minidump-rar je tady http://leteckaposta.cz/220538365
FW vypínat nemusíš - když budeš postupovat podle návodu, nic by se stát nemělo
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Restarty
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
cernohous13
- VIP in memoriam
- Příspěvky: 8721
- Registrován: 09 pro 2006 06:19
- Bydliště: Jablonec nad Nisou
- Kontaktovat uživatele:
Re: Restarty
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím
-------------------------------------------------------------------------------------------------
> Podpora fóra <
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím
-------------------------------------------------------------------------------------------------
> Podpora fóra <
Re: Restarty
ComboFix log zde :
ComboFix 10-11-16.05 - Lifaen 17.11.2010 15:44:05.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.959.474 [GMT 1:00]
Spuštěný z: c:\documents and settings\Lifaen\Plocha\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\desktop.ini
c:\documents and settings\All Users\Data aplikací\TabDiscover
c:\documents and settings\All Users\Data aplikací\TabDiscover\tabdiscover151.exe
c:\program files\filesubmit
c:\program files\filesubmit\76378\76378.zip
c:\program files\filesubmit\76378\internal-flame-ws.zip
c:\program files\Mozilla Firefox\extensions\{F9E87066-236C-4067-A3C2-BDA51D6B6B03}
c:\program files\Mozilla Firefox\extensions\{F9E87066-236C-4067-A3C2-BDA51D6B6B03}\defaults\preferences\prefs.js
c:\program files\Mozilla Firefox\extensions\{F9E87066-236C-4067-A3C2-BDA51D6B6B03}\chrome.manifest
c:\program files\Mozilla Firefox\extensions\{F9E87066-236C-4067-A3C2-BDA51D6B6B03}\chrome\tabdiscover.jar
c:\program files\Mozilla Firefox\extensions\{F9E87066-236C-4067-A3C2-BDA51D6B6B03}\install.rdf
c:\program files\RelevantKnowledge
c:\program files\TabDiscover
c:\program files\TabDiscover\tabdiscover.dll
c:\program files\TabDiscover\tabdiscover.exe
C:\readme.txt
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_TABDISCOVER_SERVICE
-------\Service_TabDiscover Service
((((((((((((((((((((((((( Soubory vytvořené od 2010-10-17 do 2010-11-17 )))))))))))))))))))))))))))))))
.
2010-11-17 11:31 . 2010-11-17 11:31 -------- dc----w- c:\program files\Lavalys
2010-11-17 10:08 . 2010-11-17 10:08 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Malwarebytes
2010-11-17 10:08 . 2010-04-29 14:39 38224 -c--a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-11-17 10:08 . 2010-11-17 10:08 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2010-11-17 10:08 . 2010-04-29 14:39 20952 -c--a-w- c:\windows\system32\drivers\mbam.sys
2010-11-17 10:08 . 2010-11-17 10:08 -------- dc----w- c:\program files\Malwarebytes' Anti-Malware
2010-11-17 08:53 . 2010-11-17 10:00 -------- dc----w- c:\windows\NV32643800.TMP
2010-11-17 08:52 . 2010-11-17 09:15 -------- dc----w- C:\NVIDIA
2010-11-17 08:16 . 2010-11-17 08:16 -------- dc----w- C:\rsit
2010-11-17 08:16 . 2010-11-17 08:16 -------- dc----w- c:\program files\trend micro
2010-11-17 08:03 . 2010-11-17 08:03 -------- dc----w- c:\documents and settings\All Users\Data aplikací\McAfee
2010-11-16 22:00 . 2010-11-16 22:00 -------- dc----w- c:\windows\system32\XPSViewer
2010-11-16 21:59 . 2010-11-16 21:59 -------- dc----w- c:\program files\MSBuild
2010-11-16 21:59 . 2010-11-16 21:59 -------- dc----w- c:\program files\Reference Assemblies
2010-11-16 21:36 . 2010-11-16 21:36 -------- dc----w- c:\program files\MSXML 4.0
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\system32\cs-cz
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\system32\cs
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\system32\bits
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\l2schemas
2010-11-16 21:16 . 2010-11-16 21:16 -------- dc----w- c:\windows\EHome
2010-11-16 20:53 . 2008-04-13 18:56 12800 -c----w- c:\windows\system32\drivers\usb8023x.sys
2010-11-16 20:52 . 2008-04-14 03:22 33792 -c----w- c:\windows\system32\mmcperf.exe
2010-11-16 20:51 . 2008-04-13 18:51 101120 -c----w- c:\windows\system32\drivers\bthpan.sys
2010-11-16 20:48 . 2010-11-16 20:48 -------- dc----w- c:\documents and settings\All Users\Data aplikací\UAB
2010-11-16 20:48 . 2010-11-16 20:48 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\PC_Drivers_Headquarters
2010-11-16 20:47 . 2010-11-16 20:47 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Easy Driver Pro
2010-11-16 20:45 . 2010-11-16 20:45 -------- dc----w- c:\program files\Easy Driver Pro
2010-11-16 16:03 . 2010-11-16 16:03 219200 -c--a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2010-11-16 16:03 . 2010-11-16 16:03 -------- dc----w- c:\program files\DAEMON Tools Pro
2010-11-16 16:03 . 2010-11-16 16:04 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\DAEMON Tools Pro
2010-11-16 16:03 . 2010-11-16 16:03 -------- dc----w- c:\documents and settings\All Users\Data aplikací\DAEMON Tools Pro
2010-11-13 10:02 . 2010-11-13 10:02 -------- dc----w- c:\documents and settings\All Users\Data aplikací\DAEMON Tools Lite
2010-11-12 18:46 . 2010-11-12 18:49 -------- dc----w- c:\program files\CSConfigurator
2010-11-12 14:40 . 2010-11-16 20:52 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\searchqutb
2010-11-12 14:40 . 2010-11-12 14:40 -------- dc----w- c:\program files\Windows Searchqu Toolbar
2010-11-12 14:39 . 2010-11-12 14:40 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Bandoo
2010-11-12 14:38 . 2010-11-12 14:40 -------- dc----w- c:\program files\Bandoo
2010-11-12 14:27 . 2010-11-16 20:52 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\bearsharemediabartb
2010-11-12 14:27 . 2010-11-12 14:29 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\BearShare
2010-11-12 14:26 . 2010-11-12 14:27 -------- dc----w- c:\program files\BearShare Applications
2010-11-12 14:26 . 2010-11-12 14:26 -------- dc----w- c:\documents and settings\All Users\Data aplikací\BearShare
2010-11-12 14:24 . 2010-11-12 14:27 -------- dc-h--w- c:\documents and settings\All Users\Data aplikací\{A471C4AE-B27B-4761-9BCF-82FAAAAA2D01}
2010-11-12 14:23 . 2010-11-12 14:23 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\PackageAware
2010-11-09 20:34 . 2010-11-16 21:53 -------- dc----w- C:\videooutput
2010-11-09 20:34 . 2009-05-19 17:32 758018 -c--a-w- c:\windows\system32\xvidcore.dll
2010-11-09 20:34 . 2008-12-04 20:46 180224 -c--a-w- c:\windows\system32\xvidvfw.dll
2010-11-09 20:34 . 2008-10-08 09:16 139264 -c--a-w- c:\windows\system32\xvid.ax
2010-11-09 20:30 . 2010-11-10 05:59 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Eltima Software
2010-11-09 20:30 . 2010-11-09 20:30 -------- dc----w- c:\documents and settings\All Users\Data aplikací\TEMP
2010-11-09 20:15 . 2010-11-09 20:15 0 -c--a-w- c:\windows\system32\ConduitEngine.tmp
2010-11-09 20:14 . 2010-11-09 20:15 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Jookz Toolbar
2010-11-09 20:13 . 2010-11-14 18:57 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\IDM
2010-11-09 20:13 . 2010-11-17 14:39 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\DMCache
2010-11-09 20:12 . 2010-11-09 20:16 -------- dc----w- c:\program files\Internet Download Manager
2010-11-06 10:59 . 2010-11-06 10:59 -------- dc----w- C:\Broker_LunarSphere
2010-11-06 10:59 . 2010-11-06 10:59 -------- dc----w- C:\LunarSphere
2010-11-05 07:50 . 2010-11-05 07:50 -------- dc----r- C:\AHCache
2010-11-01 18:38 . 2010-11-01 18:38 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\AdobeUM
2010-11-01 18:37 . 2010-11-01 18:38 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\Adobe
2010-11-01 18:37 . 2010-11-01 18:37 -------- dc----w- c:\program files\Common Files\Adobe
2010-11-01 14:36 . 2010-11-01 14:36 -------- dc----w- c:\program files\Common Files\Skype
2010-10-29 14:48 . 2010-11-02 18:02 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\TS3Client
2010-10-29 14:45 . 2010-10-29 14:48 -------- dc----w- c:\program files\TeamSpeak 3 Client
2010-10-28 11:16 . 2010-10-28 16:19 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\Ahead
2010-10-28 11:15 . 2010-11-02 18:21 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Ahead
2010-10-28 11:12 . 2010-10-28 11:16 -------- dc----w- c:\program files\Common Files\Ahead
2010-10-28 11:12 . 2010-10-28 11:12 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Nero
2010-10-28 08:32 . 2010-10-28 08:32 -------- dc----w- c:\documents and settings\All Users\Data aplikací\nView_Profiles
2010-10-27 12:32 . 2002-12-05 12:10 155648 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2010-10-27 12:32 . 2002-12-02 13:22 5632 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2010-10-27 12:32 . 2002-12-02 11:33 57344 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2010-10-27 12:32 . 2002-12-02 11:33 237568 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2010-10-27 12:31 . 2002-12-05 12:12 692224 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2010-10-27 12:31 . 2010-10-27 12:31 282756 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2010-10-27 12:31 . 2010-10-27 12:31 163972 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2010-10-26 19:15 . 2010-10-26 19:15 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Blizzard
2010-10-26 15:19 . 2010-11-12 18:33 -------- dc----w- c:\program files\Valve
2010-10-26 15:18 . 2003-09-03 00:27 69715 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\ctor.dll
2010-10-26 15:18 . 2003-09-03 00:26 266240 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iscript.dll
2010-10-26 15:18 . 2003-09-03 00:26 192512 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iuser.dll
2010-10-26 15:18 . 2003-09-03 00:28 724992 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iKernel.dll
2010-10-26 15:18 . 2003-09-03 00:25 5632 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\DotNetInstaller.exe
2010-10-26 15:18 . 2010-10-26 15:18 311428 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\Setup.dll
2010-10-26 15:18 . 2010-10-26 15:18 184452 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iGdi.dll
2010-10-20 13:04 . 2010-10-20 13:04 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\Apple Computer
2010-10-19 14:07 . 2010-09-08 08:09 108032 -c--a-w- c:\windows\system32\ff_vfw.dll
2010-10-19 14:00 . 2010-10-19 14:00 -------- dc----w- c:\program files\Real Alternative
2010-10-19 13:59 . 2010-10-19 13:59 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Apple Computer
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin6.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin5.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin4.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin3.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin2.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin.dll
2010-10-19 13:59 . 2010-03-17 20:53 94208 -c--a-w- c:\windows\system32\QuickTimeVR.qtx
2010-10-19 13:59 . 2010-03-17 20:53 69632 -c--a-w- c:\windows\system32\QuickTime.qts
2010-10-19 13:59 . 2010-03-17 20:53 180224 -c--a-w- c:\windows\system32\QTCF.dll
2010-10-19 13:50 . 2010-11-16 21:53 -------- dc----w- C:\MTV_OUTPUT
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-07 18:39 . 2010-10-07 17:15 2829 -c--a-w- c:\windows\War3Unin.pif
2010-10-07 18:39 . 2010-10-07 17:15 139264 -c--a-w- c:\windows\War3Unin.exe
2010-09-29 18:31 . 2010-09-29 18:56 210272 -c--a-w- c:\windows\system32\idmmbc.dll
2010-09-07 15:12 . 2010-08-11 18:37 38848 -c--a-w- c:\windows\avastSS.scr
2010-09-07 15:11 . 2010-08-11 18:37 167592 -c--a-w- c:\windows\system32\aswBoot.exe
2010-09-07 14:52 . 2010-08-11 18:37 46672 -c--a-w- c:\windows\system32\drivers\aswTdi.sys
2010-09-07 14:52 . 2010-08-11 18:37 165584 -c--a-w- c:\windows\system32\drivers\aswSP.sys
2010-09-07 14:47 . 2010-08-11 18:37 23376 -c--a-w- c:\windows\system32\drivers\aswRdr.sys
2010-09-07 14:47 . 2010-08-11 18:37 100176 -c--a-w- c:\windows\system32\drivers\aswmon2.sys
2010-09-07 14:47 . 2010-08-11 18:37 94544 -c--a-w- c:\windows\system32\drivers\aswmon.sys
2010-09-07 14:47 . 2010-08-11 18:37 17744 -c--a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-09-07 14:46 . 2010-08-11 18:37 28880 -c--a-w- c:\windows\system32\drivers\aavmker4.sys
2009-12-17 05:11 . 2009-11-01 07:50 10802648 -c--a-w- c:\program files\xul.dll
2009-12-17 05:11 . 2009-11-01 07:50 98304 -c--a-w- c:\program files\nssdbm3.dll
2009-12-17 05:11 . 2009-11-01 07:50 917464 -c--a-w- c:\program files\js3250.dll
2009-12-17 05:11 . 2009-11-01 07:50 87512 -c--a-w- c:\program files\nssutil3.dll
2009-12-17 05:11 . 2009-11-01 07:50 722392 -c--a-w- c:\program files\mozcrt19.dll
2009-12-17 05:11 . 2009-11-01 07:50 636376 -c--a-w- c:\program files\nss3.dll
2009-12-17 05:11 . 2009-11-01 07:50 457688 -c--a-w- c:\program files\sqlite3.dll
2009-12-17 05:11 . 2009-11-01 07:50 316888 -c--a-w- c:\program files\nssckbi.dll
2009-12-17 05:11 . 2009-11-01 07:50 244696 -c--a-w- c:\program files\updater.exe
2009-12-17 05:11 . 2009-11-01 07:50 20440 -c--a-w- c:\program files\plc4.dll
2009-12-17 05:11 . 2009-11-01 07:50 17880 -c--a-w- c:\program files\xpcom.dll
2009-12-17 05:11 . 2009-11-01 07:50 17368 -c--a-w- c:\program files\plds4.dll
2009-12-17 05:11 . 2009-11-01 07:50 169432 -c--a-w- c:\program files\nspr4.dll
2009-12-17 05:11 . 2009-11-01 07:50 155648 -c--a-w- c:\program files\softokn3.dll
2009-12-17 05:11 . 2009-11-01 07:50 136664 -c--a-w- c:\program files\ssl3.dll
2009-12-17 05:11 . 2009-11-01 07:50 103896 -c--a-w- c:\program files\smime3.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{038cb5c7-48ea-4af9-94e0-a1646542e62b}"= "c:\program files\ToggleEN\tbTog0.dll" [2010-10-18 3908192]
"{9CB65206-89C4-402c-BA80-02D8C59F9B1D}"= "c:\program files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL" [2010-10-07 57344]
[HKEY_CLASSES_ROOT\clsid\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
[HKEY_CLASSES_ROOT\clsid\{9cb65206-89c4-402c-ba80-02d8c59f9b1d}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
2010-10-18 10:26 3908192 -c--a-w- c:\program files\ToggleEN\tbTog0.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0974BA1E-64EC-11DE-B2A5-E43756D89593}]
2009-12-20 09:51 87480 -c--a-w- c:\progra~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-10-18 10:26 3908192 -c--a-w- c:\program files\ConduitEngine\ConduitEngin0.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}]
2010-10-19 12:53 585136 -c--a-w- c:\progra~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}]
2010-09-20 13:05 2194944 -c--a-w- c:\program files\Bandoo\Plugins\IE\ieplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{4C350B19-6CA1-4569-B14C-296D8D6535B2}"= "c:\program files\Jookz Toolbar\jookztoolbar.dll" [2010-05-03 1043624]
"{038cb5c7-48ea-4af9-94e0-a1646542e62b}"= "c:\program files\ToggleEN\tbTog0.dll" [2010-10-18 3908192]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngin0.dll" [2010-10-18 3908192]
"{0974BA1E-64EC-11DE-B2A5-E43756D89593}"= "c:\progra~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll" [2009-12-20 87480]
[HKEY_CLASSES_ROOT\clsid\{4c350b19-6ca1-4569-b14c-296d8d6535b2}]
[HKEY_CLASSES_ROOT\clsid\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
[HKEY_CLASSES_ROOT\clsid\{0974ba1e-64ec-11de-b2a5-e43756d89593}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{4C350B19-6CA1-4569-B14C-296D8D6535B2}"= "c:\program files\Jookz Toolbar\jookztoolbar.dll" [2010-05-03 1043624]
"{038CB5C7-48EA-4AF9-94E0-A1646542E62B}"= "c:\program files\ToggleEN\tbTog0.dll" [2010-10-18 3908192]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngin0.dll" [2010-10-18 3908192]
[HKEY_CLASSES_ROOT\clsid\{4c350b19-6ca1-4569-b14c-296d8d6535b2}]
[HKEY_CLASSES_ROOT\clsid\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"scheduler_monitor"="c:\program files\ReaConverter 5.5 Pro\init_scheduler.exe" [2007-06-15 27136]
"STYLEXP"="c:\program files\TGTSoft\StyleXP\StyleXP.exe" [2006-05-24 1372160]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 139264]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2010-09-29 3245408]
"DAEMON Tools Pro Agent"="c:\program files\DAEMON Tools Pro\DTAgent.exe" [2010-11-11 570688]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVCLOCK"="nvclock.dll" [2003-04-14 81920]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-05 8523776]
"nwiz"="nwiz.exe" [2007-12-05 1626112]
"RTHDCPL"="RTHDCPL.EXE" [2007-07-05 16380416]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-09-07 2838912]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-12-05 81920]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
3D!Turbo Experience.lnk - c:\program files\MSI\3D!Turbo Experience\3D!Turbo.exe [2010-8-11 94208]
Adobe Reader Speed Launch.lnk - d:\reader\reader_sl.exe [2004-12-14 29696]
gwum.lnk - c:\program files\Gigabyte\Gigabyte Windows Utility Manager\gwum.exe [2010-8-11 471040]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\program files\TGTSoft\StyleXP\Logon\CurrentLogon.EXE"
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MCPClient]
2005-01-31 13:13 49152 -c--a-w- c:\progra~1\COMMON~1\stardock\MCPStub.dll
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\MSN Gaming Zone\\Windows\\shvlzm.exe"=
"c:\\Program Files\\World of Warcraft\\Wow.exe"=
"c:\\Program Files\\D-Link\\AirPlus for DWL-900AP+\\AirPlus_Manager.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Gigabyte\\Gigabyte Windows Utility Manager\\bios\\Gwflash.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"d:\\Warcraft III\\Warcraft III.exe"=
"c:\\Program Files\\COMODO\\EasyVPN\\EasyVPN.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"d:\\Warcraft III\\War3.exe"=
"c:\\Program Files\\Valve\\hl.exe"=
"c:\\Program Files\\BearShare Applications\\BearShare\\BearShare.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [11.8.2010 19:37 165584]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [16.11.2010 17:03 219200]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [11.8.2010 19:37 17744]
R2 CrdphService;COMODO EasyVPN VNC Service;c:\program files\COMODO\EasyVPN\crdphService.exe [11.8.2009 17:47 491768]
R2 EasyVpnAdpt;COMODO EasyVPN Service;c:\program files\COMODO\EasyVPN\Vpnservice.exe [12.1.2010 8:37 34552]
R2 ETDrv;ETDrv;c:\windows\system32\drivers\ETDrv.sys [11.8.2010 14:44 170128]
R2 Jookz Toolbar Helper;Jookz Toolbar Helper;c:\program files\Jookz Toolbar\tbsvc.exe [26.7.2010 22:37 237224]
R3 MarkFun_NT;MarkFun_NT;c:\program files\Gigabyte\Gigabyte Windows Utility Manager\MARKFUN.W32 [11.8.2010 14:45 8236]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [7.10.2010 15:46 136176]
S3 ATP;Comodo EasyVPN Miniport Driver;c:\windows\system32\drivers\cmdatp.sys [26.8.2010 19:40 17424]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Home Edition\kerneld.wnt [18.8.2005 7168]
S3 huadio;huadio;\??\c:\huadio.tmp --> c:\huadio.tmp [?]
S3 rcp_service;ReaConverter scheduler service;c:\program files\ReaConverter 5.5 Pro\rcp_scheduler.exe [30.11.2007 10:27 558592]
.
Obsah adresáře 'Naplánované úlohy'
2010-11-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-07 14:46]
2010-11-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-07 14:46]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.bearshare.com/
mStart Page = hxxp://www.yahoo.com
uSearchAssistant = hxxp://search.bearshare.com/sidebar.html?src=ssb&sysid=2
IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
LSP: c:\windows\system32\idmmbc.dll
FF - ProfilePath - c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\
FF - prefs.js: browser.search.selectedEngine - BearShare Web Search
FF - prefs.js: browser.startup.homepage - hxxp://search.bearshare.com/
FF - prefs.js: keyword.URL - hxxp://search.bearshare.com/web?src=ffb&systemid=2&q=
FF - component: c:\documents and settings\Lifaen\Data aplikací\IDM\idmmzcc3\components\idmmzcc.dll
FF - component: c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\extensions\{038cb5c7-48ea-4af9-94e0-a1646542e62b}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\extensions\{038cb5c7-48ea-4af9-94e0-a1646542e62b}\components\RadioWMPCore.dll
FF - component: c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\extensions\firefox@bandoo.com\components\FFPlugin.dll
FF - component: c:\program files\BearShare Applications\MediaBar\Datamngr\FirefoxExtension\components\DataMngrHlp.dll
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - component: e:\program files\Search Settings\FF\components\SearchSettingsFF.dll
FF - plugin: c:\program files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npWebLaunch.dll
FF - plugin: d:\reader\browser\nppdf32.dll
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
AddRemove-QuicktimeAlt_is1 - c:\program files\QuickTime Alternative\unins000.exe
AddRemove-REAPER - c:\program files\REAPER\Uninstall.exe
AddRemove-TabDiscover - c:\program files\TabDiscover\uninstall.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-17 15:51
Windows 5.1.2600 Service Pack 3 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Home Edition\kerneld.wnt"
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\huadio]
"ImagePath"="\??\c:\huadio.tmp"
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MarkFun_NT]
"ImagePath"="\??\c:\program files\Gigabyte\Gigabyte Windows Utility Manager\markfun.w32"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_USERS\S-1-5-21-1123561945-838170752-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{E04EAD46-BD5D-34AF-C919-E3B555200846}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"ealnhgdhbc"=hex:66,61,62,6e,67,62,6c,61,65,65,67,63,00,31
"dacnchkm"=hex:64,62,70,67,6d,69,65,64,64,6f,6c,61,70,6b,6e,69,67,63,68,64,69,
6c,6b,70,64,6a,68,62,6f,6e,69,65,6f,6a,6f,68,65,67,65,6b,00,00
"iadmkldjpjmahhghfg"=hex:6a,61,69,61,6a,6f,67,68,6c,67,63,67,67,6d,67,69,6f,6d,
68,6d,00,00
"hajhagkijdgcfnie"=hex:6a,61,69,61,6e,6a,64,66,61,6c,62,63,68,65,6c,68,64,6c,
6c,66,00,00
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{4868e9d3-c938-4cea-aa69-f3862541577a}]
@Denied: (Full) (Everyone)
"Model"=dword:00000140
"Therad"=dword:00000009
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):0a,b7,40,ac,96,f0,c9,4a,cc,70,8f,06,85,31,80,57,ac,a8,e7,37,a1,
4c,f1,6c,ec,bd,da,d9,ac,79,e5,23,72,19,ba,57,ff,25,27,13,00,00,00,00,00,00,\
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(668)
c:\progra~1\COMMON~1\Stardock\mcpstub.dll
- - - - - - - > 'lsass.exe'(724)
c:\windows\system32\idmmbc.dll
- - - - - - - > 'explorer.exe'(2352)
c:\windows\system32\nview.dll
c:\progra~1\WINDOW~2\wmpband.dll
c:\program files\Internet Download Manager\idmmkb.dll
c:\windows\system32\nvwddi.dll
c:\progra~1\COMMON~1\stardock\MCPCore.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\TGTSoft\StyleXP\StyleXPService.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\progra~1\COMMON~1\Stardock\SDMCP.exe
c:\windows\system32\nvsvc32.exe
c:\progra~1\Bandoo\Bandoo.exe
c:\windows\system32\wscntfy.exe
c:\windows\RTHDCPL.EXE
c:\progra~1\BEARSH~1\MediaBar\Datamngr\DATAMN~1.EXE
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\rundll32.exe
c:\program files\MSI\3D!Turbo Experience\zoo.exe
c:\program files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
c:\windows\system32\dwwin.exe
c:\program files\Internet Download Manager\IEMonitor.exe
.
**************************************************************************
.
Celkový čas: 2010-11-17 15:54:58 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-11-17 14:54
Před spuštěním: 3 844 194 304
Po spuštění: 6 575 636 480
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect /usepmtimer
multi(0)disk(0)rdisk(0)partition(3)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /noexecute=optin /usepmtimer
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /fastdetect
- - End Of File - - B0AC3C68CED95994928A2AAC8DBFD279
ComboFix 10-11-16.05 - Lifaen 17.11.2010 15:44:05.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.959.474 [GMT 1:00]
Spuštěný z: c:\documents and settings\Lifaen\Plocha\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\desktop.ini
c:\documents and settings\All Users\Data aplikací\TabDiscover
c:\documents and settings\All Users\Data aplikací\TabDiscover\tabdiscover151.exe
c:\program files\filesubmit
c:\program files\filesubmit\76378\76378.zip
c:\program files\filesubmit\76378\internal-flame-ws.zip
c:\program files\Mozilla Firefox\extensions\{F9E87066-236C-4067-A3C2-BDA51D6B6B03}
c:\program files\Mozilla Firefox\extensions\{F9E87066-236C-4067-A3C2-BDA51D6B6B03}\defaults\preferences\prefs.js
c:\program files\Mozilla Firefox\extensions\{F9E87066-236C-4067-A3C2-BDA51D6B6B03}\chrome.manifest
c:\program files\Mozilla Firefox\extensions\{F9E87066-236C-4067-A3C2-BDA51D6B6B03}\chrome\tabdiscover.jar
c:\program files\Mozilla Firefox\extensions\{F9E87066-236C-4067-A3C2-BDA51D6B6B03}\install.rdf
c:\program files\RelevantKnowledge
c:\program files\TabDiscover
c:\program files\TabDiscover\tabdiscover.dll
c:\program files\TabDiscover\tabdiscover.exe
C:\readme.txt
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_TABDISCOVER_SERVICE
-------\Service_TabDiscover Service
((((((((((((((((((((((((( Soubory vytvořené od 2010-10-17 do 2010-11-17 )))))))))))))))))))))))))))))))
.
2010-11-17 11:31 . 2010-11-17 11:31 -------- dc----w- c:\program files\Lavalys
2010-11-17 10:08 . 2010-11-17 10:08 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Malwarebytes
2010-11-17 10:08 . 2010-04-29 14:39 38224 -c--a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-11-17 10:08 . 2010-11-17 10:08 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2010-11-17 10:08 . 2010-04-29 14:39 20952 -c--a-w- c:\windows\system32\drivers\mbam.sys
2010-11-17 10:08 . 2010-11-17 10:08 -------- dc----w- c:\program files\Malwarebytes' Anti-Malware
2010-11-17 08:53 . 2010-11-17 10:00 -------- dc----w- c:\windows\NV32643800.TMP
2010-11-17 08:52 . 2010-11-17 09:15 -------- dc----w- C:\NVIDIA
2010-11-17 08:16 . 2010-11-17 08:16 -------- dc----w- C:\rsit
2010-11-17 08:16 . 2010-11-17 08:16 -------- dc----w- c:\program files\trend micro
2010-11-17 08:03 . 2010-11-17 08:03 -------- dc----w- c:\documents and settings\All Users\Data aplikací\McAfee
2010-11-16 22:00 . 2010-11-16 22:00 -------- dc----w- c:\windows\system32\XPSViewer
2010-11-16 21:59 . 2010-11-16 21:59 -------- dc----w- c:\program files\MSBuild
2010-11-16 21:59 . 2010-11-16 21:59 -------- dc----w- c:\program files\Reference Assemblies
2010-11-16 21:36 . 2010-11-16 21:36 -------- dc----w- c:\program files\MSXML 4.0
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\system32\cs-cz
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\system32\cs
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\system32\bits
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\l2schemas
2010-11-16 21:16 . 2010-11-16 21:16 -------- dc----w- c:\windows\EHome
2010-11-16 20:53 . 2008-04-13 18:56 12800 -c----w- c:\windows\system32\drivers\usb8023x.sys
2010-11-16 20:52 . 2008-04-14 03:22 33792 -c----w- c:\windows\system32\mmcperf.exe
2010-11-16 20:51 . 2008-04-13 18:51 101120 -c----w- c:\windows\system32\drivers\bthpan.sys
2010-11-16 20:48 . 2010-11-16 20:48 -------- dc----w- c:\documents and settings\All Users\Data aplikací\UAB
2010-11-16 20:48 . 2010-11-16 20:48 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\PC_Drivers_Headquarters
2010-11-16 20:47 . 2010-11-16 20:47 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Easy Driver Pro
2010-11-16 20:45 . 2010-11-16 20:45 -------- dc----w- c:\program files\Easy Driver Pro
2010-11-16 16:03 . 2010-11-16 16:03 219200 -c--a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2010-11-16 16:03 . 2010-11-16 16:03 -------- dc----w- c:\program files\DAEMON Tools Pro
2010-11-16 16:03 . 2010-11-16 16:04 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\DAEMON Tools Pro
2010-11-16 16:03 . 2010-11-16 16:03 -------- dc----w- c:\documents and settings\All Users\Data aplikací\DAEMON Tools Pro
2010-11-13 10:02 . 2010-11-13 10:02 -------- dc----w- c:\documents and settings\All Users\Data aplikací\DAEMON Tools Lite
2010-11-12 18:46 . 2010-11-12 18:49 -------- dc----w- c:\program files\CSConfigurator
2010-11-12 14:40 . 2010-11-16 20:52 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\searchqutb
2010-11-12 14:40 . 2010-11-12 14:40 -------- dc----w- c:\program files\Windows Searchqu Toolbar
2010-11-12 14:39 . 2010-11-12 14:40 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Bandoo
2010-11-12 14:38 . 2010-11-12 14:40 -------- dc----w- c:\program files\Bandoo
2010-11-12 14:27 . 2010-11-16 20:52 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\bearsharemediabartb
2010-11-12 14:27 . 2010-11-12 14:29 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\BearShare
2010-11-12 14:26 . 2010-11-12 14:27 -------- dc----w- c:\program files\BearShare Applications
2010-11-12 14:26 . 2010-11-12 14:26 -------- dc----w- c:\documents and settings\All Users\Data aplikací\BearShare
2010-11-12 14:24 . 2010-11-12 14:27 -------- dc-h--w- c:\documents and settings\All Users\Data aplikací\{A471C4AE-B27B-4761-9BCF-82FAAAAA2D01}
2010-11-12 14:23 . 2010-11-12 14:23 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\PackageAware
2010-11-09 20:34 . 2010-11-16 21:53 -------- dc----w- C:\videooutput
2010-11-09 20:34 . 2009-05-19 17:32 758018 -c--a-w- c:\windows\system32\xvidcore.dll
2010-11-09 20:34 . 2008-12-04 20:46 180224 -c--a-w- c:\windows\system32\xvidvfw.dll
2010-11-09 20:34 . 2008-10-08 09:16 139264 -c--a-w- c:\windows\system32\xvid.ax
2010-11-09 20:30 . 2010-11-10 05:59 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Eltima Software
2010-11-09 20:30 . 2010-11-09 20:30 -------- dc----w- c:\documents and settings\All Users\Data aplikací\TEMP
2010-11-09 20:15 . 2010-11-09 20:15 0 -c--a-w- c:\windows\system32\ConduitEngine.tmp
2010-11-09 20:14 . 2010-11-09 20:15 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Jookz Toolbar
2010-11-09 20:13 . 2010-11-14 18:57 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\IDM
2010-11-09 20:13 . 2010-11-17 14:39 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\DMCache
2010-11-09 20:12 . 2010-11-09 20:16 -------- dc----w- c:\program files\Internet Download Manager
2010-11-06 10:59 . 2010-11-06 10:59 -------- dc----w- C:\Broker_LunarSphere
2010-11-06 10:59 . 2010-11-06 10:59 -------- dc----w- C:\LunarSphere
2010-11-05 07:50 . 2010-11-05 07:50 -------- dc----r- C:\AHCache
2010-11-01 18:38 . 2010-11-01 18:38 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\AdobeUM
2010-11-01 18:37 . 2010-11-01 18:38 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\Adobe
2010-11-01 18:37 . 2010-11-01 18:37 -------- dc----w- c:\program files\Common Files\Adobe
2010-11-01 14:36 . 2010-11-01 14:36 -------- dc----w- c:\program files\Common Files\Skype
2010-10-29 14:48 . 2010-11-02 18:02 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\TS3Client
2010-10-29 14:45 . 2010-10-29 14:48 -------- dc----w- c:\program files\TeamSpeak 3 Client
2010-10-28 11:16 . 2010-10-28 16:19 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\Ahead
2010-10-28 11:15 . 2010-11-02 18:21 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Ahead
2010-10-28 11:12 . 2010-10-28 11:16 -------- dc----w- c:\program files\Common Files\Ahead
2010-10-28 11:12 . 2010-10-28 11:12 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Nero
2010-10-28 08:32 . 2010-10-28 08:32 -------- dc----w- c:\documents and settings\All Users\Data aplikací\nView_Profiles
2010-10-27 12:32 . 2002-12-05 12:10 155648 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2010-10-27 12:32 . 2002-12-02 13:22 5632 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2010-10-27 12:32 . 2002-12-02 11:33 57344 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2010-10-27 12:32 . 2002-12-02 11:33 237568 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2010-10-27 12:31 . 2002-12-05 12:12 692224 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2010-10-27 12:31 . 2010-10-27 12:31 282756 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2010-10-27 12:31 . 2010-10-27 12:31 163972 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2010-10-26 19:15 . 2010-10-26 19:15 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Blizzard
2010-10-26 15:19 . 2010-11-12 18:33 -------- dc----w- c:\program files\Valve
2010-10-26 15:18 . 2003-09-03 00:27 69715 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\ctor.dll
2010-10-26 15:18 . 2003-09-03 00:26 266240 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iscript.dll
2010-10-26 15:18 . 2003-09-03 00:26 192512 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iuser.dll
2010-10-26 15:18 . 2003-09-03 00:28 724992 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iKernel.dll
2010-10-26 15:18 . 2003-09-03 00:25 5632 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\DotNetInstaller.exe
2010-10-26 15:18 . 2010-10-26 15:18 311428 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\Setup.dll
2010-10-26 15:18 . 2010-10-26 15:18 184452 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iGdi.dll
2010-10-20 13:04 . 2010-10-20 13:04 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\Apple Computer
2010-10-19 14:07 . 2010-09-08 08:09 108032 -c--a-w- c:\windows\system32\ff_vfw.dll
2010-10-19 14:00 . 2010-10-19 14:00 -------- dc----w- c:\program files\Real Alternative
2010-10-19 13:59 . 2010-10-19 13:59 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Apple Computer
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin6.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin5.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin4.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin3.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin2.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin.dll
2010-10-19 13:59 . 2010-03-17 20:53 94208 -c--a-w- c:\windows\system32\QuickTimeVR.qtx
2010-10-19 13:59 . 2010-03-17 20:53 69632 -c--a-w- c:\windows\system32\QuickTime.qts
2010-10-19 13:59 . 2010-03-17 20:53 180224 -c--a-w- c:\windows\system32\QTCF.dll
2010-10-19 13:50 . 2010-11-16 21:53 -------- dc----w- C:\MTV_OUTPUT
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-07 18:39 . 2010-10-07 17:15 2829 -c--a-w- c:\windows\War3Unin.pif
2010-10-07 18:39 . 2010-10-07 17:15 139264 -c--a-w- c:\windows\War3Unin.exe
2010-09-29 18:31 . 2010-09-29 18:56 210272 -c--a-w- c:\windows\system32\idmmbc.dll
2010-09-07 15:12 . 2010-08-11 18:37 38848 -c--a-w- c:\windows\avastSS.scr
2010-09-07 15:11 . 2010-08-11 18:37 167592 -c--a-w- c:\windows\system32\aswBoot.exe
2010-09-07 14:52 . 2010-08-11 18:37 46672 -c--a-w- c:\windows\system32\drivers\aswTdi.sys
2010-09-07 14:52 . 2010-08-11 18:37 165584 -c--a-w- c:\windows\system32\drivers\aswSP.sys
2010-09-07 14:47 . 2010-08-11 18:37 23376 -c--a-w- c:\windows\system32\drivers\aswRdr.sys
2010-09-07 14:47 . 2010-08-11 18:37 100176 -c--a-w- c:\windows\system32\drivers\aswmon2.sys
2010-09-07 14:47 . 2010-08-11 18:37 94544 -c--a-w- c:\windows\system32\drivers\aswmon.sys
2010-09-07 14:47 . 2010-08-11 18:37 17744 -c--a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-09-07 14:46 . 2010-08-11 18:37 28880 -c--a-w- c:\windows\system32\drivers\aavmker4.sys
2009-12-17 05:11 . 2009-11-01 07:50 10802648 -c--a-w- c:\program files\xul.dll
2009-12-17 05:11 . 2009-11-01 07:50 98304 -c--a-w- c:\program files\nssdbm3.dll
2009-12-17 05:11 . 2009-11-01 07:50 917464 -c--a-w- c:\program files\js3250.dll
2009-12-17 05:11 . 2009-11-01 07:50 87512 -c--a-w- c:\program files\nssutil3.dll
2009-12-17 05:11 . 2009-11-01 07:50 722392 -c--a-w- c:\program files\mozcrt19.dll
2009-12-17 05:11 . 2009-11-01 07:50 636376 -c--a-w- c:\program files\nss3.dll
2009-12-17 05:11 . 2009-11-01 07:50 457688 -c--a-w- c:\program files\sqlite3.dll
2009-12-17 05:11 . 2009-11-01 07:50 316888 -c--a-w- c:\program files\nssckbi.dll
2009-12-17 05:11 . 2009-11-01 07:50 244696 -c--a-w- c:\program files\updater.exe
2009-12-17 05:11 . 2009-11-01 07:50 20440 -c--a-w- c:\program files\plc4.dll
2009-12-17 05:11 . 2009-11-01 07:50 17880 -c--a-w- c:\program files\xpcom.dll
2009-12-17 05:11 . 2009-11-01 07:50 17368 -c--a-w- c:\program files\plds4.dll
2009-12-17 05:11 . 2009-11-01 07:50 169432 -c--a-w- c:\program files\nspr4.dll
2009-12-17 05:11 . 2009-11-01 07:50 155648 -c--a-w- c:\program files\softokn3.dll
2009-12-17 05:11 . 2009-11-01 07:50 136664 -c--a-w- c:\program files\ssl3.dll
2009-12-17 05:11 . 2009-11-01 07:50 103896 -c--a-w- c:\program files\smime3.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{038cb5c7-48ea-4af9-94e0-a1646542e62b}"= "c:\program files\ToggleEN\tbTog0.dll" [2010-10-18 3908192]
"{9CB65206-89C4-402c-BA80-02D8C59F9B1D}"= "c:\program files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL" [2010-10-07 57344]
[HKEY_CLASSES_ROOT\clsid\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
[HKEY_CLASSES_ROOT\clsid\{9cb65206-89c4-402c-ba80-02d8c59f9b1d}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
2010-10-18 10:26 3908192 -c--a-w- c:\program files\ToggleEN\tbTog0.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0974BA1E-64EC-11DE-B2A5-E43756D89593}]
2009-12-20 09:51 87480 -c--a-w- c:\progra~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-10-18 10:26 3908192 -c--a-w- c:\program files\ConduitEngine\ConduitEngin0.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}]
2010-10-19 12:53 585136 -c--a-w- c:\progra~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}]
2010-09-20 13:05 2194944 -c--a-w- c:\program files\Bandoo\Plugins\IE\ieplugin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{4C350B19-6CA1-4569-B14C-296D8D6535B2}"= "c:\program files\Jookz Toolbar\jookztoolbar.dll" [2010-05-03 1043624]
"{038cb5c7-48ea-4af9-94e0-a1646542e62b}"= "c:\program files\ToggleEN\tbTog0.dll" [2010-10-18 3908192]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngin0.dll" [2010-10-18 3908192]
"{0974BA1E-64EC-11DE-B2A5-E43756D89593}"= "c:\progra~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll" [2009-12-20 87480]
[HKEY_CLASSES_ROOT\clsid\{4c350b19-6ca1-4569-b14c-296d8d6535b2}]
[HKEY_CLASSES_ROOT\clsid\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
[HKEY_CLASSES_ROOT\clsid\{0974ba1e-64ec-11de-b2a5-e43756d89593}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{4C350B19-6CA1-4569-B14C-296D8D6535B2}"= "c:\program files\Jookz Toolbar\jookztoolbar.dll" [2010-05-03 1043624]
"{038CB5C7-48EA-4AF9-94E0-A1646542E62B}"= "c:\program files\ToggleEN\tbTog0.dll" [2010-10-18 3908192]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngin0.dll" [2010-10-18 3908192]
[HKEY_CLASSES_ROOT\clsid\{4c350b19-6ca1-4569-b14c-296d8d6535b2}]
[HKEY_CLASSES_ROOT\clsid\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"scheduler_monitor"="c:\program files\ReaConverter 5.5 Pro\init_scheduler.exe" [2007-06-15 27136]
"STYLEXP"="c:\program files\TGTSoft\StyleXP\StyleXP.exe" [2006-05-24 1372160]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 139264]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2010-09-29 3245408]
"DAEMON Tools Pro Agent"="c:\program files\DAEMON Tools Pro\DTAgent.exe" [2010-11-11 570688]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVCLOCK"="nvclock.dll" [2003-04-14 81920]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-05 8523776]
"nwiz"="nwiz.exe" [2007-12-05 1626112]
"RTHDCPL"="RTHDCPL.EXE" [2007-07-05 16380416]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-09-07 2838912]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-12-05 81920]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
3D!Turbo Experience.lnk - c:\program files\MSI\3D!Turbo Experience\3D!Turbo.exe [2010-8-11 94208]
Adobe Reader Speed Launch.lnk - d:\reader\reader_sl.exe [2004-12-14 29696]
gwum.lnk - c:\program files\Gigabyte\Gigabyte Windows Utility Manager\gwum.exe [2010-8-11 471040]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\program files\TGTSoft\StyleXP\Logon\CurrentLogon.EXE"
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MCPClient]
2005-01-31 13:13 49152 -c--a-w- c:\progra~1\COMMON~1\stardock\MCPStub.dll
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\MSN Gaming Zone\\Windows\\shvlzm.exe"=
"c:\\Program Files\\World of Warcraft\\Wow.exe"=
"c:\\Program Files\\D-Link\\AirPlus for DWL-900AP+\\AirPlus_Manager.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Gigabyte\\Gigabyte Windows Utility Manager\\bios\\Gwflash.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"d:\\Warcraft III\\Warcraft III.exe"=
"c:\\Program Files\\COMODO\\EasyVPN\\EasyVPN.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"d:\\Warcraft III\\War3.exe"=
"c:\\Program Files\\Valve\\hl.exe"=
"c:\\Program Files\\BearShare Applications\\BearShare\\BearShare.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [11.8.2010 19:37 165584]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [16.11.2010 17:03 219200]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [11.8.2010 19:37 17744]
R2 CrdphService;COMODO EasyVPN VNC Service;c:\program files\COMODO\EasyVPN\crdphService.exe [11.8.2009 17:47 491768]
R2 EasyVpnAdpt;COMODO EasyVPN Service;c:\program files\COMODO\EasyVPN\Vpnservice.exe [12.1.2010 8:37 34552]
R2 ETDrv;ETDrv;c:\windows\system32\drivers\ETDrv.sys [11.8.2010 14:44 170128]
R2 Jookz Toolbar Helper;Jookz Toolbar Helper;c:\program files\Jookz Toolbar\tbsvc.exe [26.7.2010 22:37 237224]
R3 MarkFun_NT;MarkFun_NT;c:\program files\Gigabyte\Gigabyte Windows Utility Manager\MARKFUN.W32 [11.8.2010 14:45 8236]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [7.10.2010 15:46 136176]
S3 ATP;Comodo EasyVPN Miniport Driver;c:\windows\system32\drivers\cmdatp.sys [26.8.2010 19:40 17424]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Home Edition\kerneld.wnt [18.8.2005 7168]
S3 huadio;huadio;\??\c:\huadio.tmp --> c:\huadio.tmp [?]
S3 rcp_service;ReaConverter scheduler service;c:\program files\ReaConverter 5.5 Pro\rcp_scheduler.exe [30.11.2007 10:27 558592]
.
Obsah adresáře 'Naplánované úlohy'
2010-11-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-07 14:46]
2010-11-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-07 14:46]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.bearshare.com/
mStart Page = hxxp://www.yahoo.com
uSearchAssistant = hxxp://search.bearshare.com/sidebar.html?src=ssb&sysid=2
IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
LSP: c:\windows\system32\idmmbc.dll
FF - ProfilePath - c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\
FF - prefs.js: browser.search.selectedEngine - BearShare Web Search
FF - prefs.js: browser.startup.homepage - hxxp://search.bearshare.com/
FF - prefs.js: keyword.URL - hxxp://search.bearshare.com/web?src=ffb&systemid=2&q=
FF - component: c:\documents and settings\Lifaen\Data aplikací\IDM\idmmzcc3\components\idmmzcc.dll
FF - component: c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\extensions\{038cb5c7-48ea-4af9-94e0-a1646542e62b}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\extensions\{038cb5c7-48ea-4af9-94e0-a1646542e62b}\components\RadioWMPCore.dll
FF - component: c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\extensions\firefox@bandoo.com\components\FFPlugin.dll
FF - component: c:\program files\BearShare Applications\MediaBar\Datamngr\FirefoxExtension\components\DataMngrHlp.dll
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - component: e:\program files\Search Settings\FF\components\SearchSettingsFF.dll
FF - plugin: c:\program files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npWebLaunch.dll
FF - plugin: d:\reader\browser\nppdf32.dll
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
AddRemove-QuicktimeAlt_is1 - c:\program files\QuickTime Alternative\unins000.exe
AddRemove-REAPER - c:\program files\REAPER\Uninstall.exe
AddRemove-TabDiscover - c:\program files\TabDiscover\uninstall.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-17 15:51
Windows 5.1.2600 Service Pack 3 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Home Edition\kerneld.wnt"
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\huadio]
"ImagePath"="\??\c:\huadio.tmp"
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MarkFun_NT]
"ImagePath"="\??\c:\program files\Gigabyte\Gigabyte Windows Utility Manager\markfun.w32"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_USERS\S-1-5-21-1123561945-838170752-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{E04EAD46-BD5D-34AF-C919-E3B555200846}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"ealnhgdhbc"=hex:66,61,62,6e,67,62,6c,61,65,65,67,63,00,31
"dacnchkm"=hex:64,62,70,67,6d,69,65,64,64,6f,6c,61,70,6b,6e,69,67,63,68,64,69,
6c,6b,70,64,6a,68,62,6f,6e,69,65,6f,6a,6f,68,65,67,65,6b,00,00
"iadmkldjpjmahhghfg"=hex:6a,61,69,61,6a,6f,67,68,6c,67,63,67,67,6d,67,69,6f,6d,
68,6d,00,00
"hajhagkijdgcfnie"=hex:6a,61,69,61,6e,6a,64,66,61,6c,62,63,68,65,6c,68,64,6c,
6c,66,00,00
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{4868e9d3-c938-4cea-aa69-f3862541577a}]
@Denied: (Full) (Everyone)
"Model"=dword:00000140
"Therad"=dword:00000009
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):0a,b7,40,ac,96,f0,c9,4a,cc,70,8f,06,85,31,80,57,ac,a8,e7,37,a1,
4c,f1,6c,ec,bd,da,d9,ac,79,e5,23,72,19,ba,57,ff,25,27,13,00,00,00,00,00,00,\
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(668)
c:\progra~1\COMMON~1\Stardock\mcpstub.dll
- - - - - - - > 'lsass.exe'(724)
c:\windows\system32\idmmbc.dll
- - - - - - - > 'explorer.exe'(2352)
c:\windows\system32\nview.dll
c:\progra~1\WINDOW~2\wmpband.dll
c:\program files\Internet Download Manager\idmmkb.dll
c:\windows\system32\nvwddi.dll
c:\progra~1\COMMON~1\stardock\MCPCore.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\TGTSoft\StyleXP\StyleXPService.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\progra~1\COMMON~1\Stardock\SDMCP.exe
c:\windows\system32\nvsvc32.exe
c:\progra~1\Bandoo\Bandoo.exe
c:\windows\system32\wscntfy.exe
c:\windows\RTHDCPL.EXE
c:\progra~1\BEARSH~1\MediaBar\Datamngr\DATAMN~1.EXE
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\rundll32.exe
c:\program files\MSI\3D!Turbo Experience\zoo.exe
c:\program files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
c:\windows\system32\dwwin.exe
c:\program files\Internet Download Manager\IEMonitor.exe
.
**************************************************************************
.
Celkový čas: 2010-11-17 15:54:58 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-11-17 14:54
Před spuštěním: 3 844 194 304
Po spuštění: 6 575 636 480
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect /usepmtimer
multi(0)disk(0)rdisk(0)partition(3)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /noexecute=optin /usepmtimer
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /fastdetect
- - End Of File - - B0AC3C68CED95994928A2AAC8DBFD279
-
cernohous13
- VIP in memoriam
- Příspěvky: 8721
- Registrován: 09 pro 2006 06:19
- Bydliště: Jablonec nad Nisou
- Kontaktovat uživatele:
Re: Restarty
to tam máš současně 3 operační systémy?
teď se pokusím odstranit ti některé zbytečnosti a zdržovadla (google toho ví nejvíc)
CFscript
Soubor ulož na plochu jako CFscript.txt a jeho ikonu přetáhni myší nad ikonu ComboFixu - tam pusť.
ComboFix se spustí - počkej na log a vlož ho sem.
Kód: Vybrat vše
KillAll::
Folder::
c:\program Files\BearShare Applications
c:\program files\ConduitEngine
c:\program files\AskTBar
Registry::
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0974BA1E-64EC-11DE-B2A5-E43756D89593}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{9CB65206-89C4-402c-BA80-02D8C59F9B1D}"=-
[-HKEY_CLASSES_ROOT\clsid\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
[-HKEY_CLASSES_ROOT\clsid\{9cb65206-89c4-402c-ba80-02d8c59f9b1d}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
"{0974BA1E-64EC-11DE-B2A5-E43756D89593}"=-
[-HKEY_CLASSES_ROOT\clsid\{4c350b19-6ca1-4569-b14c-296d8d6535b2}]
[-HKEY_CLASSES_ROOT\clsid\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
[-HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
[-HKEY_CLASSES_ROOT\clsid\{0974ba1e-64ec-11de-b2a5-e43756d89593}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=-
File::
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Reader Speed Launch.lnk
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
Driver::
gupdate
huadio
DDS::
uStart Page =
uSearchAssistant =
Firefox::
FF - ProfilePath - c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage -
FF - prefs.js: keyword.URL -
RegLock::
[HKEY_USERS\S-1-5-21-1123561945-838170752-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{E04EAD46-BD5D-34AF-C919-E3B555200846}*]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{4868e9d3-c938-4cea-aa69-f3862541577a}]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím
-------------------------------------------------------------------------------------------------
> Podpora fóra <
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím
-------------------------------------------------------------------------------------------------
> Podpora fóra <
Re: Restarty
ano mám a rad bych mel hen ten prvni ty zbyly dva pod ním potrwbuju pomoct odstranit a hlavne pariton :E ktery je druha cast z rozdeleneho :C jen chci tak rict po tom ComboFixu uz nemam zadneeee restarty skousel sem WOW a ani jeden restart suprrr ale ten log udelam du na to
Re: Restarty
ten log ma moc znaku nevleze se to sem 
myslite ze je to vse? ale jooo st nejlepsi na sveteeeeeeeeeeeeeeeeee 
myslite ze je to vse? ale jooo st nejlepsi na sveteeeeeeeeeeeeeeeeee -
cernohous13
- VIP in memoriam
- Příspěvky: 8721
- Registrován: 09 pro 2006 06:19
- Bydliště: Jablonec nad Nisou
- Kontaktovat uživatele:
Re: Restarty
log můžeš rozdělit do více odpovědí
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím
-------------------------------------------------------------------------------------------------
> Podpora fóra <
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím
-------------------------------------------------------------------------------------------------
> Podpora fóra <
Re: Restarty
nevadí kdyz ho rozdelim na pulky?
Re: Restarty
ComboFix 10-11-16.05 - Lifaen 17.11.2010 18:10:35.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.959.638 [GMT 1:00]
Spuštěný z: c:\documents and settings\Lifaen\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Lifaen\Plocha\CFScript.txt.txt
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FILE ::
"c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Reader Speed Launch.lnk"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\program files\AskTBar
c:\program files\AskTBar\bar\1.bin\A5POPSWT.DLL
c:\program files\AskTBar\bar\1.bin\ASKTBAR.DLL
c:\program files\AskTBar\bar\Cache\0115E05A
c:\program files\AskTBar\bar\Cache\0115FBE1
c:\program files\AskTBar\bar\Cache\01160BA0.bin
c:\program files\AskTBar\bar\Cache\0116167D.bin
c:\program files\AskTBar\bar\Cache\01161813.bin
c:\program files\AskTBar\bar\Cache\01161C0B.bin
c:\program files\AskTBar\bar\Cache\files.ini
c:\program files\AskTBar\bar\History\search2
c:\program files\AskTBar\bar\Settings\prevcfg2.htm
c:\program files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
c:\program files\BearShare Applications
c:\program files\BearShare Applications\BearShare\ammp3.dll
c:\program files\BearShare Applications\BearShare\avcodec-51.dll
c:\program files\BearShare Applications\BearShare\avformat-51.dll
c:\program files\BearShare Applications\BearShare\avutil-49.dll
c:\program files\BearShare Applications\BearShare\BearShare.exe
c:\program files\BearShare Applications\BearShare\BearShare.ico
c:\program files\BearShare Applications\BearShare\BerkeleyLoader.dll
c:\program files\BearShare Applications\BearShare\Copy_Folder.bat
c:\program files\BearShare Applications\BearShare\DiscoveryHelper.dll
c:\program files\BearShare Applications\BearShare\FFPage.exe
c:\program files\BearShare Applications\BearShare\FixAudioDriverSignature.reg
c:\program files\BearShare Applications\BearShare\GIFAnimator.dll
c:\program files\BearShare Applications\BearShare\HTML\error.html
c:\program files\BearShare Applications\BearShare\HTML\Images\bg-top.jpg
c:\program files\BearShare Applications\BearShare\HTML\Images\closeRecommend.gif
c:\program files\BearShare Applications\BearShare\HTML\loading.html
c:\program files\BearShare Applications\BearShare\HTML\noInternet.html
c:\program files\BearShare Applications\BearShare\HTML\offline.html
c:\program files\BearShare Applications\BearShare\HTML\Recommendation_Offline.html
c:\program files\BearShare Applications\BearShare\htmlayout.dll
c:\program files\BearShare Applications\BearShare\ImageUploader5.ocx
c:\program files\BearShare Applications\BearShare\IMTrProgress.dll
c:\program files\BearShare Applications\BearShare\IMWebControl.dll
c:\program files\BearShare Applications\BearShare\Launcher.exe
c:\program files\BearShare Applications\BearShare\libungif4.dll
c:\program files\BearShare Applications\BearShare\lic_helper.dll
c:\program files\BearShare Applications\BearShare\license.txt
c:\program files\BearShare Applications\BearShare\NCTAudioCDGrabber2.dll
c:\program files\BearShare Applications\BearShare\NCTAudioCDWriter2.dll
c:\program files\BearShare Applications\BearShare\NCTAudioCompress3.dll
c:\program files\BearShare Applications\BearShare\NCTAudioFile3.dll
c:\program files\BearShare Applications\BearShare\NCTAudioFileWMA3.dll
c:\program files\BearShare Applications\BearShare\NCTAudioFormatSettings3.dll
c:\program files\BearShare Applications\BearShare\NCTDataCDWriter2.dll
c:\program files\BearShare Applications\BearShare\Nickel.ocx
c:\program files\BearShare Applications\BearShare\ResourcesLoc.dll
c:\program files\BearShare Applications\BearShare\SHW32.DLL
c:\program files\BearShare Applications\BearShare\Skins\Default.skn
c:\program files\BearShare Applications\BearShare\Skins\Default.xml
c:\program files\BearShare Applications\BearShare\Skins\html\albumsview\albums.html
c:\program files\BearShare Applications\BearShare\Skins\html\albumsview\images\defpreview.png
c:\program files\BearShare Applications\BearShare\Skins\html\albumsview\images\playbtn.png
c:\program files\BearShare Applications\BearShare\Skins\html\albumsview\images\playing.png
c:\program files\BearShare Applications\BearShare\Skins\html\artistsview\artists.html
c:\program files\BearShare Applications\BearShare\Skins\html\artistsview\images\defpreview.png
c:\program files\BearShare Applications\BearShare\Skins\html\artistsview\images\play.png
c:\program files\BearShare Applications\BearShare\Skins\html\artistsview\images\play_disabled.png
c:\program files\BearShare Applications\BearShare\Skins\html\artistsview\images\play_down.png
c:\program files\BearShare Applications\BearShare\Skins\html\artistsview\images\play_over.png
c:\program files\BearShare Applications\BearShare\Skins\html\artistsview\menu.html
c:\program files\BearShare Applications\BearShare\Skins\html\cdripview\cdrip.html
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\active.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\azure.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\black.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\blue.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\bs.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\byzantium.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\close-hovered.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\close-normal.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\close-pressed.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\close.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\dark-blue.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\green.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\grey.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\hover.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\inactive.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\magenta.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\olive.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\orange.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\pink.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\pro.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\red.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\pro-view.html
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\view.html
c:\program files\BearShare Applications\BearShare\Skins\html\images\defalbum.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\defbutton.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\ls_btn.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\ls_btn_hover.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\ls_btn_pressed.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_bottom.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_bottom_over.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_bottom_pressed.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_fill.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_slider.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_slider_center.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_slider_center_over.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_slider_center_pressed.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_slider_over.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_slider_pressed.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_top.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_top_over.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_top_pressed.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\th_btn.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\th_btn_hover.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\th_btn_pressed.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\tip.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\tipb.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\white.png
c:\program files\BearShare Applications\BearShare\Skins\html\videosview\images\defpreview.png
c:\program files\BearShare Applications\BearShare\Skins\html\videosview\images\list_btn.png
c:\program files\BearShare Applications\BearShare\Skins\html\videosview\images\playbtn.png
c:\program files\BearShare Applications\BearShare\Skins\html\videosview\images\playing.png
c:\program files\BearShare Applications\BearShare\Skins\html\videosview\videos.html
c:\program files\BearShare Applications\BearShare\Skins\Images\DefArtwork.jpg
c:\program files\BearShare Applications\BearShare\Skins\Images\DefFemale.gif
c:\program files\BearShare Applications\BearShare\Skins\Images\DefMale.gif
c:\program files\BearShare Applications\BearShare\Skins\Images\FriendshipNotif.jpg
c:\program files\BearShare Applications\BearShare\Skins\Images\SendPlaylist.jpg
c:\program files\BearShare Applications\BearShare\Skins\Images\TAFLogo.PNG
c:\program files\BearShare Applications\BearShare\Skins\Images\ToGoLogo.PNG
c:\program files\BearShare Applications\BearShare\Skins\RemoteSkin.wmz
c:\program files\BearShare Applications\BearShare\Skins\Settings.xml
c:\program files\BearShare Applications\BearShare\Smiley.ico
c:\program files\BearShare Applications\BearShare\UninstallUsers.exe
c:\program files\BearShare Applications\BearShare\UpdateInst.exe
c:\program files\BearShare Applications\BearShare\WMAProfiles.prx
c:\program files\BearShare Applications\BearShare\WMHelper.dll
c:\program files\BearShare Applications\BearShare\WMHelper.log
c:\program files\BearShare Applications\MediaBar\Datamngr\datamngr.dll
c:\program files\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe
c:\program files\BearShare Applications\MediaBar\Datamngr\FirefoxExtension\components\DataMngrHlp.dll
c:\program files\BearShare Applications\MediaBar\Datamngr\FirefoxExtension\components\DataMngrHlp.xpt
c:\program files\BearShare Applications\MediaBar\Datamngr\FirefoxExtension\content\overlay.js
c:\program files\BearShare Applications\MediaBar\Datamngr\FirefoxExtension\content\overlay.xul
c:\program files\BearShare Applications\MediaBar\Datamngr\FirefoxExtension\chrome.manifest
c:\program files\BearShare Applications\MediaBar\Datamngr\FirefoxExtension\install.rdf
c:\program files\BearShare Applications\MediaBar\Datamngr\IEBHO.dll
c:\program files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarDx.dll
c:\program files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarTb.dll
c:\program files\BearShare Applications\MediaBar\ToolBar\components\windowmediator.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\bearshare.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\data\search\engines.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\data\search\search.xsl
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\about.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\dtxpanelwin.xul
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\dtxprefwin.xul
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\dtxwin.xul
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\emailnotifierproviders.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\external.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\neterror.xhtml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\wmpstreamer.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\modules\datastore.jsm
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\preferences.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\toolbar.htm
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\toolbar.xul
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-mdl.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tl.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tr.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-dragresize.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-down.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-over.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-down.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-down.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-over.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\navico-home.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\panel.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\powered-mystart.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\tb_icon.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-mdl.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tl.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tr.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-dragresize.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-down.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-over.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-down.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-down.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-over.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\navico-home.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\panel.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\powered-mystart.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\tb_icon.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\bearshare.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\bluelite.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\bluesky.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-search-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-search.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-settings-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-settings.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-widgets-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-widgets.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn_settings.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-down-back-ff.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-down-back.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-down-left.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-down-right.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-down-splitter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-drop-back.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-drop-left.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-drop-right.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-drop-splitter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-hover-back-ff.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-hover-back.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-hover-left.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-hover-right.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-hover-splitter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\ca.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\dictionary.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\divider.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\downloadcom.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\dtxlogo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\email.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\email_on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\games.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\graphred0.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\graphred0_5.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\grey.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\headsup.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\ico-shield.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\images.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\add.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\aol.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\arrow-dn.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\arrow-right.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\arrow-up.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btn-end.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btn-mdl.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btn-mdl_ff.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btn-start.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btnover-end.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btnover-mdl.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btnover-mdl_ff.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btnover-start.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\blank.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnback-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnback-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnleft-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnleft-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnright-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnright-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\button-splitter-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\button-splitter-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\collapse.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\comcast.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\dtx.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\edit-back-hot.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\edit-back.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\expand.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\found.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\gmail.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_blue.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_cyan.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_lime.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_magenta.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_yellow.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\hotmail.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\checkmark.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\chevron.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\imap.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\lastsearch-thumb-back.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\loadingMid.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\lock.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\mailcom.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menu_bg-basic.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menu_separator_bar.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menu_separator_white.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitem-splitter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemback-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemback-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemleft-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemleft-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemright-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemright-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\modify.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\move.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\movetarget.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\css\popupAbout.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\css\popupGames.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\css\popupWidgets.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\footer.htm
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\gamecategory.xsl
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\gameData.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\gameList.xsl
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\gametype.xsl
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\arrow-sml-drop.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\arrow-sml.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\arrowr-bluew5.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\bg-aboutbox.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\bg-btnover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\bg-pnl520x390.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-close-grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-close-greyover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-drag.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-next-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-next.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-previous-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-previous.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\gamethumb-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\gamethumb2-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-calendar.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-download.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-joystick24.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-play.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-tags.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-Add.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-download.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-Info.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-play.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-shop.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\menul-bgon.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\menul-bgover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\panel-botm-noscroll.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scroll-bg-206.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scroll-bg.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scroll-topwin.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollb-disable.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollb-down.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollb-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollb.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollt-disable.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollt-down.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollt-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollt.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\searchbox-pnlbtm.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\star_x_grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\star_x_orange.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\TRUSTe_about.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\view-detailed-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\view-detailed-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\view-thumb-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\view-thumb-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\widgets-square-16px.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\widgets-square-24px.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\popupGames.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\popupWidgets.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\pop.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\css\manager.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\css\slider.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\bg-pnl.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\btn-close-grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\btn-close-greyover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\collapsed_button.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\expanded_button.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-down.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\ico-playstation.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\ico-radio.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\music-note.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-bg.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-busy.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-on.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-warning.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-options-design-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-options-design.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-options-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-options.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-0.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-1.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-2.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-3.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-mute.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\scrollbar-handle.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\scrollbar-track.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\slider.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\slideron.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\track.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\managerpanel.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\volumeslider.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\reload.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\remove.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\rename.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\resize-box.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\rss.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\rsschannelback.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\RSSLogo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\rsstabdivider.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\scroll-left.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\scroll-right.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\search-go.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\search.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\text-ellipsis.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\toolbarsplitter.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\transparent_1px.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_02.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_03.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_04.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_06.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_07.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_08.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_09.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_10.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_11.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_12.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_13.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_14.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_15.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_16.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_18.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_19.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_20.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_21.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\btn-close-grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\btn-close-greyover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\close-hot.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\close-normal.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\loadingMid.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\proxy.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\template.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\template.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\templateFF.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\throbber.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\cond999.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\icons.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\na-s.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\na.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\weather.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\add.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-check.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-check.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\options-weather.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-blue.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-orange.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\yahoo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lichen.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\logo-about.jpg
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\logo-about.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\logo-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\logo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\logo_old.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\maps.bmp
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\menuseparatorback.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\modify-save.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\modify.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\modifyhot.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\music.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\news.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\options\options-main.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\options\options-search.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\options\options-weather.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\options\options-widgets.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\orange.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\pixsy.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\relatedlinks.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-collapse.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-delete.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-expand.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-feed.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-folder-remove.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-folder-rename.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-folder.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-found.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-reload.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-subscribe.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rssback.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rsstopback.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\search-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\search.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\searchbar\searchbar-background-left.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\searchbar\searchbar-background-middle.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\searchbar\searchbar-background-right.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\settings.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\shopping.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\siteinfo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-bluelite.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-bluesky.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-lichen.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-orange.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-yellow.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\technorati.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\throbber.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\toolbarsplitter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\video.bmp
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\weather.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\web.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_allocine.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_bliptv.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_calcal.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_calculator.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_gservices.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_sudoku.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_todo.jpg
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_todo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_trio.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_uconverter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widgets-square-16px.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widgets.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\wikipedia.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\yahoosearch.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\yellow.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\youtube.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\zoom.png
c:\program files\BearShare Applications\MediaBar\ToolBar\manifest.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\uninstall.exe
c:\program files\BearShare Applications\MediaBar\uninstall.exe
c:\program files\ConduitEngine
c:\program files\ConduitEngine\appContextMenu.xml
c:\program files\ConduitEngine\ConduitEngin0.dll
c:\program files\ConduitEngine\ConduitEngine.dll
c:\program files\ConduitEngine\ConduitEngineHelper.exe
c:\program files\ConduitEngine\ConduitEngineUninstall.exe
c:\program files\ConduitEngine\engineContextMenu.xml
c:\program files\ConduitEngine\EngineSettings.json
c:\program files\ConduitEngine\INSTALL.LOG
c:\program files\ConduitEngine\toolbar.cfg
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.959.638 [GMT 1:00]
Spuštěný z: c:\documents and settings\Lifaen\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Lifaen\Plocha\CFScript.txt.txt
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FILE ::
"c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Reader Speed Launch.lnk"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\program files\AskTBar
c:\program files\AskTBar\bar\1.bin\A5POPSWT.DLL
c:\program files\AskTBar\bar\1.bin\ASKTBAR.DLL
c:\program files\AskTBar\bar\Cache\0115E05A
c:\program files\AskTBar\bar\Cache\0115FBE1
c:\program files\AskTBar\bar\Cache\01160BA0.bin
c:\program files\AskTBar\bar\Cache\0116167D.bin
c:\program files\AskTBar\bar\Cache\01161813.bin
c:\program files\AskTBar\bar\Cache\01161C0B.bin
c:\program files\AskTBar\bar\Cache\files.ini
c:\program files\AskTBar\bar\History\search2
c:\program files\AskTBar\bar\Settings\prevcfg2.htm
c:\program files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
c:\program files\BearShare Applications
c:\program files\BearShare Applications\BearShare\ammp3.dll
c:\program files\BearShare Applications\BearShare\avcodec-51.dll
c:\program files\BearShare Applications\BearShare\avformat-51.dll
c:\program files\BearShare Applications\BearShare\avutil-49.dll
c:\program files\BearShare Applications\BearShare\BearShare.exe
c:\program files\BearShare Applications\BearShare\BearShare.ico
c:\program files\BearShare Applications\BearShare\BerkeleyLoader.dll
c:\program files\BearShare Applications\BearShare\Copy_Folder.bat
c:\program files\BearShare Applications\BearShare\DiscoveryHelper.dll
c:\program files\BearShare Applications\BearShare\FFPage.exe
c:\program files\BearShare Applications\BearShare\FixAudioDriverSignature.reg
c:\program files\BearShare Applications\BearShare\GIFAnimator.dll
c:\program files\BearShare Applications\BearShare\HTML\error.html
c:\program files\BearShare Applications\BearShare\HTML\Images\bg-top.jpg
c:\program files\BearShare Applications\BearShare\HTML\Images\closeRecommend.gif
c:\program files\BearShare Applications\BearShare\HTML\loading.html
c:\program files\BearShare Applications\BearShare\HTML\noInternet.html
c:\program files\BearShare Applications\BearShare\HTML\offline.html
c:\program files\BearShare Applications\BearShare\HTML\Recommendation_Offline.html
c:\program files\BearShare Applications\BearShare\htmlayout.dll
c:\program files\BearShare Applications\BearShare\ImageUploader5.ocx
c:\program files\BearShare Applications\BearShare\IMTrProgress.dll
c:\program files\BearShare Applications\BearShare\IMWebControl.dll
c:\program files\BearShare Applications\BearShare\Launcher.exe
c:\program files\BearShare Applications\BearShare\libungif4.dll
c:\program files\BearShare Applications\BearShare\lic_helper.dll
c:\program files\BearShare Applications\BearShare\license.txt
c:\program files\BearShare Applications\BearShare\NCTAudioCDGrabber2.dll
c:\program files\BearShare Applications\BearShare\NCTAudioCDWriter2.dll
c:\program files\BearShare Applications\BearShare\NCTAudioCompress3.dll
c:\program files\BearShare Applications\BearShare\NCTAudioFile3.dll
c:\program files\BearShare Applications\BearShare\NCTAudioFileWMA3.dll
c:\program files\BearShare Applications\BearShare\NCTAudioFormatSettings3.dll
c:\program files\BearShare Applications\BearShare\NCTDataCDWriter2.dll
c:\program files\BearShare Applications\BearShare\Nickel.ocx
c:\program files\BearShare Applications\BearShare\ResourcesLoc.dll
c:\program files\BearShare Applications\BearShare\SHW32.DLL
c:\program files\BearShare Applications\BearShare\Skins\Default.skn
c:\program files\BearShare Applications\BearShare\Skins\Default.xml
c:\program files\BearShare Applications\BearShare\Skins\html\albumsview\albums.html
c:\program files\BearShare Applications\BearShare\Skins\html\albumsview\images\defpreview.png
c:\program files\BearShare Applications\BearShare\Skins\html\albumsview\images\playbtn.png
c:\program files\BearShare Applications\BearShare\Skins\html\albumsview\images\playing.png
c:\program files\BearShare Applications\BearShare\Skins\html\artistsview\artists.html
c:\program files\BearShare Applications\BearShare\Skins\html\artistsview\images\defpreview.png
c:\program files\BearShare Applications\BearShare\Skins\html\artistsview\images\play.png
c:\program files\BearShare Applications\BearShare\Skins\html\artistsview\images\play_disabled.png
c:\program files\BearShare Applications\BearShare\Skins\html\artistsview\images\play_down.png
c:\program files\BearShare Applications\BearShare\Skins\html\artistsview\images\play_over.png
c:\program files\BearShare Applications\BearShare\Skins\html\artistsview\menu.html
c:\program files\BearShare Applications\BearShare\Skins\html\cdripview\cdrip.html
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\active.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\azure.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\black.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\blue.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\bs.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\byzantium.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\close-hovered.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\close-normal.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\close-pressed.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\close.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\dark-blue.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\green.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\grey.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\hover.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\inactive.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\magenta.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\olive.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\orange.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\pink.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\pro.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\images\red.png
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\pro-view.html
c:\program files\BearShare Applications\BearShare\Skins\html\colorschemebubble\view.html
c:\program files\BearShare Applications\BearShare\Skins\html\images\defalbum.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\defbutton.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\ls_btn.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\ls_btn_hover.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\ls_btn_pressed.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_bottom.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_bottom_over.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_bottom_pressed.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_fill.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_slider.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_slider_center.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_slider_center_over.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_slider_center_pressed.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_slider_over.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_slider_pressed.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_top.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_top_over.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\sbv_top_pressed.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\th_btn.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\th_btn_hover.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\th_btn_pressed.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\tip.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\tipb.png
c:\program files\BearShare Applications\BearShare\Skins\html\images\white.png
c:\program files\BearShare Applications\BearShare\Skins\html\videosview\images\defpreview.png
c:\program files\BearShare Applications\BearShare\Skins\html\videosview\images\list_btn.png
c:\program files\BearShare Applications\BearShare\Skins\html\videosview\images\playbtn.png
c:\program files\BearShare Applications\BearShare\Skins\html\videosview\images\playing.png
c:\program files\BearShare Applications\BearShare\Skins\html\videosview\videos.html
c:\program files\BearShare Applications\BearShare\Skins\Images\DefArtwork.jpg
c:\program files\BearShare Applications\BearShare\Skins\Images\DefFemale.gif
c:\program files\BearShare Applications\BearShare\Skins\Images\DefMale.gif
c:\program files\BearShare Applications\BearShare\Skins\Images\FriendshipNotif.jpg
c:\program files\BearShare Applications\BearShare\Skins\Images\SendPlaylist.jpg
c:\program files\BearShare Applications\BearShare\Skins\Images\TAFLogo.PNG
c:\program files\BearShare Applications\BearShare\Skins\Images\ToGoLogo.PNG
c:\program files\BearShare Applications\BearShare\Skins\RemoteSkin.wmz
c:\program files\BearShare Applications\BearShare\Skins\Settings.xml
c:\program files\BearShare Applications\BearShare\Smiley.ico
c:\program files\BearShare Applications\BearShare\UninstallUsers.exe
c:\program files\BearShare Applications\BearShare\UpdateInst.exe
c:\program files\BearShare Applications\BearShare\WMAProfiles.prx
c:\program files\BearShare Applications\BearShare\WMHelper.dll
c:\program files\BearShare Applications\BearShare\WMHelper.log
c:\program files\BearShare Applications\MediaBar\Datamngr\datamngr.dll
c:\program files\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe
c:\program files\BearShare Applications\MediaBar\Datamngr\FirefoxExtension\components\DataMngrHlp.dll
c:\program files\BearShare Applications\MediaBar\Datamngr\FirefoxExtension\components\DataMngrHlp.xpt
c:\program files\BearShare Applications\MediaBar\Datamngr\FirefoxExtension\content\overlay.js
c:\program files\BearShare Applications\MediaBar\Datamngr\FirefoxExtension\content\overlay.xul
c:\program files\BearShare Applications\MediaBar\Datamngr\FirefoxExtension\chrome.manifest
c:\program files\BearShare Applications\MediaBar\Datamngr\FirefoxExtension\install.rdf
c:\program files\BearShare Applications\MediaBar\Datamngr\IEBHO.dll
c:\program files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarDx.dll
c:\program files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarTb.dll
c:\program files\BearShare Applications\MediaBar\ToolBar\components\windowmediator.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\bearshare.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\data\search\engines.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\data\search\search.xsl
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\about.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\dtxpanelwin.xul
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\dtxprefwin.xul
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\dtxwin.xul
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\emailnotifierproviders.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\external.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\neterror.xhtml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\wmpstreamer.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\modules\datastore.jsm
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\preferences.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\toolbar.htm
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\toolbar.xul
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-mdl.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tl.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tr.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-dragresize.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-down.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-over.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-down.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-down.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-over.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\navico-home.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\panel.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\powered-mystart.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\tb_icon.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-mdl.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tl.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tr.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-dragresize.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-down.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-over.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-down.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-down.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-over.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\navico-home.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\panel.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\powered-mystart.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\tb_icon.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\bearshare.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\bluelite.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\bluesky.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-search-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-search.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-settings-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-settings.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-widgets-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-widgets.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn_settings.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-down-back-ff.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-down-back.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-down-left.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-down-right.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-down-splitter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-drop-back.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-drop-left.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-drop-right.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-drop-splitter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-hover-back-ff.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-hover-back.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-hover-left.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-hover-right.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-hover-splitter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\ca.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\dictionary.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\divider.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\downloadcom.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\dtxlogo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\email.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\email_on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\games.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\graphred0.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\graphred0_5.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\grey.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\headsup.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\ico-shield.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\images.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\add.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\aol.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\arrow-dn.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\arrow-right.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\arrow-up.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btn-end.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btn-mdl.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btn-mdl_ff.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btn-start.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btnover-end.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btnover-mdl.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btnover-mdl_ff.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btnover-start.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\blank.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnback-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnback-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnleft-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnleft-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnright-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnright-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\button-splitter-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\button-splitter-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\collapse.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\comcast.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\dtx.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\edit-back-hot.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\edit-back.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\expand.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\found.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\gmail.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_blue.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_cyan.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_lime.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_magenta.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_yellow.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\hotmail.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\checkmark.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\chevron.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\imap.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\lastsearch-thumb-back.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\loadingMid.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\lock.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\mailcom.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menu_bg-basic.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menu_separator_bar.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menu_separator_white.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitem-splitter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemback-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemback-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemleft-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemleft-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemright-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemright-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\modify.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\move.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\movetarget.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\css\popupAbout.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\css\popupGames.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\css\popupWidgets.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\footer.htm
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\gamecategory.xsl
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\gameData.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\gameList.xsl
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\gametype.xsl
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\arrow-sml-drop.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\arrow-sml.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\arrowr-bluew5.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\bg-aboutbox.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\bg-btnover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\bg-pnl520x390.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-close-grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-close-greyover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-drag.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-next-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-next.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-previous-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-previous.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\gamethumb-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\gamethumb2-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-calendar.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-download.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-joystick24.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-play.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-tags.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-Add.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-download.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-Info.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-play.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-shop.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\menul-bgon.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\menul-bgover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\panel-botm-noscroll.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scroll-bg-206.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scroll-bg.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scroll-topwin.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollb-disable.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollb-down.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollb-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollb.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollt-disable.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollt-down.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollt-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollt.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\searchbox-pnlbtm.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\star_x_grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\star_x_orange.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\TRUSTe_about.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\view-detailed-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\view-detailed-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\view-thumb-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\view-thumb-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\widgets-square-16px.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\widgets-square-24px.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\popupGames.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\popupWidgets.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\pop.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\css\manager.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\css\slider.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\bg-pnl.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\btn-close-grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\btn-close-greyover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\collapsed_button.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\expanded_button.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-down.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\ico-playstation.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\ico-radio.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\music-note.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-bg.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-busy.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-on.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-warning.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-options-design-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-options-design.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-options-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-options.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-0.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-1.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-2.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-3.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-mute.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\scrollbar-handle.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\scrollbar-track.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\slider.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\slideron.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\track.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\managerpanel.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\volumeslider.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\reload.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\remove.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\rename.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\resize-box.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\rss.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\rsschannelback.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\RSSLogo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\rsstabdivider.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\scroll-left.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\scroll-right.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\search-go.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\search.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\text-ellipsis.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\toolbarsplitter.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\transparent_1px.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_02.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_03.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_04.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_06.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_07.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_08.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_09.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_10.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_11.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_12.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_13.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_14.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_15.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_16.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_18.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_19.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_20.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_21.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\btn-close-grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\btn-close-greyover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\close-hot.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\close-normal.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\loadingMid.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\proxy.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\template.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\template.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\templateFF.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\throbber.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\cond999.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\icons.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\na-s.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\na.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\weather.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\add.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-check.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-check.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\options-weather.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-blue.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-orange.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\yahoo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lichen.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\logo-about.jpg
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\logo-about.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\logo-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\logo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\logo_old.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\maps.bmp
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\menuseparatorback.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\modify-save.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\modify.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\modifyhot.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\music.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\news.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\options\options-main.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\options\options-search.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\options\options-weather.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\options\options-widgets.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\orange.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\pixsy.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\relatedlinks.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-collapse.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-delete.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-expand.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-feed.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-folder-remove.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-folder-rename.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-folder.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-found.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-reload.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-subscribe.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rssback.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rsstopback.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\search-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\search.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\searchbar\searchbar-background-left.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\searchbar\searchbar-background-middle.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\searchbar\searchbar-background-right.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\settings.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\shopping.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\siteinfo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-bluelite.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-bluesky.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-lichen.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-orange.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-yellow.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\technorati.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\throbber.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\toolbarsplitter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\video.bmp
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\weather.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\web.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_allocine.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_bliptv.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_calcal.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_calculator.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_gservices.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_sudoku.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_todo.jpg
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_todo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_trio.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_uconverter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widgets-square-16px.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widgets.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\wikipedia.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\yahoosearch.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\yellow.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\youtube.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\zoom.png
c:\program files\BearShare Applications\MediaBar\ToolBar\manifest.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\uninstall.exe
c:\program files\BearShare Applications\MediaBar\uninstall.exe
c:\program files\ConduitEngine
c:\program files\ConduitEngine\appContextMenu.xml
c:\program files\ConduitEngine\ConduitEngin0.dll
c:\program files\ConduitEngine\ConduitEngine.dll
c:\program files\ConduitEngine\ConduitEngineHelper.exe
c:\program files\ConduitEngine\ConduitEngineUninstall.exe
c:\program files\ConduitEngine\engineContextMenu.xml
c:\program files\ConduitEngine\EngineSettings.json
c:\program files\ConduitEngine\INSTALL.LOG
c:\program files\ConduitEngine\toolbar.cfg
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
Re: Restarty
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_GUPDATE
-------\Legacy_HUADIO
-------\Service_gupdate
-------\Service_huadio
((((((((((((((((((((((((( Soubory vytvořené od 2010-10-17 do 2010-11-17 )))))))))))))))))))))))))))))))
.
2010-11-17 11:31 . 2010-11-17 11:31 -------- dc----w- c:\program files\Lavalys
2010-11-17 10:08 . 2010-11-17 10:08 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Malwarebytes
2010-11-17 10:08 . 2010-04-29 14:39 38224 -c--a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-11-17 10:08 . 2010-11-17 10:08 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2010-11-17 10:08 . 2010-04-29 14:39 20952 -c--a-w- c:\windows\system32\drivers\mbam.sys
2010-11-17 10:08 . 2010-11-17 10:08 -------- dc----w- c:\program files\Malwarebytes' Anti-Malware
2010-11-17 08:53 . 2010-11-17 10:00 -------- dc----w- c:\windows\NV32643800.TMP
2010-11-17 08:52 . 2010-11-17 09:15 -------- dc----w- C:\NVIDIA
2010-11-17 08:16 . 2010-11-17 08:16 -------- dc----w- C:\rsit
2010-11-17 08:16 . 2010-11-17 08:16 -------- dc----w- c:\program files\trend micro
2010-11-17 08:03 . 2010-11-17 08:03 -------- dc----w- c:\documents and settings\All Users\Data aplikací\McAfee
2010-11-16 22:00 . 2010-11-16 22:00 -------- dc----w- c:\windows\system32\XPSViewer
2010-11-16 21:59 . 2010-11-16 21:59 -------- dc----w- c:\program files\MSBuild
2010-11-16 21:59 . 2010-11-16 21:59 -------- dc----w- c:\program files\Reference Assemblies
2010-11-16 21:36 . 2010-11-16 21:36 -------- dc----w- c:\program files\MSXML 4.0
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\system32\cs-cz
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\system32\cs
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\system32\bits
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\l2schemas
2010-11-16 21:16 . 2010-11-16 21:16 -------- dc----w- c:\windows\EHome
2010-11-16 20:53 . 2008-04-13 18:56 12800 -c----w- c:\windows\system32\drivers\usb8023x.sys
2010-11-16 20:52 . 2008-04-14 03:22 33792 -c----w- c:\windows\system32\mmcperf.exe
2010-11-16 20:51 . 2008-04-13 18:51 101120 -c----w- c:\windows\system32\drivers\bthpan.sys
2010-11-16 20:48 . 2010-11-16 20:48 -------- dc----w- c:\documents and settings\All Users\Data aplikací\UAB
2010-11-16 20:48 . 2010-11-16 20:48 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\PC_Drivers_Headquarters
2010-11-16 20:47 . 2010-11-16 20:47 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Easy Driver Pro
2010-11-16 20:45 . 2010-11-16 20:45 -------- dc----w- c:\program files\Easy Driver Pro
2010-11-16 16:03 . 2010-11-16 16:03 219200 -c--a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2010-11-16 16:03 . 2010-11-16 16:03 -------- dc----w- c:\program files\DAEMON Tools Pro
2010-11-16 16:03 . 2010-11-16 16:04 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\DAEMON Tools Pro
2010-11-16 16:03 . 2010-11-16 16:03 -------- dc----w- c:\documents and settings\All Users\Data aplikací\DAEMON Tools Pro
2010-11-13 10:02 . 2010-11-13 10:02 -------- dc----w- c:\documents and settings\All Users\Data aplikací\DAEMON Tools Lite
2010-11-12 18:46 . 2010-11-12 18:49 -------- dc----w- c:\program files\CSConfigurator
2010-11-12 14:40 . 2010-11-16 20:52 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\searchqutb
2010-11-12 14:40 . 2010-11-12 14:40 -------- dc----w- c:\program files\Windows Searchqu Toolbar
2010-11-12 14:39 . 2010-11-17 16:55 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Bandoo
2010-11-12 14:38 . 2010-11-12 14:40 -------- dc----w- c:\program files\Bandoo
2010-11-12 14:27 . 2010-11-16 20:52 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\bearsharemediabartb
2010-11-12 14:27 . 2010-11-12 14:29 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\BearShare
2010-11-12 14:26 . 2010-11-12 14:26 -------- dc----w- c:\documents and settings\All Users\Data aplikací\BearShare
2010-11-12 14:24 . 2010-11-12 14:27 -------- dc-h--w- c:\documents and settings\All Users\Data aplikací\{A471C4AE-B27B-4761-9BCF-82FAAAAA2D01}
2010-11-12 14:23 . 2010-11-12 14:23 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\PackageAware
2010-11-09 20:34 . 2010-11-16 21:53 -------- dc----w- C:\videooutput
2010-11-09 20:34 . 2009-05-19 17:32 758018 -c--a-w- c:\windows\system32\xvidcore.dll
2010-11-09 20:34 . 2008-12-04 20:46 180224 -c--a-w- c:\windows\system32\xvidvfw.dll
2010-11-09 20:34 . 2008-10-08 09:16 139264 -c--a-w- c:\windows\system32\xvid.ax
2010-11-09 20:30 . 2010-11-10 05:59 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Eltima Software
2010-11-09 20:30 . 2010-11-09 20:30 -------- dc----w- c:\documents and settings\All Users\Data aplikací\TEMP
2010-11-09 20:15 . 2010-11-09 20:15 0 -c--a-w- c:\windows\system32\ConduitEngine.tmp
2010-11-09 20:14 . 2010-11-09 20:15 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Jookz Toolbar
2010-11-09 20:13 . 2010-11-14 18:57 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\IDM
2010-11-09 20:13 . 2010-11-17 14:55 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\DMCache
2010-11-09 20:12 . 2010-11-09 20:16 -------- dc----w- c:\program files\Internet Download Manager
2010-11-06 10:59 . 2010-11-06 10:59 -------- dc----w- C:\Broker_LunarSphere
2010-11-06 10:59 . 2010-11-06 10:59 -------- dc----w- C:\LunarSphere
2010-11-05 07:50 . 2010-11-05 07:50 -------- dc----r- C:\AHCache
2010-11-01 18:38 . 2010-11-01 18:38 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\AdobeUM
2010-11-01 18:37 . 2010-11-01 18:38 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\Adobe
2010-11-01 18:37 . 2010-11-01 18:37 -------- dc----w- c:\program files\Common Files\Adobe
2010-11-01 14:36 . 2010-11-01 14:36 -------- dc----w- c:\program files\Common Files\Skype
2010-10-29 14:48 . 2010-11-02 18:02 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\TS3Client
2010-10-29 14:45 . 2010-10-29 14:48 -------- dc----w- c:\program files\TeamSpeak 3 Client
2010-10-28 11:16 . 2010-10-28 16:19 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\Ahead
2010-10-28 11:15 . 2010-11-02 18:21 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Ahead
2010-10-28 11:12 . 2010-10-28 11:16 -------- dc----w- c:\program files\Common Files\Ahead
2010-10-28 11:12 . 2010-10-28 11:12 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Nero
2010-10-28 08:32 . 2010-10-28 08:32 -------- dc----w- c:\documents and settings\All Users\Data aplikací\nView_Profiles
2010-10-27 12:32 . 2002-12-05 12:10 155648 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2010-10-27 12:32 . 2002-12-02 13:22 5632 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2010-10-27 12:32 . 2002-12-02 11:33 57344 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2010-10-27 12:32 . 2002-12-02 11:33 237568 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2010-10-27 12:31 . 2002-12-05 12:12 692224 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2010-10-27 12:31 . 2010-10-27 12:31 282756 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2010-10-27 12:31 . 2010-10-27 12:31 163972 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2010-10-26 19:15 . 2010-10-26 19:15 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Blizzard
2010-10-26 15:19 . 2010-11-12 18:33 -------- dc----w- c:\program files\Valve
2010-10-26 15:18 . 2003-09-03 00:27 69715 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\ctor.dll
2010-10-26 15:18 . 2003-09-03 00:26 266240 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iscript.dll
2010-10-26 15:18 . 2003-09-03 00:26 192512 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iuser.dll
2010-10-26 15:18 . 2003-09-03 00:28 724992 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iKernel.dll
2010-10-26 15:18 . 2003-09-03 00:25 5632 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\DotNetInstaller.exe
2010-10-26 15:18 . 2010-10-26 15:18 311428 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\Setup.dll
2010-10-26 15:18 . 2010-10-26 15:18 184452 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iGdi.dll
2010-10-20 13:04 . 2010-10-20 13:04 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\Apple Computer
2010-10-19 14:07 . 2010-09-08 08:09 108032 -c--a-w- c:\windows\system32\ff_vfw.dll
2010-10-19 14:00 . 2010-10-19 14:00 -------- dc----w- c:\program files\Real Alternative
2010-10-19 13:59 . 2010-10-19 13:59 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Apple Computer
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin6.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin5.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin4.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin3.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin2.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin.dll
2010-10-19 13:59 . 2010-03-17 20:53 94208 -c--a-w- c:\windows\system32\QuickTimeVR.qtx
2010-10-19 13:59 . 2010-03-17 20:53 69632 -c--a-w- c:\windows\system32\QuickTime.qts
2010-10-19 13:59 . 2010-03-17 20:53 180224 -c--a-w- c:\windows\system32\QTCF.dll
2010-10-19 13:50 . 2010-11-16 21:53 -------- dc----w- C:\MTV_OUTPUT
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-07 18:39 . 2010-10-07 17:15 2829 -c--a-w- c:\windows\War3Unin.pif
2010-10-07 18:39 . 2010-10-07 17:15 139264 -c--a-w- c:\windows\War3Unin.exe
2010-09-29 18:31 . 2010-09-29 18:56 210272 -c--a-w- c:\windows\system32\idmmbc.dll
2010-09-07 15:12 . 2010-08-11 18:37 38848 -c--a-w- c:\windows\avastSS.scr
2010-09-07 15:11 . 2010-08-11 18:37 167592 -c--a-w- c:\windows\system32\aswBoot.exe
2010-09-07 14:52 . 2010-08-11 18:37 46672 -c--a-w- c:\windows\system32\drivers\aswTdi.sys
2010-09-07 14:52 . 2010-08-11 18:37 165584 -c--a-w- c:\windows\system32\drivers\aswSP.sys
2010-09-07 14:47 . 2010-08-11 18:37 23376 -c--a-w- c:\windows\system32\drivers\aswRdr.sys
2010-09-07 14:47 . 2010-08-11 18:37 100176 -c--a-w- c:\windows\system32\drivers\aswmon2.sys
2010-09-07 14:47 . 2010-08-11 18:37 94544 -c--a-w- c:\windows\system32\drivers\aswmon.sys
2010-09-07 14:47 . 2010-08-11 18:37 17744 -c--a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-09-07 14:46 . 2010-08-11 18:37 28880 -c--a-w- c:\windows\system32\drivers\aavmker4.sys
2009-12-17 05:11 . 2009-11-01 07:50 10802648 -c--a-w- c:\program files\xul.dll
2009-12-17 05:11 . 2009-11-01 07:50 98304 -c--a-w- c:\program files\nssdbm3.dll
2009-12-17 05:11 . 2009-11-01 07:50 917464 -c--a-w- c:\program files\js3250.dll
2009-12-17 05:11 . 2009-11-01 07:50 87512 -c--a-w- c:\program files\nssutil3.dll
2009-12-17 05:11 . 2009-11-01 07:50 722392 -c--a-w- c:\program files\mozcrt19.dll
2009-12-17 05:11 . 2009-11-01 07:50 636376 -c--a-w- c:\program files\nss3.dll
2009-12-17 05:11 . 2009-11-01 07:50 457688 -c--a-w- c:\program files\sqlite3.dll
2009-12-17 05:11 . 2009-11-01 07:50 316888 -c--a-w- c:\program files\nssckbi.dll
2009-12-17 05:11 . 2009-11-01 07:50 244696 -c--a-w- c:\program files\updater.exe
2009-12-17 05:11 . 2009-11-01 07:50 20440 -c--a-w- c:\program files\plc4.dll
2009-12-17 05:11 . 2009-11-01 07:50 17880 -c--a-w- c:\program files\xpcom.dll
2009-12-17 05:11 . 2009-11-01 07:50 17368 -c--a-w- c:\program files\plds4.dll
2009-12-17 05:11 . 2009-11-01 07:50 169432 -c--a-w- c:\program files\nspr4.dll
2009-12-17 05:11 . 2009-11-01 07:50 155648 -c--a-w- c:\program files\softokn3.dll
2009-12-17 05:11 . 2009-11-01 07:50 136664 -c--a-w- c:\program files\ssl3.dll
2009-12-17 05:11 . 2009-11-01 07:50 103896 -c--a-w- c:\program files\smime3.dll
.
((((((((((((((((((((((((((((( SnapShot@2010-11-17_14.51.07 )))))))))))))))))))))))))))))))))))))))))
.
- 2004-08-18 12:00 . 2010-11-17 13:07 71060 c:\windows\system32\perfc009.dat
+ 2004-08-18 12:00 . 2010-11-17 14:54 71060 c:\windows\system32\perfc009.dat
- 2004-08-18 12:00 . 2010-11-17 13:07 82372 c:\windows\system32\perfc005.dat
+ 2004-08-18 12:00 . 2010-11-17 14:54 82372 c:\windows\system32\perfc005.dat
+ 2004-08-18 12:00 . 2010-11-17 14:54 441124 c:\windows\system32\perfh009.dat
- 2004-08-18 12:00 . 2010-11-17 13:07 441124 c:\windows\system32\perfh009.dat
+ 2004-08-18 12:00 . 2010-11-17 14:54 437558 c:\windows\system32\perfh005.dat
- 2004-08-18 12:00 . 2010-11-17 13:07 437558 c:\windows\system32\perfh005.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}]
2010-09-20 13:05 2194944 -c--a-w- c:\program files\Bandoo\Plugins\IE\ieplugin.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"scheduler_monitor"="c:\program files\ReaConverter 5.5 Pro\init_scheduler.exe" [2007-06-15 27136]
"STYLEXP"="c:\program files\TGTSoft\StyleXP\StyleXP.exe" [2006-05-24 1372160]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2010-09-29 3245408]
"DAEMON Tools Pro Agent"="c:\program files\DAEMON Tools Pro\DTAgent.exe" [2010-11-11 570688]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVCLOCK"="nvclock.dll" [2003-04-14 81920]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-05 8523776]
"nwiz"="nwiz.exe" [2007-12-05 1626112]
"RTHDCPL"="RTHDCPL.EXE" [2007-07-05 16380416]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-09-07 2838912]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-12-05 81920]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
3D!Turbo Experience.lnk - c:\program files\MSI\3D!Turbo Experience\3D!Turbo.exe [2010-8-11 94208]
Adobe Reader Speed Launch.lnk - d:\reader\reader_sl.exe [2004-12-14 29696]
gwum.lnk - c:\program files\Gigabyte\Gigabyte Windows Utility Manager\gwum.exe [2010-8-11 471040]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\program files\TGTSoft\StyleXP\Logon\CurrentLogon.EXE"
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MCPClient]
2005-01-31 13:13 49152 -c--a-w- c:\progra~1\COMMON~1\stardock\MCPStub.dll
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\MSN Gaming Zone\\Windows\\shvlzm.exe"=
"c:\\Program Files\\World of Warcraft\\Wow.exe"=
"c:\\Program Files\\D-Link\\AirPlus for DWL-900AP+\\AirPlus_Manager.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Gigabyte\\Gigabyte Windows Utility Manager\\bios\\Gwflash.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"d:\\Warcraft III\\Warcraft III.exe"=
"c:\\Program Files\\COMODO\\EasyVPN\\EasyVPN.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"d:\\Warcraft III\\War3.exe"=
"c:\\Program Files\\Valve\\hl.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [11.8.2010 19:37 165584]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [16.11.2010 17:03 219200]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [11.8.2010 19:37 17744]
R2 CrdphService;COMODO EasyVPN VNC Service;c:\program files\COMODO\EasyVPN\crdphService.exe [11.8.2009 17:47 491768]
R2 EasyVpnAdpt;COMODO EasyVPN Service;c:\program files\COMODO\EasyVPN\Vpnservice.exe [12.1.2010 8:37 34552]
R2 ETDrv;ETDrv;c:\windows\system32\drivers\ETDrv.sys [11.8.2010 14:44 170128]
R2 Jookz Toolbar Helper;Jookz Toolbar Helper;c:\program files\Jookz Toolbar\tbsvc.exe [26.7.2010 22:37 237224]
R3 MarkFun_NT;MarkFun_NT;c:\program files\Gigabyte\Gigabyte Windows Utility Manager\MARKFUN.W32 [11.8.2010 14:45 8236]
S3 ATP;Comodo EasyVPN Miniport Driver;c:\windows\system32\drivers\cmdatp.sys [26.8.2010 19:40 17424]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Home Edition\kerneld.wnt [18.8.2005 7168]
S3 rcp_service;ReaConverter scheduler service;c:\program files\ReaConverter 5.5 Pro\rcp_scheduler.exe [30.11.2007 10:27 558592]
.
.
------- Doplňkový sken -------
.
mStart Page = hxxp://www.yahoo.com
uSearchAssistant = hxxp://search.bearshare.com/sidebar.html?src=ssb&sysid=2
IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
LSP: c:\windows\system32\idmmbc.dll
FF - ProfilePath - c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\
FF - component: c:\documents and settings\Lifaen\Data aplikací\IDM\idmmzcc3\components\idmmzcc.dll
FF - component: c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\extensions\{038cb5c7-48ea-4af9-94e0-a1646542e62b}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\extensions\{038cb5c7-48ea-4af9-94e0-a1646542e62b}\components\RadioWMPCore.dll
FF - component: c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\extensions\firefox@bandoo.com\components\FFPlugin.dll
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - component: e:\program files\Search Settings\FF\components\SearchSettingsFF.dll
FF - plugin: c:\program files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npWebLaunch.dll
FF - plugin: d:\reader\browser\nppdf32.dll
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
URLSearchHooks-{038cb5c7-48ea-4af9-94e0-a1646542e62b} - (no file)
BHO-{038cb5c7-48ea-4af9-94e0-a1646542e62b} - (no file)
Toolbar-{4C350B19-6CA1-4569-B14C-296D8D6535B2} - (no file)
Toolbar-{038cb5c7-48ea-4af9-94e0-a1646542e62b} - (no file)
WebBrowser-{4C350B19-6CA1-4569-B14C-296D8D6535B2} - (no file)
WebBrowser-{038CB5C7-48EA-4AF9-94E0-A1646542E62B} - (no file)
HKLM-Run-DATAMNGR - c:\progra~1\BEARSH~1\MediaBar\Datamngr\DATAMN~1.EXE
AddRemove-BearShare MediaBar - c:\program files\BearShare Applications\MediaBar\uninstall.exe
AddRemove-conduitEngine - c:\program files\ConduitEngine\ConduitEngineUninstall.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-17 18:19
Windows 5.1.2600 Service Pack 3 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Home Edition\kerneld.wnt"
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MarkFun_NT]
"ImagePath"="\??\c:\program files\Gigabyte\Gigabyte Windows Utility Manager\markfun.w32"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_USERS\S-1-5-21-1123561945-838170752-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{E04EAD46-BD5D-34AF-C919-E3B555200846}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"ealnhgdhbc"=hex:66,61,62,6e,67,62,6c,61,65,65,67,63,00,31
"dacnchkm"=hex:64,62,70,67,6d,69,65,64,64,6f,6c,61,70,6b,6e,69,67,63,68,64,69,
6c,6b,70,64,6a,68,62,6f,6e,69,65,6f,6a,6f,68,65,67,65,6b,00,00
"iadmkldjpjmahhghfg"=hex:6a,61,69,61,6a,6f,67,68,6c,67,63,67,67,6d,67,69,6f,6d,
68,6d,00,00
"hajhagkijdgcfnie"=hex:6a,61,69,61,6e,6a,64,66,61,6c,62,63,68,65,6c,68,64,6c,
6c,66,00,00
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(672)
c:\progra~1\COMMON~1\Stardock\mcpstub.dll
- - - - - - - > 'lsass.exe'(728)
c:\windows\system32\idmmbc.dll
- - - - - - - > 'explorer.exe'(3944)
c:\windows\system32\nview.dll
c:\progra~1\WINDOW~2\wmpband.dll
c:\program files\Internet Download Manager\idmmkb.dll
c:\windows\system32\nvwddi.dll
c:\progra~1\COMMON~1\stardock\MCPCore.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\TGTSoft\StyleXP\StyleXPService.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\progra~1\COMMON~1\Stardock\SDMCP.exe
c:\windows\system32\nvsvc32.exe
c:\progra~1\Bandoo\Bandoo.exe
c:\windows\system32\wscntfy.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\rundll32.exe
c:\program files\MSI\3D!Turbo Experience\zoo.exe
c:\windows\system32\dwwin.exe
c:\program files\Internet Download Manager\IEMonitor.exe
c:\\?\c:\windows\system32\WBEM\WMIADAP.EXE
.
**************************************************************************
.
Celkový čas: 2010-11-17 18:22:41 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-11-17 17:22
ComboFix2.txt 2010-11-17 14:54
Před spuštěním: 6 537 359 360
Po spuštění: 6 500 380 672
- - End Of File - - A9A06946C90A07FE24A53B12F83FB092
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_GUPDATE
-------\Legacy_HUADIO
-------\Service_gupdate
-------\Service_huadio
((((((((((((((((((((((((( Soubory vytvořené od 2010-10-17 do 2010-11-17 )))))))))))))))))))))))))))))))
.
2010-11-17 11:31 . 2010-11-17 11:31 -------- dc----w- c:\program files\Lavalys
2010-11-17 10:08 . 2010-11-17 10:08 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Malwarebytes
2010-11-17 10:08 . 2010-04-29 14:39 38224 -c--a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-11-17 10:08 . 2010-11-17 10:08 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2010-11-17 10:08 . 2010-04-29 14:39 20952 -c--a-w- c:\windows\system32\drivers\mbam.sys
2010-11-17 10:08 . 2010-11-17 10:08 -------- dc----w- c:\program files\Malwarebytes' Anti-Malware
2010-11-17 08:53 . 2010-11-17 10:00 -------- dc----w- c:\windows\NV32643800.TMP
2010-11-17 08:52 . 2010-11-17 09:15 -------- dc----w- C:\NVIDIA
2010-11-17 08:16 . 2010-11-17 08:16 -------- dc----w- C:\rsit
2010-11-17 08:16 . 2010-11-17 08:16 -------- dc----w- c:\program files\trend micro
2010-11-17 08:03 . 2010-11-17 08:03 -------- dc----w- c:\documents and settings\All Users\Data aplikací\McAfee
2010-11-16 22:00 . 2010-11-16 22:00 -------- dc----w- c:\windows\system32\XPSViewer
2010-11-16 21:59 . 2010-11-16 21:59 -------- dc----w- c:\program files\MSBuild
2010-11-16 21:59 . 2010-11-16 21:59 -------- dc----w- c:\program files\Reference Assemblies
2010-11-16 21:36 . 2010-11-16 21:36 -------- dc----w- c:\program files\MSXML 4.0
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\system32\cs-cz
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\system32\cs
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\system32\bits
2010-11-16 21:22 . 2010-11-16 21:22 -------- dc----w- c:\windows\l2schemas
2010-11-16 21:16 . 2010-11-16 21:16 -------- dc----w- c:\windows\EHome
2010-11-16 20:53 . 2008-04-13 18:56 12800 -c----w- c:\windows\system32\drivers\usb8023x.sys
2010-11-16 20:52 . 2008-04-14 03:22 33792 -c----w- c:\windows\system32\mmcperf.exe
2010-11-16 20:51 . 2008-04-13 18:51 101120 -c----w- c:\windows\system32\drivers\bthpan.sys
2010-11-16 20:48 . 2010-11-16 20:48 -------- dc----w- c:\documents and settings\All Users\Data aplikací\UAB
2010-11-16 20:48 . 2010-11-16 20:48 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\PC_Drivers_Headquarters
2010-11-16 20:47 . 2010-11-16 20:47 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Easy Driver Pro
2010-11-16 20:45 . 2010-11-16 20:45 -------- dc----w- c:\program files\Easy Driver Pro
2010-11-16 16:03 . 2010-11-16 16:03 219200 -c--a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2010-11-16 16:03 . 2010-11-16 16:03 -------- dc----w- c:\program files\DAEMON Tools Pro
2010-11-16 16:03 . 2010-11-16 16:04 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\DAEMON Tools Pro
2010-11-16 16:03 . 2010-11-16 16:03 -------- dc----w- c:\documents and settings\All Users\Data aplikací\DAEMON Tools Pro
2010-11-13 10:02 . 2010-11-13 10:02 -------- dc----w- c:\documents and settings\All Users\Data aplikací\DAEMON Tools Lite
2010-11-12 18:46 . 2010-11-12 18:49 -------- dc----w- c:\program files\CSConfigurator
2010-11-12 14:40 . 2010-11-16 20:52 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\searchqutb
2010-11-12 14:40 . 2010-11-12 14:40 -------- dc----w- c:\program files\Windows Searchqu Toolbar
2010-11-12 14:39 . 2010-11-17 16:55 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Bandoo
2010-11-12 14:38 . 2010-11-12 14:40 -------- dc----w- c:\program files\Bandoo
2010-11-12 14:27 . 2010-11-16 20:52 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\bearsharemediabartb
2010-11-12 14:27 . 2010-11-12 14:29 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\BearShare
2010-11-12 14:26 . 2010-11-12 14:26 -------- dc----w- c:\documents and settings\All Users\Data aplikací\BearShare
2010-11-12 14:24 . 2010-11-12 14:27 -------- dc-h--w- c:\documents and settings\All Users\Data aplikací\{A471C4AE-B27B-4761-9BCF-82FAAAAA2D01}
2010-11-12 14:23 . 2010-11-12 14:23 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\PackageAware
2010-11-09 20:34 . 2010-11-16 21:53 -------- dc----w- C:\videooutput
2010-11-09 20:34 . 2009-05-19 17:32 758018 -c--a-w- c:\windows\system32\xvidcore.dll
2010-11-09 20:34 . 2008-12-04 20:46 180224 -c--a-w- c:\windows\system32\xvidvfw.dll
2010-11-09 20:34 . 2008-10-08 09:16 139264 -c--a-w- c:\windows\system32\xvid.ax
2010-11-09 20:30 . 2010-11-10 05:59 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Eltima Software
2010-11-09 20:30 . 2010-11-09 20:30 -------- dc----w- c:\documents and settings\All Users\Data aplikací\TEMP
2010-11-09 20:15 . 2010-11-09 20:15 0 -c--a-w- c:\windows\system32\ConduitEngine.tmp
2010-11-09 20:14 . 2010-11-09 20:15 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Jookz Toolbar
2010-11-09 20:13 . 2010-11-14 18:57 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\IDM
2010-11-09 20:13 . 2010-11-17 14:55 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\DMCache
2010-11-09 20:12 . 2010-11-09 20:16 -------- dc----w- c:\program files\Internet Download Manager
2010-11-06 10:59 . 2010-11-06 10:59 -------- dc----w- C:\Broker_LunarSphere
2010-11-06 10:59 . 2010-11-06 10:59 -------- dc----w- C:\LunarSphere
2010-11-05 07:50 . 2010-11-05 07:50 -------- dc----r- C:\AHCache
2010-11-01 18:38 . 2010-11-01 18:38 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\AdobeUM
2010-11-01 18:37 . 2010-11-01 18:38 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\Adobe
2010-11-01 18:37 . 2010-11-01 18:37 -------- dc----w- c:\program files\Common Files\Adobe
2010-11-01 14:36 . 2010-11-01 14:36 -------- dc----w- c:\program files\Common Files\Skype
2010-10-29 14:48 . 2010-11-02 18:02 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\TS3Client
2010-10-29 14:45 . 2010-10-29 14:48 -------- dc----w- c:\program files\TeamSpeak 3 Client
2010-10-28 11:16 . 2010-10-28 16:19 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\Ahead
2010-10-28 11:15 . 2010-11-02 18:21 -------- dc----w- c:\documents and settings\Lifaen\Data aplikací\Ahead
2010-10-28 11:12 . 2010-10-28 11:16 -------- dc----w- c:\program files\Common Files\Ahead
2010-10-28 11:12 . 2010-10-28 11:12 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Nero
2010-10-28 08:32 . 2010-10-28 08:32 -------- dc----w- c:\documents and settings\All Users\Data aplikací\nView_Profiles
2010-10-27 12:32 . 2002-12-05 12:10 155648 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2010-10-27 12:32 . 2002-12-02 13:22 5632 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2010-10-27 12:32 . 2002-12-02 11:33 57344 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2010-10-27 12:32 . 2002-12-02 11:33 237568 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2010-10-27 12:31 . 2002-12-05 12:12 692224 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2010-10-27 12:31 . 2010-10-27 12:31 282756 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2010-10-27 12:31 . 2010-10-27 12:31 163972 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2010-10-26 19:15 . 2010-10-26 19:15 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Blizzard
2010-10-26 15:19 . 2010-11-12 18:33 -------- dc----w- c:\program files\Valve
2010-10-26 15:18 . 2003-09-03 00:27 69715 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\ctor.dll
2010-10-26 15:18 . 2003-09-03 00:26 266240 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iscript.dll
2010-10-26 15:18 . 2003-09-03 00:26 192512 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iuser.dll
2010-10-26 15:18 . 2003-09-03 00:28 724992 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iKernel.dll
2010-10-26 15:18 . 2003-09-03 00:25 5632 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\DotNetInstaller.exe
2010-10-26 15:18 . 2010-10-26 15:18 311428 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\Setup.dll
2010-10-26 15:18 . 2010-10-26 15:18 184452 -c--a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iGdi.dll
2010-10-20 13:04 . 2010-10-20 13:04 -------- dc----w- c:\documents and settings\Lifaen\Local Settings\Data aplikací\Apple Computer
2010-10-19 14:07 . 2010-09-08 08:09 108032 -c--a-w- c:\windows\system32\ff_vfw.dll
2010-10-19 14:00 . 2010-10-19 14:00 -------- dc----w- c:\program files\Real Alternative
2010-10-19 13:59 . 2010-10-19 13:59 -------- dc----w- c:\documents and settings\All Users\Data aplikací\Apple Computer
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin6.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin5.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin4.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin3.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin2.dll
2010-10-19 13:59 . 2010-04-16 17:00 159744 -c--a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin.dll
2010-10-19 13:59 . 2010-03-17 20:53 94208 -c--a-w- c:\windows\system32\QuickTimeVR.qtx
2010-10-19 13:59 . 2010-03-17 20:53 69632 -c--a-w- c:\windows\system32\QuickTime.qts
2010-10-19 13:59 . 2010-03-17 20:53 180224 -c--a-w- c:\windows\system32\QTCF.dll
2010-10-19 13:50 . 2010-11-16 21:53 -------- dc----w- C:\MTV_OUTPUT
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-07 18:39 . 2010-10-07 17:15 2829 -c--a-w- c:\windows\War3Unin.pif
2010-10-07 18:39 . 2010-10-07 17:15 139264 -c--a-w- c:\windows\War3Unin.exe
2010-09-29 18:31 . 2010-09-29 18:56 210272 -c--a-w- c:\windows\system32\idmmbc.dll
2010-09-07 15:12 . 2010-08-11 18:37 38848 -c--a-w- c:\windows\avastSS.scr
2010-09-07 15:11 . 2010-08-11 18:37 167592 -c--a-w- c:\windows\system32\aswBoot.exe
2010-09-07 14:52 . 2010-08-11 18:37 46672 -c--a-w- c:\windows\system32\drivers\aswTdi.sys
2010-09-07 14:52 . 2010-08-11 18:37 165584 -c--a-w- c:\windows\system32\drivers\aswSP.sys
2010-09-07 14:47 . 2010-08-11 18:37 23376 -c--a-w- c:\windows\system32\drivers\aswRdr.sys
2010-09-07 14:47 . 2010-08-11 18:37 100176 -c--a-w- c:\windows\system32\drivers\aswmon2.sys
2010-09-07 14:47 . 2010-08-11 18:37 94544 -c--a-w- c:\windows\system32\drivers\aswmon.sys
2010-09-07 14:47 . 2010-08-11 18:37 17744 -c--a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-09-07 14:46 . 2010-08-11 18:37 28880 -c--a-w- c:\windows\system32\drivers\aavmker4.sys
2009-12-17 05:11 . 2009-11-01 07:50 10802648 -c--a-w- c:\program files\xul.dll
2009-12-17 05:11 . 2009-11-01 07:50 98304 -c--a-w- c:\program files\nssdbm3.dll
2009-12-17 05:11 . 2009-11-01 07:50 917464 -c--a-w- c:\program files\js3250.dll
2009-12-17 05:11 . 2009-11-01 07:50 87512 -c--a-w- c:\program files\nssutil3.dll
2009-12-17 05:11 . 2009-11-01 07:50 722392 -c--a-w- c:\program files\mozcrt19.dll
2009-12-17 05:11 . 2009-11-01 07:50 636376 -c--a-w- c:\program files\nss3.dll
2009-12-17 05:11 . 2009-11-01 07:50 457688 -c--a-w- c:\program files\sqlite3.dll
2009-12-17 05:11 . 2009-11-01 07:50 316888 -c--a-w- c:\program files\nssckbi.dll
2009-12-17 05:11 . 2009-11-01 07:50 244696 -c--a-w- c:\program files\updater.exe
2009-12-17 05:11 . 2009-11-01 07:50 20440 -c--a-w- c:\program files\plc4.dll
2009-12-17 05:11 . 2009-11-01 07:50 17880 -c--a-w- c:\program files\xpcom.dll
2009-12-17 05:11 . 2009-11-01 07:50 17368 -c--a-w- c:\program files\plds4.dll
2009-12-17 05:11 . 2009-11-01 07:50 169432 -c--a-w- c:\program files\nspr4.dll
2009-12-17 05:11 . 2009-11-01 07:50 155648 -c--a-w- c:\program files\softokn3.dll
2009-12-17 05:11 . 2009-11-01 07:50 136664 -c--a-w- c:\program files\ssl3.dll
2009-12-17 05:11 . 2009-11-01 07:50 103896 -c--a-w- c:\program files\smime3.dll
.
((((((((((((((((((((((((((((( SnapShot@2010-11-17_14.51.07 )))))))))))))))))))))))))))))))))))))))))
.
- 2004-08-18 12:00 . 2010-11-17 13:07 71060 c:\windows\system32\perfc009.dat
+ 2004-08-18 12:00 . 2010-11-17 14:54 71060 c:\windows\system32\perfc009.dat
- 2004-08-18 12:00 . 2010-11-17 13:07 82372 c:\windows\system32\perfc005.dat
+ 2004-08-18 12:00 . 2010-11-17 14:54 82372 c:\windows\system32\perfc005.dat
+ 2004-08-18 12:00 . 2010-11-17 14:54 441124 c:\windows\system32\perfh009.dat
- 2004-08-18 12:00 . 2010-11-17 13:07 441124 c:\windows\system32\perfh009.dat
+ 2004-08-18 12:00 . 2010-11-17 14:54 437558 c:\windows\system32\perfh005.dat
- 2004-08-18 12:00 . 2010-11-17 13:07 437558 c:\windows\system32\perfh005.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}]
2010-09-20 13:05 2194944 -c--a-w- c:\program files\Bandoo\Plugins\IE\ieplugin.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"scheduler_monitor"="c:\program files\ReaConverter 5.5 Pro\init_scheduler.exe" [2007-06-15 27136]
"STYLEXP"="c:\program files\TGTSoft\StyleXP\StyleXP.exe" [2006-05-24 1372160]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2010-09-29 3245408]
"DAEMON Tools Pro Agent"="c:\program files\DAEMON Tools Pro\DTAgent.exe" [2010-11-11 570688]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVCLOCK"="nvclock.dll" [2003-04-14 81920]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-05 8523776]
"nwiz"="nwiz.exe" [2007-12-05 1626112]
"RTHDCPL"="RTHDCPL.EXE" [2007-07-05 16380416]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-09-07 2838912]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-12-05 81920]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
3D!Turbo Experience.lnk - c:\program files\MSI\3D!Turbo Experience\3D!Turbo.exe [2010-8-11 94208]
Adobe Reader Speed Launch.lnk - d:\reader\reader_sl.exe [2004-12-14 29696]
gwum.lnk - c:\program files\Gigabyte\Gigabyte Windows Utility Manager\gwum.exe [2010-8-11 471040]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\program files\TGTSoft\StyleXP\Logon\CurrentLogon.EXE"
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MCPClient]
2005-01-31 13:13 49152 -c--a-w- c:\progra~1\COMMON~1\stardock\MCPStub.dll
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\MSN Gaming Zone\\Windows\\shvlzm.exe"=
"c:\\Program Files\\World of Warcraft\\Wow.exe"=
"c:\\Program Files\\D-Link\\AirPlus for DWL-900AP+\\AirPlus_Manager.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Gigabyte\\Gigabyte Windows Utility Manager\\bios\\Gwflash.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"d:\\Warcraft III\\Warcraft III.exe"=
"c:\\Program Files\\COMODO\\EasyVPN\\EasyVPN.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"d:\\Warcraft III\\War3.exe"=
"c:\\Program Files\\Valve\\hl.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [11.8.2010 19:37 165584]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [16.11.2010 17:03 219200]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [11.8.2010 19:37 17744]
R2 CrdphService;COMODO EasyVPN VNC Service;c:\program files\COMODO\EasyVPN\crdphService.exe [11.8.2009 17:47 491768]
R2 EasyVpnAdpt;COMODO EasyVPN Service;c:\program files\COMODO\EasyVPN\Vpnservice.exe [12.1.2010 8:37 34552]
R2 ETDrv;ETDrv;c:\windows\system32\drivers\ETDrv.sys [11.8.2010 14:44 170128]
R2 Jookz Toolbar Helper;Jookz Toolbar Helper;c:\program files\Jookz Toolbar\tbsvc.exe [26.7.2010 22:37 237224]
R3 MarkFun_NT;MarkFun_NT;c:\program files\Gigabyte\Gigabyte Windows Utility Manager\MARKFUN.W32 [11.8.2010 14:45 8236]
S3 ATP;Comodo EasyVPN Miniport Driver;c:\windows\system32\drivers\cmdatp.sys [26.8.2010 19:40 17424]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Home Edition\kerneld.wnt [18.8.2005 7168]
S3 rcp_service;ReaConverter scheduler service;c:\program files\ReaConverter 5.5 Pro\rcp_scheduler.exe [30.11.2007 10:27 558592]
.
.
------- Doplňkový sken -------
.
mStart Page = hxxp://www.yahoo.com
uSearchAssistant = hxxp://search.bearshare.com/sidebar.html?src=ssb&sysid=2
IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
LSP: c:\windows\system32\idmmbc.dll
FF - ProfilePath - c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\
FF - component: c:\documents and settings\Lifaen\Data aplikací\IDM\idmmzcc3\components\idmmzcc.dll
FF - component: c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\extensions\{038cb5c7-48ea-4af9-94e0-a1646542e62b}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\extensions\{038cb5c7-48ea-4af9-94e0-a1646542e62b}\components\RadioWMPCore.dll
FF - component: c:\documents and settings\Lifaen\Data aplikací\Mozilla\Firefox\Profiles\1prgvzp3.default\extensions\firefox@bandoo.com\components\FFPlugin.dll
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - component: e:\program files\Search Settings\FF\components\SearchSettingsFF.dll
FF - plugin: c:\program files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npWebLaunch.dll
FF - plugin: d:\reader\browser\nppdf32.dll
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
URLSearchHooks-{038cb5c7-48ea-4af9-94e0-a1646542e62b} - (no file)
BHO-{038cb5c7-48ea-4af9-94e0-a1646542e62b} - (no file)
Toolbar-{4C350B19-6CA1-4569-B14C-296D8D6535B2} - (no file)
Toolbar-{038cb5c7-48ea-4af9-94e0-a1646542e62b} - (no file)
WebBrowser-{4C350B19-6CA1-4569-B14C-296D8D6535B2} - (no file)
WebBrowser-{038CB5C7-48EA-4AF9-94E0-A1646542E62B} - (no file)
HKLM-Run-DATAMNGR - c:\progra~1\BEARSH~1\MediaBar\Datamngr\DATAMN~1.EXE
AddRemove-BearShare MediaBar - c:\program files\BearShare Applications\MediaBar\uninstall.exe
AddRemove-conduitEngine - c:\program files\ConduitEngine\ConduitEngineUninstall.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-17 18:19
Windows 5.1.2600 Service Pack 3 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Home Edition\kerneld.wnt"
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MarkFun_NT]
"ImagePath"="\??\c:\program files\Gigabyte\Gigabyte Windows Utility Manager\markfun.w32"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
[HKEY_USERS\S-1-5-21-1123561945-838170752-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{E04EAD46-BD5D-34AF-C919-E3B555200846}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"ealnhgdhbc"=hex:66,61,62,6e,67,62,6c,61,65,65,67,63,00,31
"dacnchkm"=hex:64,62,70,67,6d,69,65,64,64,6f,6c,61,70,6b,6e,69,67,63,68,64,69,
6c,6b,70,64,6a,68,62,6f,6e,69,65,6f,6a,6f,68,65,67,65,6b,00,00
"iadmkldjpjmahhghfg"=hex:6a,61,69,61,6a,6f,67,68,6c,67,63,67,67,6d,67,69,6f,6d,
68,6d,00,00
"hajhagkijdgcfnie"=hex:6a,61,69,61,6e,6a,64,66,61,6c,62,63,68,65,6c,68,64,6c,
6c,66,00,00
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(672)
c:\progra~1\COMMON~1\Stardock\mcpstub.dll
- - - - - - - > 'lsass.exe'(728)
c:\windows\system32\idmmbc.dll
- - - - - - - > 'explorer.exe'(3944)
c:\windows\system32\nview.dll
c:\progra~1\WINDOW~2\wmpband.dll
c:\program files\Internet Download Manager\idmmkb.dll
c:\windows\system32\nvwddi.dll
c:\progra~1\COMMON~1\stardock\MCPCore.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\TGTSoft\StyleXP\StyleXPService.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\progra~1\COMMON~1\Stardock\SDMCP.exe
c:\windows\system32\nvsvc32.exe
c:\progra~1\Bandoo\Bandoo.exe
c:\windows\system32\wscntfy.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\rundll32.exe
c:\program files\MSI\3D!Turbo Experience\zoo.exe
c:\windows\system32\dwwin.exe
c:\program files\Internet Download Manager\IEMonitor.exe
c:\\?\c:\windows\system32\WBEM\WMIADAP.EXE
.
**************************************************************************
.
Celkový čas: 2010-11-17 18:22:41 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-11-17 17:22
ComboFix2.txt 2010-11-17 14:54
Před spuštěním: 6 537 359 360
Po spuštění: 6 500 380 672
- - End Of File - - A9A06946C90A07FE24A53B12F83FB092
Re: Restarty
doufam ze vam ti Minidumpy k necemu byli
-
cernohous13
- VIP in memoriam
- Příspěvky: 8721
- Registrován: 09 pro 2006 06:19
- Bydliště: Jablonec nad Nisou
- Kontaktovat uživatele:
Re: Restarty
Ještě jeden opravný CFscript
Pak snad už budeme uklízet
Kód: Vybrat vše
RegNull::
[HKEY_USERS\S-1-5-21-1123561945-838170752-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{E04EAD46-BD5D-34AF-C919-E3B555200846}*]
DDS::
uSearchAssistant = hxxp://search.bearshare.com/sidebar.htm ... sb&sysid=2OTMscriptStáhni OTM z jednoho odkazu a rozbal nejlépe na plochu.
http://oldtimer.geekstogo.com/OTM.exe
http://www.itxassociates.com/OT-Tools/OTM.exe
Spusť program „OTM.exe“ (pro Vistu a Win7 – pravým a „Run As Administrator“).
Do okna pod žlutou čáru vlož celý text zeleným písmem ze „Scriptu“
Klikni na červené „Moveit!“
Do své odpovědi vlož obsah zeleného okna
Při nabídce restartu „YES“
a log potom najdeš v C:\_OTM\MovedFiles\
Kód: Vybrat vše
:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím
-------------------------------------------------------------------------------------------------
> Podpora fóra <
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím
-------------------------------------------------------------------------------------------------
> Podpora fóra <
Re: Restarty
Error: Unable to interpret <RegNull::> in the current context!
Error: Unable to interpret <[HKEY_USERS\S-1-5-21-1123561945-838170752-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{E04EAD46-BD5D-34AF-C919-E3B555200846}*]> in the current context!
Error: Unable to interpret <DDS::> in the current context!
Error: Unable to interpret <uSearchAssistant = hxxp://search.bearshare.com/sidebar.htm ... sb&sysid=2> in the current context!
OTM by OldTimer - Version 3.1.17.2 log created on 11172010_185556
Error: Unable to interpret <[HKEY_USERS\S-1-5-21-1123561945-838170752-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{E04EAD46-BD5D-34AF-C919-E3B555200846}*]> in the current context!
Error: Unable to interpret <DDS::> in the current context!
Error: Unable to interpret <uSearchAssistant = hxxp://search.bearshare.com/sidebar.htm ... sb&sysid=2> in the current context!
OTM by OldTimer - Version 3.1.17.2 log created on 11172010_185556
-
cernohous13
- VIP in memoriam
- Příspěvky: 8721
- Registrován: 09 pro 2006 06:19
- Bydliště: Jablonec nad Nisou
- Kontaktovat uživatele:
Re: Restarty
to byl script do ComboFixu - návod tam máš, už jsi používalOTMscript je dole pod návodem
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím
-------------------------------------------------------------------------------------------------
> Podpora fóra <
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím
-------------------------------------------------------------------------------------------------
> Podpora fóra <
Re: Restarty
aha promin ja su tulpas ========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
C:\WINDOWS\system32\SET3F.tmp moved successfully.
C:\WINDOWS\system32\SET43.tmp moved successfully.
C:\WINDOWS\system32\SET44.tmp moved successfully.
C:\WINDOWS\system32\SET4B.tmp moved successfully.
C:\WINDOWS\002738_.tmp moved successfully.
C:\WINDOWS\NV32643800.TMP folder moved successfully.
C:\WINDOWS\SET3.tmp moved successfully.
C:\WINDOWS\SET4.tmp moved successfully.
C:\WINDOWS\SET8.tmp moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP258.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP32E.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP362.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB2.tmp folder moved successfully.
C:\WINDOWS\Installer\MSI23.tmp moved successfully.
C:\WINDOWS\Installer\MSI29.tmp moved successfully.
C:\WINDOWS\Installer\MSI9.tmp moved successfully.
C:\WINDOWS\Installer\MSID8.tmp moved successfully.
C:\WINDOWS\system32\ConduitEngine.tmp moved successfully.
C:\WINDOWS\system32\CONFIG.TMP moved successfully.
OTM by OldTimer - Version 3.1.17.2 log created on 11172010_190659
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
C:\WINDOWS\system32\SET3F.tmp moved successfully.
C:\WINDOWS\system32\SET43.tmp moved successfully.
C:\WINDOWS\system32\SET44.tmp moved successfully.
C:\WINDOWS\system32\SET4B.tmp moved successfully.
C:\WINDOWS\002738_.tmp moved successfully.
C:\WINDOWS\NV32643800.TMP folder moved successfully.
C:\WINDOWS\SET3.tmp moved successfully.
C:\WINDOWS\SET4.tmp moved successfully.
C:\WINDOWS\SET8.tmp moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP258.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP32E.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP362.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB2.tmp folder moved successfully.
C:\WINDOWS\Installer\MSI23.tmp moved successfully.
C:\WINDOWS\Installer\MSI29.tmp moved successfully.
C:\WINDOWS\Installer\MSI9.tmp moved successfully.
C:\WINDOWS\Installer\MSID8.tmp moved successfully.
C:\WINDOWS\system32\ConduitEngine.tmp moved successfully.
C:\WINDOWS\system32\CONFIG.TMP moved successfully.
OTM by OldTimer - Version 3.1.17.2 log created on 11172010_190659
-
cernohous13
- VIP in memoriam
- Příspěvky: 8721
- Registrován: 09 pro 2006 06:19
- Bydliště: Jablonec nad Nisou
- Kontaktovat uživatele:
Re: Restarty
CFscript
Soubor ulož na plochu jako CFscript.txt a jeho ikonu přetáhni myší nad ikonu ComboFixu - tam pusť.
ComboFix se spustí - počkej na log a vlož ho sem.
Kód: Vybrat vše
RegNull::
[HKEY_USERS\S-1-5-21-1123561945-838170752-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{E04EAD46-BD5D-34AF-C919-E3B555200846}*]
DDS::
uSearchAssistant = hxxp://search.bearshare.com/sidebar.htm ... sb&sysid=2Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím
-------------------------------------------------------------------------------------------------
> Podpora fóra <
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím
-------------------------------------------------------------------------------------------------
> Podpora fóra <
Přispějete na provoz fóra?