win32

Zpráva

#16 Příspěvek od **vyosek** » 07 Ún 2011 21:27

ruzajska napsal:prosííím poraďte někdo co teď s tím?

Podivejte, nase forum funguje na bazti dobrovolnosti = radci jsou zde ve svem volnem case a zadarmo = nemuzeme tu byt porad

Dekuji kolegovi Martymu za zaskok

Pokud nemate, tak presunte Combofix na plochu

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

File::
c:\windows\system32\drivers\29868122.sys
c:\windows\system32\drivers\2986812.sys
c:\windows\system32\drivers\29868121.sys
c:\windows\system32\MAI10.tmp
c:\windows\system32\MAID.tmp
c:\windows\system32\drivers\Changer.sys
c:\windows\system32\dllcache\changer.sys
c:\windows\system32\drivers\ulhzyt.sys
c:\windows\system32\drivers\qwdevkxjhulsclp.sys
c:\windows\system32\drivers\hibrerxurltsb.sys
c:\windows\system32\drivers\zblasdxese.sys
c:\windows\system32\drivers\hvmuv.sys
c:\windows\System32\Drivers\sygvrzwm.sys
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

DDS::
uStart Page = hxxp://home.mywebsearch.com/index.jhtml ... pk6Qv4COKw
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mStart Page = hxxp://home.sweetim.com
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

Firefox::
FF - ProfilePath - c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.sweetim.com/search.asp?src=2&q=
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.mywebsearch.com/mywebsear ... searchfor=
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: SweetIM Toolbar for Firefox: {EEE6C361-6118-11DC-9C72-001320C79847} - %profile%\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}

RegLock::
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

FCopy::
c:\windows\system32\dllcache\tcpip.sys | c:\windows\system32\drivers\tcpip.sys

Folder::
c:\program files\SweetIM

Registry::
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"=-
[-HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[-HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[-HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[-HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NBJ"=-
"swg"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PCSuiteTrayApplication"=-
"SunJavaUpdateSched"=-
"Adobe Reader Speed Launcher"=-
"Adobe ARM"=-
"SweetIM"=-
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Nokia.PCSync"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000000
[-HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
[-HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

Driver::
29868122
29868121ffrhofavazf
ffrhofavazf
htewmis
htfxi
xwbevxmqi
zdqhllgl
gupdate1ca7ac5d1ede8f
sygvrzwm

Ulozte vytvoreny TXT jako CFScript.txt
Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

ruzajska · #17 Příspěvek od **ruzajska** » 08 Ún 2011 11:12

jj ,to já samozřejmě chápu,jen jsem se pokoušela jestli není někdo on line,kdo by poradil

ComboFix 11-02-06.02 - Martin 07.02.2011 23:14:25.2.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1014.461 [GMT 1:00]
Spuštěný z: c:\documents and settings\Martin\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Martin\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

FILE ::
"c:\windows\system32\dllcache\changer.sys"
"c:\windows\system32\drivers\2986812.sys"
"c:\windows\system32\drivers\29868121.sys"
"c:\windows\system32\drivers\29868122.sys"
"c:\windows\system32\drivers\hibrerxurltsb.sys"
"c:\windows\system32\drivers\hvmuv.sys"
"c:\windows\system32\drivers\Changer.sys"
"c:\windows\system32\drivers\qwdevkxjhulsclp.sys"
"c:\windows\System32\Drivers\sygvrzwm.sys"
"c:\windows\system32\drivers\ulhzyt.sys"
"c:\windows\system32\drivers\zblasdxese.sys"
"c:\windows\system32\MAI10.tmp"
"c:\windows\system32\MAID.tmp"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
PEV Error: LocalSettingsFile

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components\ITB_History.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\prefs.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\user.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome.manifest
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\about.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\about.xul
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\autocomplete.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\exitobserver.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\globals.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\highlight.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtabs.css
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtabs.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtoolbar.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtoolbar.xul
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\bgLarge.gif
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\bgSmall.gif
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\buttonBlue.gif
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\buttonGreen.gif
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\searchLogo.gif
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\localfileupdate.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\menu-button.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_bg.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_cz.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_de.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_en.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_es.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_fr.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_he.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_it.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_ru.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_sk.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_tr.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_uk.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\options.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\options.xul
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\parsegamesxml.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\parsemenuxml.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\peoplesearch.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\peoplesearch.xul
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\prefutils.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\search.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\sitespanel.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\splitter.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\statistics.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\tabcontext.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\utilities.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\voucher.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\zoom.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\about.css
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\abt.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\ain.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\ang.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\arrow_eng.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\arrow_heb.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\btn_bg.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\btn_bg_lite.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\default.css
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\dis.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\dropmarker.css
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\20minutos.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\about.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\abv.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aktuality.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aktualne.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\alljobs.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\allocine.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\altervista.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\amazon.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\answers.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aol.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aolradio.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\apple.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ard.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\as.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\atlas.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\atlassk.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aufeminin.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\autobazar.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\autobazar1.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\autocz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\azet.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bazos.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bbc.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bbc.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bigmir.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\billiger.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bing.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\blesk.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bleskove.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\btv.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\calcalist.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\cas.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\cdiscount.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\centrum.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ciao.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\cnet.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\cnn.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\commentcamarche.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\corriere.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\csfd.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\d.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\dailymotion.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\data.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\deezer.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\default.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\delicious.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\depositfiles.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\deviantart.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\diary.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\digg.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\dir.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\disney.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\diva.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\dnevnik.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\doctissimo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\donanimhaber.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ebay.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ebayanuncios.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ekolay.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\elmundo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\elpais.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\eurosport.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\expats.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\facebook.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\finance.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\firmy.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\flickr.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\flix.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\fotolog.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\fox.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\france2.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\free.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\garanti.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gazeta.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gazetevatan.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gazzetta.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gbg.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gepime.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gismeteo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gittigidiyor.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\globes.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gmail.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gmx.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\google.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\googleearth.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\googletranslate.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\haaretz.gif
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\haaretz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\haber7.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\haberturk.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\hepsiburada.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\horadot.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\horoskopy.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\hurriyet.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\championat.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\chip.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\icq.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\idnes.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ilike.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ilmeteo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\imageshack.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\imdb.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\impulse.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\infojobs.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\interfacelift.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\internethaber.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\iserialy.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\iua.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\izlesene.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\jappy.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\jeux.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\jeuxvideo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\jing.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\joj.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\kijiji.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\kinopoisk.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\korrespondent.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lastfm.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\leboncoin.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lemonde.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lenta.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\leonardo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lequipe.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\libero.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\libimseti.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lide.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\linternaute.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\livejournal.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mailru.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mako.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mappy.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mapy.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\marca.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\marketgid.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\markiza.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\megavideo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\meinvz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mekusharim.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\meta.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\milanobakeca.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\milliyet.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mimibazar.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\minibazar.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mobilen.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\morfix.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mouse.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mymovies.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\myspace.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\najisto.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\nana.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\nana10.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\netgames.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\netlog.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\novinky.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\novoteka.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\nrg.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ntvmsnbc.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\nytimes.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\odnoklassniki.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\one.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\orange.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\otto.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\pagesjaunes.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\peliculasyonkis.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\photobucket.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\picnik.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\pravda.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\profesia.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\prosieben.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\r10.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rapidshare.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rbc.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\repubblica.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rian.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rozetka.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rtl.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sabah.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sahibinden.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sat1.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\segundamano.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\seriesyonkis.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\seznam.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\seznamemail.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sfr.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\shmu.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\schuelervz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\skyrock.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\slsp.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sme.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\snimka.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\softonic.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\spiegel.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\splinder.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sport-express.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sport5.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sportal.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sportcz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sportes.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sporx.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\stahuj.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\stream.bmp
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\stream.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\studivz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\subito.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\supercz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\superhry.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\svejo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\t-online.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\tapuz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\taringa.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\telecinco.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\terra.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\tf1.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\themarker.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\tiscali.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\topky.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\torrents.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\travian.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\tv.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\twitter.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ucoz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ukr.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vbox7.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vesti.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vimeo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\virgilio.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vkontakte.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vodafone.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\walla.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wallmart.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\walmart.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wamba.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wat.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\weather.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\web.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wer-kennt-wen.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wetter.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wikipedia.ico

#18 Příspěvek od **vyosek** » 08 Ún 2011 11:17

Log neni cely, rozdelte jej do vice prispevku

ruzajska · #19 Příspěvek od **ruzajska** » 08 Ún 2011 11:21

c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wolframalpha.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\yad2.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\yahoo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ynet.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\youtube.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\zamunda.bmp
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\zap.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\zena.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\hide.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\icons.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\logo_small.gif
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\menu.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\more_vouchers_r.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\more_vouchers_y.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\options.css
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\peoplesearch.css
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\pin.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\pinc.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\powerd1.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\remove.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\reset.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\search_arrow.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\search_bg.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\unpin.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\voucher_bg.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\voucher_bg_y.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\install.rdf
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\manifest.mf
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.rsa
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.sf
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.gif
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.src
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\blacklist.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_33.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_34.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_359.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_380.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_39.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_42.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_4201.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_49.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_7.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_90.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_972.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\voucher_list.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\components\SIMAutoCompleteSearch.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome.manifest
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar.jar
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\install.rdf
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF\manifest.mf
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF\zigbert.rsa
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF\zigbert.sf
c:\program files\SweetIM
c:\program files\SweetIM\Messenger\default.xml
c:\program files\SweetIM\Messenger\mgAdaptersProxy.dll
c:\program files\SweetIM\Messenger\mgAIMAuto.dll
c:\program files\SweetIM\Messenger\mgAIMMessengerAdapter.dll
c:\program files\SweetIM\Messenger\mgArchive.dll
c:\program files\SweetIM\Messenger\mgcommon.dll
c:\program files\SweetIM\Messenger\mgcommunication.dll
c:\program files\SweetIM\Messenger\mgconfig.dll
c:\program files\SweetIM\Messenger\mgFlashPlayer.dll
c:\program files\SweetIM\Messenger\mghooking.dll
c:\program files\SweetIM\Messenger\mgICQAuto.dll
c:\program files\SweetIM\Messenger\mgICQMessengerAdapter.dll
c:\program files\SweetIM\Messenger\mgIEPlayer.dll
c:\program files\SweetIM\Messenger\mglogger.dll
c:\program files\SweetIM\Messenger\mgMediaPlayer.dll
c:\program files\SweetIM\Messenger\mgMsnAuto.dll
c:\program files\SweetIM\Messenger\mgMsnMessengerAdapter.dll
c:\program files\SweetIM\Messenger\mgsimcommon.dll
c:\program files\SweetIM\Messenger\mgSweetIM.dll
c:\program files\SweetIM\Messenger\mgUpdateSupport.dll
c:\program files\SweetIM\Messenger\mgxml_wrapper.dll
c:\program files\SweetIM\Messenger\mgYahooAuto.dll
c:\program files\SweetIM\Messenger\mgYahooMessengerAdapter.dll
c:\program files\SweetIM\Messenger\msvcp71.dll
c:\program files\SweetIM\Messenger\msvcr71.dll
c:\program files\SweetIM\Messenger\resources\images\AudibleButton.png
c:\program files\SweetIM\Messenger\resources\images\DisplayPicturesButton.png
c:\program files\SweetIM\Messenger\resources\images\EmoticonButton.png
c:\program files\SweetIM\Messenger\resources\images\GamesButton.png
c:\program files\SweetIM\Messenger\resources\images\KeyboardButton.png
c:\program files\SweetIM\Messenger\resources\images\NudgeButton.png
c:\program files\SweetIM\Messenger\resources\images\SoundFxButton.png
c:\program files\SweetIM\Messenger\resources\images\WinksButton.png
c:\program files\SweetIM\Messenger\SweetIM.exe
c:\program files\SweetIM\Toolbars\Internet Explorer\ClearHist.exe
c:\program files\SweetIM\Toolbars\Internet Explorer\conf\logger.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\default.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\mgcommon.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgconfig.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe
c:\program files\SweetIM\Toolbars\Internet Explorer\mghooking.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mglogger.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgsimcommon.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgxml_wrapper.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest
c:\program files\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcm90.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcp90.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcr90.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\about.html
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\affid.dat
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\basis.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\bing.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\clear-history.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\content-notifier-anim-over.gif
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\content-notifier-anim.gif
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\content-notifier.js
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\dating.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\dictionary.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\e_cards.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\eye_icon.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\eye_icon_over.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\find.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\free_stuff.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\games.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\glitter.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\google.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\help.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\highlight.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\locales.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\logo_16x16.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\logo_21x18.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\logo_32x32.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\logo_about.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\more-search-providers.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\music.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\news.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\options.html
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\photos.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\search-current-site.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\shopping.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\SmileySmile.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\SmileyWink.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\sweetim_text.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\toolbar.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\version.txt
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\video.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\web-search.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\web-toolbar.js
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\yahoo.png
c:\windows\system32\dllcache\changer.sys
c:\windows\system32\drivers\2986812.sys
c:\windows\system32\drivers\29868121.sys
c:\windows\system32\MAI10.tmp
c:\windows\system32\MAID.tmp
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

.
--------------- FCopy ---------------

c:\windows\system32\dllcache\tcpip.sys --> c:\windows\system32\drivers\tcpip.sys
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_29868122
-------\Service_29868122
-------\Service_ffrhofavazf
-------\Service_htewmis
-------\Service_htfxi
-------\Service_sygvrzwm
-------\Service_xwbevxmqi
-------\Service_zdqhllgl
-------\Legacy_29868121
-------\Legacy_setup_9.0.0.722_04.02.2011_08-53drv
-------\Service_29868121
-------\Service_setup_9.0.0.722_04.02.2011_08-53drv

((((((((((((((((((((((((( Soubory vytvořené od 2011-01-07 do 2011-02-07 )))))))))))))))))))))))))))))))
.

2011-02-07 20:35 . 2010-04-29 14:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-02-07 20:35 . 2011-02-07 20:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-02-07 20:35 . 2010-04-29 14:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-02-07 16:26 . 2011-02-07 16:27 -------- d-----w- c:\program files\trend micro
2011-02-07 16:26 . 2011-02-07 16:27 -------- d-----w- C:\rsit
2011-02-07 07:21 . 2011-02-07 07:21 -------- d-----w- c:\documents and settings\NetworkService\Plocha
2011-02-06 21:27 . 2011-02-06 21:27 -------- d-----w- c:\documents and settings\LocalService\Plocha
2011-02-05 20:53 . 2011-02-05 20:53 18300 ----a-w- c:\windows\system32\MAIF.tmp
2011-02-05 20:08 . 2011-02-05 20:08 18300 ----a-w- c:\windows\system32\MAIA.tmp
2011-02-05 19:06 . 2011-02-05 19:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PCSettings
2011-02-05 19:03 . 2011-02-05 19:03 -------- d-----w- c:\program files\Windows Sidebar
2011-02-05 13:31 . 2011-02-05 13:31 18300 ----a-w- c:\windows\system32\MAIE.tmp
2011-02-05 02:57 . 2008-04-13 19:40 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys
2011-02-05 02:57 . 2008-04-13 19:40 34688 ----a-w- c:\windows\system32\dllcache\lbrtfdc.sys
2011-02-05 02:57 . 2008-04-13 19:40 8192 ----a-w- c:\windows\system32\drivers\Changer.sys
2011-02-03 10:15 . 2011-02-03 10:15 -------- d-----w- c:\documents and settings\Martin\Data aplikací\Ankh - Heart of Osiris
2011-02-03 09:42 . 2011-02-03 09:42 -------- d-----w- c:\documents and settings\Martin\Data aplikací\Trio
2011-02-03 09:41 . 2011-02-05 17:33 -------- d-----w- c:\program files\Smajlici
2011-02-01 15:30 . 2011-02-01 15:30 1520004 ----a-w- c:\program files\wrar393cz.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-13 08:47 . 2010-06-29 13:37 38848 ----a-w- c:\windows\avastSS.scr
2011-01-13 08:47 . 2010-06-18 14:03 188216 ----a-w- c:\windows\system32\aswBoot.exe
2011-01-13 08:41 . 2010-06-18 14:03 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-01-13 08:40 . 2010-06-18 14:03 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-01-13 08:40 . 2010-06-18 14:03 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-01-13 08:39 . 2010-06-18 14:03 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-01-13 08:37 . 2010-06-18 14:03 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-01-13 08:37 . 2010-06-18 14:03 29392 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-01-13 08:37 . 2010-06-18 14:03 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-11-18 18:15 . 2004-08-18 03:00 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-01 16:32 . 2010-11-01 16:29 1141200 ----a-w- c:\program files\imikimi_installer_0.5.1.exe
2010-06-29 14:57 . 2010-06-29 14:57 8969279 ----a-w- c:\program files\seznam-firefox-win32-cs-3.6.3.exe
2010-06-29 14:16 . 2010-06-29 14:15 2062448 ----a-w- c:\program files\postak-2.3.5.exe
2009-12-12 03:15 . 2009-12-12 03:15 7884856 ----a-w- c:\program files\flashget3.2.0.1060en.exe
2009-11-04 17:15 . 2009-11-04 17:15 204280 ----a-w- c:\program files\cpsetup.exe
2009-11-04 10:55 . 2009-11-04 10:53 9950429 ----a-w- c:\program files\reproinst.exe
2009-11-04 10:39 . 2009-11-04 10:39 4078131 ----a-w- c:\program files\RCESetup.exe
2009-07-29 19:34 . 2009-07-29 19:34 7332280 ----a-w- c:\program files\FirefoxSetup3.0cz.exe
2009-06-25 09:40 . 2009-06-25 09:40 16786752 ----a-w- c:\program files\install_icq65.exe
2009-06-25 08:46 . 2009-06-24 20:16 1976104 ----a-w- c:\program files\SkypeSetup.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-06-20 451872]
"Seznam Postak"="c:\documents and settings\Martin\Local Settings\Data aplikací\Seznam.cz\postak.exe" [2009-09-23 434840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"preload"="c:\windows\RUNXMLPL.exe" [2007-04-21 20480]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-09-07 1015808]
"RTHDCPL"="RTHDCPL.EXE" [2007-05-28 16132608]
"AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [2005-06-11 53248]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-18 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-18 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-18 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-18 455168]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-06-13 142104]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-06-13 162584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-06-13 138008]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-07 102400]
"ePower_DMC"="c:\acer\Empowering Technology\ePower\ePower_DMC.exe" [2007-07-04 475136]
"Boot"="c:\acer\Empowering Technology\ePower\Boot.exe" [2006-03-15 579584]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-05-28 342528]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\eRAgent.exe" [2007-07-11 421888]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2007-10-17 858632]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 644696]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-03 1603152]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 79400]
"Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 583048]
"VMSnap3"="c:\windows\VMSnap3.exe" [2006-08-30 49152]
"Domino"="c:\windows\Domino.exe" [2006-06-28 49152]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2011-01-13 3396624]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Martin\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
setup_9.0.0.722_04.02.2011_08-53.lnk - c:\documents and settings\Martin\Plocha\Virus Removal Tool\setup_9.0.0.722_04.02.2011_08-53\startup.exe [2011-2-5 72208]
VP-EYE.lnk - c:\vp-eye\Control\Vpeyev4.exe [2009-7-4 1306624]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-4-1 568176]
Mˇstnˇ vyhled v nˇ.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2007-2-5 118784]
TL-WN321G Wireless Utility.lnk - c:\program files\TP-LINK\TL-WN321G Wireless Utility\Installer\WINXP\TWCU.exe [2009-12-11 622592]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Acer Empowering Technology.lnk]
backup=c:\windows\pss\Acer Empowering Technology.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer ePresentation HPD]
2007-03-02 09:25 208896 ----a-w- c:\acer\Empowering Technology\ePresentation\ePresentation.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\WINDOWS\\system32\\winver.exe"=
"$INSTDIR\\FlvDetector.exe"= c:\\Program Files\\FlashGet Network\\FlashGet 3\\FlvDetector.exe
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1700:TCP"= 1700:TCP:MioNet Remote Drive Access
"1641:TCP"= 1641:TCP:MioNet Remote Drive Verification

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [18.6.2010 15:03 294608]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [18.6.2010 15:03 17744]
S2 gupdate1ca7ac5d1ede8fa;Služba Google Update (gupdate1ca7ac5d1ede8fa);c:\program files\Google\Update\GoogleUpdate.exe [12.12.2009 1:55 133104]
S3 Axtmvflt;Axesstel USB Filter Service;c:\windows\system32\DRIVERS\Axtmvflt.sys --> c:\windows\system32\DRIVERS\Axtmvflt.sys [?]
S3 Axtmvmdm;Axesstel USB Modem;c:\windows\system32\DRIVERS\Axtmvmdm.sys --> c:\windows\system32\DRIVERS\Axtmvmdm.sys [?]
S3 Axtmvprt;Axesstel Diagnostic Port;c:\windows\system32\Drivers\Axtmvprt.sys --> c:\windows\system32\Drivers\Axtmvprt.sys [?]
S3 vmfilter303;vmfilter303;c:\windows\system32\drivers\vmfilter303.sys --> c:\windows\system32\drivers\vmfilter303.sys [?]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2007-06-20 10:47 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Connection Wizard,ShellNext = iexplore
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
FF - ProfilePath - c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Seznam liĹˇtiÄŤka: {ea614400-e918-4741-9a97-7a972ff7c30b} - c:\program files\Mozilla Firefox\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-07 23:33
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.EXE'(2376)
c:\program files\ScanSoft\OmniPageSE4\OpHookSE4.dll
c:\windows\system32\MSNCHATHOOK.DLL
c:\windows\system32\sysenv.dll
c:\windows\system32\CryptoAPI.dll
c:\windows\system32\ShowErrMsg.dll
c:\windows\system32\MFC71U.DLL
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
c:\program files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
c:\program files\Canon\IJPLM\IJPLMSVC.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\SearchIndexer.exe
c:\acer\Empowering Technology\eLock\Service\eLockServ.exe
c:\windows\system32\wscntfy.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\rundll32.exe
c:\windows\system32\igfxsrvc.exe
c:\windows\system32\SearchProtocolHost.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\system32\SearchFilterHost.exe
.
**************************************************************************
.
Celkový čas: 2011-02-07 23:39:23 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-02-07 22:39
ComboFix2.txt 2011-02-07 18:36

Před spuštěním: Volných bajtů: 26 317 070 336
Po spuštění: Volných bajtů: 26 296 049 664

- - End Of File - - B058126672E20AE37A82DBF90B4873BA

#20 Příspěvek od **vyosek** » 08 Ún 2011 11:26

Nasledujici soubory otestujte na VirusTotalu (viz muj podpis)

c:\windows\system32\DRIVERS\Axtmvflt.sys
c:\windows\system32\drivers\vmfilter303.sys
Kliknete na Prochazet
Soubor nehledejte, jen vlozte cestu souboru, ktery chci otestovat
Kliknete na Send File
Pokud na Vas vyskoci obrazovka jako je nize, tak kliknete na ReAnalyse
Vysledek analyzy sem vlozte (jako odkaz)

ruzajska · #21 Příspěvek od **ruzajska** » 08 Ún 2011 11:34

jsem děsně tupá,nevim jak tam vložit tu cestu souboru

#22 Příspěvek od **vyosek** » 08 Ún 2011 11:49

Oznacite si ten prvni modry radek, date ctrl+c, pujdete na tu stranku VirusTotalu, kliknete na Prochazet a date ctrl+v
Date Odeslat, pokud se objevi obrezk jak jsem popsal, date Reanalyse, pockat az dobehne skenovani a nahore v prohlizeci jak pisete adresy, kliknete do nej, date opet ctrl+c a sem na foru date ctrl+v

ruzajska · #23 Příspěvek od **ruzajska** » 08 Ún 2011 12:00

píše mi to že tento soubor nebyl nalezen

ruzajska · #24 Příspěvek od **ruzajska** » 08 Ún 2011 12:00

u druhého také

#25 Příspěvek od **vyosek** » 08 Ún 2011 12:04

Fajn, takze si dame jeste jeden skript pro ComboFix - postup je stejny jako minule

Kód: Vybrat vše

File::
c:\windows\system32\DRIVERS\Axtmvflt.sys
c:\windows\system32\DRIVERS\Axtmvmdm.sys
c:\windows\system32\Drivers\Axtmvprt.sys
c:\windows\system32\drivers\vmfilter303.sys

Driver::
Axtmvprt
vmfilter303
gupdate1ca7ac5d1ede8fa
Axtmvmdm
Axtmvflt

ruzajska · #26 Příspěvek od **ruzajska** » 08 Ún 2011 13:35

huráááá konečně mě to pustilo.po restartu či vypnutí pc mě to vždy nechce třeba i třičtvrtě hod.pustit k ničemu.blbé je že mi nejde ani zvuk a ani možnost přepnutí netu na rychlejší výkon,obě položky se mi z lišty ztratili.hned to posílám

ruzajska · #27 Příspěvek od **ruzajska** » 08 Ún 2011 13:37

ComboFix 11-02-06.02 - Martin 08.02.2011 12:46:23.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1014.331 [GMT 1:00]
Spuštěný z: c:\documents and settings\Martin\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Martin\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

FILE ::
"c:\windows\system32\DRIVERS\Axtmvflt.sys"
"c:\windows\system32\DRIVERS\Axtmvmdm.sys"
"c:\windows\system32\Drivers\Axtmvprt.sys"
"c:\windows\system32\drivers\vmfilter303.sys"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_GUPDATE1CA7AC5D1EDE8FA
-------\Service_Axtmvflt
-------\Service_Axtmvmdm
-------\Service_Axtmvprt
-------\Service_gupdate1ca7ac5d1ede8fa
-------\Service_vmfilter303

((((((((((((((((((((((((( Soubory vytvořené od 2011-01-08 do 2011-02-08 )))))))))))))))))))))))))))))))
.

2011-02-07 20:35 . 2010-04-29 14:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-02-07 20:35 . 2011-02-07 20:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-02-07 20:35 . 2010-04-29 14:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-02-07 16:26 . 2011-02-07 16:27 -------- d-----w- c:\program files\trend micro
2011-02-07 16:26 . 2011-02-07 16:27 -------- d-----w- C:\rsit
2011-02-07 07:21 . 2011-02-07 07:21 -------- d-----w- c:\documents and settings\NetworkService\Plocha
2011-02-06 21:27 . 2011-02-06 21:27 -------- d-----w- c:\documents and settings\LocalService\Plocha
2011-02-05 20:53 . 2011-02-05 20:53 18300 ----a-w- c:\windows\system32\MAIF.tmp
2011-02-05 20:08 . 2011-02-05 20:08 18300 ----a-w- c:\windows\system32\MAIA.tmp
2011-02-05 19:06 . 2011-02-05 19:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PCSettings
2011-02-05 19:03 . 2011-02-05 19:03 -------- d-----w- c:\program files\Windows Sidebar
2011-02-05 13:31 . 2011-02-05 13:31 18300 ----a-w- c:\windows\system32\MAIE.tmp
2011-02-05 02:57 . 2008-04-13 19:40 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys
2011-02-05 02:57 . 2008-04-13 19:40 34688 ----a-w- c:\windows\system32\dllcache\lbrtfdc.sys
2011-02-05 02:57 . 2008-04-13 19:40 8192 ----a-w- c:\windows\system32\drivers\Changer.sys
2011-02-03 10:15 . 2011-02-03 10:15 -------- d-----w- c:\documents and settings\Martin\Data aplikací\Ankh - Heart of Osiris
2011-02-03 09:42 . 2011-02-03 09:42 -------- d-----w- c:\documents and settings\Martin\Data aplikací\Trio
2011-02-03 09:41 . 2011-02-05 17:33 -------- d-----w- c:\program files\Smajlici
2011-02-01 15:30 . 2011-02-01 15:30 1520004 ----a-w- c:\program files\wrar393cz.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-13 08:47 . 2010-06-29 13:37 38848 ----a-w- c:\windows\avastSS.scr
2011-01-13 08:47 . 2010-06-18 14:03 188216 ----a-w- c:\windows\system32\aswBoot.exe
2011-01-13 08:41 . 2010-06-18 14:03 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-01-13 08:40 . 2010-06-18 14:03 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-01-13 08:40 . 2010-06-18 14:03 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-01-13 08:39 . 2010-06-18 14:03 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-01-13 08:37 . 2010-06-18 14:03 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-01-13 08:37 . 2010-06-18 14:03 29392 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-01-13 08:37 . 2010-06-18 14:03 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-11-18 18:15 . 2004-08-18 03:00 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-01 16:32 . 2010-11-01 16:29 1141200 ----a-w- c:\program files\imikimi_installer_0.5.1.exe
2010-06-29 14:57 . 2010-06-29 14:57 8969279 ----a-w- c:\program files\seznam-firefox-win32-cs-3.6.3.exe
2010-06-29 14:16 . 2010-06-29 14:15 2062448 ----a-w- c:\program files\postak-2.3.5.exe
2009-12-12 03:15 . 2009-12-12 03:15 7884856 ----a-w- c:\program files\flashget3.2.0.1060en.exe
2009-11-04 17:15 . 2009-11-04 17:15 204280 ----a-w- c:\program files\cpsetup.exe
2009-11-04 10:55 . 2009-11-04 10:53 9950429 ----a-w- c:\program files\reproinst.exe
2009-11-04 10:39 . 2009-11-04 10:39 4078131 ----a-w- c:\program files\RCESetup.exe
2009-07-29 19:34 . 2009-07-29 19:34 7332280 ----a-w- c:\program files\FirefoxSetup3.0cz.exe
2009-06-25 09:40 . 2009-06-25 09:40 16786752 ----a-w- c:\program files\install_icq65.exe
2009-06-25 08:46 . 2009-06-24 20:16 1976104 ----a-w- c:\program files\SkypeSetup.exe
.

((((((((((((((((((((((((((((( SnapShot@2011-02-08_11.27.19 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-02-08 11:58 . 2011-02-08 11:58 16384 c:\windows\Temp\Perflib_Perfdata_9a4.dat
+ 2011-02-08 11:56 . 2011-02-08 11:56 16384 c:\windows\Temp\Perflib_Perfdata_7e8.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-06-20 451872]
"Seznam Postak"="c:\documents and settings\Martin\Local Settings\Data aplikací\Seznam.cz\postak.exe" [2009-09-23 434840]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-10-09 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"preload"="c:\windows\RUNXMLPL.exe" [2007-04-21 20480]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-09-07 1015808]
"RTHDCPL"="RTHDCPL.EXE" [2007-05-28 16132608]
"AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [2005-06-11 53248]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-18 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-18 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-18 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-18 455168]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-06-13 142104]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-06-13 162584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-06-13 138008]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-07 102400]
"ePower_DMC"="c:\acer\Empowering Technology\ePower\ePower_DMC.exe" [2007-07-04 475136]
"Boot"="c:\acer\Empowering Technology\ePower\Boot.exe" [2006-03-15 579584]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-05-28 342528]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\eRAgent.exe" [2007-07-11 421888]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2007-10-17 858632]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 644696]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-03 1603152]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 79400]
"Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 583048]
"VMSnap3"="c:\windows\VMSnap3.exe" [2006-08-30 49152]
"Domino"="c:\windows\Domino.exe" [2006-06-28 49152]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2011-01-13 3396624]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Martin\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
setup_9.0.0.722_04.02.2011_08-53.lnk - c:\documents and settings\Martin\Plocha\Virus Removal Tool\setup_9.0.0.722_04.02.2011_08-53\startup.exe [2011-2-5 72208]
VP-EYE.lnk - c:\vp-eye\Control\Vpeyev4.exe [2009-7-4 1306624]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-4-1 568176]
Mˇstnˇ vyhled v nˇ.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2007-2-5 118784]
TL-WN321G Wireless Utility.lnk - c:\program files\TP-LINK\TL-WN321G Wireless Utility\Installer\WINXP\TWCU.exe [2009-12-11 622592]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Acer Empowering Technology.lnk]
backup=c:\windows\pss\Acer Empowering Technology.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer ePresentation HPD]
2007-03-02 09:25 208896 ----a-w- c:\acer\Empowering Technology\ePresentation\ePresentation.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\WINDOWS\\system32\\winver.exe"=
"$INSTDIR\\FlvDetector.exe"= c:\\Program Files\\FlashGet Network\\FlashGet 3\\FlvDetector.exe
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1700:TCP"= 1700:TCP:MioNet Remote Drive Access
"1641:TCP"= 1641:TCP:MioNet Remote Drive Verification

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [18.6.2010 15:03 294608]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [18.6.2010 15:03 17744]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2007-06-20 10:47 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Connection Wizard,ShellNext = iexplore
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
FF - ProfilePath - c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Seznam liĹˇtiÄŤka: {ea614400-e918-4741-9a97-7a972ff7c30b} - c:\program files\Mozilla Firefox\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-08 12:58
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.EXE'(3456)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\MSNCHATHOOK.DLL
c:\windows\system32\sysenv.dll
c:\windows\system32\CryptoAPI.dll
c:\windows\system32\ShowErrMsg.dll
c:\windows\system32\MFC71U.DLL
c:\program files\ScanSoft\OmniPageSE4\OpHookSE4.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
c:\program files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
c:\program files\Canon\IJPLM\IJPLMSVC.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\SearchIndexer.exe
c:\acer\Empowering Technology\eLock\Service\eLockServ.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\SearchProtocolHost.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\rundll32.exe
c:\windows\system32\igfxsrvc.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\system32\SearchFilterHost.exe
.
**************************************************************************
.
Celkový čas: 2011-02-08 13:03:43 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-02-08 12:03
ComboFix2.txt 2011-02-08 11:30
ComboFix3.txt 2011-02-07 22:39
ComboFix4.txt 2011-02-07 18:36

Před spuštěním: Volných bajtů: 26 285 617 152
Po spuštění: Volných bajtů: 26 262 196 224

- - End Of File - - ED58E484F55FAB3DA2BF9E4F03FE672D

#28 Příspěvek od **vyosek** » 08 Ún 2011 13:41

Restartujte PC, mackejte F8, zvolte Posledni znama funkcni konfigurace - tim dostaneme PC do stavu pred poslednim skriptem ComboFixem

Pak jak Vam PC nabehne, tak aplikujte tento skript pro ComboFix - odpalili jsme tam asi jednu soucast

Kód: Vybrat vše

File::
c:\windows\system32\DRIVERS\Axtmvflt.sys
c:\windows\system32\DRIVERS\Axtmvmdm.sys
c:\windows\system32\Drivers\Axtmvprt.sys

Driver::
Axtmvprt
gupdate1ca7ac5d1ede8fa
Axtmvmdm
Axtmvflt

ruzajska · #29 Příspěvek od **ruzajska** » 08 Ún 2011 17:21

ComboFix 11-02-06.02 - Martin 08.02.2011 17:06:05.5.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1014.460 [GMT 1:00]
Spuštěný z: c:\documents and settings\Martin\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Martin\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

FILE ::
"c:\windows\system32\DRIVERS\Axtmvflt.sys"
"c:\windows\system32\DRIVERS\Axtmvmdm.sys"
"c:\windows\system32\Drivers\Axtmvprt.sys"
.

((((((((((((((((((((((((( Soubory vytvořené od 2011-01-08 do 2011-02-08 )))))))))))))))))))))))))))))))
.

2011-02-07 20:35 . 2010-04-29 14:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-02-07 20:35 . 2011-02-07 20:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-02-07 20:35 . 2010-04-29 14:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-02-07 16:26 . 2011-02-07 16:27 -------- d-----w- c:\program files\trend micro
2011-02-07 16:26 . 2011-02-07 16:27 -------- d-----w- C:\rsit
2011-02-07 07:21 . 2011-02-07 07:21 -------- d-----w- c:\documents and settings\NetworkService\Plocha
2011-02-06 21:27 . 2011-02-06 21:27 -------- d-----w- c:\documents and settings\LocalService\Plocha
2011-02-05 20:53 . 2011-02-05 20:53 18300 ----a-w- c:\windows\system32\MAIF.tmp
2011-02-05 20:08 . 2011-02-05 20:08 18300 ----a-w- c:\windows\system32\MAIA.tmp
2011-02-05 19:06 . 2011-02-05 19:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PCSettings
2011-02-05 19:03 . 2011-02-05 19:03 -------- d-----w- c:\program files\Windows Sidebar
2011-02-05 13:31 . 2011-02-05 13:31 18300 ----a-w- c:\windows\system32\MAIE.tmp
2011-02-05 02:57 . 2008-04-13 19:40 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys
2011-02-05 02:57 . 2008-04-13 19:40 34688 ----a-w- c:\windows\system32\dllcache\lbrtfdc.sys
2011-02-05 02:57 . 2008-04-13 19:40 8192 ----a-w- c:\windows\system32\drivers\Changer.sys
2011-02-03 10:15 . 2011-02-03 10:15 -------- d-----w- c:\documents and settings\Martin\Data aplikací\Ankh - Heart of Osiris
2011-02-03 09:42 . 2011-02-03 09:42 -------- d-----w- c:\documents and settings\Martin\Data aplikací\Trio
2011-02-03 09:41 . 2011-02-05 17:33 -------- d-----w- c:\program files\Smajlici
2011-02-01 15:30 . 2011-02-01 15:30 1520004 ----a-w- c:\program files\wrar393cz.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-13 08:47 . 2010-06-29 13:37 38848 ----a-w- c:\windows\avastSS.scr
2011-01-13 08:47 . 2010-06-18 14:03 188216 ----a-w- c:\windows\system32\aswBoot.exe
2011-01-13 08:41 . 2010-06-18 14:03 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-01-13 08:40 . 2010-06-18 14:03 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-01-13 08:40 . 2010-06-18 14:03 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-01-13 08:39 . 2010-06-18 14:03 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-01-13 08:37 . 2010-06-18 14:03 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-01-13 08:37 . 2010-06-18 14:03 29392 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-01-13 08:37 . 2010-06-18 14:03 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-11-18 18:15 . 2004-08-18 03:00 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-01 16:32 . 2010-11-01 16:29 1141200 ----a-w- c:\program files\imikimi_installer_0.5.1.exe
2010-06-29 14:57 . 2010-06-29 14:57 8969279 ----a-w- c:\program files\seznam-firefox-win32-cs-3.6.3.exe
2010-06-29 14:16 . 2010-06-29 14:15 2062448 ----a-w- c:\program files\postak-2.3.5.exe
2009-12-12 03:15 . 2009-12-12 03:15 7884856 ----a-w- c:\program files\flashget3.2.0.1060en.exe
2009-11-04 17:15 . 2009-11-04 17:15 204280 ----a-w- c:\program files\cpsetup.exe
2009-11-04 10:55 . 2009-11-04 10:53 9950429 ----a-w- c:\program files\reproinst.exe
2009-11-04 10:39 . 2009-11-04 10:39 4078131 ----a-w- c:\program files\RCESetup.exe
2009-07-29 19:34 . 2009-07-29 19:34 7332280 ----a-w- c:\program files\FirefoxSetup3.0cz.exe
2009-06-25 09:40 . 2009-06-25 09:40 16786752 ----a-w- c:\program files\install_icq65.exe
2009-06-25 08:46 . 2009-06-24 20:16 1976104 ----a-w- c:\program files\SkypeSetup.exe
.

((((((((((((((((((((((((((((( SnapShot@2011-02-08_11.27.19 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-02-08 15:09 . 2011-02-08 15:09 16384 c:\windows\Temp\Perflib_Perfdata_af0.dat
+ 2011-02-08 15:08 . 2011-02-08 15:08 16384 c:\windows\Temp\Perflib_Perfdata_208.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-06-20 451872]
"Seznam Postak"="c:\documents and settings\Martin\Local Settings\Data aplikací\Seznam.cz\postak.exe" [2009-09-23 434840]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-10-09 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"preload"="c:\windows\RUNXMLPL.exe" [2007-04-21 20480]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-09-07 1015808]
"RTHDCPL"="RTHDCPL.EXE" [2007-05-28 16132608]
"AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [2005-06-11 53248]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-18 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-18 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-18 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-18 455168]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-06-13 142104]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-06-13 162584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-06-13 138008]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-07 102400]
"ePower_DMC"="c:\acer\Empowering Technology\ePower\ePower_DMC.exe" [2007-07-04 475136]
"Boot"="c:\acer\Empowering Technology\ePower\Boot.exe" [2006-03-15 579584]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-05-28 342528]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\eRAgent.exe" [2007-07-11 421888]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2007-10-17 858632]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 644696]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-03 1603152]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 79400]
"Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 583048]
"VMSnap3"="c:\windows\VMSnap3.exe" [2006-08-30 49152]
"Domino"="c:\windows\Domino.exe" [2006-06-28 49152]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2011-01-13 3396624]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Martin\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
setup_9.0.0.722_04.02.2011_08-53.lnk - c:\documents and settings\Martin\Plocha\Virus Removal Tool\setup_9.0.0.722_04.02.2011_08-53\startup.exe [2011-2-5 72208]
VP-EYE.lnk - c:\vp-eye\Control\Vpeyev4.exe [2009-7-4 1306624]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-4-1 568176]
Mˇstnˇ vyhled v nˇ.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2007-2-5 118784]
TL-WN321G Wireless Utility.lnk - c:\program files\TP-LINK\TL-WN321G Wireless Utility\Installer\WINXP\TWCU.exe [2009-12-11 622592]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Acer Empowering Technology.lnk]
backup=c:\windows\pss\Acer Empowering Technology.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer ePresentation HPD]
2007-03-02 09:25 208896 ----a-w- c:\acer\Empowering Technology\ePresentation\ePresentation.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\WINDOWS\\system32\\winver.exe"=
"$INSTDIR\\FlvDetector.exe"= c:\\Program Files\\FlashGet Network\\FlashGet 3\\FlvDetector.exe
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1700:TCP"= 1700:TCP:MioNet Remote Drive Access
"1641:TCP"= 1641:TCP:MioNet Remote Drive Verification

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [18.6.2010 15:03 294608]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [18.6.2010 15:03 17744]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2007-06-20 10:47 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Connection Wizard,ShellNext = iexplore
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
FF - ProfilePath - c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Seznam liĹˇtiÄŤka: {ea614400-e918-4741-9a97-7a972ff7c30b} - c:\program files\Mozilla Firefox\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-08 17:14
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(1624)
c:\windows\system32\MSNCHATHOOK.DLL
c:\windows\system32\sysenv.dll
c:\windows\system32\CryptoAPI.dll
c:\windows\system32\ShowErrMsg.dll
c:\windows\system32\MFC71U.DLL
c:\program files\ScanSoft\OmniPageSE4\OpHookSE4.dll
c:\windows\system32\btmmhook.dll
c:\acer\Empowering Technology\ePower\SysHook.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2011-02-08 17:16:48
ComboFix-quarantined-files.txt 2011-02-08 16:16
ComboFix2.txt 2011-02-08 12:03
ComboFix3.txt 2011-02-08 11:30
ComboFix4.txt 2011-02-07 22:39
ComboFix5.txt 2011-02-08 16:05

Před spuštěním: Volných bajtů: 27 105 095 680
Po spuštění: Volných bajtů: 27 094 704 128

- - End Of File - - DE644FE1F3CB02A938E9E12F42CFBE67

ruzajska · #30 Příspěvek od **ruzajska** » 08 Ún 2011 17:22

ten zvuk a net mu nejde od soboty a ani mi nejde flashka ani cd

VIRY.CZ

win32

Re: win32

Re: win32

Re: win32

Re: win32

Re: win32

Re: win32

Re: win32

Re: win32

Re: win32

Re: win32

Re: win32

Re: win32

Re: win32

Re: win32

Re: win32