Nefunkční OS?

[katie123]

c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aktualne.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\alljobs.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\allocine.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\allradioru.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\altervista.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\amazon.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\answers.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aol.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aolradio.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\apple.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ard.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\as.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\atlas.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\atlassk.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aufeminin.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\autobazar.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\autobazar1.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\autocz.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\azet.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bazos.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bbc.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bbc.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bigmir.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\billiger.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bing.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\blesk.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bleskove.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\btv.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\calcalist.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\canliradyodinle.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\cas.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\cdiscount.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\centrum.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ciao.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\cnet.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\cnn.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\commentcamarche.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\coolsite.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\corriere.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\csfd.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\d.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\dailymotion.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\data.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\deezer.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\default.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\delicious.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\depositfiles.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\deviantart.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\diary.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\digg.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\dir.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\disney.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\diva.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\dnevnik.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\doctissimo.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\donanimhaber.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ebay.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ebayanuncios.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ekolay.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\elmundo.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\elpais.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\eurosport.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\expats.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\facebook.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\finance.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\firmy.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\flickr.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\flix.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\fotolog.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\fox.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\france2.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\free.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\garanti.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gazeta.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gazetevatan.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gazzetta.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gbg.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gepime.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gismeteo.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gittigidiyor.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\globes.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gmail.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gmx.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\google.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\googleearth.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\googletranslate.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\grooveshark.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\haaretz.gif
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\haaretz.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\haber7.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\haberturk.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\hepsiburada.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\horadot.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\horoskopy.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\hurriyet.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\championat.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\chip.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\icq.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\idnes.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ilike.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ilmeteo.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\imageshack.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\imdb.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\impulse.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\infojobs.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\interfacelift.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\internethaber.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\iserialy.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\itop.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\iua.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\izlesene.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\jappy.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\jeux.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\jeuxvideo.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\jing.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\joj.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\kijiji.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\kinopoisk.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\korrespondent.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lastfm.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\leboncoin.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lemonde.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lenta.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\leonardo.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lequipe.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\libero.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\libimseti.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lide.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\linternaute.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\livejournal.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\los40.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mailru.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mako.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mappy.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mapy.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\marca.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\marketgid.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\markiza.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\megavideo.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\meinvz.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mekusharim.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\meta.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\milanobakeca.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\milliyet.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mimibazar.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\minibazar.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mobilen.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\morfix.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mouse.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mymovies.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\myspace.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\najisto.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\nana.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\nana10.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\netgames.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\netlog.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\novinky.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\novoteka.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\nrg.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ntvmsnbc.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\nytimes.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\odnoklassniki.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\one.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\orange.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\otto.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\pagesjaunes.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\peliculasyonkis.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\photobucket.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\picnik.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\playcz.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\pravda.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\predavatel.gif
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\profesia.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\prosieben.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\r10.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\r101.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\radiode.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rapidshare.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rbc.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\repubblica.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rian.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rozetka.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rozhlas.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rtl.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sabah.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sahibinden.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sat1.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\segundamano.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\seriesyonkis.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\seznam.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\seznamemail.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sfr.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\shmu.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\schuelervz.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\skyrock.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\slsp.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sme.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\snimka.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\softonic.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\spiegel.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\splinder.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sport-express.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sport5.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sportal.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sportcz.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sportes.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sporx.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\stahuj.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\stream.bmp
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\stream.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\studivz.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\subito.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\supercz.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\superhry.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\svejo.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\t-online.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\tapuz.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\taringa.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\telecinco.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\terra.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\tf1.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\themarker.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\tiscali.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\topky.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\torrents.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\travian.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\tv.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\twitter.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ucoz.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ukr.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vbox7.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vesti.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vimeo.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\virgilio.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vkontakte.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vodafone.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\walla.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wallmart.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\walmart.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wamba.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wat.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\weather.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\web.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wer-kennt-wen.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wetter.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wikipedia.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wolframalpha.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\yad2.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\yahoo.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ynet.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\youtube.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\zamunda.bmp
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\zap.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\zena.ico
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\hide.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\icons.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\logo_small.gif
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\menu.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\more_vouchers_r.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\more_vouchers_y.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\options.css
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\peoplesearch.css
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\pin.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\pinc.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\powerd1.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\remove.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\reset.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\search_arrow.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\search_bg.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\unpin.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\voucher_bg.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\voucher_bg_y.png
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\install.rdf
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\manifest.mf
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.rsa
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.sf
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.gif
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.src
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.xml
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\blacklist.xml
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites.xml
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_11.xml
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_22.xml
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_33.xml
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_34.xml
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_359.xml
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_380.xml
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_39.xml
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_42.xml
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_4201.xml
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_49.xml
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_7.xml
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_90.xml
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_972.xml
c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\voucher_list.xml
c:\windows\Tasks\AWC Startup.job
c:\windows\tasks\GoogleUpdateTaskMachineCore.job
c:\windows\tasks\GoogleUpdateTaskMachineUA.job
c:\windows\tasks\User_Feed_Synchronization-{D9EA2E8C-808F-4B7A-88A1-4F2F9AD68A9E}.job

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_IObitBarService


((((((((((((((((((((((((( Soubory vytvořené od 2010-11-27 do 2010-12-27 )))))))))))))))))))))))))))))))
.

2010-12-27 23:49 . 2010-12-27 23:49 -------- d-----w- c:\users\Uživatel 2\AppData\Local\temp
2010-12-27 22:47 . 2010-12-27 22:47 -------- d-----w- C:\rsit
2010-12-27 22:47 . 2010-12-27 22:47 -------- d-----w- c:\program files\trend micro
2010-12-27 19:35 . 2010-12-27 19:35 -------- d-----w- c:\program files\D-Tools
2010-12-09 22:40 . 2010-12-09 22:40 -------- d-----w- c:\programdata\InterAction studios
2010-12-09 22:34 . 2010-12-09 22:34 -------- d-----w- c:\program files\ReflexiveArcade
2010-12-09 22:21 . 2010-12-09 22:26 -------- d-----w- c:\programdata\FarmFrenzy2
2010-12-09 22:20 . 2010-12-09 22:20 -------- d-----w- c:\windows\Farm Frenzy 2

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-01 21:02 . 2009-05-01 21:02 1044480 begin_of_the_skype_highlighting 02 1044480 end_of_the_skype_highlighting ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-10 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-10 2153472]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-01-27 2387968]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-07-11 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-07-11 170520]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-07-11 145944]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-12-04 75016]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-06-20 1316136]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-06-24 320056]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2009-03-10 468264]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"WPCUMI"="c:\windows\system32\WpcUmi.exe" [2006-11-02 176128]

c:\users\Presario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.1.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-5-14 384512]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-539910611-2828708226-889970032-1000]
"EnableNotificationsRef"=dword:00000001

R2 gupdate1ca75116bb06f26;Služba Google Update (gupdate1ca75116bb06f26);c:\program files\Google\Update\GoogleUpdate.exe [2009-12-04 133104]
S1 aswSP;avast! Self Protection; [x]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2009-09-15 20560]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\DRIVERS\aswMonFlt.sys [2009-09-15 53328]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2008-06-30 112128]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-01-27 20:28 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://search13.net/
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
IE: {{14CD42DD-ABCD-3586-DCAB-40E3693E3737} - c:\program files\Stylish Profile\ct.htm
LSP: c:\windows\system32\wpclsp.dll
FF - ProfilePath - c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\
FF - prefs.js: keyword.URL - hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=CDS&o=16205&locale=en_US&apn_uid=62104789-A6B3-4B39-AFDD-536AE9AC465C&apn_ptnrs=QR&apn_sauid=188083C6-E089-40ED-A1EF-AEB387458274&apn_dtid=YYYYYYYYCZ&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: CuteMenus - Crystal SVG: {63df8e21-711c-4074-a257-b065cadc28d8} - %profile%\extensions\{63df8e21-711c-4074-a257-b065cadc28d8}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Free Lunch Design Toolbar: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - %profile%\extensions\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}
FF - Ext: AvantGarde Nightlife: {3fb63340-652a-11dd-ad8b-0800200c9a66} - %profile%\extensions\{3fb63340-652a-11dd-ad8b-0800200c9a66}
FF - Ext: Express Tab: {6236BA26-C117-4007-928C-DE0716C7FA82} - %profile%\extensions\{6236BA26-C117-4007-928C-DE0716C7FA82}
FF - Ext: Usage Stat: {6236BA26-C117-4007-928C-DE0716C7FA96} - %profile%\extensions\{6236BA26-C117-4007-928C-DE0716C7FA96}
FF - Ext: FBFan: {6236BA26-C117-4007-928C-DE0716C7FA99} - %profile%\extensions\{6236BA26-C117-4007-928C-DE0716C7FA99}
FF - Ext: CrowdStar Gamebar: toolbar@ask.com - %profile%\extensions\toolbar@ask.com
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

BHO-{31c7d459-9cc3-44f2-9dca-fc11795309b4} - (no file)
WebBrowser-{31C7D459-9CC3-44F2-9DCA-FC11795309B4} - (no file)
AddRemove-Advanced SystemCare 3_is1 - c:\program files\IObit\Advanced SystemCare 3\unins000.exe
AddRemove-Stylish Profile - c:\program files\Stylish Profile\uninstall.exe
AddRemove-Winamp Toolbar - c:\program files\Winamp Toolbar\uninstall.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-28 00:51
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-539910611-2828708226-889970032-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*ˆ%L*{]
"0"=hex:7e,01,50,25,04,01,d6,00,3d,01,d4,00,41,01,1e,00,2e,00,88,25,4c,00,7b,
01,00,00,76,00,36,00,00,00,00,00,00,00,00,00,00,00,7e,01,50,25,04,01,d6,00,\
"MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(3608)
c:\program files\Altap Salamander 2.5\plugins\salamext.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\windows\system32\PSIService.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\windows\system32\DRIVERS\xaudio.exe
c:\program files\Alwil Software\Avast4\ashMaiSv.exe
c:\program files\Alwil Software\Avast4\ashWebSv.exe
c:\windows\system32\conime.exe
c:\program files\Alwil Software\Avast4\ashDisp.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\OpenOffice.org 3\program\soffice.exe
c:\windows\ehome\ehmsas.exe
c:\program files\OpenOffice.org 3\program\soffice.bin
c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe
c:\program files\Synaptics\SynTP\SynTPHelper.exe
c:\program files\Hewlett-Packard\HP Health Check\hphc_service.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
.
**************************************************************************
.
Celkový čas: 2010-12-28 00:55:05 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-12-27 23:55
ComboFix2.txt 2010-12-27 23:20

Před spuštěním: Volných bajtů: 20 357 476 352
Po spuštění: Volných bajtů: 20 036 513 792

- - End Of File - - F082A1E449DED66343CF348089B34455

[vyosek]

Jeste jeden skript pro CF - postup je stejny

Kód: Vybrat vše

Firefox::
FF - Ext: CrowdStar Gamebar: toolbar@ask.com - %profile%\extensions\toolbar@ask.com

RegLock::
[HKEY_USERS\S-1-5-21-539910611-2828708226-889970032-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*ˆ%L*{]

RegNull::
[HKEY_USERS\S-1-5-21-539910611-2828708226-889970032-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*ˆ%L*{]

Registry::
[-HKEY_USERS\S-1-5-21-539910611-2828708226-889970032-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*ˆ%L*{]
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-539910611-2828708226-889970032-1000]
"EnableNotificationsRef"=dword:00000000

[katie123]

páni, ale je to dřina, že?

[vyosek]

No videl jsem uz i horsi Spustte jeste ten skript, dejte mi sem log a napiste jak se chova PC...

[katie123]

už to běží, za chvíli to snad bude...

[vyosek]

OK, jak se zatim dycha nasemu pacientovi Tenhle skript je spise uz jen drobnosti

[katie123]

pacientovi se daří dobře... je na pooperačním a už zkouší dýchat sám. )
jinak tady je log z posledního skriptu:

ComboFix 10-12-26.01 - Presario 28.12.2010 1:22.3.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3002.1948 [GMT 1:00]
Spuštěný z: c:\users\Presario\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Presario\Desktop\CFScript.txt
AV: avast! antivirus *Disabled/Outdated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! antivirus *Disabled/Outdated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-11-28 do 2010-12-28 )))))))))))))))))))))))))))))))
.

2010-12-28 00:27 . 2010-12-28 00:27 -------- d-----w- c:\users\Uživatel 2\AppData\Local\temp
2010-12-28 00:27 . 2010-12-28 00:27 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-12-27 22:47 . 2010-12-27 22:47 -------- d-----w- C:\rsit
2010-12-27 22:47 . 2010-12-27 22:47 -------- d-----w- c:\program files\trend micro
2010-12-27 19:35 . 2010-12-27 19:35 -------- d-----w- c:\program files\D-Tools
2010-12-09 22:40 . 2010-12-09 22:40 -------- d-----w- c:\programdata\InterAction studios
2010-12-09 22:34 . 2010-12-09 22:34 -------- d-----w- c:\program files\ReflexiveArcade
2010-12-09 22:21 . 2010-12-09 22:26 -------- d-----w- c:\programdata\FarmFrenzy2
2010-12-09 22:20 . 2010-12-09 22:20 -------- d-----w- c:\windows\Farm Frenzy 2

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-10 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-10 2153472]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-01-27 2387968]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-07-11 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-07-11 170520]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-07-11 145944]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-12-04 75016]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-06-20 1316136]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-06-24 320056]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2009-03-10 468264]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"WPCUMI"="c:\windows\system32\WpcUmi.exe" [2006-11-02 176128]

c:\users\Presario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.1.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-5-14 384512]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-539910611-2828708226-889970032-1000]
"EnableNotificationsRef"=dword:00000001

R2 gupdate1ca75116bb06f26;Služba Google Update (gupdate1ca75116bb06f26);c:\program files\Google\Update\GoogleUpdate.exe [2009-12-04 133104]
S1 aswSP;avast! Self Protection; [x]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2009-09-15 20560]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\DRIVERS\aswMonFlt.sys [2009-09-15 53328]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2008-06-30 112128]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-01-27 20:28 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://search13.net/
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
IE: {{14CD42DD-ABCD-3586-DCAB-40E3693E3737} - c:\program files\Stylish Profile\ct.htm
LSP: c:\windows\system32\wpclsp.dll
FF - ProfilePath - c:\users\Presario\AppData\Roaming\Mozilla\Firefox\Profiles\606wn3dq.default\
FF - prefs.js: keyword.URL - hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=CDS&o=16205&locale=en_US&apn_uid=62104789-A6B3-4B39-AFDD-536AE9AC465C&apn_ptnrs=QR&apn_sauid=188083C6-E089-40ED-A1EF-AEB387458274&apn_dtid=YYYYYYYYCZ&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: CuteMenus - Crystal SVG: {63df8e21-711c-4074-a257-b065cadc28d8} - %profile%\extensions\{63df8e21-711c-4074-a257-b065cadc28d8}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Free Lunch Design Toolbar: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - %profile%\extensions\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}
FF - Ext: AvantGarde Nightlife: {3fb63340-652a-11dd-ad8b-0800200c9a66} - %profile%\extensions\{3fb63340-652a-11dd-ad8b-0800200c9a66}
FF - Ext: Express Tab: {6236BA26-C117-4007-928C-DE0716C7FA82} - %profile%\extensions\{6236BA26-C117-4007-928C-DE0716C7FA82}
FF - Ext: Usage Stat: {6236BA26-C117-4007-928C-DE0716C7FA96} - %profile%\extensions\{6236BA26-C117-4007-928C-DE0716C7FA96}
FF - Ext: FBFan: {6236BA26-C117-4007-928C-DE0716C7FA99} - %profile%\extensions\{6236BA26-C117-4007-928C-DE0716C7FA99}
FF - Ext: CrowdStar Gamebar: toolbar@ask.com - %profile%\extensions\toolbar@ask.com
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-28 01:27
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-539910611-2828708226-889970032-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*ˆ%L*{]
"0"=hex:7e,01,50,25,04,01,d6,00,3d,01,d4,00,41,01,1e,00,2e,00,88,25,4c,00,7b,
01,00,00,76,00,36,00,00,00,00,00,00,00,00,00,00,00,7e,01,50,25,04,01,d6,00,\
"MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
.
Celkový čas: 2010-12-28 01:28:46
ComboFix-quarantined-files.txt 2010-12-28 00:28
ComboFix2.txt 2010-12-27 23:55
ComboFix3.txt 2010-12-27 23:20

Před spuštěním: Volných bajtů: 20 070 035 456
Po spuštění: Volných bajtů: 20 034 064 384

- - End Of File - - 1800C6CC43E4CA0FAF6E41884F428E59

[vyosek]

Zkuste aktualizovat Avast, v logu vypada ze neni aktualni - spustte tedy jeho aktualizaci rucne

[katie123]

určitě to zkusím, ale momentálně nemám na našem pacientovi k dispozici internet. ale udělám to co nejdřív...

[vyosek]

Odinstalujte Combofix

• Start - Spustit (nebo pouzijte klavesobou zkratku Win+R)
• Napiste ComboFix /Uninstall
• Stisknete Enter
• Tohle smaze Combofix a jeho slozky

T-Cleaner http://sweb.cz/Marinus/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis)
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

Dejte novy log a napiste jak se chova PC

Mrknu na nej ale az rano, potrebuju trochu spanku pred pracovnim procesem

[katie123]

taky to asi provedu až dopoledne.. jsem už docela unavená... byl to náročný večer.... )

[vyosek]

Ok, budu tu dopoledne a pak behem odpoledne budu nakukovat...

Jeste jedna vec pro jistotu...Po odinstalaci CF a T-Cleaneru, jeste spustte MBAM(navod nize), pak muzete pokracovat OTC, TFC a CCleanerem

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) (viz muj podpis)

• Provedte aktualizaci - treti zalozka
• Provedte uplny sken - nic nemazte
• MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

[vyosek]

Zitra nashledanou a dobrou

[katie123]

hezký večer přeju
čistící akce mám téměř zdárně za sebou...
teda asi budu muset vynechat MBAM, jelikož nemám stále k dispozici net na pacientovi... je to velký problém?
A ještě jeden dotaz... Jelikož jsem sem dávala tolik logů ze všeho možného, jaký budete chtít po dokončení všech doporučených operací?

[vyosek]

MBAM bez aktualizace nema cenu Udelejte jej az budete mit internet

Budu chtit log z RSIT - klik na nej do meho podpisu - je to ten zcela prvotni co jsem chtel...