Škodlivý software ve WIN7 32bit

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zpráva
Autor
adamekz
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 23 Črc 2009 15:40

Škodlivý software ve WIN7 32bit

#1 Příspěvek od adamekz »

Dobrý den, win7 začaly blbnout, Windows defendr hlásí potencionální škodlivý software, ten jsem už vymazal, prosím o kontrolu logu z Rsitu:

Logfile of random's system information tool 1.08 (written by random/random)
Run by uživatel at 2011-02-10 10:21:44
Microsoft Windows 7 Ultimate
System drive C: has 132 GB (28%) free of 477 GB
Total RAM: 3319 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:21:56, on 10.2.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Program Files\RelevantKnowledge\rlvknlg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\MyWebSearch\bar\5.bin\MWSOEMON.EXE
D:\iTunesHelper.exe
C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\BearShare Applications\MediaBar\DataMngr\DataMngrUI.exe
C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\nvsvc32.exe
C:\Program Files\HBLite\bin\11.0.345.0\HBLiteSA.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
D:\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows.old\Documents and Settings\uživatel\Dokumenty\Instalace\Dropbox.exe
D:\jh\bin\TSVNCache.exe
C:\Windows\system32\taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\totalcmd\TOTALCMD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\explorer.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\uživatel\Desktop\RSIT.exe
C:\Program Files\trend micro\uživatel.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\IE\4.1\dealioToolbarIE.dll
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\5.bin\MWSSRCAS.DLL
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\5.bin\MWSSRCAS.DLL
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\IE\4.1\dealioToolbarIE.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\5.bin\MWSBAR.DLL
O2 - BHO: MediaBar - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\Program Files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarDx.dll
O2 - BHO: SuggestMeYesBHO - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll
O2 - BHO: ShopperReports - {100EB1FD-D03E-47fd-81F3-EE91287F9465} - C:\Program Files\ShopperReports3\bin\3.0.491.0\ShopperReports.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: ShoppingReport2 - {258C9770-1713-4021-8D7E-1F184A2BD754} - C:\Program Files\ShoppingReport2\Bin\2.7.21\ShoppingReport.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\MediaBar\DataMngr\IEBHO.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: GdfrDUEn - {A3CF7606-E683-4375-A372-96B75DA0AEF7} - C:\Program Files\Get Styles\enlbrdr.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O2 - BHO: OnRPG Toolbar - {d22f6f66-2f47-4184-8625-fbfa4cbdb7ce} - C:\Program Files\OnRPG\tbOnR2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: OnRPG Toolbar - {d22f6f66-2f47-4184-8625-fbfa4cbdb7ce} - C:\Program Files\OnRPG\tbOnR2.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\5.bin\MWSBAR.DLL
O3 - Toolbar: MediaBar - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\Program Files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarDx.dll
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\IE\4.1\dealioToolbarIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\5.bin\mwsoemon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "D:\iTunesHelper.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "D:\hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [BlackBerryAutoUpdate] C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe /background
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\5.bin\m3SrchMn.exe" /m=2 /w /h
O4 - HKLM\..\Run: [DataMngr] C:\PROGRA~1\BEARSH~1\MediaBar\DataMngr\DataMngrUI.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HKLM] C:\Windows\install\svhost.exe
O4 - HKLM\..\Run: [Audio HD Driver] C:\Users\UIVATE~1\AppData\Local\Temp\86cZYf92TmTb.exe
O4 - HKLM\..\Run: [NVIDIA driver monitor] c:\windows\nvsvc32.exe
O4 - HKLM\..\Run: [HBLiteSA] "C:\Program Files\HBLite\bin\11.0.345.0\HBLiteSA.exe"
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [PC Suite Tray] "D:\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [Google Update] "C:\Users\uživatel\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Fraps] C:\USERS\KUBAS\DESKTOP\PROGRAMKY\FRAPS\FRAPS.EXE
O4 - HKCU\..\Run: [HKCU] C:\Windows\install\svhost.exe
O4 - HKCU\..\Run: [Audio HD Driver] C:\Users\UIVATE~1\AppData\Local\Temp\86cZYf92TmTb.exe
O4 - HKLM\..\Policies\Explorer\Run: [Policies] C:\Windows\install\svhost.exe
O4 - HKCU\..\Policies\Explorer\Run: [Policies] C:\Windows\install\svhost.exe
O4 - HKCU\..\Policies\Explorer\Run: [Audio HD Driver] C:\Users\uživatel\AppData\Roaming\86cZYf92TmTb.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: BlackBerry Desktop Manager.lnk = C:\Program Files\Research In Motion\BlackBerry\DesktopMgr.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredi ... 2010052302
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm
O9 - Extra 'Tools' menuitem: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - D:\pokerstar\PokerStarsUpdate.exe
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - D:\icq 7\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - D:\icq 7\ICQ7.2\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShopperReports3\bin\3.0.491.0\ShopperReports.dll
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShopperReports3\bin\3.0.491.0\ShopperReports.dll
O9 - Extra button: ShopperReports - Compare product prices - {DB38E21A-0133-419d-92AD-ECDFD5244D6D} - C:\Program Files\ShoppingReport2\Bin\2.7.21\ShoppingReport.dll
O9 - Extra button: ShopperReports - Compare travel rates - {EB620C54-E229-4942-87CE-E717109FC8C6} - C:\Program Files\ShoppingReport2\Bin\2.7.21\ShoppingReport.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {4944924A-64E4-49C1-AC97-ABA3927262FE} (StWbUsa Control) - http://channel.dontblynk.com/Launcher/StWbUsa.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://juniper.net/dana-cached/sc/Juni ... Client.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/html - {574940E0-1B7A-4881-8FA3-1E809714B156} - C:\Users\kubas\AppData\LocalLow\Microńoft\redir.dll
O20 - AppInit_DLLs: C:\PROGRA~1\BEARSH~1\MediaBar\DataMngr\datamngr.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AmplusnetPrivacyTools - Unknown owner - C:\Windows\system32\AmplusnetPrivacyTools.exe
O23 - Service: Apache2.2 - Apache Software Foundation - D:\xampp\xampp\apache\bin\httpd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - D:\hamachi\hamachi-2.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Turbine Message Service - Live (LiveTurbineMessageService) - Turbine, Inc. - D:\Turbine Download Manager\TurbineMessageService.exe
O23 - Service: Turbine Network Service - Live (LiveTurbineNetworkService) - Turbine, Inc. - D:\Turbine Download Manager\TurbineNetworkService.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\5.bin\mwssvc.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: QuestBrowse Service - Unknown owner - C:\ProgramData\QuestBrwSearch\questbrowse127.exe
O23 - Service: RelevantKnowledge - TMRG, Inc. - C:\Program Files\RelevantKnowledge\rlservice.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 16581 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-545208814-315804561-2388179088-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-545208814-315804561-2388179088-1001UA.job
C:\Windows\tasks\RealUpgradeScheduledTaskS-1-5-21-545208814-315804561-2388179088-1004.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}]
MyWebSearch Search Assistant BHO - C:\Program Files\MyWebSearch\bar\5.bin\MWSSRCAS.DLL [2010-07-29 54704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}]
Dealio Toolbar - C:\Program Files\Dealio Toolbar\IE\4.1\dealioToolbarIE.dll [2010-10-22 726016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}]
mwsBar BHO - C:\Program Files\MyWebSearch\bar\5.bin\MWSBAR.DLL [2010-07-29 775696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0974BA1E-64EC-11DE-B2A5-E43756D89593}]
MediaBar - C:\Program Files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarDx.dll [2009-12-20 87480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}]
AC-Pro - C:\Program Files\AutocompletePro\AutocompletePro.dll [2010-02-17 97760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{100EB1FD-D03E-47fd-81F3-EE91287F9465}]
ShopperReports - C:\Program Files\ShopperReports3\bin\3.0.491.0\ShopperReports.dll [2010-08-31 1119744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{258C9770-1713-4021-8D7E-1F184A2BD754}]
ShoppingReport2 - C:\Program Files\ShoppingReport2\Bin\2.7.21\ShoppingReport.dll [2010-10-29 1142576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
Winamp Toolbar Loader - C:\Program Files\Winamp Toolbar\winamptb.dll [2009-05-06 1262888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-09-27 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-10-18 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}]
UrlHelper Class - C:\Program Files\BearShare Applications\MediaBar\DataMngr\IEBHO.dll [2010-06-06 392112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3CF7606-E683-4375-A372-96B75DA0AEF7}]
GdfrDUEn Class - C:\Program Files\Get Styles\enlbrdr.dll [2010-02-11 185856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-12-18 297648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll [2010-10-27 843832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d22f6f66-2f47-4184-8625-fbfa4cbdb7ce}]
OnRPG Toolbar - C:\Program Files\OnRPG\tbOnR2.dll [2010-10-18 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-11-24 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-06-02 1018616]
{d22f6f66-2f47-4184-8625-fbfa4cbdb7ce} - OnRPG Toolbar - C:\Program Files\OnRPG\tbOnR2.dll [2010-10-18 3908192]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Winamp Toolbar - C:\Program Files\Winamp Toolbar\winamptb.dll [2009-05-06 1262888]
{07B18EA9-A523-4961-B6BB-170DE4475CCA} - My Web Search - C:\Program Files\MyWebSearch\bar\5.bin\MWSBAR.DLL [2010-07-29 775696]
{0974BA1E-64EC-11DE-B2A5-E43756D89593} - MediaBar - C:\Program Files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarDx.dll [2009-12-20 87480]
{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - Dealio Toolbar - C:\Program Files\Dealio Toolbar\IE\4.1\dealioToolbarIE.dll [2010-10-22 726016]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-12-18 297648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-12-11 98304]
"ATICustomerCare"=C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [2009-06-14 307200]
"MyWebSearch Email Plugin"=C:\PROGRA~1\MYWEBS~1\bar\5.bin\mwsoemon.exe [2010-07-29 32849]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]
"iTunesHelper"=D:\iTunesHelper.exe [2010-04-24 142120]
"LogMeIn Hamachi Ui"=D:\hamachi\hamachi-2-ui.exe [2010-03-30 1820040]
"BlackBerryAutoUpdate"=C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe [2009-07-01 623960]
"RoxWatchTray"=C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe [2009-04-11 236016]
"My Web Search Bar Search Scope Monitor"=C:\PROGRA~1\MYWEBS~1\bar\5.bin\m3SrchMn.exe [2010-07-29 28783]
"DataMngr"=C:\PROGRA~1\BEARSH~1\MediaBar\DataMngr\DataMngrUI.exe [2010-06-06 796600]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-09-27 202256]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"SearchSettings"=C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe [2010-10-22 524288]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"HKLM"=C:\Windows\install\svhost.exe [2006-01-31 28774400]
"Audio HD Driver"=C:\Users\UIVATE~1\AppData\Local\Temp\86cZYf92TmTb.exe [2011-01-01 28774400]
"NVIDIA driver monitor"=c:\windows\nvsvc32.exe [2011-01-26 49664]
"HBLiteSA"=C:\Program Files\HBLite\bin\11.0.345.0\HBLiteSA.exe [2011-01-19 771888]
"LogMeIn GUI"=C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [2010-09-17 63048]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Policies"=C:\Windows\install\svhost.exe [2006-01-31 28774400]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"PC Suite Tray"=D:\Nokia PC Suite 7\PCSuite.exe [2009-11-11 1451520]
"ISUSPM"=C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2008-10-24 206112]
"Google Update"=C:\Users\uživatel\AppData\Local\Google\Update\GoogleUpdate.exe [2010-08-17 136176]
"Fraps"=C:\USERS\KUBAS\DESKTOP\PROGRAMKY\FRAPS\FRAPS.EXE []
"HKCU"=C:\Windows\install\svhost.exe [2006-01-31 28774400]
"Audio HD Driver"=C:\Users\UIVATE~1\AppData\Local\Temp\86cZYf92TmTb.exe [2011-01-01 28774400]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Policies"=C:\Windows\install\svhost.exe [2006-01-31 28774400]
"Audio HD Driver"=C:\Users\uživatel\AppData\Roaming\86cZYf92TmTb.exe [2011-01-01 28774400]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.exe.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
BlackBerry Desktop Manager.lnk - C:\Program Files\Research In Motion\BlackBerry\DesktopMgr.exe

C:\Users\uživatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Windows.old\Documents and Settings\uživatel\Dokumenty\Instalace\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~1\BEARSH~1\MediaBar\DataMngr\datamngr.dll "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1
"EnableLUA"=0
"DisableRegistryTools"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"D:\Uforia\Mercenary Wars\Bin\MWGame.exe"="D:\Uforia\Mercenary Wars\Bin\MWGame.exe:*:Enabled:MWGame"
"D:\Combat Arms EU\CombatArms.exe"="D:\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe"
"D:\Combat Arms EU\Engine.exe"="D:\Combat Arms EU\Engine.exe:*Enabled:Engine.exe"
"C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe"="C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe:*:Enabled:NEXON_EU_Downloader_Engine.exe"
"D:\ACE Online\Launcher.atm"="D:\ACE Online\Launcher.atm:Enabled:GameExe2"
"D:\ACE Online\Res-Voip\SCVoIP.exe"="D:\ACE Online\Res-Voip\SCVoIP.exe:Enabled:GameVoIP"
"P:\My games\Combat Arms EU\CombatArms.exe"="P:\My games\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe"
"P:\My games\Combat Arms EU\Engine.exe"="P:\My games\Combat Arms EU\Engine.exe:*Enabled:Engine.exe"
"D:\wow download\facebook-pic00005267.exe"="c:\windows\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"
"C:\Users\kubas\Desktop\kos\game_sting_pak\sting.exe"="C:\Users\kubas\Desktop\kos\game_sting_pak\sting.exe:*:Enabled:˝şĆÿ¶óŔÎ"
"D:\wow download\facebook-pic000934519.exe"="c:\windows\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options]
"Debugger=""C:\Program Files\LogMeIn\x86\LogMeInSystray.exe" -MceShellRedirect

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-02-10 10:21:44 ----D---- C:\rsit
2011-02-10 10:21:44 ----D---- C:\Program Files\trend micro
2011-02-09 17:48:21 ----A---- C:\Windows\system32\LMIport.dll
2011-02-09 17:48:08 ----A---- C:\Windows\system32\LMIRfsClientNP.dll
2011-02-09 17:48:08 ----A---- C:\Windows\system32\drivers\LMIRfsDriver.sys
2011-02-09 17:47:57 ----A---- C:\Windows\system32\LMIinit.dll
2011-02-09 17:47:48 ----D---- C:\ProgramData\LogMeIn
2011-02-09 17:47:15 ----D---- C:\Program Files\LogMeIn
2011-01-20 20:40:08 ----D---- C:\ProgramData\QuestBrwSearch
2011-01-20 20:40:08 ----D---- C:\Program Files\QuestBrwSearch
2011-01-20 20:39:52 ----D---- C:\ProgramData\HBLiteSA
2011-01-20 20:39:52 ----D---- C:\Program Files\HBLite
2011-01-20 20:39:50 ----D---- C:\Program Files\ShoppingReport2
2011-01-14 20:41:14 ----D---- C:\Program Files\alaplaya
2011-01-14 20:10:08 ----A---- C:\Windows\ntbtlog.txt
2011-01-13 21:22:17 ----A---- C:\Windows\system32\XAudio2_7.dll
2011-01-13 21:22:17 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2011-01-13 21:22:17 ----A---- C:\Windows\system32\xactengine3_7.dll
2011-01-13 21:22:17 ----A---- C:\Windows\system32\d3dcsx_43.dll
2011-01-13 21:22:17 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2011-01-13 21:22:16 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-01-13 21:22:16 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-01-13 21:22:16 ----A---- C:\Windows\system32\D3DX9_43.dll
2011-01-13 21:22:16 ----A---- C:\Windows\system32\d3dx11_43.dll
2011-01-13 21:22:16 ----A---- C:\Windows\system32\d3dx10_43.dll
2011-01-13 21:22:14 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-01-13 21:22:14 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-01-13 21:22:14 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-01-13 21:22:13 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-01-13 21:22:13 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-01-13 21:22:13 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-01-13 21:22:10 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-01-13 21:22:10 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-01-13 21:22:10 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-01-13 21:22:10 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-01-13 21:22:09 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-01-13 21:22:09 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-01-13 21:22:09 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-01-12 14:06:18 ----A---- C:\Windows\system32\ConduitEngine.tmp
2011-01-12 14:06:17 ----D---- C:\Program Files\ConduitEngine
2011-01-11 15:57:55 ----D---- C:\ProgramData\id Software

======List of files/folders modified in the last 1 months======

2011-02-10 10:21:55 ----D---- C:\Windows\Prefetch
2011-02-10 10:21:45 ----D---- C:\Windows\Temp
2011-02-10 10:21:44 ----RD---- C:\Program Files
2011-02-10 10:13:15 ----D---- C:\Windows\System32
2011-02-10 10:13:15 ----D---- C:\Program Files\Convar
2011-02-10 10:10:51 ----D---- C:\Windows\system32\Tasks
2011-02-10 10:10:48 ----D---- C:\Windows\Tasks
2011-02-10 10:09:12 ----SHD---- C:\Windows\Installer
2011-02-10 10:06:12 ----SHD---- C:\System Volume Information
2011-02-10 07:59:55 ----D---- C:\Windows\system32\config
2011-02-10 07:26:30 ----D---- C:\Users\uživatel\AppData\Roaming\Dropbox
2011-02-10 07:13:09 ----D---- C:\Windows\inf
2011-02-10 07:13:09 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-02-10 07:08:26 ----D---- C:\Program Files\Common Files\Akamai
2011-02-09 18:04:48 ----D---- C:\Program Files\RelevantKnowledge
2011-02-09 17:48:08 ----D---- C:\Windows\system32\drivers
2011-02-09 17:47:48 ----HD---- C:\ProgramData
2011-02-09 17:33:02 ----SHD---- C:\Boot
2011-02-09 17:29:59 ----D---- C:\install
2011-02-09 17:08:29 ----D---- C:\Windows
2011-02-06 16:02:20 ----HD---- C:\Program Files\InstallShield Installation Information
2011-02-02 17:11:20 ----N---- C:\Windows\system32\MpSigStub.exe
2011-01-29 20:08:58 ----D---- C:\Users\uživatel\AppData\Roaming\Real
2011-01-27 20:41:26 ----RSD---- C:\Windows\assembly
2011-01-26 18:00:23 ----RSH---- C:\Windows\nvsvc32.exe
2011-01-21 17:42:17 ----D---- C:\Windows\system32\catroot2
2011-01-13 21:22:18 ----D---- C:\Windows\system32\directx
2011-01-12 14:06:17 ----D---- C:\Program Files\OnRPG

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ahcix86s;ahcix86s; C:\Windows\system32\DRIVERS\ahcix86s.sys [2009-05-18 187704]
R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2007-05-01 43528]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-01-30 691696]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-02-17 25888]
R2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys [2010-09-17 12856]
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\Windows\system32\drivers\LMIRfsDriver.sys [2010-09-17 47640]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2009-12-11 5188096]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2009-12-11 125440]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2009-11-19 100352]
R3 bbcap;bbcap; C:\Windows\system32\DRIVERS\bbcap.sys [2010-12-20 4096]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 lmimirr;lmimirr; C:\Windows\system32\DRIVERS\lmimirr.sys [2010-09-17 10144]
R3 RimVSerPort;RIM Virtual Serial Port v2; C:\Windows\system32\DRIVERS\RimSerial.sys [2009-01-09 27136]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 8192]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-03-01 139776]
R3 SCREAMINGBDRIVER;Screaming Bee Audio; C:\Windows\system32\drivers\ScreamingBAudio.sys [2009-11-26 34384]
R3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2010-02-17 279712]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-12-11 5188096]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 EagleNT;EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\C:\Users\kubas\AppData\Local\Temp\EagleXNt.sys []
S3 GarenaPEngine;GarenaPEngine; \??\C:\Users\kubas\AppData\Local\Temp\LWW81CC.tmp [2010-03-19 25616]
S3 GGSAFERDriver;GGSAFER Driver; \??\D:\Garena\plugins\UI\safedrv.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-02-03 26176]
S3 LLRING0;LLRING0; \??\D:\mu2\MuGuard\llck3.sys [2010-04-07 4096]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2009-10-06 17664]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2009-10-06 22016]
S3 NPPTNT2;NPPTNT2; \??\C:\Windows\system32\npptNT2.sys [2005-01-02 4682]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 RimUsb;BlackBerry Smartphone; C:\Windows\System32\Drivers\RimUsb.sys [2008-05-20 22784]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2009-10-06 7936]
S3 usbser;USB Modem Driver; C:\Windows\system32\DRIVERS\usbser.sys [2009-07-14 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2009-10-06 7936]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]
S4 LMIRfsClientNP;LMIRfsClientNP; C:\Windows\system32\drivers\LMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Akamai;Akamai NetSession Interface; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-12-11 172032]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-04-16 144672]
R2 Application Updater;Application Updater; C:\Program Files\Application Updater\ApplicationUpdater.exe [2010-10-22 386560]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-04-08 345376]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-06-02 246520]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe [2010-12-08 374152]
R2 LMIMaint;LogMeIn Maintenance Service; C:\Program Files\LogMeIn\x86\RaMaint.exe [2010-12-08 136584]
R2 LogMeIn;LogMeIn; C:\Program Files\LogMeIn\x86\LogMeIn.exe [2010-11-08 390528]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 MySQL;MySQL; C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld --defaults-file=C:\Program Files\MySQL\MySQL Server 5.1\my.ini MySQL []
R2 MyWebSearchService;My Web Search Service; C:\PROGRA~1\MYWEBS~1\bar\5.bin\mwssvc.exe [2010-07-29 28762]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-02-05 75064]
R2 QuestBrowse Service;QuestBrowse Service; C:\ProgramData\QuestBrwSearch\questbrowse127.exe [2011-02-08 49424]
R2 RelevantKnowledge;RelevantKnowledge; C:\Program Files\RelevantKnowledge\rlservice.exe [2010-11-08 107136]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-04-24 545576]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-10-27 657408]
S2 Apache2.2;Apache2.2; D:\xampp\xampp\apache\bin\httpd.exe [2009-12-19 29416]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-26 136176]
S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; D:\hamachi\hamachi-2.exe [2010-03-30 1107336]
S2 LiveTurbineMessageService;Turbine Message Service - Live; D:\Turbine Download Manager\TurbineMessageService.exe [2009-11-30 271856]
S2 Roxio Upnp Server 9;Roxio Upnp Server 9; C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe [2007-12-06 362992]
S2 RoxLiveShare9;LiveShare P2P Server 9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe [2009-04-11 313840]
S2 RoxWatch9;Roxio Hard Drive Watcher 9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe [2009-04-11 170480]
S3 AmplusnetPrivacyTools;AmplusnetPrivacyTools; C:\Windows\system32\AmplusnetPrivacyTools.exe [2009-09-21 2347008]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-06-10 31064]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-09-27 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 LiveTurbineNetworkService;Turbine Network Service - Live; D:\Turbine Download Manager\TurbineNetworkService.exe [2009-11-30 218608]
S3 npggsvc;nProtect GameGuard Service; C:\Windows\system32\GameMon.des [2010-08-15 3700176]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Roxio UPnP Renderer 9;Roxio UPnP Renderer 9; C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe [2007-12-06 88560]
S3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2009-04-11 1108464]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2009-07-16 316664]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-07-11 1343400]
S4 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]

-----------------EOF-----------------

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Škodlivý software ve WIN7 32bit

#2 Příspěvek od vyosek »

Zdravim a pekny den preji :)

:arrow: Vymazal ale nikoliv vsechen, jeste tam mate takove male stadecko koniku trojskych :arcisit:

:arrow: Jaky pouzivate antivir :???:

:arrow: Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
:arrow: Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  • Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
  • Pokud mate Win XP spustte pod uctem Spravce\Administratora
  • Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
  • Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
  • Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
  • Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
  • Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
  • Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
  • Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

adamekz
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 23 Črc 2009 15:40

Re: Škodlivý software ve WIN7 32bit

#3 Příspěvek od adamekz »

Měl jsem naistalovaný Avast5, ale hlásil vyplé štíty, tak jsem ho včera odinstaloval. Až se vše vyčistí znovu naistalouju Avast5.

Log z Rkillu:
This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 10.02.2011 at 11:04:16.
Operating System: Windows 7 Ultimate


Processes terminated by Rkill or while it was running:

D:\iTunesHelper.exe
C:\Users\uC:\Users\uC:\Users\uC:\Program Files\iPod\bin\iPodService.exe
C:\Users\uC:\Windows\System32\InfDefaultInstall.exe
C:\Windows\system32\runonce.exe


Rkill completed on 10.02.2011 at 11:04:20.

Ted jdu pustit Comofix, poté pošlu log

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Škodlivý software ve WIN7 32bit

#4 Příspěvek od vyosek »

Avast asi poskodila havet, ktere je tam tedy spooousty :arcisit:
Budu log z CFka vyhlizet...
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

adamekz
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 23 Črc 2009 15:40

Re: Škodlivý software ve WIN7 32bit

#5 Příspěvek od adamekz »

ComboFix 11-02-09.04 - uživatel 10.02.2011 11:15:26.1.3 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1033.18.3319.2067 [GMT 1:00]
Spuštěný z: c:\users\uživatel\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\CFLog
C:\Install.exe
c:\program files\AutocompletePro
c:\program files\AutocompletePro\AcRemoteUpdate.exe
c:\program files\AutocompletePro\AutocompletePro.dll
c:\program files\AutocompletePro\InstTracker.exe
c:\program files\AutocompletePro\support@predictad.com\defaults\preferences\predictad.js
c:\program files\AutocompletePro\support@predictad.com\chrome.manifest
c:\program files\AutocompletePro\support@predictad.com\chrome\content\browserOverlay.xul
c:\program files\AutocompletePro\support@predictad.com\chrome\content\options.js
c:\program files\AutocompletePro\support@predictad.com\chrome\content\options.xul
c:\program files\AutocompletePro\support@predictad.com\chrome\content\utils.js
c:\program files\AutocompletePro\support@predictad.com\install.rdf
c:\program files\AutocompletePro\TaskScheduler.dll
c:\program files\AutocompletePro\unins000.dat
c:\program files\AutocompletePro\unins000.exe
c:\program files\ClickPotatoLite
c:\program files\ClickPotatoLite\bin\10.0.529.0\ClickPotatoLiteUninstaller.exe
c:\program files\ClickPotatoLite\bin\10.0.529.0\firefox\extensions\chrome.manifest
c:\program files\ClickPotatoLite\bin\10.0.529.0\firefox\extensions\install.rdf
c:\program files\Dealio Toolbar
c:\program files\Dealio Toolbar\FF\chrome.manifest
c:\program files\Dealio Toolbar\FF\chrome\content\chevron.js
c:\program files\Dealio Toolbar\FF\chrome\content\chevron.xul
c:\program files\Dealio Toolbar\FF\chrome\content\login.js
c:\program files\Dealio Toolbar\FF\chrome\content\login.xul
c:\program files\Dealio Toolbar\FF\chrome\content\parser.js
c:\program files\Dealio Toolbar\FF\chrome\content\RssTickerWidget.js
c:\program files\Dealio Toolbar\FF\chrome\content\searchbox.js
c:\program files\Dealio Toolbar\FF\chrome\content\searchbox.xul
c:\program files\Dealio Toolbar\FF\chrome\content\utils.js
c:\program files\Dealio Toolbar\FF\chrome\content\widgicomm.js
c:\program files\Dealio Toolbar\FF\chrome\content\widgihandling.js
c:\program files\Dealio Toolbar\FF\chrome\content\widgichevron.js
c:\program files\Dealio Toolbar\FF\chrome\content\widgilisteners.js
c:\program files\Dealio Toolbar\FF\chrome\content\widgitoolbarplugin.js
c:\program files\Dealio Toolbar\FF\chrome\content\widgitoolbarplugin.xul
c:\program files\Dealio Toolbar\FF\chrome\content\widgiui.js
c:\program files\Dealio Toolbar\FF\chrome\locale\EN-US\searchbox.dtd
c:\program files\Dealio Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.dtd
c:\program files\Dealio Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.properties
c:\program files\Dealio Toolbar\FF\chrome\locale\EN-US\yahoo-search.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\amazon.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\apple.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\barnes.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\bestbuy.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\dealio_logo.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\dealio_logo_hover.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\ebay.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\chevron.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\icon_settings.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\macys.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\newegg.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\overstock.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search-button-hover.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search-button.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search-chevron-hover.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search-chevron.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search_amazon.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search_dealio.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search_ebay.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search_yahoo.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\searchbox.css
c:\program files\Dealio Toolbar\FF\chrome\skin\splitter.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\target.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\walmart.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\widgitoolbarplugin.css
c:\program files\Dealio Toolbar\FF\install.rdf
c:\program files\Dealio Toolbar\IE\4.1\config.ini
c:\program files\Dealio Toolbar\IE\4.1\dealioToolbarIE.dll
c:\program files\Dealio Toolbar\Res\amazon.gif
c:\program files\Dealio Toolbar\Res\apple.gif
c:\program files\Dealio Toolbar\Res\barnes.gif
c:\program files\Dealio Toolbar\Res\bestbuy.gif
c:\program files\Dealio Toolbar\Res\dealio_logo.gif
c:\program files\Dealio Toolbar\Res\dealio_logo_hover.gif
c:\program files\Dealio Toolbar\Res\ebay.gif
c:\program files\Dealio Toolbar\Res\icon_settings.gif
c:\program files\Dealio Toolbar\Res\macys.gif
c:\program files\Dealio Toolbar\Res\newegg.gif
c:\program files\Dealio Toolbar\Res\overstock.gif
c:\program files\Dealio Toolbar\Res\search-button-hover.gif
c:\program files\Dealio Toolbar\Res\search-button.gif
c:\program files\Dealio Toolbar\Res\search-chevron-hover.gif
c:\program files\Dealio Toolbar\Res\search-chevron.gif
c:\program files\Dealio Toolbar\Res\search_amazon.gif
c:\program files\Dealio Toolbar\Res\search_dealio.gif
c:\program files\Dealio Toolbar\Res\search_ebay.gif
c:\program files\Dealio Toolbar\Res\search_yahoo.gif
c:\program files\Dealio Toolbar\Res\target.gif
c:\program files\Dealio Toolbar\Res\walmart.gif
c:\program files\Dealio Toolbar\Res\widgets.xml
c:\program files\Dealio Toolbar\WidgiHelper.exe
c:\program files\FunWebProducts
c:\program files\HBLite
c:\program files\HBLite\bin\11.0.345.0\firefox\extensions\install.rdf
c:\program files\HBLite\bin\11.0.345.0\firefox\extensions\plugins\npclntax_HBLiteSA.dll
c:\program files\HBLite\bin\11.0.345.0\HBLiteSAAX.dll
c:\program files\HBLite\bin\11.0.345.0\HBLiteUninstaller.exe
c:\program files\Mozilla Firefox\extensions\{27E679CC-6AAB-4B2A-BB87-096FE4178464}
c:\program files\Mozilla Firefox\extensions\{27E679CC-6AAB-4B2A-BB87-096FE4178464}\defaults\preferences\prefs.js
c:\program files\Mozilla Firefox\extensions\{27E679CC-6AAB-4B2A-BB87-096FE4178464}\chrome.manifest
c:\program files\Mozilla Firefox\extensions\{27E679CC-6AAB-4B2A-BB87-096FE4178464}\chrome\queryexplorer.jar
c:\program files\Mozilla Firefox\extensions\{27E679CC-6AAB-4B2A-BB87-096FE4178464}\install.rdf
c:\program files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}
c:\program files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\defaults\preferences\prefs.js
c:\program files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\chrome.manifest
c:\program files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\chrome\questbrowse.jar
c:\program files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\install.rdf
c:\program files\Mozilla Firefox\plugins\npclntax_HBLiteSA.dll
c:\program files\MyWebSearch
c:\program files\MyWebSearch\bar\1.bin\chrome\M3FFXTBR.JAR
c:\program files\MyWebSearch\bar\2.bin\chrome\M3FFXTBR.JAR
c:\program files\MyWebSearch\bar\3.bin\chrome\M3FFXTBR.JAR
c:\program files\MyWebSearch\bar\4.bin\F3HTMLMU.DLL
c:\program files\MyWebSearch\bar\4.bin\chrome\M3FFXTBR.JAR
c:\program files\MyWebSearch\bar\4.bin\M3PLUGIN.DLL
c:\program files\MyWebSearch\bar\4.bin\MWSBAR.DLL
c:\program files\MyWebSearch\bar\4.bin\MWSOEMON.EXE
c:\program files\MyWebSearch\bar\4.bin\MWSOESTB.DLL
c:\program files\MyWebSearch\bar\4.bin\NPMYWEBS.DLL
c:\program files\MyWebSearch\bar\5.bin\F3BKGERR.JPG
c:\program files\MyWebSearch\bar\5.bin\F3CJPEG.DLL
c:\program files\MyWebSearch\bar\5.bin\F3DTactl.dll
c:\program files\MyWebSearch\bar\5.bin\F3HISTSW.DLL
c:\program files\MyWebSearch\bar\5.bin\F3HKSTUB.DLL
c:\program files\MyWebSearch\bar\5.bin\F3HTMLMU.DLL
c:\program files\MyWebSearch\bar\5.bin\F3HTtpct.dll
c:\program files\MyWebSearch\bar\5.bin\F3IMSTUB.DLL
c:\program files\MyWebSearch\bar\5.bin\F3POPSWT.DLL
c:\program files\MyWebSearch\bar\5.bin\F3PSSAVR.SCR
c:\program files\MyWebSearch\bar\5.bin\F3REGHK.DLL
c:\program files\MyWebSearch\bar\5.bin\F3REPROX.DLL
c:\program files\MyWebSearch\bar\5.bin\F3RESTUB.DLL
c:\program files\MyWebSearch\bar\5.bin\F3SCrctr.dll
c:\program files\MyWebSearch\bar\5.bin\F3SCHMON.EXE
c:\program files\MyWebSearch\bar\5.bin\F3SPACER.WMV
c:\program files\MyWebSearch\bar\5.bin\F3WALLPP.DAT
c:\program files\MyWebSearch\bar\5.bin\F3WPHOOK.DLL
c:\program files\MyWebSearch\bar\5.bin\FWPBUDDY.PNG
c:\program files\MyWebSearch\bar\5.bin\CHROME.MANIFEST
c:\program files\MyWebSearch\bar\5.bin\chrome\M3FFXTBR.JAR
c:\program files\MyWebSearch\bar\5.bin\INSTALL.RDF
c:\program files\MyWebSearch\bar\5.bin\M3AUXSTB.DLL
c:\program files\MyWebSearch\bar\5.bin\M3DLGHK.DLL
c:\program files\MyWebSearch\bar\5.bin\M3HIGHIN.EXE
c:\program files\MyWebSearch\bar\5.bin\M3HTML.DLL
c:\program files\MyWebSearch\bar\5.bin\M3IDLE.DLL
c:\program files\MyWebSearch\bar\5.bin\M3IMPIPE.EXE
c:\program files\MyWebSearch\bar\5.bin\M3MEDINT.EXE
c:\program files\MyWebSearch\bar\5.bin\M3MSG.DLL
c:\program files\MyWebSearch\bar\5.bin\M3OUTLCN.DLL
c:\program files\MyWebSearch\bar\5.bin\M3PLUGIN.DLL
c:\program files\MyWebSearch\bar\5.bin\M3SKIN.DLL
c:\program files\MyWebSearch\bar\5.bin\M3SKPLAY.EXE
c:\program files\MyWebSearch\bar\5.bin\M3SLSRCH.EXE
c:\program files\MyWebSearch\bar\5.bin\M3SRCHMN.EXE
c:\program files\MyWebSearch\bar\5.bin\MWSBAR.DLL
c:\program files\MyWebSearch\bar\5.bin\MWSMLBTN.DLL
c:\program files\MyWebSearch\bar\5.bin\MWSOEMON.EXE
c:\program files\MyWebSearch\bar\5.bin\MWSOEPLG.DLL
c:\program files\MyWebSearch\bar\5.bin\MWSOESTB.DLL
c:\program files\MyWebSearch\bar\5.bin\MWSSRCAS.DLL
c:\program files\MyWebSearch\bar\5.bin\MWSSVC.EXE
c:\program files\MyWebSearch\bar\5.bin\MWSUABTN.DLL
c:\program files\MyWebSearch\bar\5.bin\NPMYWEBS.DLL
c:\program files\MyWebSearch\bar\Avatar\COMMON.F3S
c:\program files\MyWebSearch\bar\Game\CHECKERS.F3S
c:\program files\MyWebSearch\bar\Game\CHESS.F3S
c:\program files\MyWebSearch\bar\Game\REVERSI.F3S
c:\program files\MyWebSearch\bar\icons\CM.ICO
c:\program files\MyWebSearch\bar\icons\MFC.ICO
c:\program files\MyWebSearch\bar\icons\PSS.ICO
c:\program files\MyWebSearch\bar\icons\SMILEY.ICO
c:\program files\MyWebSearch\bar\icons\WB.ICO
c:\program files\MyWebSearch\bar\icons\ZWINKY.ICO
c:\program files\MyWebSearch\bar\Message\COMMON.F3S
c:\program files\MyWebSearch\bar\Notifier\COMMON.F3S
c:\program files\MyWebSearch\bar\Notifier\DOG.F3S
c:\program files\MyWebSearch\bar\Notifier\FISH.F3S
c:\program files\MyWebSearch\bar\Notifier\KUNGFU.F3S
c:\program files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
c:\program files\MyWebSearch\bar\Notifier\MAID.F3S
c:\program files\MyWebSearch\bar\Notifier\MAILBOX.F3S
c:\program files\MyWebSearch\bar\Notifier\OPERA.F3S
c:\program files\MyWebSearch\bar\Notifier\ROBOT.F3S
c:\program files\MyWebSearch\bar\Notifier\SEDUCT.F3S
c:\program files\MyWebSearch\bar\Notifier\SURFER.F3S
c:\program files\MyWebSearch\bar\Overlay\COMMON.F3S
c:\program files\MyWebSearch\bar\Settings\s_pid.dat
c:\program files\QuestBrwSearch
c:\program files\QuestBrwSearch\uninstall.exe
c:\program files\RelevantKnowledge
c:\program files\RelevantKnowledge\components\rlxg.dll
c:\program files\RelevantKnowledge\chrome.manifest
c:\program files\RelevantKnowledge\install.rdf
c:\program files\RelevantKnowledge\MSVCP71.DLL
c:\program files\RelevantKnowledge\MSVCR71.DLL
c:\program files\RelevantKnowledge\nscf.dat
c:\program files\RelevantKnowledge\rlls.dll
c:\program files\RelevantKnowledge\rlls64.dll
c:\program files\RelevantKnowledge\rloci.bin
c:\program files\RelevantKnowledge\rlph.dll
c:\program files\RelevantKnowledge\rlservice.exe
c:\program files\RelevantKnowledge\rlvknlg.exe
c:\program files\RelevantKnowledge\rlvknlg64.exe
c:\program files\RelevantKnowledge\rlxf.dll
c:\program files\ShopperReports3
c:\program files\ShopperReports3\bin\3.0.491.0\BRNstIE.dll
c:\program files\ShopperReports3\bin\3.0.491.0\CmndFF.dll
c:\program files\ShopperReports3\bin\3.0.491.0\CnTNtcntr.dll
c:\program files\ShopperReports3\bin\3.0.491.0\firefox\firefoxtoolbar\extensions\components\BRNstFF.dll
c:\program files\ShopperReports3\bin\3.0.491.0\firefox\firefoxtoolbar\extensions\components\BRNstFF.xpt
c:\program files\ShopperReports3\bin\3.0.491.0\firefox\firefoxtoolbar\extensions\chrome.manifest
c:\program files\ShopperReports3\bin\3.0.491.0\firefox\firefoxtoolbar\extensions\chrome\firefoxtoolbar.jar
c:\program files\ShopperReports3\bin\3.0.491.0\firefox\firefoxtoolbar\extensions\install.rdf
c:\program files\ShopperReports3\bin\3.0.491.0\link.ico
c:\program files\ShopperReports3\bin\3.0.491.0\moZIllaps.dll
c:\program files\ShopperReports3\bin\3.0.491.0\Pltfrm.dll
c:\program files\ShopperReports3\bin\3.0.491.0\ShopperReports.dll
c:\program files\ShopperReports3\bin\3.0.491.0\ShopperReportsUninstaller.exe
c:\program files\ShoppingReport2
c:\program files\ShoppingReport2\Uninst.exe
c:\programdata\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
c:\programdata\ClickPotatoLiteSA
c:\programdata\ClickPotatoLiteSA\ClickPotatoLiteSA.dat
c:\programdata\ClickPotatoLiteSA\ClickPotatoLiteSA_hpk.dat
c:\programdata\ClickPotatoLiteSA\ClickPotatoLiteSA_kyf.dat
c:\programdata\ClickPotatoLiteSA\ClickPotatoLiteSAAbout.mht
c:\programdata\ClickPotatoLiteSA\ClickPotatoLiteSAau.dat
c:\programdata\ClickPotatoLiteSA\ClickPotatoLiteSAEULA.mht
c:\programdata\HBLiteSA
c:\programdata\HBLiteSA\HBLiteSA.dat
c:\programdata\HBLiteSA\HBLiteSA_kyf.dat
c:\programdata\HBLiteSA\HBLiteSAAbout.mht
c:\programdata\HBLiteSA\HBLiteSAau.dat
c:\programdata\HBLiteSA\HBLiteSAEULA.mht
c:\programdata\Microsoft\Windows\Start Menu\Programs\ClickPotato
c:\programdata\Microsoft\Windows\Start Menu\Programs\ClickPotato\About Us.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\ClickPotato\ClickPotato Customer Support.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\ClickPotato\ClickPotato Uninstall Instructions.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\Hotbar
c:\programdata\Microsoft\Windows\Start Menu\Programs\Hotbar\About Hotbar.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\Hotbar\Hotbar Customer Support Center.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\Hotbar\Hotbar Uninstall Instructions.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge
c:\programdata\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\About RelevantKnowledge.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Privacy Policy and User License Agreement.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Support.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Uninstall Instructions.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\ShopperReports
c:\programdata\Microsoft\Windows\Start Menu\Programs\ShopperReports\About Us.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\ShopperReports\Customer Support.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\ShopperReports\ShopperReports Uninstall Instructions.lnk
c:\programdata\QuestBrwSearch
c:\users\kubas\AppData\Roaming\86cZYf92TmTb.exe
c:\users\kubas\AppData\Roaming\Hac.k Kamas v3.exe
c:\users\kubas\AppData\Roaming\HBLite
c:\users\kubas\AppData\Roaming\chrtmp
c:\users\uživatel\AppData\Roaming\86cZYf92TmTb.exe
c:\users\uživatel\AppData\Roaming\ClickPotatoLite
c:\users\uživatel\AppData\Roaming\ShopperReports3
c:\windows\Install
c:\windows\Install\svhost.exe
c:\windows\nvsvc32.exe
c:\windows\system32\detoured.dll
c:\windows\system32\f3PSSavr.scr
c:\windows\wpe pro.INI

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_MyWebSearchService
-------\Service_RelevantKnowledge


((((((((((((((((((((((((( Soubory vytvořené od 2011-01-10 do 2011-02-10 )))))))))))))))))))))))))))))))
.

2011-02-10 10:22 . 2011-02-10 10:22 -------- d-----w- c:\users\kubas\AppData\Local\temp
2011-02-10 10:22 . 2011-02-10 10:22 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-02-10 10:22 . 2011-02-10 10:22 -------- d-----w- c:\users\janek\AppData\Local\temp
2011-02-10 09:56 . 2011-02-10 09:56 -------- d-----w- c:\users\uživatel\AppData\Roaming\Malwarebytes
2011-02-10 09:56 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-02-10 09:56 . 2011-02-10 09:56 -------- d-----w- c:\programdata\Malwarebytes
2011-02-10 09:56 . 2011-02-10 09:56 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-02-10 09:56 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-02-10 09:21 . 2011-02-10 09:21 -------- d-----w- C:\rsit
2011-02-10 09:21 . 2011-02-10 09:21 -------- d-----w- c:\program files\trend micro
2011-02-09 16:48 . 2011-02-09 16:48 -------- d-----w- c:\users\uživatel\AppData\Local\LogMeIn
2011-02-09 16:48 . 2010-12-08 12:11 53632 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\LMIproc.dll
2011-02-09 16:48 . 2010-12-08 12:11 29568 ----a-w- c:\windows\system32\LMIport.dll
2011-02-09 16:48 . 2010-12-08 12:12 83360 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
2011-02-09 16:48 . 2010-09-17 14:40 47640 ----a-w- c:\windows\system32\drivers\LMIRfsDriver.sys
2011-02-09 16:47 . 2010-12-08 12:11 87424 ----a-w- c:\windows\system32\LMIinit.dll
2011-02-09 16:47 . 2011-02-10 06:08 -------- d-----w- c:\programdata\LogMeIn
2011-02-09 16:47 . 2011-02-10 08:58 -------- d-----w- c:\program files\LogMeIn
2011-02-09 16:46 . 2011-01-13 09:41 5890896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{DF9B9F66-D154-4191-8F75-95A3175EB2BC}\mpengine.dll
2011-01-30 13:57 . 2011-01-30 13:57 103864 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
2011-01-30 13:57 . 2011-01-30 13:57 103864 ----a-w- c:\program files\Internet Explorer\Plugins\nppdf32.dll
2011-01-14 19:41 . 2011-01-14 19:41 -------- d-----w- c:\program files\alaplaya
2011-01-14 19:41 . 2003-09-03 01:28 724992 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iKernel.dll
2011-01-14 19:41 . 2003-09-03 01:27 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\ctor.dll
2011-01-14 19:41 . 2003-09-03 01:26 266240 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iscript.dll
2011-01-14 19:41 . 2003-09-03 01:26 192512 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iuser.dll
2011-01-14 19:41 . 2003-09-03 01:25 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\DotNetInstaller.exe
2011-01-14 19:41 . 2011-01-14 19:41 311428 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\Setup.dll
2011-01-14 19:41 . 2011-01-14 19:41 184452 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iGdi.dll
2011-01-13 19:31 . 2011-01-13 19:31 -------- d-----w- c:\users\kubas\AppData\Roaming\Need for Speed World
2011-01-13 18:58 . 2011-01-13 18:58 -------- d-----w- c:\users\kubas\AppData\Local\Electronic_Arts_Inc
2011-01-12 13:06 . 2011-01-12 13:06 0 ----a-w- c:\windows\system32\ConduitEngine.tmp
2011-01-12 13:06 . 2011-01-12 13:06 -------- d-----w- c:\program files\ConduitEngine
2011-01-11 14:57 . 2011-01-11 14:57 -------- d-----w- c:\programdata\id Software

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-02 16:11 . 2010-01-30 13:31 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-01-02 13:49 . 2011-01-02 13:49 176488 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10136.bin
2010-12-20 20:04 . 2010-12-20 20:04 4608 ----a-w- c:\windows\system32\bbchlp.dll
2010-12-20 20:04 . 2010-12-20 20:04 4096 ----a-w- c:\windows\system32\drivers\bbcap.sys
2010-12-20 20:04 . 2010-12-20 20:04 30720 ----a-w- c:\windows\system32\bbcap.dll
2010-12-02 03:35 . 2010-12-02 03:35 4280320 ----a-w- c:\windows\system32\GPhotos.scr
2010-11-12 17:53 . 2010-07-14 19:00 472808 ----a-w- c:\windows\system32\deployJava1.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0974BA1E-64EC-11DE-B2A5-E43756D89593}]
2009-12-20 09:51 87480 ----a-w- c:\program files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarDx.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-10-18 10:26 3908192 ----a-w- c:\program files\ConduitEngine\ConduitEngine.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}]
2010-06-06 14:38 392112 ----a-w- c:\program files\BearShare Applications\MediaBar\DataMngr\IEBHO.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3CF7606-E683-4375-A372-96B75DA0AEF7}]
2010-02-11 07:58 185856 ----a-w- c:\program files\Get Styles\enlbrdr.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{d22f6f66-2f47-4184-8625-fbfa4cbdb7ce}]
2010-10-18 10:26 3908192 ----a-w- c:\program files\OnRPG\tbOnR2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{d22f6f66-2f47-4184-8625-fbfa4cbdb7ce}"= "c:\program files\OnRPG\tbOnR2.dll" [2010-10-18 3908192]
"{0974BA1E-64EC-11DE-B2A5-E43756D89593}"= "c:\program files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarDx.dll" [2009-12-20 87480]

[HKEY_CLASSES_ROOT\clsid\{d22f6f66-2f47-4184-8625-fbfa4cbdb7ce}]

[HKEY_CLASSES_ROOT\clsid\{0974ba1e-64ec-11de-b2a5-e43756d89593}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D22F6F66-2F47-4184-8625-FBFA4CBDB7CE}"= "c:\program files\OnRPG\tbOnR2.dll" [2010-10-18 3908192]

[HKEY_CLASSES_ROOT\clsid\{d22f6f66-2f47-4184-8625-fbfa4cbdb7ce}]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"PC Suite Tray"="d:\nokia pc suite 7\PCSuite.exe" [2009-11-11 1451520]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2008-10-24 206112]
"Google Update"="c:\users\uživatel\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-08-17 136176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-12-11 98304]
"ATICustomerCare"="c:\program files\ATI\ATICustomerCare\ATICustomerCare.exe" [2009-06-14 307200]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888]
"iTunesHelper"="D:\iTunesHelper.exe" [2010-04-24 142120]
"LogMeIn Hamachi Ui"="d:\hamachi\hamachi-2-ui.exe" [2010-03-30 1820040]
"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2009-07-01 623960]
"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2009-04-11 236016]
"DataMngr"="c:\progra~1\BEARSH~1\MediaBar\DataMngr\DataMngrUI.exe" [2010-06-06 796600]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-09-27 202256]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"SearchSettings"="c:\program files\Common Files\Spigot\Search Settings\SearchSettings.exe" [2010-10-22 524288]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"LogMeIn GUI"="c:\program files\LogMeIn\x86\LogMeInSystray.exe" [2010-09-17 63048]

c:\users\janek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Xfire.lnk - d:\xfire\Xfire.exe [2010-3-26 3250576]

c:\users\kubas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
CurseClientStartup.ccip [2010-3-7 0]
ProgSense.lnk - d:\progsense\ProgSense.exe [2010-5-16 888000]

c:\users\u§ivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\windows.old\Documents and Settings\u§ivatel\Dokumenty\Instalace\Dropbox.exe [2009-8-28 26784939]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma Loader.exe.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2010-12-20 113664]
BlackBerry Desktop Manager.lnk - c:\program files\Research In Motion\BlackBerry\DesktopMgr.exe [2009-7-1 1717592]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\BEARSH~1\MediaBar\DataMngr\datamngr.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

R1 iinyauug;iinyauug;c:\windows\system32\drivers\iinyauug.sys [x]
R2 Apache2.2;Apache2.2;d:\xampp\xampp\apache\bin\httpd.exe [2009-12-19 29416]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-08-26 136176]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;d:\hamachi\hamachi-2.exe [2010-03-30 1107336]
R2 LiveTurbineMessageService;Turbine Message Service - Live;d:\turbine download manager\TurbineMessageService.exe [2009-11-30 271856]
R3 AmplusnetPrivacyTools;AmplusnetPrivacyTools;c:\windows\system32\AmplusnetPrivacyTools.exe [2009-09-21 2347008]
R3 EagleXNt;EagleXNt;c:\users\kubas\AppData\Local\Temp\EagleXNt.sys [x]
R3 GarenaPEngine;GarenaPEngine;c:\users\kubas\AppData\Local\Temp\LWW81CC.tmp [x]
R3 GGSAFERDriver;GGSAFER Driver;d:\garena\plugins\UI\safedrv.sys [x]
R3 LiveTurbineNetworkService;Turbine Network Service - Live;d:\turbine download manager\TurbineNetworkService.exe [2009-11-30 218608]
R3 LLRING0;LLRING0;d:\mu2\MuGuard\llck3.sys [2010-04-07 4096]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [2010-08-15 3700176]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-07-11 1343400]
R3 XDva296;XDva296;c:\windows\system32\XDva296.sys [x]
R3 XDva311;XDva311;c:\windows\system32\XDva311.sys [x]
R3 XDva327;XDva327;c:\windows\system32\XDva327.sys [x]
R3 XDva342;XDva342;c:\windows\system32\XDva342.sys [x]
R3 XDva359;XDva359;c:\windows\system32\XDva359.sys [x]
R3 XDva370;XDva370;c:\windows\system32\XDva370.sys [x]
R3 XDva375;XDva375;c:\users\kubas\AppData\Local\Temp\Din453A.tmp [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-01-30 691696]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-12-11 172032]
S2 Application Updater;Application Updater;c:\program files\Application Updater\ApplicationUpdater.exe [2010-10-22 386560]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [2010-06-02 246520]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn\x86\LMIGuardianSvc.exe [2010-12-08 374152]
S2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\RaInfo.sys [2010-09-17 12856]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [2009-12-11 5188096]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2009-12-11 125440]
S3 bbcap;bbcap;c:\windows\system32\DRIVERS\bbcap.sys [2010-12-20 4096]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-03-01 139776]
S3 SCREAMINGBDRIVER;Screaming Bee Audio;c:\windows\system32\drivers\ScreamingBAudio.sys [2009-11-25 34384]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
Obsah adresáře 'Naplánované úlohy'

2011-02-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-08-26 18:39]

2011-02-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-08-26 18:39]

2011-02-06 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-545208814-315804561-2388179088-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-06-03 01:02]
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
DPF: {4944924A-64E4-49C1-AC97-ABA3927262FE} - hxxp://channel.dontblynk.com/Launcher/StWbUsa.CAB
FF - ProfilePath - c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.daemon-search.com/startpage|http:// ... /ihned.cz/
FF - prefs.js: keyword.URL - hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZKfox000&ptb=k7PC6otL0iklLtirOFCjCw&psa=&ind=2010052302&ptnrS=ZKfox000&si=&st=kwd&n=77cef6ce&searchfor=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: DAEMON Tools Toolbar: DTToolbar@toolbarnet.com - %profile%\extensions\DTToolbar@toolbarnet.com
FF - Ext: Fasterfox (EladKarako Mod): {eeeeeeee-aaaa-0000-aaaa-000000000000} - %profile%\extensions\{eeeeeeee-aaaa-0000-aaaa-000000000000}
FF - Ext: MediaBar: {E84D42CA-64EB-11DE-A65F-8C3656D89593} - %profile%\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}
FF - Ext: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKCU-Run-Fraps - c:\users\KUBAS\DESKTOP\PROGRAMKY\FRAPS\FRAPS.EXE
AddRemove-Adobe Photoshop 6.0 Tryout - c:\users\kubas\desktop\programky\Uninst.isu
AddRemove-AutocompletePro2_is1 - c:\program files\AutocompletePro\unins000.exe
AddRemove-Cross Fire_is1 - p:\my games\CrossFire\unins000.exe
AddRemove-Digital Physiognomy - c:\users\kubas\Desktop\programky\Digital Physiognomy\uninstall.exe
AddRemove-Fraps - c:\users\kubas\Desktop\programky\Fraps\uninstall.exe
AddRemove-HBLiteSA - c:\program files\HBLite\bin\11.0.345.0\HBLiteUninstaller.exe
AddRemove-QuestBrowse - c:\program files\QuestBrwSearch\uninstall.exe
AddRemove-{163ABEF5-8F45-4083-B489-A008E63083BE}_is1 - f:\big city racer\unins000.exe
AddRemove-{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1 - f:\need for speed world\unins000.exe
AddRemove-{d08d9f98-1c78-4704-87e6-368b0023d831} - c:\program files\RelevantKnowledge\rlvknlg.exe
AddRemove-{DEE782C5-16F2-4B6E-9681-080AF7A5A1B3}_is1 - f:\marswar\unins000.exe



[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Akamai]
"ServiceDll"="C:/Program Files/Common Files/Akamai/netsession_win_dbc0250.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Akamai]
"ServiceDll"="C:/Program Files/Common Files/Akamai/netsession_win_dbc0250.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\GarenaPEngine]
"ImagePath"="\??\c:\users\kubas\AppData\Local\Temp\LWW81CC.tmp"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MySQL]
"ImagePath"="\"c:\program files\MySQL\MySQL Server 5.1\bin\mysqld\" --defaults-file=\"c:\program files\MySQL\MySQL Server 5.1\my.ini\" MySQL"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\XDva375]
"ImagePath"="\??\c:\users\kubas\AppData\Local\Temp\Din453A.tmp"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(3796)
c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
d:\jh\bin\TortoiseStub.dll
d:\jh\bin\TortoiseSVN.dll
d:\jh\bin\intl3_tsvn.dll
c:\windows\System32\wer.dll
c:\program files\Aberger\HfAsistent\FotoSync.dll
c:\program files\Aberger\HfAsistent\xerc2701.dll
c:\program files\Aberger\HfAsistent\fotosynr.dll
d:\nokia pc suite 7\PhoneBrowser.dll
d:\nokia pc suite 7\NGSCM.DLL
d:\nokia pc suite 7\Lang\PhoneBrowser_cze.nlr
d:\nokia pc suite 7\Resource\PhoneBrowser_Nokia.ngr
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\atieclxx.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\LogMeIn\x86\RaMaint.exe
c:\program files\LogMeIn\x86\LogMeIn.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\MySQL\MySQL Server 5.1\bin\mysqld.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\LogMeIn\x86\LogMeIn.exe
c:\windows\system32\sppsvc.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\WUDFHost.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\BearShare Applications\MediaBar\DataMngr\DataMngrUI.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
d:\jh\bin\TSVNCache.exe
c:\windows.old\Documents and Settings\uživatel\Dokumenty\Instalace\Dropbox.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe
c:\program files\PC Connectivity Solution\ServiceLayer.exe
c:\program files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe
c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Celkový čas: 2011-02-10 11:29:59 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-02-10 10:29

Před spuštěním: Volných bajtů: 141 496 193 024
Po spuštění: Volných bajtů: 151 041 933 312

- - End Of File - - 53EDCD68196A6EFA561F999AEDCCC571

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Škodlivý software ve WIN7 32bit

#6 Příspěvek od vyosek »

:arrow: Pokud nemate, tak presunte Combofix na plochu
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize
  • Kód: Vybrat vše

    KillAll::
    
    Folder::
    c:\program files\BearShare Applications\MediaBar
    c:\program files\ICQ6Toolbar
    C:\Program Files\DAEMON Tools Toolbar
    C:\Program Files\Winamp Toolbar
    
    Registry::
    [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0974BA1E-64EC-11DE-B2A5-E43756D89593}]
    [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{0974BA1E-64EC-11DE-B2A5-E43756D89593}"=-
    "{32099AAC-C132-4136-9E9A-4E364A424E17}"=-
    "{855F3B16-6D32-4FE6-8A56-BBB695989046}"=-
    "{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2}"=-
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "PC Suite Tray"=-
    "ISUSPM"=-
    "Google Update"=-
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "QuickTime Task"=-
    "iTunesHelper"=-
    "LogMeIn Hamachi Ui"=-
    "BlackBerryAutoUpdate"=-
    "RoxWatchTray"=-
    "TkBellExe"=-
    "Adobe Reader Speed Launcher"=-
    "Adobe ARM"=-
    "SearchSettings"=-
    "SunJavaUpdateSched"=-
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "D:\wow download\facebook-pic00005267.exe"=-
    "D:\wow download\facebook-pic000934519.exe"=-
    
    File::
    C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
    C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
    C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-545208814-315804561-2388179088-1001Core.job
    C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-545208814-315804561-2388179088-1001UA.job
    C:\Windows\tasks\RealUpgradeScheduledTaskS-1-5-21-545208814-315804561-2388179088-1004.job
    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk
    c:\windows\system32\drivers\iinyauug.sys
    c:\users\kubas\AppData\Local\Temp\EagleXNt.sys
    c:\users\kubas\AppData\Local\Temp\Din453A.tmp
    D:\wow download\facebook-pic000934519.exe
    D:\wow download\facebook-pic00005267.exe
    
    Driver::
    iinyauug
    gupdate
    EagleXNt
    XDva296
    XDva311
    XDva327
    XDva342
    XDva359
    XDva370
    XDva375
    Akamai
    ICQ Service
    
    NetSvc::
    Akamai
    
    DDS::
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    
    Firefox::
    FF - ProfilePath - c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\
    FF - Ext: DAEMON Tools Toolbar: DTToolbar@toolbarnet.com - %profile%\extensions\DTToolbar@toolbarnet.com
    FF - Ext: MediaBar: {E84D42CA-64EB-11DE-A65F-8C3656D89593} - %profile%\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}
    
    RegLock::
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
    
    Reboot::
  • Ulozte vytvoreny TXT jako CFScript.txt
  • Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
    Obrázek
  • Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte
:arrow: Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

adamekz
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 23 Črc 2009 15:40

Re: Škodlivý software ve WIN7 32bit

#7 Příspěvek od adamekz »

ComboFix 11-02-09.04 - u×ivatel 10.02.2011 12:18:58.2.3 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1033.18.3319.2173 [GMT 1:00]
SpuÜtýnř z: C:\Users\u×ivatel\Desktop\ComboFix.exe
Pou×itÚ ovlßdacÝ p°epÝnaŔe :: C:\Users\u×ivatel\Desktop\CFScript.txt
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FILE ::
"c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk"
"c:\users\kubas\AppData\Local\Temp\Din453A.tmp"
"c:\users\kubas\AppData\Local\Temp\EagleXNt.sys"
"c:\windows\system32\drivers\iinyauug.sys"
"C:\Windows\tasks\GoogleUpdateTaskMachineCore.job"
"C:\Windows\tasks\GoogleUpdateTaskMachineUA.job"
"C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-545208814-315804561-2388179088-1001Core.job"
"C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-545208814-315804561-2388179088-1001UA.job"
"C:\Windows\tasks\RealUpgradeScheduledTaskS-1-5-21-545208814-315804561-2388179088-1004.job"
"D:\wow download\facebook-pic00005267.exe"
"D:\wow download\facebook-pic000934519.exe"
.

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Škodlivý software ve WIN7 32bit

#8 Příspěvek od vyosek »

Log neni cely, respektive se asi neprovedl...Aplikujte jej jeste jednou ale v nouzovem rezimu (restart PC, mackat F8, zvolit Stav nouze s praci v siti)
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

adamekz
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 23 Črc 2009 15:40

Re: Škodlivý software ve WIN7 32bit

#9 Příspěvek od adamekz »

Už je toho víc :-) Když ten log chci vložit píše mi to Vaše zpráva obsahuje 178654 znaků. Maximální povolený počet znaků je 60000

Avatar uživatele
lolek169
5. stupeň - BAN
Příspěvky: 158
Registrován: 28 Pro 2010 23:02
Místo/Bydliště: Praha

Re: Škodlivý software ve WIN7 32bit

#10 Příspěvek od lolek169 »

adamekz napsal:Už je toho víc :-) Když ten log chci vložit píše mi to Vaše zpráva obsahuje 178654 znaků. Maximální povolený počet znaků je 60000
Omlouvám se za vstup,dokud tu vyosek není,vložte příspěvek do více častí :)
Potom se na to vyosek koukne.

adamekz
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 23 Črc 2009 15:40

Re: Škodlivý software ve WIN7 32bit

#11 Příspěvek od adamekz »

1.část

ComboFix 11-02-09.04 - Administrator 10.02.2011 13:11:25.3.3 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1033.18.3319.2229 [GMT 1:00]
Spuštěný z: c:\users\Administrator\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Administrator\Desktop\CFScript.txt
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FILE ::
"c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk"
"c:\users\kubas\AppData\Local\Temp\Din453A.tmp"
"c:\users\kubas\AppData\Local\Temp\EagleXNt.sys"
"c:\windows\system32\drivers\iinyauug.sys"
"c:\windows\tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-545208814-315804561-2388179088-1001Core.job"
"c:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-545208814-315804561-2388179088-1001UA.job"
"c:\windows\tasks\RealUpgradeScheduledTaskS-1-5-21-545208814-315804561-2388179088-1004.job"
"d:\wow download\facebook-pic00005267.exe"
"d:\wow download\facebook-pic000934519.exe"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Předchozí spuštění -------
.
c:\program files\BearShare Applications\MediaBar
c:\program files\BearShare Applications\MediaBar\DataMngr\datamngr.dll
c:\program files\BearShare Applications\MediaBar\DataMngr\DataMngrUI.exe
c:\program files\BearShare Applications\MediaBar\DataMngr\IEBHO.dll
c:\program files\BearShare Applications\MediaBar\INSTALL.LOG
c:\program files\BearShare Applications\MediaBar\main.ico
c:\program files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarDx.dll
c:\program files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarTb.dll
c:\program files\BearShare Applications\MediaBar\ToolBar\components\windowmediator.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\bearshare.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\data\search\engines.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\data\search\search.xsl
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\about.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\dtxpanelwin.xul
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\dtxprefwin.xul
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\dtxwin.xul
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\emailnotifierproviders.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\external.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\neterror.xhtml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\lib\wmpstreamer.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\modules\datastore.jsm
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\preferences.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\toolbar.htm
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\toolbar.xul
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-mdl.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tl.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tr.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-dragresize.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-down.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-over.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-down.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-down.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-over.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\navico-home.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\panel.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\powered-mystart.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\tb_icon.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-mdl.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tl.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tr.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-dragresize.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-down.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-over.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-down.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-down.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-over.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize.PNG
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\navico-home.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\panel.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\powered-mystart.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\tb_icon.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\bearshare.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\bluelite.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\bluesky.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-search-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-search.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-settings-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-settings.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-widgets-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn-widgets.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\btn_settings.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-down-back-ff.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-down-back.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-down-left.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-down-right.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-down-splitter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-drop-back.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-drop-left.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-drop-right.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-drop-splitter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-hover-back-ff.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-hover-back.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-hover-left.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-hover-right.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\button-hover-splitter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\ca.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\dictionary.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\divider.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\downloadcom.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\dtxlogo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\email.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\email_on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\games.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\graphred0.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\graphred0_5.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\grey.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\headsup.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\ico-shield.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\images.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\add.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\aol.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\arrow-dn.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\arrow-right.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\arrow-up.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btn-end.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btn-mdl.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btn-mdl_ff.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btn-start.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btnover-end.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btnover-mdl.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btnover-mdl_ff.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btnover-start.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\blank.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnback-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnback-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnleft-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnleft-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnright-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\btnright-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\button-splitter-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\button-splitter-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\collapse.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\comcast.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\dtx.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\edit-back-hot.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\edit-back.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\expand.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\found.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\gmail.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_blue.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_cyan.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_lime.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_magenta.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_yellow.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\hotmail.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\checkmark.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\chevron.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\imap.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\lastsearch-thumb-back.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\loadingMid.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\lock.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\mailcom.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menu_bg-basic.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menu_separator_bar.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menu_separator_white.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitem-splitter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemback-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemback-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemleft-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemleft-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemright-down-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemright-vista.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\modify.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\move.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\movetarget.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\css\popupAbout.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\css\popupGames.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\css\popupWidgets.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\footer.htm
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\gamecategory.xsl
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\gameData.js
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\gameList.xsl
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\gametype.xsl
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\arrow-sml-drop.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\arrow-sml.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\arrowr-bluew5.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\bg-aboutbox.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\bg-btnover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\bg-pnl520x390.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-close-grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-close-greyover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-drag.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-next-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-next.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-previous-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-previous.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\gamethumb-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\gamethumb2-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-calendar.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-download.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-joystick24.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-play.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-tags.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-Add.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-download.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-Info.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-play.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-shop.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\menul-bgon.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\menul-bgover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\panel-botm-noscroll.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scroll-bg-206.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scroll-bg.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scroll-topwin.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollb-disable.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollb-down.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollb-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollb.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollt-disable.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollt-down.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollt-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollt.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\searchbox-pnlbtm.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\star_x_grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\star_x_orange.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\TRUSTe_about.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\view-detailed-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\view-detailed-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\view-thumb-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\view-thumb-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\widgets-square-16px.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\widgets-square-24px.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\popupGames.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\panels\popupWidgets.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\pop.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\css\manager.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\css\slider.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\bg-pnl.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\btn-close-grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\btn-close-greyover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\collapsed_button.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\expanded_button.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-down.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\ico-playstation.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\ico-radio.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\music-note.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-bg.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-busy.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-on.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-warning.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-options-design-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-options-design.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-options-on.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-options.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-0.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-1.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-2.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-3.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-mute.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\scrollbar-handle.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\scrollbar-track.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\slider.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\slideron.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\track.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\managerpanel.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\radio\volumeslider.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\reload.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\remove.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\rename.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\resize-box.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\rss.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\rsschannelback.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\RSSLogo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\rsstabdivider.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\scroll-left.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\scroll-right.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\search-go.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\search.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\text-ellipsis.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\toolbarsplitter.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\transparent_1px.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_02.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_03.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_04.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_06.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_07.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_08.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_09.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_10.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_11.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_12.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_13.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_14.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_15.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_16.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_18.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_19.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_20.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_21.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\btn-close-grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\btn-close-greyover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\close-hot.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\close-normal.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\loadingMid.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\proxy.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\template.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\template.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\templateFF.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\throbber.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\cond999.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\icons.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\na-s.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\na.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\weather.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\add.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-check.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-check.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\options-weather.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-blue.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-orange.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.css
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.html
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lib\yahoo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\lichen.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\logo-about.jpg
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\logo-about.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\logo-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\logo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\logo_old.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\maps.bmp
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\menuseparatorback.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\modify-save.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\modify.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\modifyhot.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\music.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\news.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\options\options-main.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\options\options-search.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\options\options-weather.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\options\options-widgets.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\orange.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\pixsy.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\relatedlinks.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-collapse.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-delete.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-expand.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-feed.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-folder-remove.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-folder-rename.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-folder.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-found.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-reload.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss-subscribe.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rss.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rssback.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\rsstopback.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\search-over.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\search.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\searchbar\searchbar-background-left.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\searchbar\searchbar-background-middle.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\searchbar\searchbar-background-right.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\settings.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\shopping.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\siteinfo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-bluelite.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-bluesky.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-grey.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-lichen.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-orange.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\skin-yellow.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\technorati.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\throbber.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\toolbarsplitter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\video.bmp
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\weather.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\web.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_allocine.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_bliptv.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_calcal.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_calculator.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_gservices.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_sudoku.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_todo.jpg
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_todo.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_trio.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widget_uconverter.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widgets-square-16px.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\widgets.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\wikipedia.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\yahoosearch.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\yellow.gif
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\youtube.png
c:\program files\BearShare Applications\MediaBar\ToolBar\chrome\skin\zoom.png
c:\program files\BearShare Applications\MediaBar\ToolBar\manifest.xml
c:\program files\BearShare Applications\MediaBar\ToolBar\uninstall.exe
c:\program files\BearShare Applications\MediaBar\UNWISE.EXE
c:\program files\BearShare Applications\MediaBar\UnwiseLauncher.exe
c:\program files\DAEMON Tools Toolbar
c:\program files\DAEMON Tools Toolbar\_DTLite.xml
c:\program files\DAEMON Tools Toolbar\DTToolbar.dll
c:\program files\DAEMON Tools Toolbar\Resources\about.ico
c:\program files\DAEMON Tools Toolbar\Resources\AboutWindow.ico
c:\program files\DAEMON Tools Toolbar\Resources\accept.ico
c:\program files\DAEMON Tools Toolbar\Resources\AddRadioStation.ico
c:\program files\DAEMON Tools Toolbar\Resources\as.ico
c:\program files\DAEMON Tools Toolbar\Resources\as.png
c:\program files\DAEMON Tools Toolbar\Resources\astro.ico
c:\program files\DAEMON Tools Toolbar\Resources\astro_buy.ico
c:\program files\DAEMON Tools Toolbar\Resources\astro_download.ico
c:\program files\DAEMON Tools Toolbar\Resources\astro_feedback.ico
c:\program files\DAEMON Tools Toolbar\Resources\astro_forum.ico
c:\program files\DAEMON Tools Toolbar\Resources\astro_home.ico
c:\program files\DAEMON Tools Toolbar\Resources\astro_lite.ico
c:\program files\DAEMON Tools Toolbar\Resources\astroburn_site.ico
c:\program files\DAEMON Tools Toolbar\Resources\astroLite_16.ico
c:\program files\DAEMON Tools Toolbar\Resources\az.ico
c:\program files\DAEMON Tools Toolbar\Resources\b1.png
c:\program files\DAEMON Tools Toolbar\Resources\burn_files.ico
c:\program files\DAEMON Tools Toolbar\Resources\burn_image.ico
c:\program files\DAEMON Tools Toolbar\Resources\burn_imgs.ico
c:\program files\DAEMON Tools Toolbar\Resources\BurnImage.ico
c:\program files\DAEMON Tools Toolbar\Resources\buy.ico
c:\program files\DAEMON Tools Toolbar\Resources\Config.ico
c:\program files\DAEMON Tools Toolbar\Resources\d.ico
c:\program files\DAEMON Tools Toolbar\Resources\d2.ico
c:\program files\DAEMON Tools Toolbar\Resources\daemon.ico
c:\program files\DAEMON Tools Toolbar\Resources\daemon_search.ico
c:\program files\DAEMON Tools Toolbar\Resources\daemon_search_site.ico
c:\program files\DAEMON Tools Toolbar\Resources\dot_disabled.bmp
c:\program files\DAEMON Tools Toolbar\Resources\dot_enabled.bmp
c:\program files\DAEMON Tools Toolbar\Resources\dot_on_over.bmp
c:\program files\DAEMON Tools Toolbar\Resources\download.ico
c:\program files\DAEMON Tools Toolbar\Resources\ds.ico
c:\program files\DAEMON Tools Toolbar\Resources\dsearch.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt-home.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_about.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_buy.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_download.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_faq.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_feedback.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_forum.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_line.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_lite.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_manual.ico
c:\program files\DAEMON Tools Toolbar\Resources\dt_pro.ico
c:\program files\DAEMON Tools Toolbar\Resources\DTPro.ico
c:\program files\DAEMON Tools Toolbar\Resources\dtt16.ico
c:\program files\DAEMON Tools Toolbar\Resources\dtt32.ico
c:\program files\DAEMON Tools Toolbar\Resources\Dwnl.ico
c:\program files\DAEMON Tools Toolbar\Resources\emulation.ico
c:\program files\DAEMON Tools Toolbar\Resources\faq.ico
c:\program files\DAEMON Tools Toolbar\Resources\favicon.ico
c:\program files\DAEMON Tools Toolbar\Resources\features.ico
c:\program files\DAEMON Tools Toolbar\Resources\feedback.ico
c:\program files\DAEMON Tools Toolbar\Resources\forum.ico
c:\program files\DAEMON Tools Toolbar\Resources\GameCentrix.ico
c:\program files\DAEMON Tools Toolbar\Resources\GameCentrixCristals.ico
c:\program files\DAEMON Tools Toolbar\Resources\GameCentrixDownload.ico
c:\program files\DAEMON Tools Toolbar\Resources\GameCentrixPlayOnline.ico
c:\program files\DAEMON Tools Toolbar\Resources\GameCentrixTop.ico
c:\program files\DAEMON Tools Toolbar\Resources\GameS.ico
c:\program files\DAEMON Tools Toolbar\Resources\games_search.ico
c:\program files\DAEMON Tools Toolbar\Resources\games_search_SA.ico
c:\program files\DAEMON Tools Toolbar\Resources\GameSA.ico
c:\program files\DAEMON Tools Toolbar\Resources\gct16.ico
c:\program files\DAEMON Tools Toolbar\Resources\gd.ico
c:\program files\DAEMON Tools Toolbar\Resources\genre.xml
c:\program files\DAEMON Tools Toolbar\Resources\globe.ico
c:\program files\DAEMON Tools Toolbar\Resources\GrabImage.ico
c:\program files\DAEMON Tools Toolbar\Resources\hb.bmp
c:\program files\DAEMON Tools Toolbar\Resources\hb.ico
c:\program files\DAEMON Tools Toolbar\Resources\help.ico
c:\program files\DAEMON Tools Toolbar\Resources\hide.ico
c:\program files\DAEMON Tools Toolbar\Resources\home.ico
c:\program files\DAEMON Tools Toolbar\Resources\image_search.ico
c:\program files\DAEMON Tools Toolbar\Resources\image_search_SA.ico
c:\program files\DAEMON Tools Toolbar\Resources\ImageS.ico
c:\program files\DAEMON Tools Toolbar\Resources\ImageSA.ico
c:\program files\DAEMON Tools Toolbar\Resources\ip.ico
c:\program files\DAEMON Tools Toolbar\Resources\lang.xml
c:\program files\DAEMON Tools Toolbar\Resources\lingvo.ico
c:\program files\DAEMON Tools Toolbar\Resources\m.ico
c:\program files\DAEMON Tools Toolbar\Resources\mail.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mail_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\manual.ico
c:\program files\DAEMON Tools Toolbar\Resources\map.ico
c:\program files\DAEMON Tools Toolbar\Resources\MenuRadioConfig.ico
c:\program files\DAEMON Tools Toolbar\Resources\MenuRadioStation.ico
c:\program files\DAEMON Tools Toolbar\Resources\MenuRSCur.ico
c:\program files\DAEMON Tools Toolbar\Resources\MenuTr.ico
c:\program files\DAEMON Tools Toolbar\Resources\mount.ico
c:\program files\DAEMON Tools Toolbar\Resources\mount_n_drive.ico
c:\program files\DAEMON Tools Toolbar\Resources\next.bmp
c:\program files\DAEMON Tools Toolbar\Resources\next_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\next_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\next_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\none.bmp
c:\program files\DAEMON Tools Toolbar\Resources\none_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\op.ico
c:\program files\DAEMON Tools Toolbar\Resources\play.bmp
c:\program files\DAEMON Tools Toolbar\Resources\play.ico
c:\program files\DAEMON Tools Toolbar\Resources\play_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\play_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\play_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\pragma.ico
c:\program files\DAEMON Tools Toolbar\Resources\prev.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prev_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prev_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prev_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\prod.ico
c:\program files\DAEMON Tools Toolbar\Resources\Radio.ico
c:\program files\DAEMON Tools Toolbar\Resources\RadioBg.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioBg.ico
c:\program files\DAEMON Tools Toolbar\Resources\RadioBgMask.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDisp.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDisp_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown.ico
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioDown_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioE.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioG.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioL.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioLDotMask.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioLeft.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioLeftMask.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioLM.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioM.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioN.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioR.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioR.ico
c:\program files\DAEMON Tools Toolbar\Resources\RadioRM.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioRU.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioVolume.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioVolume_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioVolume_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioVolume_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\RadioW.bmp
c:\program files\DAEMON Tools Toolbar\Resources\rbcheck.ico
c:\program files\DAEMON Tools Toolbar\Resources\rbtxt.ico
c:\program files\DAEMON Tools Toolbar\Resources\refresh.bmp
c:\program files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Rss.ico
c:\program files\DAEMON Tools Toolbar\Resources\Rss1.ico
c:\program files\DAEMON Tools Toolbar\Resources\RssA.ico
c:\program files\DAEMON Tools Toolbar\Resources\RssA1.ico
c:\program files\DAEMON Tools Toolbar\Resources\rssClose.ico
c:\program files\DAEMON Tools Toolbar\Resources\rssL.bmp
c:\program files\DAEMON Tools Toolbar\Resources\rssOpen.ico
c:\program files\DAEMON Tools Toolbar\Resources\RssRefresh.ico
c:\program files\DAEMON Tools Toolbar\Resources\s2.ico
c:\program files\DAEMON Tools Toolbar\Resources\show.ico
c:\program files\DAEMON Tools Toolbar\Resources\size.bmp
c:\program files\DAEMON Tools Toolbar\Resources\size_lr.ico
c:\program files\DAEMON Tools Toolbar\Resources\size_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\size_rl.ico
c:\program files\DAEMON Tools Toolbar\Resources\skins.ico
c:\program files\DAEMON Tools Toolbar\Resources\soft24.ico
c:\program files\DAEMON Tools Toolbar\Resources\soft24_SA.ico
c:\program files\DAEMON Tools Toolbar\Resources\spt.ico
c:\program files\DAEMON Tools Toolbar\Resources\stop.bmp
c:\program files\DAEMON Tools Toolbar\Resources\stop.ico
c:\program files\DAEMON Tools Toolbar\Resources\stop_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\stop_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\stop_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\style.ico
c:\program files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
c:\program files\DAEMON Tools Toolbar\Resources\timer.ico
c:\program files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
c:\program files\DAEMON Tools Toolbar\Resources\toolbar.xml
c:\program files\DAEMON Tools Toolbar\Resources\trans.ico
c:\program files\DAEMON Tools Toolbar\Resources\Trash.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\u.ico
c:\program files\DAEMON Tools Toolbar\Resources\unmount-all.ico
c:\program files\DAEMON Tools Toolbar\Resources\vol.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol.ico
c:\program files\DAEMON Tools Toolbar\Resources\vol_back.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_dott.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_dott_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_mute.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_mute_check.bmp
c:\program files\DAEMON Tools Toolbar\Resources\vol_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
c:\program files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
c:\program files\DAEMON Tools Toolbar\Resources\web_resources.ico
c:\program files\DAEMON Tools Toolbar\Resources\web_search.ico
c:\program files\DAEMON Tools Toolbar\Resources\web_search_SA.ico
c:\program files\DAEMON Tools Toolbar\Resources\WebS.ico
c:\program files\DAEMON Tools Toolbar\Resources\WebSa.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi0.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi1.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi10.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi11.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi12.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi13.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi14.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi2.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi3.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi4.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi5.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi6.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi7.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi8.ico
c:\program files\DAEMON Tools Toolbar\Resources\wi9.ico
c:\program files\DAEMON Tools Toolbar\uninst.exe
c:\program files\ICQ6Toolbar
c:\program files\ICQ6Toolbar\config.xml
c:\program files\ICQ6Toolbar\Icons.bmp
c:\program files\ICQ6Toolbar\ICQ Service.exe
c:\program files\ICQ6Toolbar\icq6Toolbar.ico
c:\program files\ICQ6Toolbar\ICQToolBar.dll
c:\program files\ICQ6Toolbar\ICQUnToolbar.exe
c:\program files\ICQ6Toolbar\logo_small.gif
c:\program files\ICQ6Toolbar\ServiceStarter.exe
c:\program files\ICQ6Toolbar\short.wav
c:\program files\ICQ6Toolbar\Version.txt
c:\program files\Winamp Toolbar
c:\program files\Winamp Toolbar\apopup.dll
c:\program files\Winamp Toolbar\install.log
c:\program files\Winamp Toolbar\msvcr71.dll
c:\program files\Winamp Toolbar\uninstall.exe
c:\program files\Winamp Toolbar\winamptb.dll
c:\program files\Winamp Toolbar\winampTbServer.exe
c:\program files\Winamp Toolbar\winamptbServerPS.dll
c:\program files\Winamp Toolbar\xprt5.dll
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk

adamekz
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 23 Črc 2009 15:40

Re: Škodlivý software ve WIN7 32bit

#12 Příspěvek od adamekz »

2.část

c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\components\windowmediator.js
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome.manifest
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\bearshare.js
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\data\search\engines.xml
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\data\search\search.xsl
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\lib\about.xml
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\lib\dtxpanelwin.xul
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\lib\dtxprefwin.xul
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\lib\dtxwin.xul
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\lib\emailnotifierproviders.xml
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\lib\external.js
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\lib\neterror.xhtml
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\lib\wmpstreamer.html
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\modules\datastore.jsm
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\preferences.xml
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\toolbar.htm
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\toolbar.xul
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-mdl.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tl.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tr.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-dragresize.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-down.PNG
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-over.PNG
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-down.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-over.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-down.PNG
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-over.PNG
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize.PNG
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next-off.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous-off.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\navico-home.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\panel.html
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\powered-mystart.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\tb_icon.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.js
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.xml
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-mdl.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tl.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tr.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-dragresize.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-down.PNG
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-over.PNG
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-down.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-over.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-down.PNG
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-over.PNG
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize.PNG
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next-off.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous-off.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\navico-home.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\panel.html
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\powered-mystart.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\tb_icon.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.js
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.xml
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\bearshare.css
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\bluelite.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\bluesky.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\btn-search-over.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\btn-search.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\btn-settings-over.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\btn-settings.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\btn-widgets-over.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\btn-widgets.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\btn_settings.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\button-down-back-ff.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\button-down-back.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\button-down-left.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\button-down-right.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\button-down-splitter.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\button-drop-back.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\button-drop-left.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\button-drop-right.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\button-drop-splitter.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\button-hover-back-ff.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\button-hover-back.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\button-hover-left.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\button-hover-right.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\button-hover-splitter.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\ca.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\dictionary.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\divider.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\downloadcom.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\dtxlogo.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\email.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\email_on.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\games.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\graphred0.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\graphred0_5.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\grey.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\headsup.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\ico-shield.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\images.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\add.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\aol.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\arrow-dn.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\arrow-right.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\arrow-up.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\bg-btn-end.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\bg-btn-mdl.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\bg-btn-mdl_ff.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\bg-btn-start.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\bg-btnover-end.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\bg-btnover-mdl.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\bg-btnover-mdl_ff.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\bg-btnover-start.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\blank.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\btnback-down-vista.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\btnback-vista.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\btnleft-down-vista.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\btnleft-vista.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\btnright-down-vista.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\btnright-vista.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\button-splitter-down-vista.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\button-splitter-vista.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\collapse.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\comcast.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\dtx.css
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\edit-back-hot.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\edit-back.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\expand.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\found.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\gmail.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\highlight.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\highlight_blue.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\highlight_cyan.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\highlight_lime.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\highlight_magenta.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\highlight_yellow.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\hotmail.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\checkmark.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\chevron.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\imap.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\lastsearch-thumb-back.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\loadingMid.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\lock.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\mailcom.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\menu_bg-basic.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\menu_separator_bar.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\menu_separator_white.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\menuitem-splitter.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\menuitemback-down-vista.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\menuitemback-vista.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\menuitemleft-down-vista.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\menuitemleft-vista.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\menuitemright-down-vista.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\menuitemright-vista.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\modify.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\move.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\movetarget.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\css\popupAbout.css
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\css\popupGames.css
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\css\popupWidgets.css
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\footer.htm
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\gamecategory.xsl
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\gameData.js
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\gameList.xsl
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\gametype.xsl
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\arrow-sml-drop.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\arrow-sml.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\arrowr-bluew5.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\bg-aboutbox.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\bg-btnover.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\bg-pnl520x390.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\btn-close-grey.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\btn-close-greyover.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\btn-drag.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\btn-next-over.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\btn-next.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\btn-previous-over.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\btn-previous.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\btn-search-pnlbtm.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\gamethumb-on.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\gamethumb2-over.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\ico-calendar.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\ico-download.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\ico-joystick24.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\ico-play.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\ico-tags.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\icon-Add.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\icon-download.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\icon-Info.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\icon-play.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\icon-shop.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\menul-bgon.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\menul-bgover.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\panel-botm-noscroll.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\scroll-bg-206.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\scroll-bg.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\scroll-topwin.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\scrollb-disable.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\scrollb-down.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\scrollb-over.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\scrollb.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\scrollt-disable.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\scrollt-down.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\scrollt-over.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\scrollt.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\searchbox-pnlbtm.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\star_x_grey.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\star_x_orange.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\TRUSTe_about.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\view-detailed-on.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\view-detailed-over.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\view-thumb-on.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\view-thumb-over.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\widgets-square-16px.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\images\widgets-square-24px.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\popupGames.html
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\panels\popupWidgets.html
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\pop.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\css\manager.css
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\css\slider.css
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\bg-pnl.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\btn-close-grey.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\btn-close-greyover.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\collapsed_button.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\expanded_button.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\ico-playstation-down.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\ico-playstation-over.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\ico-playstation.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\ico-radio.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\music-note.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-btn-pause-on.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-btn-pause.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-btn-play-on.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-btn-play.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-eq-bg.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-eq-busy.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-eq-off.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-eq-on.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-eq-warning.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-options-design-on.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-options-design.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-options-on.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-options.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-volume-0.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-volume-1.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-volume-2.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-volume-3.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\radio-volume-mute.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\scrollbar-handle.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\scrollbar-track.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\slider.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\slideron.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\images\track.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\managerpanel.html
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\radio\volumeslider.html
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\reload.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\remove.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\rename.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\resize-box.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\rss.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\rsschannelback.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\RSSLogo.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\rsstabdivider.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\scroll-left.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\scroll-right.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\search-go.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\search.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\text-ellipsis.xml
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\toolbarsplitter.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\transparent_1px.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_02.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_03.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_04.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_06.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_07.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_08.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_09.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_10.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_11.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_12.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_13.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_14.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_15.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_16.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_18.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_19.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_20.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\border_21.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\btn-close-grey.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\btn-close-greyover.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\close-hot.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\close-normal.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\loadingMid.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\proxy.html
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\template.html
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\template.xml
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\templateFF.html
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\uwa\throbber.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\icons\cond999.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\icons\icons.xml
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\icons\na-s.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\icons\na.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\icons\weather.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\add.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\box-check.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\ico-check.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\options-weather.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\over-blue.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\over-orange.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\popupWeather.css
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\weatherbutton\panels\popupWeather.html
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lib\yahoo.png

adamekz
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 23 Črc 2009 15:40

Re: Škodlivý software ve WIN7 32bit

#13 Příspěvek od adamekz »

3.část

c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\lichen.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\logo-about.jpg
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\logo-about.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\logo-over.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\logo.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\logo_old.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\maps.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\menuseparatorback.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\modify-save.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\modify.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\modifyhot.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\music.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\news.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\options\options-main.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\options\options-search.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\options\options-weather.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\options\options-widgets.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\orange.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\pixsy.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\relatedlinks.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\rss-collapse.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\rss-delete.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\rss-expand.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\rss-feed.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\rss-folder-remove.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\rss-folder-rename.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\rss-folder.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\rss-found.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\rss-reload.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\rss-subscribe.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\rss.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\rssback.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\rsstopback.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\search-over.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\search.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\searchbar\searchbar-background-left.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\searchbar\searchbar-background-middle.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\searchbar\searchbar-background-right.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\settings.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\shopping.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\siteinfo.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\skin-bluelite.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\skin-bluesky.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\skin-grey.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\skin-lichen.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\skin-orange.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\skin-yellow.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\technorati.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\throbber.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\toolbarsplitter.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\video.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\weather.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\web.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\widget_allocine.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\widget_bliptv.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\widget_calcal.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\widget_calculator.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\widget_gservices.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\widget_sudoku.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\widget_todo.jpg
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\widget_todo.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\widget_trio.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\widget_uconverter.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\widgets-square-16px.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\widgets.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\wikipedia.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\yahoosearch.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\yellow.gif
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\youtube.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\chrome\skin\zoom.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\install.rdf
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}\manifest.xml
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\DTToolbarFF.dll
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\DTToolbarFF.xpt
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\about.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\AboutWindow.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\accept.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\AddRadioStation.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\as.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\as.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_buy.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_download.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_feedback.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_forum.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_home.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_lite.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astroburn_site.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astroLite_16.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\az.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\b1.png
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\burn_files.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\burn_image.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\burn_imgs.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\BurnImage.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\buy.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Config.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\d.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\d2.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\daemon.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\daemon_search.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\daemon_search_site.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dot_disabled.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dot_enabled.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dot_on_over.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\download.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ds.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dsearch.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt-home.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_about.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_buy.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_download.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_faq.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_feedback.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_forum.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_line.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_lite.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_manual.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_pro.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\DTPro.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dtt16.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dtt32.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Dwnl.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\emulation.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\faq.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\favicon.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\features.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\feedback.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\forum.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrix.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrixCristals.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrixDownload.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrixPlayOnline.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrixTop.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameS.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\games_search.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\games_search_SA.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameSA.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\gct16.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\gd.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\genre.xml
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\globe.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GrabImage.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\hb.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\hb.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\help.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\hide.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\home.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\image_search.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\image_search_SA.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ImageS.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ImageSA.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ip.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\lang.xml
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\lingvo.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\m.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail_disable.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail_down.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail_under.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc_disable.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc_down.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc_under.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\manual.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\map.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\MenuRadioConfig.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\MenuRadioStation.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\MenuRSCur.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\MenuTr.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mount.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mount_n_drive.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\next.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\next_down.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\next_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\next_under.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\none.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\none_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\op.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play_down.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play_under.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\pragma.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prev.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prev_down.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prev_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prev_under.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prod.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Radio.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioBg.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioBg.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioBgMask.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDisp.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDisp_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown_down.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown_under.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioE.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioG.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioL.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioLDotMask.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioLeft.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioLeftMask.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioLM.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioM.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioN.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioR.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioR.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioRM.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioRU.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioVolume.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioVolume_down.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioVolume_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioVolume_under.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioW.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rbcheck.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rbtxt.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\refresh.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\refresh_down.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\refresh_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\refresh_under.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Rss.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Rss1.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RssA.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RssA1.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rssClose.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rssL.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rssOpen.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RssRefresh.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\s2.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\show.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\size.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\size_lr.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\size_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\size_rl.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\skins.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\soft24.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\soft24_SA.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\spt.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop_down.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop_under.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\style.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\SupportRequest.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\timer.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\TitleIcon.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\toolbar.xml
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\trans.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash_disable.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash_down.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash_under.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\u.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\unmount-all.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_back.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_dott.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_dott_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_down.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_mute.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_mute_check.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_under.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtClose.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtClose_down.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtClose_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtClose_under.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtText.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtText_down.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtText_m.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtText_under.bmp
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\web_resources.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\web_search.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\web_search_SA.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\WebS.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\WebSa.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi0.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi1.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi10.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi11.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi12.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi13.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi14.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi2.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi3.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi4.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi5.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi6.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi7.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi8.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi9.ico
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\chrome.manifest
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\chrome\dttoolbar.jar
c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\extensions\DTToolbar@toolbarnet.com\install.rdf
c:\windows\tasks\GoogleUpdateTaskMachineCore.job
c:\windows\tasks\GoogleUpdateTaskMachineUA.job
c:\windows\tasks\RealUpgradeScheduledTaskS-1-5-21-545208814-315804561-2388179088-1004.job
d:\wow download\facebook-pic00005267.exe
d:\wow download\facebook-pic000934519.exe

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_EAGLEXNT
-------\Legacy_XDVA296
-------\Legacy_XDVA311
-------\Legacy_XDVA327
-------\Legacy_XDVA342
-------\Legacy_XDVA359
-------\Legacy_XDVA370
-------\Service_Akamai
-------\Service_EagleXNt
-------\Service_gupdate
-------\Service_ICQ Service
-------\Service_iinyauug
-------\Service_XDva296
-------\Service_XDva311
-------\Service_XDva327
-------\Service_XDva342
-------\Service_XDva359
-------\Service_XDva370
-------\Service_XDva375


((((((((((((((((((((((((( Soubory vytvořené od 2011-01-10 do 2011-02-10 )))))))))))))))))))))))))))))))
.

2011-02-10 12:18 . 2011-02-10 12:29 -------- d-----w- c:\users\uživatel\AppData\Local\temp
2011-02-10 12:18 . 2011-02-10 12:18 -------- d-----w- c:\users\kubas\AppData\Local\temp
2011-02-10 12:18 . 2011-02-10 12:18 -------- d-----w- c:\users\janek\AppData\Local\temp
2011-02-10 12:18 . 2011-02-10 12:18 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-02-10 12:04 . 2011-02-10 12:04 -------- d-----w- c:\users\Administrator
2011-02-10 09:56 . 2011-02-10 09:56 -------- d-----w- c:\users\uživatel\AppData\Roaming\Malwarebytes
2011-02-10 09:56 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-02-10 09:56 . 2011-02-10 09:56 -------- d-----w- c:\programdata\Malwarebytes
2011-02-10 09:56 . 2011-02-10 09:56 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-02-10 09:56 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-02-10 09:21 . 2011-02-10 09:21 -------- d-----w- C:\rsit
2011-02-10 09:21 . 2011-02-10 09:21 -------- d-----w- c:\program files\trend micro
2011-02-09 16:48 . 2011-02-09 16:48 -------- d-----w- c:\users\uživatel\AppData\Local\LogMeIn
2011-02-09 16:48 . 2010-12-08 12:11 53632 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\LMIproc.dll
2011-02-09 16:48 . 2010-12-08 12:11 29568 ----a-w- c:\windows\system32\LMIport.dll
2011-02-09 16:48 . 2010-12-08 12:12 83360 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
2011-02-09 16:48 . 2010-09-17 14:40 47640 ----a-w- c:\windows\system32\drivers\LMIRfsDriver.sys
2011-02-09 16:47 . 2010-12-08 12:11 87424 ----a-w- c:\windows\system32\LMIinit.dll
2011-02-09 16:47 . 2011-02-10 06:08 -------- d-----w- c:\programdata\LogMeIn
2011-02-09 16:47 . 2011-02-10 08:58 -------- d-----w- c:\program files\LogMeIn
2011-02-09 16:46 . 2011-01-13 09:41 5890896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{DF9B9F66-D154-4191-8F75-95A3175EB2BC}\mpengine.dll
2011-01-30 13:57 . 2011-01-30 13:57 103864 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
2011-01-30 13:57 . 2011-01-30 13:57 103864 ----a-w- c:\program files\Internet Explorer\Plugins\nppdf32.dll
2011-01-14 19:41 . 2011-01-14 19:41 -------- d-----w- c:\program files\alaplaya
2011-01-14 19:41 . 2003-09-03 01:28 724992 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iKernel.dll
2011-01-14 19:41 . 2003-09-03 01:27 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\ctor.dll
2011-01-14 19:41 . 2003-09-03 01:26 266240 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iscript.dll
2011-01-14 19:41 . 2003-09-03 01:26 192512 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iuser.dll
2011-01-14 19:41 . 2003-09-03 01:25 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\DotNetInstaller.exe
2011-01-14 19:41 . 2011-01-14 19:41 311428 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\Setup.dll
2011-01-14 19:41 . 2011-01-14 19:41 184452 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iGdi.dll
2011-01-13 19:31 . 2011-01-13 19:31 -------- d-----w- c:\users\kubas\AppData\Roaming\Need for Speed World
2011-01-13 18:58 . 2011-01-13 18:58 -------- d-----w- c:\users\kubas\AppData\Local\Electronic_Arts_Inc
2011-01-12 13:06 . 2011-01-12 13:06 0 ----a-w- c:\windows\system32\ConduitEngine.tmp
2011-01-12 13:06 . 2011-01-12 13:06 -------- d-----w- c:\program files\ConduitEngine
2011-01-11 14:57 . 2011-01-11 14:57 -------- d-----w- c:\programdata\id Software

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-02 16:11 . 2010-01-30 13:31 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-01-02 13:49 . 2011-01-02 13:49 176488 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10136.bin
2010-12-20 20:04 . 2010-12-20 20:04 4608 ----a-w- c:\windows\system32\bbchlp.dll
2010-12-20 20:04 . 2010-12-20 20:04 4096 ----a-w- c:\windows\system32\drivers\bbcap.sys
2010-12-20 20:04 . 2010-12-20 20:04 30720 ----a-w- c:\windows\system32\bbcap.dll
2010-12-02 03:35 . 2010-12-02 03:35 4280320 ----a-w- c:\windows\system32\GPhotos.scr
2010-11-12 17:53 . 2010-07-14 19:00 472808 ----a-w- c:\windows\system32\deployJava1.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-10-18 10:26 3908192 ----a-w- c:\program files\ConduitEngine\ConduitEngine.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3CF7606-E683-4375-A372-96B75DA0AEF7}]
2010-02-11 07:58 185856 ----a-w- c:\program files\Get Styles\enlbrdr.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{d22f6f66-2f47-4184-8625-fbfa4cbdb7ce}]
2010-10-18 10:26 3908192 ----a-w- c:\program files\OnRPG\tbOnR2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{d22f6f66-2f47-4184-8625-fbfa4cbdb7ce}"= "c:\program files\OnRPG\tbOnR2.dll" [2010-10-18 3908192]

[HKEY_CLASSES_ROOT\clsid\{d22f6f66-2f47-4184-8625-fbfa4cbdb7ce}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D22F6F66-2F47-4184-8625-FBFA4CBDB7CE}"= "c:\program files\OnRPG\tbOnR2.dll" [2010-10-18 3908192]

[HKEY_CLASSES_ROOT\clsid\{d22f6f66-2f47-4184-8625-fbfa4cbdb7ce}]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-12-11 98304]
"ATICustomerCare"="c:\program files\ATI\ATICustomerCare\ATICustomerCare.exe" [2009-06-14 307200]
"LogMeIn GUI"="c:\program files\LogMeIn\x86\LogMeInSystray.exe" [2010-09-17 63048]

c:\users\janek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Xfire.lnk - d:\xfire\Xfire.exe [2010-3-26 3250576]

c:\users\kubas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
CurseClientStartup.ccip [2010-3-7 0]
ProgSense.lnk - d:\progsense\ProgSense.exe [2010-5-16 888000]

c:\users\u§ivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\windows.old\Documents and Settings\u§ivatel\Dokumenty\Instalace\Dropbox.exe [2009-8-28 26784939]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
BlackBerry Desktop Manager.lnk - c:\program files\Research In Motion\BlackBerry\DesktopMgr.exe [2009-7-1 1717592]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

adamekz
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 23 Črc 2009 15:40

Re: Škodlivý software ve WIN7 32bit

#14 Příspěvek od adamekz »

R2 Apache2.2;Apache2.2;d:\xampp\xampp\apache\bin\httpd.exe [2009-12-19 29416]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;d:\hamachi\hamachi-2.exe [2010-03-30 1107336]
R2 LiveTurbineMessageService;Turbine Message Service - Live;d:\turbine download manager\TurbineMessageService.exe [2009-11-30 271856]
R3 AmplusnetPrivacyTools;AmplusnetPrivacyTools;c:\windows\system32\AmplusnetPrivacyTools.exe [2009-09-21 2347008]
R3 GarenaPEngine;GarenaPEngine;c:\users\kubas\AppData\Local\Temp\LWW81CC.tmp [x]
R3 GGSAFERDriver;GGSAFER Driver;d:\garena\plugins\UI\safedrv.sys [x]
R3 LiveTurbineNetworkService;Turbine Network Service - Live;d:\turbine download manager\TurbineNetworkService.exe [2009-11-30 218608]
R3 LLRING0;LLRING0;d:\mu2\MuGuard\llck3.sys [2010-04-07 4096]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [2010-08-15 3700176]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-07-11 1343400]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-01-30 691696]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-12-11 172032]
S2 Application Updater;Application Updater;c:\program files\Application Updater\ApplicationUpdater.exe [2010-10-22 386560]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn\x86\LMIGuardianSvc.exe [2010-12-08 374152]
S2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\RaInfo.sys [2010-09-17 12856]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [2009-12-11 5188096]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2009-12-11 125440]
S3 bbcap;bbcap;c:\windows\system32\DRIVERS\bbcap.sys [2010-12-20 4096]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-03-01 139776]
S3 SCREAMINGBDRIVER;Screaming Bee Audio;c:\windows\system32\drivers\ScreamingBAudio.sys [2009-11-25 34384]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
DPF: {4944924A-64E4-49C1-AC97-ABA3927262FE} - hxxp://channel.dontblynk.com/Launcher/StWbUsa.CAB
FF - ProfilePath - c:\users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\80jllk06.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.daemon-search.com/startpage|http:// ... /ihned.cz/
FF - prefs.js: keyword.URL - hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZKfox000&ptb=k7PC6otL0iklLtirOFCjCw&psa=&ind=2010052302&ptnrS=ZKfox000&si=&st=kwd&n=77cef6ce&searchfor=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: Fasterfox (EladKarako Mod): {eeeeeeee-aaaa-0000-aaaa-000000000000} - %profile%\extensions\{eeeeeeee-aaaa-0000-aaaa-000000000000}
FF - Ext: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKLM-Run-DataMngr - c:\progra~1\BEARSH~1\MediaBar\DataMngr\DataMngrUI.exe
AddRemove-BearShare MediaBar - c:\program files\BearShare Applications\MediaBar\UnwiseLauncher.exe
AddRemove-DAEMON Tools Toolbar - c:\program files\DAEMON Tools Toolbar\uninst.exe
AddRemove-ICQToolbar - c:\program files\ICQ6Toolbar\ICQUnToolbar.exe
AddRemove-Winamp Toolbar - c:\program files\Winamp Toolbar\uninstall.exe



[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\GarenaPEngine]
"ImagePath"="\??\c:\users\kubas\AppData\Local\Temp\LWW81CC.tmp"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MySQL]
"ImagePath"="\"c:\program files\MySQL\MySQL Server 5.1\bin\mysqld\" --defaults-file=\"c:\program files\MySQL\MySQL Server 5.1\my.ini\" MySQL"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(5140)
c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
d:\jh\bin\TortoiseStub.dll
d:\jh\bin\TortoiseSVN.dll
d:\jh\bin\intl3_tsvn.dll
c:\program files\Aberger\HfAsistent\FotoSync.dll
c:\program files\Aberger\HfAsistent\xerc2701.dll
c:\program files\Aberger\HfAsistent\fotosynr.dll
d:\nokia pc suite 7\PhoneBrowser.dll
d:\nokia pc suite 7\NGSCM.DLL
d:\nokia pc suite 7\Lang\PhoneBrowser_cze.nlr
d:\nokia pc suite 7\Resource\PhoneBrowser_Nokia.ngr
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\atieclxx.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\LogMeIn\x86\RaMaint.exe
c:\program files\LogMeIn\x86\LogMeIn.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\MySQL\MySQL Server 5.1\bin\mysqld.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\sppsvc.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\WUDFHost.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\LogMeIn\x86\LogMeIn.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\taskhost.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\windows\system32\conhost.exe
c:\windows.old\Documents and Settings\uživatel\Dokumenty\Instalace\Dropbox.exe
d:\jh\bin\TSVNCache.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
.
**************************************************************************
.
Celkový čas: 2011-02-10 13:31:09 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-02-10 12:31
ComboFix2.txt 2011-02-10 10:29

Před spuštěním: 150 534 889 472 bytes free
Po spuštění: Volných bajtů: 150 961 774 592

- - End Of File - - 098F6D56625A14A8B6962496ECD3F658

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Škodlivý software ve WIN7 32bit

#15 Příspěvek od vyosek »

Dekuji lolek169 za zaskok :wink:

Jak se chova PC :???:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Odpovědět