (x86)\IObit\IObit Malware Fighter\Scan.dll
c:\program files (x86)\IObit\IObit Malware Fighter\StartMenu.exe
c:\program files (x86)\IObit\IObit Malware Fighter\taskmgr.dll
c:\program files (x86)\IObit\IObit Malware Fighter\TaskSchedule.exe
c:\program files (x86)\IObit\IObit Malware Fighter\unins000.dat
c:\program files (x86)\IObit\IObit Malware Fighter\unins000.exe
c:\program files (x86)\IObit\IObit Malware Fighter\unins000.msg
c:\program files (x86)\IObit\IObit Malware Fighter\unrar.dll
c:\program files (x86)\IObit\IObit Malware Fighter\URLFilter.dll
c:\program files (x86)\IObit\IObit Malware Fighter\vcl120.bpl
c:\program files (x86)\IObit\IObit Malware Fighter\vclx120.bpl
c:\program files (x86)\IObit\IObit Malware Fighter\zlibwapi.dll
c:\program files (x86)\IObit\Smart Defrag 2\LatestNews\LatestNews.ini
c:\program files (x86)\YouTube Downloader Toolbar
c:\program files (x86)\YouTube Downloader Toolbar\IE\4.7\config.ini
c:\program files (x86)\YouTube Downloader Toolbar\IE\4.7\youtubedownloaderToolbarIE.dll
c:\program files (x86)\YouTube Downloader Toolbar\Res\amazon.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\btnClose.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\btnMinimize.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\dailymotion.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\ebay.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\facebook.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\googleplus.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\hulu.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\icon_settings.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\Lang\res1031.ini
c:\program files (x86)\YouTube Downloader Toolbar\Res\Lang\res1033.ini
c:\program files (x86)\YouTube Downloader Toolbar\Res\Lang\res1034.ini
c:\program files (x86)\YouTube Downloader Toolbar\Res\Lang\res1036.ini
c:\program files (x86)\YouTube Downloader Toolbar\Res\Lang\res1040.ini
c:\program files (x86)\YouTube Downloader Toolbar\Res\metacafe.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\radiobeta.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\search-button-hover.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\search-button.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\search-chevron-hover.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\search-chevron.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\search_amazon.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\search_baidu.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\search_ebay.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\search_yahoo.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\search_yandex.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\search_youtube.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\twitter.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\veoh.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\widgets.xml
c:\program files (x86)\YouTube Downloader Toolbar\Res\youtube.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\ytd.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\ytd_logo.gif
c:\program files (x86)\YouTube Downloader Toolbar\Res\ytd_logo_hover.gif
c:\program files (x86)\YouTube Downloader Toolbar\WidgiHelper.exe
c:\users\J3ck3sss\AppData\Local\Temp\e3c74ee6-7482-4280-b9c3-f233b390296e\CliSecureRT.dll
c:\windows\av_ico
c:\windows\av_ico\ico_avira_start.ico
c:\windows\av_ico\ico_defender_start.ico
c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3427954366-3406222959-2106377572-1000Core.job
c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3427954366-3406222959-2106377572-1000UA.job
c:\windows\unrar.exe
c:\windows\update.tray-12-0-lnk
c:\windows\update.tray-12-0-lnk\svchost.exe
c:\windows\update.tray-12-0
c:\windows\update.tray-12-0\svchost.exe
c:\windows\update.tray-15-0-lnk
c:\windows\update.tray-15-0-lnk\svchost.exe
c:\windows\update.tray-15-0
c:\windows\update.tray-15-0\svchost.exe
c:\windows\update.tray-8-0-lnk
c:\windows\update.tray-8-0-lnk\svchost.exe
c:\windows\update.tray-8-0
c:\windows\update.tray-8-0\svchost.exe
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_Application Updater
-------\Service_IMFservice
-------\Service_IMFservice
.
.
((((((((((((((((((((((((( Files Created from 2011-09-28 to 2011-10-29 )))))))))))))))))))))))))))))))
.
.
2011-10-29 09:56 . 2011-10-29 09:56 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-10-28 20:09 . 2011-10-28 20:09 -------- d-----w- C:\rsit
2011-10-28 20:09 . 2011-10-28 20:09 -------- d-----w- c:\program files\trend micro
2011-10-28 19:59 . 2011-09-18 06:39 130760 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-10-28 19:59 . 2011-09-15 21:55 97312 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-10-28 19:59 . 2011-09-15 21:55 27760 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2011-10-26 16:51 . 2011-08-15 05:08 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2011-10-26 16:51 . 2011-08-15 04:25 6144 ----a-w- c:\program files (x86)\Internet Explorer\iecompat.dll
2011-10-23 18:26 . 2011-10-23 18:27 -------- d-----w- c:\program files (x86)\EAGLE-5.4.0
2011-10-23 18:26 . 2011-10-23 18:26 -------- d-----w- c:\users\J3ck3sss\AppData\Roaming\CadSoft
2011-10-21 19:56 . 2008-07-12 06:18 3851784 ----a-w- c:\windows\SysWow64\D3DX9_39.dll
2011-10-21 19:55 . 2011-10-21 19:55 -------- d-----w- c:\program files (x86)\Microsoft Expression
2011-10-21 19:55 . 2011-10-21 19:55 -------- d-----w- c:\program files (x86)\WPF Toolkit
2011-10-21 19:51 . 2011-10-21 19:51 -------- d-----w- c:\program files (x86)\Microsoft XNA
2011-10-21 19:50 . 2011-10-21 19:50 192768 ----a-w- c:\programdata\Microsoft\VPDExpress\10.0\1033\ResourceCache.dll
2011-10-21 19:40 . 2011-10-21 19:49 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 10.0
2011-10-21 19:39 . 2011-10-21 19:39 -------- d-----w- c:\program files (x86)\Microsoft XDE
2011-10-21 19:38 . 2011-10-21 19:38 -------- d-----w- c:\windows\symbols
2011-10-21 19:38 . 2011-10-21 19:38 -------- d-----w- c:\program files\Microsoft Visual Studio 10.0
2011-10-21 19:38 . 2011-10-21 19:55 -------- d-----w- c:\program files (x86)\Microsoft SDKs
2011-10-21 19:38 . 2011-10-21 19:38 -------- d-----w- c:\program files\Microsoft Help Viewer
2011-10-16 13:29 . 2011-10-16 13:39 -------- d-----w- c:\users\J3ck3sss\AppData\Local\Ried.cl
2011-10-16 13:23 . 2011-10-16 13:23 -------- d-----w- c:\program files (x86)\Phone7Market
2011-10-16 09:49 . 2011-10-16 09:50 -------- d-----w- c:\windows\system32\ms-MY
2011-10-14 20:55 . 2011-10-14 20:55 14336 ----a-w- c:\windows\system32\drivers\sffp_sd.sys
2011-10-14 20:54 . 2011-09-09 15:35 22872 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2011-10-12 19:03 . 2011-09-06 03:07 3134976 ----a-w- c:\windows\system32\win32k.sys
2011-10-12 18:54 . 2011-08-17 05:32 613888 ----a-w- c:\windows\system32\psisdecd.dll
2011-10-11 15:44 . 2011-10-11 16:02 -------- d-----w- c:\program files (x86)\Counter-Strike Source
2011-10-11 12:38 . 2003-09-03 00:28 724992 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iKernel.dll
2011-10-11 12:38 . 2003-09-03 00:27 69715 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\ctor.dll
2011-10-11 12:38 . 2003-09-03 00:26 266240 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iscript.dll
2011-10-11 12:38 . 2003-09-03 00:26 192512 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iuser.dll
2011-10-11 12:38 . 2003-09-03 00:25 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\DotNetInstaller.exe
2011-10-11 12:38 . 2003-09-03 00:23 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\Objectps.dll
2011-10-11 12:38 . 2011-10-11 12:38 311428 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\Setup.dll
2011-10-11 12:38 . 2011-10-11 12:38 184452 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iGdi.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-15 15:04 . 2011-09-15 15:04 8024 ----a-w- c:\programdata\Microsoft\Phone Tools\CoreCon\10.0\SDKFilesVer.dll
2011-09-15 15:04 . 2011-09-15 15:04 8024 ----a-w- c:\programdata\Microsoft\Phone Tools\CoreCon\10.0\addons\NonSDKAddonVer.dll
2011-09-15 15:04 . 2011-09-15 15:04 8024 ----a-w- c:\programdata\Microsoft\Phone Tools\CoreCon\10.0\1033\NonSDKAddonLangVer.dll
2011-09-15 15:04 . 2011-09-15 15:04 8016 ----a-w- c:\programdata\Microsoft\Phone Tools\CoreCon\10.0\addons\WPSDKVer.dll
2011-09-15 13:38 . 2011-09-15 13:38 81744 ----a-w- c:\windows\SysWow64\mfcm100u.dll
2011-09-15 13:38 . 2011-09-15 13:38 81744 ----a-w- c:\windows\SysWow64\mfcm100.dll
2011-09-15 13:38 . 2011-09-15 13:38 773968 ----a-w- c:\windows\SysWow64\msvcr100.dll
2011-09-15 13:38 . 2011-09-15 13:38 4422992 ----a-w- c:\windows\SysWow64\mfc100u.dll
2011-09-15 13:38 . 2011-09-15 13:38 4397384 ----a-w- c:\windows\SysWow64\mfc100.dll
2011-09-15 13:38 . 2011-09-15 13:38 421200 ----a-w- c:\windows\SysWow64\msvcp100.dll
2011-09-15 13:38 . 2011-09-15 13:38 138056 ----a-w- c:\windows\SysWow64\atl100.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-10-29_09.03.47 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-10-29 09:58 . 2011-10-29 09:58 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-10-29 09:02 . 2011-10-29 09:02 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-10-29 09:02 . 2011-10-29 09:02 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-10-29 09:58 . 2011-10-29 09:58 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-07-14 05:01 . 2011-10-29 09:57 482128 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 05:01 . 2011-10-29 09:01 482128 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-01-31 13:18 . 2011-10-29 09:57 6941552 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3427954366-3406222959-2106377572-1000-8192.dat
- 2011-01-31 13:18 . 2011-10-28 18:12 6941552 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3427954366-3406222959-2106377572-1000-8192.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-12-10 98304]
"IJNetworkScanUtility"="c:\program files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe" [2009-05-19 136544]
"DivXUpdate"="c:\program files (x86)\divx\divx update\divxupdate.exe" [2011-07-28 1259376]
"Adobe ARM"="c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe" [2011-06-06 937920]
"DivX Download Manager"="c:\program files (x86)\divx\divx plus web player\ddmservice.exe" [2011-02-08 63360]
"LManager"="c:\program files (x86)\launch manager\lmanager.exe" [2010-01-22 1287760]
"IAStorIcon"="c:\program files (x86)\intel\intel(r) rapid storage technology\iastoricon.exe" [2009-12-23 284696]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
T-Mobile Communication Center.lnk - c:\program files (x86)\T-Mobile Communication Center\TMCC.exe [2010-9-24 761856]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableSecureUIAPaths"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~2\WI3C8A~1\Datamngr\datamngr.dll c:\progra~2\WI3C8A~1\Datamngr\IEBHO.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"midi2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
R2 AVGIDSAgent;AVGIDSAgent; [x]
R2 avgwd;AVG WatchDog; [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [x]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [x]
R3 AVG Security Toolbar Service;AVG Security Toolbar Service; [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [x]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [x]
R3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x]
R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [x]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 WMZuneComm;Zune Windows Mobile Connectivity Service;c:\program files\Zune\WMZuneComm.exe [2011-08-05 306400]
S0 AVGIDSEH;AVGIDSEH;c:\windows\system32\DRIVERS\AVGIDSEH.Sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [x]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2009-12-30 23592]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-01-22 310352]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2010-01-18 842784]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-12-23 13336]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-12-09 2320920]
S2 WMCoreService;Mobile Broadband Core Service;c:\program files (x86)\Mobile Broadband Drivers\WMCore\mini_WMCore.exe servicemode [x]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\AVGIDSDriver.Sys [x]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\AVGIDSFilter.Sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 k57nd;Broadcom NetLink Gigabit Ethernet;c:\windows\system32\DRIVERS\k57amd64.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"="c:\program files (x86)\Elantech\ETDCtrl.exe" [BU]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-10-19 2185032]
"Zune Launcher"="c:\program files\Zune\ZuneLauncher.exe" [2011-08-05 163552]
"CanonSolutionMenu"="c:\program files (x86)\canon\solutionmenu\cnslmain.exe" [2009-09-04 767312]
"AtherosBtStack"="c:\program files (x86)\bluetooth suite\btvstack.exe" [2009-12-30 393256]
"Acer ePower Management"="c:\program files\acer\acer epower management\epowertray.exe" [2010-01-18 832544]
"combofix"="c:\combofix\CF5883.3XE" [2009-07-14 344576]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\progra~2\WI3C8A~1\Datamngr\x64\datamngr.dll c:\progra~2\WI3C8A~1\Datamngr\x64\IEBHO.dll
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Download Using &BitSpirit - c:\program files (x86)\BitSpirit\bsurl.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.254 192.168.1.1
.
- - - - ORPHANS REMOVED - - - -
.
BHO-{A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
Toolbar-10 - (no file)
Wow6432Node-HKLM-Run-SearchSettings - c:\program files (x86)\common files\spigot\search settings\searchsettings.exe
Wow6432Node-HKLM-Run-BabylonToolbar - c:\program files (x86)\babylontoolbar\babylontoolbar\1.4.19.19\babylontoolbarsrv.exe
SafeBoot-IMFservice
HKLM-Run-SynTPEnh - c:\program files (x86)\synaptics\syntp\syntpenh.exe
AddRemove-BabylonToolbar - c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\uninstall.exe
AddRemove-BitTorrentBar Toolbar - c:\progra~2\BITTOR~2\UNWISE.EXE
AddRemove-DAEMON Tools Toolbar - c:\program files (x86)\DAEMON Tools Toolbar\uninst.exe
AddRemove-Game Booster_is1 - c:\program files (x86)\IObit\Game Booster\unins000.exe
AddRemove-IObit Malware Fighter_is1 - c:\program files (x86)\IObit\IObit Malware Fighter\unins000.exe
.
.
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Mobile Broadband Drivers\WMCore\mini_WMCore.exe
c:\program files (x86)\Windows iLivid Toolbar\Datamngr\datamngrUI.exe
c:\program files (x86)\Launch Manager\LMworker.exe
.
**************************************************************************
.
Completion time: 2011-10-29 12:07:11 - machine was rebooted
ComboFix-quarantined-files.txt 2011-10-29 10:07
ComboFix2.txt 2011-10-29 09:11
.
Pre-Run: 161 905 926 144 bytes free
Post-Run: 161 631 318 016 bytes free
.
- - End Of File - - 37EF84D8FE1054417B0C93154A585E4C
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Facebook virus pls help - ntb

#11 Příspěvek od vyosek »

Vyborne, jeste jeden skript - postup stejny (CF i skript primo na C:\)

Kód: Vybrat vše

KillAll::

Folder::
c:\users\J3ck3sss\AppData\Local\Temp\

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"DivXUpdate"=-
"Adobe ARM"=-
"DivX Download Manager"=-

Reboot::
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
J3ck3sss
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 28 říj 2011 20:32

Re: Facebook virus pls help - ntb

#12 Příspěvek od J3ck3sss »

ComboFix 11-10-29.03 - J3ck3sss . 10. 2011 12:43:41.3.4 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.421.1051.18.3959.2487 [GMT 2:00]
Running from: C:\Users\J3ck3sss\Desktop\ComboFix.exe
Command switches used :: C:\Users\J3ck3sss\Desktop\CFScript.txt
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


c:\users\J3ck3sss\AppData\Local\Temp
c:\users\J3ck3sss\AppData\Local\Temp\aipflib.log
c:\users\J3ck3sss\AppData\Local\Temp\FXSAPIDebugLogFile.txt
c:\users\J3ck3sss\AppData\Local\Temp\LManager.log
c:\users\J3ck3sss\AppData\Local\Temp\LMworker.log


((((((((((((((((((((((((( Files Created from 2011-09-28 to 2011-10-29 )))))))))))))))))))))))))))))))


2011-10-29 10:51:42 . 2011-10-29 10:51:42 -------- d-----w- C:\Users\Default\AppData\Local\temp
2011-10-28 20:09:06 . 2011-10-28 20:09:16 -------- d-----w- C:\rsit
2011-10-28 20:09:06 . 2011-10-28 20:09:13 -------- d-----w- C:\Program Files\trend micro
2011-10-28 19:59:24 . 2011-09-18 06:39:27 130760 ----a-w- C:\Windows\system32\drivers\avipbb.sys
2011-10-28 19:59:24 . 2011-09-15 21:55:03 97312 ----a-w- C:\Windows\system32\drivers\avgntflt.sys
2011-10-28 19:59:24 . 2011-09-15 21:55:03 27760 ----a-w- C:\Windows\system32\drivers\avkmgr.sys
2011-10-26 16:51:45 . 2011-08-15 05:08:35 6144 ----a-w- C:\Program Files\Internet Explorer\iecompat.dll
2011-10-26 16:51:45 . 2011-08-15 04:25:59 6144 ----a-w- C:\Program Files (x86)\Internet Explorer\iecompat.dll
2011-10-23 18:26:58 . 2011-10-23 18:27:04 -------- d-----w- C:\Program Files (x86)\EAGLE-5.4.0
2011-10-23 18:26:41 . 2011-10-23 18:26:41 -------- d-----w- C:\Users\J3ck3sss\AppData\Roaming\CadSoft
2011-10-21 19:56:21 . 2008-07-12 06:18:52 3851784 ----a-w- C:\Windows\SysWow64\D3DX9_39.dll
2011-10-21 19:55:42 . 2011-10-21 19:55:45 -------- d-----w- C:\Program Files (x86)\Microsoft Expression
2011-10-21 19:55:38 . 2011-10-21 19:55:38 -------- d-----w- C:\Program Files (x86)\WPF Toolkit
2011-10-21 19:51:04 . 2011-10-21 19:51:04 -------- d-----w- C:\Program Files (x86)\Microsoft XNA
2011-10-21 19:50:12 . 2011-10-21 19:50:12 192768 ----a-w- C:\ProgramData\Microsoft\VPDExpress\10.0\1033\ResourceCache.dll
2011-10-21 19:40:38 . 2011-10-21 19:49:11 -------- d-----w- C:\Program Files (x86)\Microsoft Visual Studio 10.0
2011-10-21 19:39:55 . 2011-10-21 19:39:55 -------- d-----w- C:\Program Files (x86)\Microsoft XDE
2011-10-21 19:38:35 . 2011-10-21 19:38:35 -------- d-----w- C:\Windows\symbols
2011-10-21 19:38:34 . 2011-10-21 19:38:34 -------- d-----w- C:\Program Files\Microsoft Visual Studio 10.0
2011-10-21 19:38:33 . 2011-10-21 19:55:03 -------- d-----w- C:\Program Files (x86)\Microsoft SDKs
2011-10-21 19:38:33 . 2011-10-21 19:38:33 -------- d-----w- C:\Program Files\Microsoft Help Viewer
2011-10-16 13:29:52 . 2011-10-16 13:39:56 -------- d-----w- C:\Users\J3ck3sss\AppData\Local\Ried.cl
2011-10-16 13:23:06 . 2011-10-16 13:23:06 -------- d-----w- C:\Program Files (x86)\Phone7Market
2011-10-16 09:49:59 . 2011-10-16 09:50:13 -------- d-----w- C:\Windows\system32\ms-MY
2011-10-14 20:55:51 . 2011-10-14 20:55:51 14336 ----a-w- C:\Windows\system32\drivers\sffp_sd.sys
2011-10-14 20:54:44 . 2011-09-09 15:35:40 22872 ----a-w- C:\Windows\system32\RegistryDefragBootTime.exe
2011-10-12 19:03:03 . 2011-09-06 03:07:02 3134976 ----a-w- C:\Windows\system32\win32k.sys
2011-10-12 18:54:22 . 2011-08-17 05:32:24 613888 ----a-w- C:\Windows\system32\psisdecd.dll
2011-10-11 15:44:11 . 2011-10-11 16:02:48 -------- d-----w- C:\Program Files (x86)\Counter-Strike Source
2011-10-11 12:38:20 . 2003-09-03 00:28:38 724992 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iKernel.dll
2011-10-11 12:38:20 . 2003-09-03 00:27:22 69715 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\ctor.dll
2011-10-11 12:38:20 . 2003-09-03 00:26:36 266240 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iscript.dll
2011-10-11 12:38:20 . 2003-09-03 00:26:06 192512 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iuser.dll
2011-10-11 12:38:20 . 2003-09-03 00:25:54 5632 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\DotNetInstaller.exe
2011-10-11 12:38:20 . 2003-09-03 00:23:16 32768 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\Objectps.dll
2011-10-11 12:38:19 . 2011-10-11 12:38:19 311428 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\Setup.dll
2011-10-11 12:38:19 . 2011-10-11 12:38:19 184452 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iGdi.dll
.


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2011-09-15 15:04:24 . 2011-09-15 15:04:24 8024 ----a-w- C:\ProgramData\Microsoft\Phone Tools\CoreCon\10.0\SDKFilesVer.dll
2011-09-15 15:04:24 . 2011-09-15 15:04:24 8024 ----a-w- C:\ProgramData\Microsoft\Phone Tools\CoreCon\10.0\addons\NonSDKAddonVer.dll
2011-09-15 15:04:24 . 2011-09-15 15:04:24 8024 ----a-w- C:\ProgramData\Microsoft\Phone Tools\CoreCon\10.0\1033\NonSDKAddonLangVer.dll
2011-09-15 15:04:24 . 2011-09-15 15:04:24 8016 ----a-w- C:\ProgramData\Microsoft\Phone Tools\CoreCon\10.0\addons\WPSDKVer.dll
2011-09-15 13:38:28 . 2011-09-15 13:38:28 81744 ----a-w- C:\Windows\SysWow64\mfcm100u.dll
2011-09-15 13:38:28 . 2011-09-15 13:38:28 81744 ----a-w- C:\Windows\SysWow64\mfcm100.dll
2011-09-15 13:38:10 . 2011-09-15 13:38:10 773968 ----a-w- C:\Windows\SysWow64\msvcr100.dll
2011-09-15 13:38:10 . 2011-09-15 13:38:10 4422992 ----a-w- C:\Windows\SysWow64\mfc100u.dll
2011-09-15 13:38:08 . 2011-09-15 13:38:08 4397384 ----a-w- C:\Windows\SysWow64\mfc100.dll
2011-09-15 13:38:08 . 2011-09-15 13:38:08 421200 ----a-w- C:\Windows\SysWow64\msvcp100.dll
2011-09-15 13:38:06 . 2011-09-15 13:38:06 138056 ----a-w- C:\Windows\SysWow64\atl100.dll


((((((((((((((((((((((((((((( SnapShot@2011-10-29_09.03.47 )))))))))))))))))))))))))))))))))))))))))

+ 2010-12-14 22:00:58 . 2011-10-29 10:05:32 16384 C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-12-14 22:00:58 . 2011-10-29 09:01:40 16384 C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-12-14 22:00:58 . 2011-10-29 10:05:32 16384 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-12-14 22:00:58 . 2011-10-29 09:01:40 16384 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-10-29 10:52:41 . 2011-10-29 10:52:41 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-10-29 09:02:47 . 2011-10-29 09:02:47 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-10-29 10:52:41 . 2011-10-29 10:52:41 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2011-10-29 09:02:47 . 2011-10-29 09:02:47 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-07-14 02:36:59 . 2011-10-28 20:10:37 653060 C:\Windows\system32\perfh009.dat
+ 2009-07-14 02:36:59 . 2011-10-29 10:21:04 653060 C:\Windows\system32\perfh009.dat
+ 2009-07-26 18:41:44 . 2011-10-29 10:21:04 659208 C:\Windows\system32\perfh005.dat
- 2009-07-26 18:41:44 . 2011-10-28 20:10:37 659208 C:\Windows\system32\perfh005.dat
+ 2009-07-14 02:36:59 . 2011-10-29 10:21:04 121992 C:\Windows\system32\perfc009.dat
- 2009-07-14 02:36:59 . 2011-10-28 20:10:37 121992 C:\Windows\system32\perfc009.dat
- 2009-07-26 18:41:44 . 2011-10-28 20:10:37 140894 C:\Windows\system32\perfc005.dat
+ 2009-07-26 18:41:44 . 2011-10-29 10:21:04 140894 C:\Windows\system32\perfc005.dat
- 2009-07-14 05:01:48 . 2011-10-29 09:01:44 482128 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01:48 . 2011-10-29 09:57:26 482128 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-01-31 13:18:07 . 2011-10-29 09:57:26 6941552 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3427954366-3406222959-2106377572-1000-8192.dat
- 2011-01-31 13:18:07 . 2011-10-28 18:12:28 6941552 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3427954366-3406222959-2106377572-1000-8192.dat

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-12-10 06:28:38 98304]
"IJNetworkScanUtility"="C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe" [2009-05-19 16:11:52 136544]
"LManager"="c:\program files (x86)\launch manager\lmanager.exe" [2010-01-22 15:10:50 1287760]
"IAStorIcon"="c:\program files (x86)\intel\intel(r) rapid storage technology\iastoricon.exe" [2009-12-23 16:39:02 284696]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
T-Mobile Communication Center.lnk - C:\Program Files (x86)\T-Mobile Communication Center\TMCC.exe [2010-9-24 761856]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableSecureUIAPaths"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~2\WI3C8A~1\Datamngr\datamngr.dll C:\PROGRA~2\WI3C8A~1\Datamngr\IEBHO.dll

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"midi2"=wdmaud.drv

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

R2 AntiVirSchedulerService;Avira Scheduler;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [x]
R2 AVGIDSAgent;AVGIDSAgent; [x]
R2 avgwd;AVG WatchDog; [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 11:16:28 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 12:27:14 138576]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;C:\Windows\system32\Drivers\ssadadb.sys [x]
R3 AthBTPort;Atheros Virtual Bluetooth Class;C:\Windows\system32\DRIVERS\btath_flt.sys [x]
R3 AVG Security Toolbar Service;AVG Security Toolbar Service; [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;C:\Windows\system32\drivers\btath_a2dp.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;C:\Windows\system32\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;C:\Windows\system32\DRIVERS\btath_rcp.sys [x]
R3 btusbflt;Bluetooth USB Filter;C:\Windows\system32\drivers\btusbflt.sys [x]
R3 ETD;ELAN PS/2 Port Input Device;C:\Windows\system32\DRIVERS\ETD.sys [x]
R3 massfilter;ZTE Mass Storage Filter Driver;C:\Windows\system32\drivers\massfilter.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\system32\Drivers\RtsUStor.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);C:\Windows\system32\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);C:\Windows\system32\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;C:\Windows\system32\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);C:\Windows\system32\DRIVERS\ssadserd.sys [x]
R3 WatAdminSvc;Služba Windows Activation Technologies;C:\Windows\system32\Wat\WatAdminSvc.exe [x]
R3 WMZuneComm;Zune Windows Mobile Connectivity Service;c:\Program Files\Zune\WMZuneComm.exe [2011-08-05 10:53:12 306400]
S0 AVGIDSEH;AVGIDSEH;C:\Windows\system32\DRIVERS\AVGIDSEH.Sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\system32\DRIVERS\avgrkx64.sys [x]
S0 sptd;sptd;C:\Windows\System32\Drivers\sptd.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;C:\Windows\system32\DRIVERS\avgldx64.sys [x]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\system32\DRIVERS\avgmfx64.sys [x]
S1 Avgtdia;AVG TDI Driver;C:\Windows\system32\DRIVERS\avgtdia.sys [x]
S1 avkmgr;avkmgr;C:\Windows\system32\DRIVERS\avkmgr.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 10:55:28 64952]
S2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe [x]
S2 AtherosSvc;AtherosSvc;C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2009-12-30 21:03:50 23592]
S2 DsiWMIService;Dritek WMI Service;C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-01-22 15:10:50 310352]
S2 ePowerSvc;Acer ePower Service;C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-01-18 18:55:46 842784]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-12-23 16:39:04 13336]
S2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-12-09 15:48:26 2320920]
S2 WMCoreService;Mobile Broadband Core Service;C:\Program Files (x86)\Mobile Broadband Drivers\WMCore\mini_WMCore.exe servicemode [x]
S3 AVGIDSDriver;AVGIDSDriver;C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys [x]
S3 AVGIDSFilter;AVGIDSFilter;C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;C:\Windows\system32\DRIVERS\btath_bus.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys [x]
S3 k57nd;Broadcom NetLink Gigabit Ethernet;C:\Windows\system32\DRIVERS\k57amd64.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys [x]



--------- x86-64 -----------


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"="C:\Program Files (x86)\Elantech\ETDCtrl.exe" [BU]
"CanonMyPrinter"="C:\Program Files\Canon\MyPrinter\BJMyPrt.exe" [2009-10-19 02:12:00 2185032]
"Zune Launcher"="c:\Program Files\Zune\ZuneLauncher.exe" [2011-08-05 10:53:06 163552]
"CanonSolutionMenu"="c:\program files (x86)\canon\solutionmenu\cnslmain.exe" [2009-09-04 01:43:00 767312]
"AtherosBtStack"="c:\program files (x86)\bluetooth suite\btvstack.exe" [2009-12-30 21:03:54 393256]
"Acer ePower Management"="c:\program files\acer\acer epower management\epowertray.exe" [2010-01-18 18:55:48 832544]
"SynTPEnh"="C:\Program Files (x86)\synaptics\syntp\syntpenh.exe" [BU]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=C:\PROGRA~2\WI3C8A~1\Datamngr\x64\datamngr.dll C:\PROGRA~2\WI3C8A~1\Datamngr\x64\IEBHO.dll

------- Supplementary Scan -------

uLocal Page = C:\Windows\system32\blank.htm
mLocal Page = C:\Windows\SysWOW64\blank.htm
IE: Download Using &BitSpirit - C:\Program Files (x86)\BitSpirit\bsurl.htm
IE: E&xportovat do aplikace Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.254 192.168.1.1

- - - - ORPHANS REMOVED - - - -

BHO-{A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
Toolbar-10 - (no file)



------------------------ Other Running Processes ------------------------

C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Mobile Broadband Drivers\WMCore\mini_WMCore.exe
C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\datamngrUI.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe

**************************************************************************

Completion time: 2011-10-29 13:01:26 - machine was rebooted
ComboFix-quarantined-files.txt 2011-10-29 11:01:26
ComboFix2.txt 2011-10-29 10:07:11
ComboFix3.txt 2011-10-29 09:11:53

Pre-Run: 161 695 821 824 bytes free
Post-Run: 161 393 463 296 bytes free

- - End Of File - - 9B1D10D2E20CB1C557C6E9927339AD6E
Nahoru
J3ck3sss
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 28 říj 2011 20:32

Re: Facebook virus pls help - ntb

#13 Příspěvek od J3ck3sss »

takze uz mam na ntb vsetko v poriadku?
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Facebook virus pls help - ntb

#14 Příspěvek od vyosek »

:arrow: Odinstalujte Combofix
  • Prejmenujte ComboFix na Uninstall
  • Spustte jej
  • Tohle smaze Combofix a jeho slozky
:arrow: T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: v nouzovem rezimu (restart PC, mackat F8, zvolit Stav nouze s praci v siti) projedte PC temito utilitami, at se zbavime zbytku antiviru co tam mate :arrow: Stahnete Ccleaner (viz muj podpis)
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: Nainstalujte zabezpeceni PC - doporucuji Avast free http://www.avast.com/cs-cz/free-antivirus-download

:arrow: Dejte novy log z RSIT a napiste co PC
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
J3ck3sss
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 28 říj 2011 20:32

Re: Facebook virus pls help - ntb

#15 Příspěvek od J3ck3sss »

Logfile of random's system information tool 1.09 (written by random/random)
Run by J3ck3sss at 2011-10-29 18:10:28
Microsoft Windows 7 Ultimate
System drive C: has 162 GB (27%) free of 598 GB
Total RAM: 3959 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:10:34, on 29. 10. 2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16869)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\T-Mobile Communication Center\TMCC.exe
C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe
C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\datamngrUI.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\trend micro\J3ck3sss.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - (no file)
O3 - Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - (no file)
O3 - Toolbar: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe
O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~2\WI3C8A~1\Datamngr\DATAMN~1.EXE
O4 - HKLM\..\Run: [LManager] c:\program files (x86)\launch manager\lmanager.exe
O4 - HKLM\..\Run: [IAStorIcon] c:\program files (x86)\intel\intel(r) rapid storage technology\iastoricon.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - Global Startup: T-Mobile Communication Center.lnk = C:\Program Files (x86)\T-Mobile Communication Center\TMCC.exe
O8 - Extra context menu item: Download Using &BitSpirit - C:\Program Files (x86)\BitSpirit\bsurl.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - (no file)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: C:\PROGRA~2\WI3C8A~1\Datamngr\datamngr.dll C:\PROGRA~2\WI3C8A~1\Datamngr\IEBHO.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AtherosSvc - Unknown owner - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Mobile Broadband Core Service (WMCoreService) - Unknown owner - C:\Program Files (x86)\Mobile Broadband Drivers\WMCore\mini_WMCore.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9229 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 3282672
\??\C:\Windows\system32\conhost.exe "1121129210-6851568141633613502-205568899378991666331358649-1195704572-587984205
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Mobile Broadband Drivers\WMCore\mini_WMCore.exe" servicemode
WLIDSvcM.exe 1724
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
atieclxx
"taskhost.exe"
C:\Windows\Explorer.EXE
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files\Zune\ZuneLauncher.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Program Files (x86)\T-Mobile Communication Center\TMCC.exe" -m
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe"
"C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\datamngrUI.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\wuauclt.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=sk --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd16/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/last_accessed_socket/ --enable-print-preview --channel=1940.022266E0.767029893 --ignored=" --type=renderer " /prefetch:3
"C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd16/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/last_accessed_socket/ --enable-print-preview --channel=1940.08F5B840.1492805415 /prefetch:3
C:\Windows\system32\rundll32.exe "C:\Users\J3ck3sss\AppData\Local\Google\Chrome\APPLIC~1\150874~1.106\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\15.0.874.106\gcswf32.dll" --lang=sk --channel=1940.0926BA80.1688787514 --flash-broker=3180 /prefetch:4
"C:\Users\J3ck3sss\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd16/SpdyImpact/npn_with_spdy/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/last_accessed_socket/ --enable-print-preview --channel=1940.06FE1420.1514558147 /prefetch:3
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /welcome
taskeng.exe {68412B59-6BD4-4187-8D8D-3B55A9326D85}
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe10_ Global\UsGthrCtrlFltPipeMssGthrPipe10 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"c:\program files\windows defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 3286C814-A0F4-2438-0D1D-09E7A8B069BB -Reinvoke
"C:\Users\J3ck3sss\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-09-06 959432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Avira SearchFree Toolbar plus Web Protection - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-07-27 1493160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17}
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2011-09-06 959432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17}
{98889811-442D-49dd-99D7-DC866BE87DBC}
{D4027C7F-154A-4066-A1AD-4243D8127440} - Avira SearchFree Toolbar plus Web Protection - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2011-07-27 1493160]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-01-13 635784]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-10-19 2185032]
"Zune Launcher"=c:\Program Files\Zune\ZuneLauncher.exe [2011-08-05 163552]
"CanonSolutionMenu"=c:\program files (x86)\canon\solutionmenu\cnslmain.exe [2009-09-04 767312]
"AtherosBtStack"=c:\program files (x86)\bluetooth suite\btvstack.exe [2009-12-30 393256]
"Acer ePower Management"=c:\program files\acer\acer epower management\epowertray.exe [2010-01-18 832544]
"SynTPEnh"=C:\Program Files\synaptics\syntp\syntpenh.exe [2009-12-10 1890088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer ePower Management]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtherosBtStack]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
c:\program files (x86)\bittorrent\bittorrent.exe [2011-01-28 4771184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAStorIcon]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR]
c:\program files (x86)\samsung\kies\external\firmwareupdate\kiespdlr.exe [2011-03-17 19872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
c:\program files\windows sidebar\sidebar.exe [2009-07-14 1475072]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-12-10 98304]
"IJNetworkScanUtility"=C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [2009-05-19 136544]
"DATAMNGR"=C:\PROGRA~2\WI3C8A~1\Datamngr\DATAMN~1.EXE [2011-03-24 1115536]
"LManager"=c:\program files (x86)\launch manager\lmanager.exe [2010-01-22 1287760]
"IAStorIcon"=c:\program files (x86)\intel\intel(r) rapid storage technology\iastoricon.exe [2009-12-23 284696]
""= []
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-09-06 3722416]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
T-Mobile Communication Center.lnk - C:\Program Files (x86)\T-Mobile Communication Center\TMCC.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~2\WI3C8A~1\Datamngr\x64\datamngr.dll C:\PROGRA~2\WI3C8A~1\Datamngr\x64\IEBHO.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2009-07-14 290304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableSecureUIAPaths"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2011-10-29 18:10:28 ----D---- C:\rsit
2011-10-29 17:53:20 ----A---- C:\Windows\system32\drivers\aswSP.sys
2011-10-29 17:53:20 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2011-10-29 17:53:19 ----A---- C:\Windows\system32\drivers\aswRdr.sys
2011-10-29 17:53:18 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2011-10-29 17:53:18 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2011-10-29 17:53:16 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2011-10-29 17:53:16 ----A---- C:\Windows\system32\aswBoot.exe
2011-10-29 17:53:01 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2011-10-29 17:53:01 ----A---- C:\Windows\avastSS.scr
2011-10-29 17:52:53 ----D---- C:\ProgramData\AVAST Software
2011-10-29 17:52:53 ----D---- C:\Program Files\AVAST Software
2011-10-29 17:38:20 ----D---- C:\Program Files\CCleaner
2011-10-29 14:19:34 ----D---- C:\Program Files (x86)\Ask.com
2011-10-29 12:53:54 ----SHD---- C:\$RECYCLE.BIN
2011-10-29 10:49:29 ----D---- C:\Windows\ERDNT
2011-10-28 22:09:06 ----D---- C:\Program Files\trend micro
2011-10-23 20:26:41 ----D---- C:\Users\J3ck3sss\AppData\Roaming\CadSoft
2011-10-21 21:56:21 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2011-10-21 21:55:42 ----D---- C:\Program Files (x86)\Microsoft Expression
2011-10-21 21:55:38 ----D---- C:\Program Files (x86)\WPF Toolkit
2011-10-21 21:51:04 ----D---- C:\Program Files (x86)\Microsoft XNA
2011-10-21 21:40:38 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 10.0
2011-10-21 21:39:55 ----D---- C:\Program Files (x86)\Microsoft XDE
2011-10-21 21:38:35 ----D---- C:\Windows\symbols
2011-10-21 21:38:34 ----D---- C:\Program Files\Microsoft Visual Studio 10.0
2011-10-21 21:38:33 ----D---- C:\Program Files\Microsoft Help Viewer
2011-10-21 21:38:33 ----D---- C:\Program Files (x86)\Microsoft SDKs
2011-10-16 15:23:06 ----D---- C:\Program Files (x86)\Phone7Market
2011-10-16 11:49:59 ----D---- C:\Windows\system32\ms-MY
2011-10-14 22:55:51 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2011-10-14 22:54:44 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe
2011-10-12 21:03:03 ----A---- C:\Windows\system32\win32k.sys
2011-10-12 21:02:49 ----A---- C:\Windows\system32\ieframe.dll
2011-10-12 21:02:45 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-10-12 21:02:43 ----A---- C:\Windows\system32\mshtml.dll
2011-10-12 21:02:42 ----A---- C:\Windows\system32\urlmon.dll
2011-10-12 21:02:39 ----A---- C:\Windows\system32\wininet.dll
2011-10-12 21:02:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-10-12 21:02:37 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-10-12 21:02:36 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-10-12 21:02:32 ----A---- C:\Windows\SYSWOW64\mstime.dll
2011-10-12 21:02:32 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-10-12 21:02:32 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-10-12 21:02:32 ----A---- C:\Windows\system32\mstime.dll
2011-10-12 21:02:32 ----A---- C:\Windows\system32\msfeeds.dll
2011-10-12 21:02:32 ----A---- C:\Windows\system32\ieui.dll
2011-10-12 21:02:32 ----A---- C:\Windows\system32\iedkcs32.dll
2011-10-12 21:02:31 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-10-12 21:02:31 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-10-12 21:02:31 ----A---- C:\Windows\system32\iertutil.dll
2011-10-12 21:02:31 ----A---- C:\Windows\system32\iepeers.dll
2011-10-12 21:02:30 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-10-12 21:02:30 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-10-12 21:02:30 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-10-12 21:02:30 ----A---- C:\Windows\system32\mshtmled.dll
2011-10-12 21:02:30 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-10-12 21:02:23 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-10-12 21:02:23 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-10-12 21:02:23 ----A---- C:\Windows\system32\url.dll
2011-10-12 21:02:23 ----A---- C:\Windows\system32\licmgr10.dll
2011-10-12 21:02:23 ----A---- C:\Windows\system32\jsproxy.dll
2011-10-12 21:02:22 ----A---- C:\Windows\SYSWOW64\url.dll
2011-10-12 21:02:22 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-10-12 21:02:22 ----A---- C:\Windows\system32\msfeedssync.exe
2011-10-12 20:54:22 ----A---- C:\Windows\system32\psisdecd.dll
2011-10-12 20:54:21 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2011-10-12 20:54:12 ----A---- C:\Windows\system32\oleacc.dll
2011-10-12 20:54:11 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2011-10-12 20:54:11 ----A---- C:\Windows\system32\oleaut32.dll
2011-10-12 20:54:10 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2011-10-11 17:44:11 ----D---- C:\Program Files (x86)\Counter-Strike Source

======List of files/folders modified in the last 1 month======

2011-10-29 18:10:32 ----D---- C:\Windows\Temp
2011-10-29 17:53:20 ----D---- C:\Windows\system32\drivers
2011-10-29 17:53:16 ----D---- C:\Windows\SysWOW64
2011-10-29 17:53:16 ----D---- C:\Windows\System32
2011-10-29 17:53:14 ----SHD---- C:\Windows\Installer
2011-10-29 17:53:14 ----D---- C:\Config.Msi
2011-10-29 17:53:01 ----D---- C:\Windows
2011-10-29 17:52:53 ----RD---- C:\Program Files
2011-10-29 17:52:53 ----D---- C:\ProgramData
2011-10-29 17:52:51 ----SHD---- C:\System Volume Information
2011-10-29 17:47:20 ----D---- C:\ProgramData\Samsung
2011-10-29 17:47:06 ----D---- C:\Users\J3ck3sss\AppData\Roaming\Samsung
2011-10-29 17:42:27 ----RD---- C:\Program Files (x86)
2011-10-29 17:39:34 ----D---- C:\Users\J3ck3sss\AppData\Roaming\DAEMON Tools Pro
2011-10-29 17:39:34 ----D---- C:\Users\J3ck3sss\AppData\Roaming\DAEMON Tools Lite
2011-10-29 17:39:34 ----D---- C:\Users\J3ck3sss\AppData\Roaming\BitTorrent
2011-10-29 17:39:33 ----D---- C:\Windows\Panther
2011-10-29 17:39:33 ----D---- C:\Windows\Logs
2011-10-29 17:39:33 ----D---- C:\Windows\inf
2011-10-29 17:31:59 ----A---- C:\Windows\SYSWOW64\log.txt
2011-10-29 17:17:28 ----D---- C:\Windows\system32\config
2011-10-29 17:07:55 ----D---- C:\Windows\Prefetch
2011-10-29 17:02:42 ----D---- C:\Windows\system32\catroot
2011-10-29 16:59:32 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-10-29 12:53:48 ----A---- C:\Windows\system.ini
2011-10-29 12:53:40 ----D---- C:\Windows\system32\drivers\etc
2011-10-29 12:51:48 ----D---- C:\Windows\system32\catroot2
2011-10-29 12:48:37 ----D---- C:\Windows\SYSWOW64\drivers
2011-10-29 12:48:37 ----D---- C:\Windows\AppPatch
2011-10-29 12:48:35 ----D---- C:\Program Files\Common Files
2011-10-29 12:48:35 ----D---- C:\Program Files (x86)\Common Files
2011-10-29 11:56:23 ----D---- C:\Program Files (x86)\BabylonToolbar
2011-10-29 11:56:22 ----D---- C:\Program Files (x86)\Windows iLivid Toolbar
2011-10-29 11:56:21 ----D---- C:\Windows\Tasks
2011-10-29 11:41:02 ----D---- C:\Windows\system32\Tasks
2011-10-28 22:10:59 ----D---- C:\Users\J3ck3sss\AppData\Roaming\Skype
2011-10-28 21:59:38 ----D---- C:\Windows\system32\DriverStore
2011-10-28 20:49:24 ----D---- C:\ProgramData\boost_interprocess
2011-10-28 16:58:23 ----D---- C:\Users\J3ck3sss\AppData\Roaming\vlc
2011-10-27 19:43:07 ----D---- C:\Windows\winsxs
2011-10-27 19:42:57 ----D---- C:\Program Files (x86)\Internet Explorer
2011-10-27 19:42:56 ----D---- C:\Program Files\Internet Explorer
2011-10-23 14:52:51 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-10-21 22:06:09 ----D---- C:\Windows\Microsoft.NET
2011-10-21 22:06:08 ----RSD---- C:\Windows\assembly
2011-10-21 21:55:46 ----RSD---- C:\Windows\Fonts
2011-10-21 21:55:42 ----SD---- C:\ProgramData\Microsoft
2011-10-21 21:49:51 ----SD---- C:\Users\J3ck3sss\AppData\Roaming\Microsoft
2011-10-21 21:49:09 ----D---- C:\Program Files (x86)\MSBuild
2011-10-21 21:38:35 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-10-21 20:26:17 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2011-10-21 20:22:40 ----D---- C:\Windows\SYSWOW64\en-US
2011-10-21 20:22:40 ----D---- C:\Windows\system32\en-US
2011-10-16 11:50:15 ----D---- C:\Windows\system32\pt-PT
2011-10-16 11:50:15 ----D---- C:\Windows\system32\nl-NL
2011-10-16 11:50:15 ----D---- C:\Windows\system32\drivers\UMDF
2011-10-16 11:50:15 ----D---- C:\Windows\system32\da-DK
2011-10-16 11:50:14 ----D---- C:\Windows\system32\ru-RU
2011-10-16 11:50:14 ----D---- C:\Windows\system32\pl-PL
2011-10-16 11:50:14 ----D---- C:\Windows\system32\ko-KR
2011-10-16 11:50:13 ----D---- C:\Windows\system32\zh-TW
2011-10-16 11:50:13 ----D---- C:\Windows\system32\sv-SE
2011-10-16 11:50:13 ----D---- C:\Windows\system32\nb-NO
2011-10-16 11:50:13 ----D---- C:\Windows\system32\ja-JP
2011-10-16 11:50:13 ----D---- C:\Windows\system32\it-IT
2011-10-16 11:50:13 ----D---- C:\Windows\system32\hu-HU
2011-10-16 11:50:13 ----D---- C:\Windows\system32\fr-FR
2011-10-16 11:50:13 ----D---- C:\Windows\system32\fi-FI
2011-10-16 11:50:13 ----D---- C:\Windows\system32\el-GR
2011-10-16 11:50:12 ----D---- C:\Windows\system32\zh-CN
2011-10-16 11:50:12 ----D---- C:\Windows\system32\pt-BR
2011-10-16 11:50:12 ----D---- C:\Windows\system32\es-ES
2011-10-16 11:50:12 ----D---- C:\Windows\system32\de-DE
2011-10-16 11:50:12 ----D---- C:\Windows\system32\cs-CZ
2011-10-16 11:46:47 ----D---- C:\Program Files\Zune
2011-10-16 11:42:07 ----D---- C:\ProgramData\YouTube Downloader
2011-10-16 11:42:04 ----D---- C:\Program Files (x86)\YouTube Downloader
2011-10-15 18:48:11 ----D---- C:\Users\J3ck3sss\AppData\Roaming\DivX
2011-10-15 12:54:53 ----D---- C:\ProgramData\CanonIJPLM
2011-10-15 12:54:53 ----D---- C:\ProgramData\CanonIJ
2011-10-15 12:05:25 ----D---- C:\ProgramData\Skype
2011-10-14 22:54:48 ----D---- C:\Windows\debug
2011-10-14 22:14:53 ----D---- C:\ProgramData\IObit
2011-10-14 22:14:38 ----D---- C:\Users\J3ck3sss\AppData\Roaming\IObit
2011-10-14 22:13:11 ----D---- C:\ProgramData\DivX
2011-10-14 22:13:11 ----D---- C:\Program Files (x86)\DivX
2011-10-14 22:12:39 ----D---- C:\Program Files\DivX
2011-10-13 07:51:19 ----D---- C:\Windows\SYSWOW64\migration
2011-10-13 07:51:18 ----D---- C:\Windows\system32\migration
2011-10-13 07:44:28 ----A---- C:\Windows\system32\MRT.exe
2011-10-13 07:41:01 ----D---- C:\ProgramData\Microsoft Help
2011-10-13 07:32:49 ----D---- C:\Windows\ehome
2011-10-11 14:41:31 ----D---- C:\Program Files (x86)\Valve
2011-10-10 17:34:21 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-10-05 17:47:17 ----D---- C:\Program Files (x86)\Warcraft III

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-12-17 538136]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-12-21 834544]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-09-06 42328]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-09-06 301912]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-09-06 58200]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-03-13 254528]
R1 vmm;Virtual Machine Monitor; \??\C:\Windows\system32\Drivers\vmm.sys [2011-07-19 295272]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-09-06 24408]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-09-06 65368]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-12-10 6179328]
R3 BCM43XX;Broadcom 802.11 - ovládač sieťového adaptéru; C:\Windows\system32\DRIVERS\bcmwl664.sys [2010-12-14 2978296]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2009-12-30 31784]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 k57nd;Broadcom NetLink Gigabit Ethernet; C:\Windows\system32\DRIVERS\k57amd64.sys [2010-03-21 334376]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-12-10 301104]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-09-06 601944]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2010-12-21 36328]
S3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys []
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2009-12-30 38440]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2009-12-30 336424]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2009-12-30 246824]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2009-12-30 133672]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552448]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btusbflt;Bluetooth USB Filter; C:\Windows\system32\drivers\btusbflt.sys [2009-07-01 52264]
S3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2010-02-03 135560]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
S3 massfilter;ZTE Mass Storage Filter Driver; C:\Windows\system32\drivers\massfilter.sys [2011-01-29 11776]
S3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\Windows\system32\DRIVERS\mcdbus.sys [2009-02-24 255552]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-12-11 232992]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys []
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-01-03 157160]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-01-03 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-01-03 177128]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2011-01-03 145384]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-12-10 202752]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2009-12-30 23592]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-09-06 44768]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-01-22 310352]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-01-18 842784]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-12-23 13336]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2009-02-10 116104]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-12-09 268824]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-12-09 2320920]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R2 WMCoreService;Mobile Broadband Core Service; C:\Program Files (x86)\Mobile Broadband Drivers\WMCore\mini_WMCore.exe [2009-12-01 448512]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-12-14 1255736]
S3 WMZuneComm;Zune Windows Mobile Connectivity Service; c:\Program Files\Zune\WMZuneComm.exe [2011-08-05 306400]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“