Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

win32

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: win32

#16 Příspěvek od vyosek »

ruzajska píše:prosííím poraďte někdo co teď s tím? :oops:
Podivejte, nase forum funguje na bazti dobrovolnosti = radci jsou zde ve svem volnem case a zadarmo = nemuzeme tu byt porad :wink:

Dekuji kolegovi Martymu za zaskok :wink:

:arrow: Pokud nemate, tak presunte Combofix na plochu
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    File::
c:\windows\system32\drivers\29868122.sys
c:\windows\system32\drivers\2986812.sys
c:\windows\system32\drivers\29868121.sys
c:\windows\system32\MAI10.tmp
c:\windows\system32\MAID.tmp
c:\windows\system32\drivers\Changer.sys
c:\windows\system32\dllcache\changer.sys
c:\windows\system32\drivers\ulhzyt.sys
c:\windows\system32\drivers\qwdevkxjhulsclp.sys
c:\windows\system32\drivers\hibrerxurltsb.sys
c:\windows\system32\drivers\zblasdxese.sys
c:\windows\system32\drivers\hvmuv.sys
c:\windows\System32\Drivers\sygvrzwm.sys
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

DDS::
uStart Page = hxxp://home.mywebsearch.com/index.jhtml ... pk6Qv4COKw
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mStart Page = hxxp://home.sweetim.com
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

Firefox::
FF - ProfilePath - c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.sweetim.com/search.asp?src=2&q=
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.mywebsearch.com/mywebsear ... searchfor=
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: SweetIM Toolbar for Firefox: {EEE6C361-6118-11DC-9C72-001320C79847} - %profile%\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}

RegLock::
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

FCopy::
c:\windows\system32\dllcache\tcpip.sys | c:\windows\system32\drivers\tcpip.sys

Folder::
c:\program files\SweetIM

Registry::
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"=-
[-HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[-HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[-HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[-HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NBJ"=-
"swg"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PCSuiteTrayApplication"=-
"SunJavaUpdateSched"=-
"Adobe Reader Speed Launcher"=-
"Adobe ARM"=-
"SweetIM"=-
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Nokia.PCSync"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000000
[-HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
[-HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

Driver::
29868122
29868121ffrhofavazf
ffrhofavazf
htewmis
htfxi
xwbevxmqi
zdqhllgl
gupdate1ca7ac5d1ede8f
sygvrzwm
  • Ulozte vytvoreny TXT jako CFScript.txt
  • Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
    Obrázek
  • Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte
:arrow: Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
ruzajska
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 07 úno 2011 16:05

Re: win32

#17 Příspěvek od ruzajska »

jj ,to já samozřejmě chápu,jen jsem se pokoušela jestli není někdo on line,kdo by poradil :happy:

ComboFix 11-02-06.02 - Martin 07.02.2011 23:14:25.2.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1014.461 [GMT 1:00]
Spuštěný z: c:\documents and settings\Martin\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Martin\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

FILE ::
"c:\windows\system32\dllcache\changer.sys"
"c:\windows\system32\drivers\2986812.sys"
"c:\windows\system32\drivers\29868121.sys"
"c:\windows\system32\drivers\29868122.sys"
"c:\windows\system32\drivers\hibrerxurltsb.sys"
"c:\windows\system32\drivers\hvmuv.sys"
"c:\windows\system32\drivers\Changer.sys"
"c:\windows\system32\drivers\qwdevkxjhulsclp.sys"
"c:\windows\System32\Drivers\sygvrzwm.sys"
"c:\windows\system32\drivers\ulhzyt.sys"
"c:\windows\system32\drivers\zblasdxese.sys"
"c:\windows\system32\MAI10.tmp"
"c:\windows\system32\MAID.tmp"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
PEV Error: LocalSettingsFile

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components\ITB_History.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\prefs.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\user.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome.manifest
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\about.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\about.xul
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\autocomplete.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\exitobserver.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\globals.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\highlight.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtabs.css
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtabs.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtoolbar.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtoolbar.xul
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\bgLarge.gif
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\bgSmall.gif
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\buttonBlue.gif
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\buttonGreen.gif
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\searchLogo.gif
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\localfileupdate.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\menu-button.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_bg.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_cz.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_de.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_en.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_es.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_fr.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_he.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_it.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_ru.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_sk.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_tr.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_uk.html
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\options.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\options.xul
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\parsegamesxml.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\parsemenuxml.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\peoplesearch.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\peoplesearch.xul
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\prefutils.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\search.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\sitespanel.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\splitter.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\statistics.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\tabcontext.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\utilities.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\voucher.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\zoom.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\icq_locale.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\itb.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\itb_options.dtd
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\options.properties
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\about.css
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\abt.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\ain.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\ang.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\arrow_eng.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\arrow_heb.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\btn_bg.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\btn_bg_lite.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\default.css
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\dis.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\dropmarker.css
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\20minutos.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\about.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\abv.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aktuality.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aktualne.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\alljobs.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\allocine.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\altervista.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\amazon.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\answers.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aol.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aolradio.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\apple.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ard.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\as.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\atlas.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\atlassk.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aufeminin.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\autobazar.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\autobazar1.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\autocz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\azet.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bazos.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bbc.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bbc.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bigmir.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\billiger.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bing.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\blesk.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bleskove.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\btv.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\calcalist.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\cas.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\cdiscount.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\centrum.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ciao.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\cnet.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\cnn.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\commentcamarche.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\corriere.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\csfd.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\d.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\dailymotion.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\data.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\deezer.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\default.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\delicious.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\depositfiles.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\deviantart.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\diary.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\digg.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\dir.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\disney.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\diva.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\dnevnik.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\doctissimo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\donanimhaber.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ebay.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ebayanuncios.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ekolay.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\elmundo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\elpais.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\eurosport.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\expats.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\facebook.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\finance.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\firmy.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\flickr.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\flix.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\fotolog.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\fox.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\france2.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\free.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\garanti.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gazeta.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gazetevatan.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gazzetta.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gbg.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gepime.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gismeteo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gittigidiyor.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\globes.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gmail.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gmx.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\google.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\googleearth.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\googletranslate.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\haaretz.gif
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\haaretz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\haber7.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\haberturk.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\hepsiburada.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\horadot.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\horoskopy.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\hurriyet.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\championat.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\chip.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\icq.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\idnes.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ilike.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ilmeteo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\imageshack.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\imdb.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\impulse.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\infojobs.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\interfacelift.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\internethaber.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\iserialy.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\iua.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\izlesene.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\jappy.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\jeux.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\jeuxvideo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\jing.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\joj.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\kijiji.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\kinopoisk.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\korrespondent.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lastfm.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\leboncoin.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lemonde.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lenta.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\leonardo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lequipe.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\libero.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\libimseti.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lide.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\linternaute.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\livejournal.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mailru.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mako.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mappy.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mapy.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\marca.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\marketgid.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\markiza.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\megavideo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\meinvz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mekusharim.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\meta.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\milanobakeca.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\milliyet.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mimibazar.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\minibazar.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mobilen.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\morfix.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mouse.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mymovies.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\myspace.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\najisto.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\nana.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\nana10.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\netgames.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\netlog.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\novinky.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\novoteka.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\nrg.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ntvmsnbc.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\nytimes.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\odnoklassniki.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\one.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\orange.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\otto.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\pagesjaunes.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\peliculasyonkis.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\photobucket.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\picnik.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\pravda.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\profesia.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\prosieben.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\r10.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rapidshare.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rbc.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\repubblica.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rian.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rozetka.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rtl.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sabah.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sahibinden.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sat1.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\segundamano.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\seriesyonkis.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\seznam.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\seznamemail.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sfr.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\shmu.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\schuelervz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\skyrock.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\slsp.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sme.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\snimka.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\softonic.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\spiegel.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\splinder.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sport-express.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sport5.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sportal.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sportcz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sportes.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sporx.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\stahuj.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\stream.bmp
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\stream.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\studivz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\subito.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\supercz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\superhry.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\svejo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\t-online.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\tapuz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\taringa.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\telecinco.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\terra.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\tf1.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\themarker.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\tiscali.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\topky.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\torrents.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\travian.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\tv.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\twitter.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ucoz.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ukr.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vbox7.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vesti.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vimeo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\virgilio.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vkontakte.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vodafone.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\walla.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wallmart.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\walmart.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wamba.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wat.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\weather.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\web.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wer-kennt-wen.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wetter.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wikipedia.ico
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: win32

#18 Příspěvek od vyosek »

Log neni cely, rozdelte jej do vice prispevku :wink:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
ruzajska
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 07 úno 2011 16:05

Re: win32

#19 Příspěvek od ruzajska »

c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wolframalpha.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\yad2.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\yahoo.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ynet.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\youtube.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\zamunda.bmp
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\zap.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\zena.ico
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\hide.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\icons.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\logo_small.gif
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\menu.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\more_vouchers_r.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\more_vouchers_y.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\options.css
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\peoplesearch.css
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\pin.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\pinc.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\powerd1.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\remove.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\reset.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\search_arrow.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\search_bg.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\unpin.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\voucher_bg.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\voucher_bg_y.png
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\install.rdf
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\manifest.mf
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.rsa
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.sf
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.gif
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.src
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\blacklist.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_33.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_34.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_359.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_380.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_39.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_42.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_4201.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_49.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_7.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_90.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_972.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\voucher_list.xml
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\components\SIMAutoCompleteSearch.js
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome.manifest
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar.jar
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\install.rdf
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF\manifest.mf
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF\zigbert.rsa
c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF\zigbert.sf
c:\program files\SweetIM
c:\program files\SweetIM\Messenger\default.xml
c:\program files\SweetIM\Messenger\mgAdaptersProxy.dll
c:\program files\SweetIM\Messenger\mgAIMAuto.dll
c:\program files\SweetIM\Messenger\mgAIMMessengerAdapter.dll
c:\program files\SweetIM\Messenger\mgArchive.dll
c:\program files\SweetIM\Messenger\mgcommon.dll
c:\program files\SweetIM\Messenger\mgcommunication.dll
c:\program files\SweetIM\Messenger\mgconfig.dll
c:\program files\SweetIM\Messenger\mgFlashPlayer.dll
c:\program files\SweetIM\Messenger\mghooking.dll
c:\program files\SweetIM\Messenger\mgICQAuto.dll
c:\program files\SweetIM\Messenger\mgICQMessengerAdapter.dll
c:\program files\SweetIM\Messenger\mgIEPlayer.dll
c:\program files\SweetIM\Messenger\mglogger.dll
c:\program files\SweetIM\Messenger\mgMediaPlayer.dll
c:\program files\SweetIM\Messenger\mgMsnAuto.dll
c:\program files\SweetIM\Messenger\mgMsnMessengerAdapter.dll
c:\program files\SweetIM\Messenger\mgsimcommon.dll
c:\program files\SweetIM\Messenger\mgSweetIM.dll
c:\program files\SweetIM\Messenger\mgUpdateSupport.dll
c:\program files\SweetIM\Messenger\mgxml_wrapper.dll
c:\program files\SweetIM\Messenger\mgYahooAuto.dll
c:\program files\SweetIM\Messenger\mgYahooMessengerAdapter.dll
c:\program files\SweetIM\Messenger\msvcp71.dll
c:\program files\SweetIM\Messenger\msvcr71.dll
c:\program files\SweetIM\Messenger\resources\images\AudibleButton.png
c:\program files\SweetIM\Messenger\resources\images\DisplayPicturesButton.png
c:\program files\SweetIM\Messenger\resources\images\EmoticonButton.png
c:\program files\SweetIM\Messenger\resources\images\GamesButton.png
c:\program files\SweetIM\Messenger\resources\images\KeyboardButton.png
c:\program files\SweetIM\Messenger\resources\images\NudgeButton.png
c:\program files\SweetIM\Messenger\resources\images\SoundFxButton.png
c:\program files\SweetIM\Messenger\resources\images\WinksButton.png
c:\program files\SweetIM\Messenger\SweetIM.exe
c:\program files\SweetIM\Toolbars\Internet Explorer\ClearHist.exe
c:\program files\SweetIM\Toolbars\Internet Explorer\conf\logger.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\default.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\mgcommon.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgconfig.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe
c:\program files\SweetIM\Toolbars\Internet Explorer\mghooking.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mglogger.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgsimcommon.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgxml_wrapper.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest
c:\program files\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcm90.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcp90.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcr90.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\about.html
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\affid.dat
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\basis.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\bing.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\clear-history.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\content-notifier-anim-over.gif
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\content-notifier-anim.gif
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\content-notifier.js
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\dating.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\dictionary.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\e_cards.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\eye_icon.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\eye_icon_over.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\find.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\free_stuff.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\games.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\glitter.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\google.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\help.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\highlight.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\locales.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\logo_16x16.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\logo_21x18.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\logo_32x32.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\logo_about.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\more-search-providers.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\music.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\news.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\options.html
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\photos.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\search-current-site.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\shopping.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\SmileySmile.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\SmileyWink.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\sweetim_text.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\toolbar.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\version.txt
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\video.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\web-search.png
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\web-toolbar.js
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\yahoo.png
c:\windows\system32\dllcache\changer.sys
c:\windows\system32\drivers\2986812.sys
c:\windows\system32\drivers\29868121.sys
c:\windows\system32\MAI10.tmp
c:\windows\system32\MAID.tmp
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

.
--------------- FCopy ---------------

c:\windows\system32\dllcache\tcpip.sys --> c:\windows\system32\drivers\tcpip.sys
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_29868122
-------\Service_29868122
-------\Service_ffrhofavazf
-------\Service_htewmis
-------\Service_htfxi
-------\Service_sygvrzwm
-------\Service_xwbevxmqi
-------\Service_zdqhllgl
-------\Legacy_29868121
-------\Legacy_setup_9.0.0.722_04.02.2011_08-53drv
-------\Service_29868121
-------\Service_setup_9.0.0.722_04.02.2011_08-53drv


((((((((((((((((((((((((( Soubory vytvořené od 2011-01-07 do 2011-02-07 )))))))))))))))))))))))))))))))
.

2011-02-07 20:35 . 2010-04-29 14:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-02-07 20:35 . 2011-02-07 20:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-02-07 20:35 . 2010-04-29 14:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-02-07 16:26 . 2011-02-07 16:27 -------- d-----w- c:\program files\trend micro
2011-02-07 16:26 . 2011-02-07 16:27 -------- d-----w- C:\rsit
2011-02-07 07:21 . 2011-02-07 07:21 -------- d-----w- c:\documents and settings\NetworkService\Plocha
2011-02-06 21:27 . 2011-02-06 21:27 -------- d-----w- c:\documents and settings\LocalService\Plocha
2011-02-05 20:53 . 2011-02-05 20:53 18300 ----a-w- c:\windows\system32\MAIF.tmp
2011-02-05 20:08 . 2011-02-05 20:08 18300 ----a-w- c:\windows\system32\MAIA.tmp
2011-02-05 19:06 . 2011-02-05 19:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PCSettings
2011-02-05 19:03 . 2011-02-05 19:03 -------- d-----w- c:\program files\Windows Sidebar
2011-02-05 13:31 . 2011-02-05 13:31 18300 ----a-w- c:\windows\system32\MAIE.tmp
2011-02-05 02:57 . 2008-04-13 19:40 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys
2011-02-05 02:57 . 2008-04-13 19:40 34688 ----a-w- c:\windows\system32\dllcache\lbrtfdc.sys
2011-02-05 02:57 . 2008-04-13 19:40 8192 ----a-w- c:\windows\system32\drivers\Changer.sys
2011-02-03 10:15 . 2011-02-03 10:15 -------- d-----w- c:\documents and settings\Martin\Data aplikací\Ankh - Heart of Osiris
2011-02-03 09:42 . 2011-02-03 09:42 -------- d-----w- c:\documents and settings\Martin\Data aplikací\Trio
2011-02-03 09:41 . 2011-02-05 17:33 -------- d-----w- c:\program files\Smajlici
2011-02-01 15:30 . 2011-02-01 15:30 1520004 ----a-w- c:\program files\wrar393cz.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-13 08:47 . 2010-06-29 13:37 38848 ----a-w- c:\windows\avastSS.scr
2011-01-13 08:47 . 2010-06-18 14:03 188216 ----a-w- c:\windows\system32\aswBoot.exe
2011-01-13 08:41 . 2010-06-18 14:03 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-01-13 08:40 . 2010-06-18 14:03 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-01-13 08:40 . 2010-06-18 14:03 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-01-13 08:39 . 2010-06-18 14:03 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-01-13 08:37 . 2010-06-18 14:03 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-01-13 08:37 . 2010-06-18 14:03 29392 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-01-13 08:37 . 2010-06-18 14:03 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-11-18 18:15 . 2004-08-18 03:00 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-01 16:32 . 2010-11-01 16:29 1141200 ----a-w- c:\program files\imikimi_installer_0.5.1.exe
2010-06-29 14:57 . 2010-06-29 14:57 8969279 ----a-w- c:\program files\seznam-firefox-win32-cs-3.6.3.exe
2010-06-29 14:16 . 2010-06-29 14:15 2062448 ----a-w- c:\program files\postak-2.3.5.exe
2009-12-12 03:15 . 2009-12-12 03:15 7884856 ----a-w- c:\program files\flashget3.2.0.1060en.exe
2009-11-04 17:15 . 2009-11-04 17:15 204280 ----a-w- c:\program files\cpsetup.exe
2009-11-04 10:55 . 2009-11-04 10:53 9950429 ----a-w- c:\program files\reproinst.exe
2009-11-04 10:39 . 2009-11-04 10:39 4078131 ----a-w- c:\program files\RCESetup.exe
2009-07-29 19:34 . 2009-07-29 19:34 7332280 ----a-w- c:\program files\FirefoxSetup3.0cz.exe
2009-06-25 09:40 . 2009-06-25 09:40 16786752 ----a-w- c:\program files\install_icq65.exe
2009-06-25 08:46 . 2009-06-24 20:16 1976104 ----a-w- c:\program files\SkypeSetup.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-06-20 451872]
"Seznam Postak"="c:\documents and settings\Martin\Local Settings\Data aplikací\Seznam.cz\postak.exe" [2009-09-23 434840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"preload"="c:\windows\RUNXMLPL.exe" [2007-04-21 20480]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-09-07 1015808]
"RTHDCPL"="RTHDCPL.EXE" [2007-05-28 16132608]
"AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [2005-06-11 53248]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-18 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-18 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-18 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-18 455168]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-06-13 142104]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-06-13 162584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-06-13 138008]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-07 102400]
"ePower_DMC"="c:\acer\Empowering Technology\ePower\ePower_DMC.exe" [2007-07-04 475136]
"Boot"="c:\acer\Empowering Technology\ePower\Boot.exe" [2006-03-15 579584]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-05-28 342528]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\eRAgent.exe" [2007-07-11 421888]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2007-10-17 858632]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 644696]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-03 1603152]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 79400]
"Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 583048]
"VMSnap3"="c:\windows\VMSnap3.exe" [2006-08-30 49152]
"Domino"="c:\windows\Domino.exe" [2006-06-28 49152]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2011-01-13 3396624]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Martin\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
setup_9.0.0.722_04.02.2011_08-53.lnk - c:\documents and settings\Martin\Plocha\Virus Removal Tool\setup_9.0.0.722_04.02.2011_08-53\startup.exe [2011-2-5 72208]
VP-EYE.lnk - c:\vp-eye\Control\Vpeyev4.exe [2009-7-4 1306624]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-4-1 568176]
Mˇstnˇ vyhled v nˇ.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2007-2-5 118784]
TL-WN321G Wireless Utility.lnk - c:\program files\TP-LINK\TL-WN321G Wireless Utility\Installer\WINXP\TWCU.exe [2009-12-11 622592]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Acer Empowering Technology.lnk]
backup=c:\windows\pss\Acer Empowering Technology.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer ePresentation HPD]
2007-03-02 09:25 208896 ----a-w- c:\acer\Empowering Technology\ePresentation\ePresentation.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\WINDOWS\\system32\\winver.exe"=
"$INSTDIR\\FlvDetector.exe"= c:\\Program Files\\FlashGet Network\\FlashGet 3\\FlvDetector.exe
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1700:TCP"= 1700:TCP:MioNet Remote Drive Access
"1641:TCP"= 1641:TCP:MioNet Remote Drive Verification

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [18.6.2010 15:03 294608]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [18.6.2010 15:03 17744]
S2 gupdate1ca7ac5d1ede8fa;Služba Google Update (gupdate1ca7ac5d1ede8fa);c:\program files\Google\Update\GoogleUpdate.exe [12.12.2009 1:55 133104]
S3 Axtmvflt;Axesstel USB Filter Service;c:\windows\system32\DRIVERS\Axtmvflt.sys --> c:\windows\system32\DRIVERS\Axtmvflt.sys [?]
S3 Axtmvmdm;Axesstel USB Modem;c:\windows\system32\DRIVERS\Axtmvmdm.sys --> c:\windows\system32\DRIVERS\Axtmvmdm.sys [?]
S3 Axtmvprt;Axesstel Diagnostic Port;c:\windows\system32\Drivers\Axtmvprt.sys --> c:\windows\system32\Drivers\Axtmvprt.sys [?]
S3 vmfilter303;vmfilter303;c:\windows\system32\drivers\vmfilter303.sys --> c:\windows\system32\drivers\vmfilter303.sys [?]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2007-06-20 10:47 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Connection Wizard,ShellNext = iexplore
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
FF - ProfilePath - c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Seznam lištička: {ea614400-e918-4741-9a97-7a972ff7c30b} - c:\program files\Mozilla Firefox\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-07 23:33
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.EXE'(2376)
c:\program files\ScanSoft\OmniPageSE4\OpHookSE4.dll
c:\windows\system32\MSNCHATHOOK.DLL
c:\windows\system32\sysenv.dll
c:\windows\system32\CryptoAPI.dll
c:\windows\system32\ShowErrMsg.dll
c:\windows\system32\MFC71U.DLL
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
c:\program files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
c:\program files\Canon\IJPLM\IJPLMSVC.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\SearchIndexer.exe
c:\acer\Empowering Technology\eLock\Service\eLockServ.exe
c:\windows\system32\wscntfy.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\rundll32.exe
c:\windows\system32\igfxsrvc.exe
c:\windows\system32\SearchProtocolHost.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\system32\SearchFilterHost.exe
.
**************************************************************************
.
Celkový čas: 2011-02-07 23:39:23 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-02-07 22:39
ComboFix2.txt 2011-02-07 18:36

Před spuštěním: Volných bajtů: 26 317 070 336
Po spuštění: Volných bajtů: 26 296 049 664

- - End Of File - - B058126672E20AE37A82DBF90B4873BA
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: win32

#20 Příspěvek od vyosek »

:arrow: Nasledujici soubory otestujte na VirusTotalu (viz muj podpis)
  • c:\windows\system32\DRIVERS\Axtmvflt.sys
    c:\windows\system32\drivers\vmfilter303.sys
  • Kliknete na Prochazet
  • Soubor nehledejte, jen vlozte cestu souboru, ktery chci otestovat
  • Kliknete na Send File
  • Pokud na Vas vyskoci obrazovka jako je nize, tak kliknete na ReAnalyse
    Obrázek
  • Vysledek analyzy sem vlozte (jako odkaz)
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
ruzajska
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 07 úno 2011 16:05

Re: win32

#21 Příspěvek od ruzajska »

jsem děsně tupá,nevim jak tam vložit tu cestu souboru :oops:
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: win32

#22 Příspěvek od vyosek »

:arrow: Oznacite si ten prvni modry radek, date ctrl+c, pujdete na tu stranku VirusTotalu, kliknete na Prochazet a date ctrl+v
Date Odeslat, pokud se objevi obrezk jak jsem popsal, date Reanalyse, pockat az dobehne skenovani a nahore v prohlizeci jak pisete adresy, kliknete do nej, date opet ctrl+c a sem na foru date ctrl+v
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
ruzajska
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 07 úno 2011 16:05

Re: win32

#23 Příspěvek od ruzajska »

píše mi to že tento soubor nebyl nalezen
Nahoru
ruzajska
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 07 úno 2011 16:05

Re: win32

#24 Příspěvek od ruzajska »

u druhého také
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: win32

#25 Příspěvek od vyosek »

Fajn, takze si dame jeste jeden skript pro ComboFix - postup je stejny jako minule

Kód: Vybrat vše

File::
c:\windows\system32\DRIVERS\Axtmvflt.sys
c:\windows\system32\DRIVERS\Axtmvmdm.sys
c:\windows\system32\Drivers\Axtmvprt.sys
c:\windows\system32\drivers\vmfilter303.sys

Driver::
Axtmvprt
vmfilter303
gupdate1ca7ac5d1ede8fa
Axtmvmdm
Axtmvflt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
ruzajska
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 07 úno 2011 16:05

Re: win32

#26 Příspěvek od ruzajska »

huráááá konečně mě to pustilo.po restartu či vypnutí pc mě to vždy nechce třeba i třičtvrtě hod.pustit k ničemu.blbé je že mi nejde ani zvuk a ani možnost přepnutí netu na rychlejší výkon,obě položky se mi z lišty ztratili.hned to posílám
Nahoru
ruzajska
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 07 úno 2011 16:05

Re: win32

#27 Příspěvek od ruzajska »

ComboFix 11-02-06.02 - Martin 08.02.2011 12:46:23.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1014.331 [GMT 1:00]
Spuštěný z: c:\documents and settings\Martin\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Martin\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

FILE ::
"c:\windows\system32\DRIVERS\Axtmvflt.sys"
"c:\windows\system32\DRIVERS\Axtmvmdm.sys"
"c:\windows\system32\Drivers\Axtmvprt.sys"
"c:\windows\system32\drivers\vmfilter303.sys"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_GUPDATE1CA7AC5D1EDE8FA
-------\Service_Axtmvflt
-------\Service_Axtmvmdm
-------\Service_Axtmvprt
-------\Service_gupdate1ca7ac5d1ede8fa
-------\Service_vmfilter303


((((((((((((((((((((((((( Soubory vytvořené od 2011-01-08 do 2011-02-08 )))))))))))))))))))))))))))))))
.

2011-02-07 20:35 . 2010-04-29 14:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-02-07 20:35 . 2011-02-07 20:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-02-07 20:35 . 2010-04-29 14:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-02-07 16:26 . 2011-02-07 16:27 -------- d-----w- c:\program files\trend micro
2011-02-07 16:26 . 2011-02-07 16:27 -------- d-----w- C:\rsit
2011-02-07 07:21 . 2011-02-07 07:21 -------- d-----w- c:\documents and settings\NetworkService\Plocha
2011-02-06 21:27 . 2011-02-06 21:27 -------- d-----w- c:\documents and settings\LocalService\Plocha
2011-02-05 20:53 . 2011-02-05 20:53 18300 ----a-w- c:\windows\system32\MAIF.tmp
2011-02-05 20:08 . 2011-02-05 20:08 18300 ----a-w- c:\windows\system32\MAIA.tmp
2011-02-05 19:06 . 2011-02-05 19:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PCSettings
2011-02-05 19:03 . 2011-02-05 19:03 -------- d-----w- c:\program files\Windows Sidebar
2011-02-05 13:31 . 2011-02-05 13:31 18300 ----a-w- c:\windows\system32\MAIE.tmp
2011-02-05 02:57 . 2008-04-13 19:40 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys
2011-02-05 02:57 . 2008-04-13 19:40 34688 ----a-w- c:\windows\system32\dllcache\lbrtfdc.sys
2011-02-05 02:57 . 2008-04-13 19:40 8192 ----a-w- c:\windows\system32\drivers\Changer.sys
2011-02-03 10:15 . 2011-02-03 10:15 -------- d-----w- c:\documents and settings\Martin\Data aplikací\Ankh - Heart of Osiris
2011-02-03 09:42 . 2011-02-03 09:42 -------- d-----w- c:\documents and settings\Martin\Data aplikací\Trio
2011-02-03 09:41 . 2011-02-05 17:33 -------- d-----w- c:\program files\Smajlici
2011-02-01 15:30 . 2011-02-01 15:30 1520004 ----a-w- c:\program files\wrar393cz.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-13 08:47 . 2010-06-29 13:37 38848 ----a-w- c:\windows\avastSS.scr
2011-01-13 08:47 . 2010-06-18 14:03 188216 ----a-w- c:\windows\system32\aswBoot.exe
2011-01-13 08:41 . 2010-06-18 14:03 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-01-13 08:40 . 2010-06-18 14:03 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-01-13 08:40 . 2010-06-18 14:03 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-01-13 08:39 . 2010-06-18 14:03 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-01-13 08:37 . 2010-06-18 14:03 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-01-13 08:37 . 2010-06-18 14:03 29392 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-01-13 08:37 . 2010-06-18 14:03 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-11-18 18:15 . 2004-08-18 03:00 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-01 16:32 . 2010-11-01 16:29 1141200 ----a-w- c:\program files\imikimi_installer_0.5.1.exe
2010-06-29 14:57 . 2010-06-29 14:57 8969279 ----a-w- c:\program files\seznam-firefox-win32-cs-3.6.3.exe
2010-06-29 14:16 . 2010-06-29 14:15 2062448 ----a-w- c:\program files\postak-2.3.5.exe
2009-12-12 03:15 . 2009-12-12 03:15 7884856 ----a-w- c:\program files\flashget3.2.0.1060en.exe
2009-11-04 17:15 . 2009-11-04 17:15 204280 ----a-w- c:\program files\cpsetup.exe
2009-11-04 10:55 . 2009-11-04 10:53 9950429 ----a-w- c:\program files\reproinst.exe
2009-11-04 10:39 . 2009-11-04 10:39 4078131 ----a-w- c:\program files\RCESetup.exe
2009-07-29 19:34 . 2009-07-29 19:34 7332280 ----a-w- c:\program files\FirefoxSetup3.0cz.exe
2009-06-25 09:40 . 2009-06-25 09:40 16786752 ----a-w- c:\program files\install_icq65.exe
2009-06-25 08:46 . 2009-06-24 20:16 1976104 ----a-w- c:\program files\SkypeSetup.exe
.

((((((((((((((((((((((((((((( SnapShot@2011-02-08_11.27.19 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-02-08 11:58 . 2011-02-08 11:58 16384 c:\windows\Temp\Perflib_Perfdata_9a4.dat
+ 2011-02-08 11:56 . 2011-02-08 11:56 16384 c:\windows\Temp\Perflib_Perfdata_7e8.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-06-20 451872]
"Seznam Postak"="c:\documents and settings\Martin\Local Settings\Data aplikací\Seznam.cz\postak.exe" [2009-09-23 434840]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-10-09 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"preload"="c:\windows\RUNXMLPL.exe" [2007-04-21 20480]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-09-07 1015808]
"RTHDCPL"="RTHDCPL.EXE" [2007-05-28 16132608]
"AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [2005-06-11 53248]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-18 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-18 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-18 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-18 455168]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-06-13 142104]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-06-13 162584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-06-13 138008]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-07 102400]
"ePower_DMC"="c:\acer\Empowering Technology\ePower\ePower_DMC.exe" [2007-07-04 475136]
"Boot"="c:\acer\Empowering Technology\ePower\Boot.exe" [2006-03-15 579584]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-05-28 342528]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\eRAgent.exe" [2007-07-11 421888]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2007-10-17 858632]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 644696]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-03 1603152]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 79400]
"Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 583048]
"VMSnap3"="c:\windows\VMSnap3.exe" [2006-08-30 49152]
"Domino"="c:\windows\Domino.exe" [2006-06-28 49152]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2011-01-13 3396624]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Martin\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
setup_9.0.0.722_04.02.2011_08-53.lnk - c:\documents and settings\Martin\Plocha\Virus Removal Tool\setup_9.0.0.722_04.02.2011_08-53\startup.exe [2011-2-5 72208]
VP-EYE.lnk - c:\vp-eye\Control\Vpeyev4.exe [2009-7-4 1306624]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-4-1 568176]
Mˇstnˇ vyhled v nˇ.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2007-2-5 118784]
TL-WN321G Wireless Utility.lnk - c:\program files\TP-LINK\TL-WN321G Wireless Utility\Installer\WINXP\TWCU.exe [2009-12-11 622592]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Acer Empowering Technology.lnk]
backup=c:\windows\pss\Acer Empowering Technology.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer ePresentation HPD]
2007-03-02 09:25 208896 ----a-w- c:\acer\Empowering Technology\ePresentation\ePresentation.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\WINDOWS\\system32\\winver.exe"=
"$INSTDIR\\FlvDetector.exe"= c:\\Program Files\\FlashGet Network\\FlashGet 3\\FlvDetector.exe
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1700:TCP"= 1700:TCP:MioNet Remote Drive Access
"1641:TCP"= 1641:TCP:MioNet Remote Drive Verification

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [18.6.2010 15:03 294608]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [18.6.2010 15:03 17744]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2007-06-20 10:47 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Connection Wizard,ShellNext = iexplore
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
FF - ProfilePath - c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Seznam lištička: {ea614400-e918-4741-9a97-7a972ff7c30b} - c:\program files\Mozilla Firefox\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-08 12:58
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.EXE'(3456)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\MSNCHATHOOK.DLL
c:\windows\system32\sysenv.dll
c:\windows\system32\CryptoAPI.dll
c:\windows\system32\ShowErrMsg.dll
c:\windows\system32\MFC71U.DLL
c:\program files\ScanSoft\OmniPageSE4\OpHookSE4.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
c:\program files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
c:\program files\Canon\IJPLM\IJPLMSVC.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\SearchIndexer.exe
c:\acer\Empowering Technology\eLock\Service\eLockServ.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\SearchProtocolHost.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\rundll32.exe
c:\windows\system32\igfxsrvc.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\system32\SearchFilterHost.exe
.
**************************************************************************
.
Celkový čas: 2011-02-08 13:03:43 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-02-08 12:03
ComboFix2.txt 2011-02-08 11:30
ComboFix3.txt 2011-02-07 22:39
ComboFix4.txt 2011-02-07 18:36

Před spuštěním: Volných bajtů: 26 285 617 152
Po spuštění: Volných bajtů: 26 262 196 224

- - End Of File - - ED58E484F55FAB3DA2BF9E4F03FE672D
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: win32

#28 Příspěvek od vyosek »

:arrow: Restartujte PC, mackejte F8, zvolte Posledni znama funkcni konfigurace - tim dostaneme PC do stavu pred poslednim skriptem ComboFixem

:arrow: Pak jak Vam PC nabehne, tak aplikujte tento skript pro ComboFix - odpalili jsme tam asi jednu soucast :o

Kód: Vybrat vše

File::
c:\windows\system32\DRIVERS\Axtmvflt.sys
c:\windows\system32\DRIVERS\Axtmvmdm.sys
c:\windows\system32\Drivers\Axtmvprt.sys

Driver::
Axtmvprt
gupdate1ca7ac5d1ede8fa
Axtmvmdm
Axtmvflt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
ruzajska
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 07 úno 2011 16:05

Re: win32

#29 Příspěvek od ruzajska »

ComboFix 11-02-06.02 - Martin 08.02.2011 17:06:05.5.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1014.460 [GMT 1:00]
Spuštěný z: c:\documents and settings\Martin\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Martin\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

FILE ::
"c:\windows\system32\DRIVERS\Axtmvflt.sys"
"c:\windows\system32\DRIVERS\Axtmvmdm.sys"
"c:\windows\system32\Drivers\Axtmvprt.sys"
.

((((((((((((((((((((((((( Soubory vytvořené od 2011-01-08 do 2011-02-08 )))))))))))))))))))))))))))))))
.

2011-02-07 20:35 . 2010-04-29 14:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-02-07 20:35 . 2011-02-07 20:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-02-07 20:35 . 2010-04-29 14:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-02-07 16:26 . 2011-02-07 16:27 -------- d-----w- c:\program files\trend micro
2011-02-07 16:26 . 2011-02-07 16:27 -------- d-----w- C:\rsit
2011-02-07 07:21 . 2011-02-07 07:21 -------- d-----w- c:\documents and settings\NetworkService\Plocha
2011-02-06 21:27 . 2011-02-06 21:27 -------- d-----w- c:\documents and settings\LocalService\Plocha
2011-02-05 20:53 . 2011-02-05 20:53 18300 ----a-w- c:\windows\system32\MAIF.tmp
2011-02-05 20:08 . 2011-02-05 20:08 18300 ----a-w- c:\windows\system32\MAIA.tmp
2011-02-05 19:06 . 2011-02-05 19:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PCSettings
2011-02-05 19:03 . 2011-02-05 19:03 -------- d-----w- c:\program files\Windows Sidebar
2011-02-05 13:31 . 2011-02-05 13:31 18300 ----a-w- c:\windows\system32\MAIE.tmp
2011-02-05 02:57 . 2008-04-13 19:40 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys
2011-02-05 02:57 . 2008-04-13 19:40 34688 ----a-w- c:\windows\system32\dllcache\lbrtfdc.sys
2011-02-05 02:57 . 2008-04-13 19:40 8192 ----a-w- c:\windows\system32\drivers\Changer.sys
2011-02-03 10:15 . 2011-02-03 10:15 -------- d-----w- c:\documents and settings\Martin\Data aplikací\Ankh - Heart of Osiris
2011-02-03 09:42 . 2011-02-03 09:42 -------- d-----w- c:\documents and settings\Martin\Data aplikací\Trio
2011-02-03 09:41 . 2011-02-05 17:33 -------- d-----w- c:\program files\Smajlici
2011-02-01 15:30 . 2011-02-01 15:30 1520004 ----a-w- c:\program files\wrar393cz.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-13 08:47 . 2010-06-29 13:37 38848 ----a-w- c:\windows\avastSS.scr
2011-01-13 08:47 . 2010-06-18 14:03 188216 ----a-w- c:\windows\system32\aswBoot.exe
2011-01-13 08:41 . 2010-06-18 14:03 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-01-13 08:40 . 2010-06-18 14:03 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-01-13 08:40 . 2010-06-18 14:03 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-01-13 08:39 . 2010-06-18 14:03 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-01-13 08:37 . 2010-06-18 14:03 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-01-13 08:37 . 2010-06-18 14:03 29392 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-01-13 08:37 . 2010-06-18 14:03 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-11-18 18:15 . 2004-08-18 03:00 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-01 16:32 . 2010-11-01 16:29 1141200 ----a-w- c:\program files\imikimi_installer_0.5.1.exe
2010-06-29 14:57 . 2010-06-29 14:57 8969279 ----a-w- c:\program files\seznam-firefox-win32-cs-3.6.3.exe
2010-06-29 14:16 . 2010-06-29 14:15 2062448 ----a-w- c:\program files\postak-2.3.5.exe
2009-12-12 03:15 . 2009-12-12 03:15 7884856 ----a-w- c:\program files\flashget3.2.0.1060en.exe
2009-11-04 17:15 . 2009-11-04 17:15 204280 ----a-w- c:\program files\cpsetup.exe
2009-11-04 10:55 . 2009-11-04 10:53 9950429 ----a-w- c:\program files\reproinst.exe
2009-11-04 10:39 . 2009-11-04 10:39 4078131 ----a-w- c:\program files\RCESetup.exe
2009-07-29 19:34 . 2009-07-29 19:34 7332280 ----a-w- c:\program files\FirefoxSetup3.0cz.exe
2009-06-25 09:40 . 2009-06-25 09:40 16786752 ----a-w- c:\program files\install_icq65.exe
2009-06-25 08:46 . 2009-06-24 20:16 1976104 ----a-w- c:\program files\SkypeSetup.exe
.

((((((((((((((((((((((((((((( SnapShot@2011-02-08_11.27.19 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-02-08 15:09 . 2011-02-08 15:09 16384 c:\windows\Temp\Perflib_Perfdata_af0.dat
+ 2011-02-08 15:08 . 2011-02-08 15:08 16384 c:\windows\Temp\Perflib_Perfdata_208.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-06-20 451872]
"Seznam Postak"="c:\documents and settings\Martin\Local Settings\Data aplikací\Seznam.cz\postak.exe" [2009-09-23 434840]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-10-09 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"preload"="c:\windows\RUNXMLPL.exe" [2007-04-21 20480]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-09-07 1015808]
"RTHDCPL"="RTHDCPL.EXE" [2007-05-28 16132608]
"AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [2005-06-11 53248]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-18 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-18 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-18 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-18 455168]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-06-13 142104]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-06-13 162584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-06-13 138008]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-07 102400]
"ePower_DMC"="c:\acer\Empowering Technology\ePower\ePower_DMC.exe" [2007-07-04 475136]
"Boot"="c:\acer\Empowering Technology\ePower\Boot.exe" [2006-03-15 579584]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-05-28 342528]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\eRAgent.exe" [2007-07-11 421888]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2007-10-17 858632]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 644696]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-03 1603152]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 79400]
"Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 583048]
"VMSnap3"="c:\windows\VMSnap3.exe" [2006-08-30 49152]
"Domino"="c:\windows\Domino.exe" [2006-06-28 49152]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2011-01-13 3396624]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Martin\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
setup_9.0.0.722_04.02.2011_08-53.lnk - c:\documents and settings\Martin\Plocha\Virus Removal Tool\setup_9.0.0.722_04.02.2011_08-53\startup.exe [2011-2-5 72208]
VP-EYE.lnk - c:\vp-eye\Control\Vpeyev4.exe [2009-7-4 1306624]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-4-1 568176]
Mˇstnˇ vyhled v nˇ.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2007-2-5 118784]
TL-WN321G Wireless Utility.lnk - c:\program files\TP-LINK\TL-WN321G Wireless Utility\Installer\WINXP\TWCU.exe [2009-12-11 622592]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Acer Empowering Technology.lnk]
backup=c:\windows\pss\Acer Empowering Technology.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer ePresentation HPD]
2007-03-02 09:25 208896 ----a-w- c:\acer\Empowering Technology\ePresentation\ePresentation.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\WINDOWS\\system32\\winver.exe"=
"$INSTDIR\\FlvDetector.exe"= c:\\Program Files\\FlashGet Network\\FlashGet 3\\FlvDetector.exe
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1700:TCP"= 1700:TCP:MioNet Remote Drive Access
"1641:TCP"= 1641:TCP:MioNet Remote Drive Verification

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [18.6.2010 15:03 294608]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [18.6.2010 15:03 17744]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2007-06-20 10:47 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Connection Wizard,ShellNext = iexplore
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
FF - ProfilePath - c:\documents and settings\Martin\Data aplikací\Mozilla\Firefox\Profiles\lufcpy8w.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Seznam lištička: {ea614400-e918-4741-9a97-7a972ff7c30b} - c:\program files\Mozilla Firefox\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-08 17:14
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(1624)
c:\windows\system32\MSNCHATHOOK.DLL
c:\windows\system32\sysenv.dll
c:\windows\system32\CryptoAPI.dll
c:\windows\system32\ShowErrMsg.dll
c:\windows\system32\MFC71U.DLL
c:\program files\ScanSoft\OmniPageSE4\OpHookSE4.dll
c:\windows\system32\btmmhook.dll
c:\acer\Empowering Technology\ePower\SysHook.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2011-02-08 17:16:48
ComboFix-quarantined-files.txt 2011-02-08 16:16
ComboFix2.txt 2011-02-08 12:03
ComboFix3.txt 2011-02-08 11:30
ComboFix4.txt 2011-02-07 22:39
ComboFix5.txt 2011-02-08 16:05

Před spuštěním: Volných bajtů: 27 105 095 680
Po spuštění: Volných bajtů: 27 094 704 128

- - End Of File - - DE644FE1F3CB02A938E9E12F42CFBE67
Nahoru
ruzajska
Návštěvník
Návštěvník
Příspěvky: 38
Registrován: 07 úno 2011 16:05

Re: win32

#30 Příspěvek od ruzajska »

ten zvuk a net mu nejde od soboty a ani mi nejde flashka ani cd
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“