VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

ESET se nespouští + Trojan.Win32/Rustock + oo... (vyřešeno)

https://forum.viry.cz:443/viewtopic.php?t=104722

Stránka 1 z 2

ESET se nespouští + Trojan.Win32/Rustock + oo... (vyřešeno)

Napsal: 17 zář 2010 16:05
od Rainmaker
Zdravím ochotné pomocníky,

Co používáme na PC:
ESET Smart Security
Spybot S&D

Problém vznikl u PC mého táty, takže jsem nebyl přímo u infikace, protože opravdu nechápu, jak tohle mohl ESET pustit. Asi táta něco odklepl i přes varování.

Symptomy:
Po startu se nespouští ESET Smart Security (egui.exe) a nejde spustit vůbec.

Detekce:
• ESET SysInspector diagnostikuje @Trojan.Win32/Rustock
a diagnostikuje ještě nebezpečný ovladač c:\windows\system32\drivers\oopuhnpkpjv.sys
• SpyBot Search and Destroy detekuje (a snad opravil)
Win32.Bredolab.B (drivers/str.sys)
Win32.Wemon.sh (idln složka v registrech)


Logfile of random's system information tool 1.08 (written by random/random)
Run by Rodiče at 2010-09-17 16:07:20
Microsoft® Windows Vista™ Home Basic Service Pack 2
System drive C: has 55 GB (36%) free of 153 GB
Total RAM: 1983 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:08:57, on 17.9.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Sony Ericsson PC Suite\SupServ.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\ESET\ESET Smart Security\SysInspector.exe
C:\Windows\system32\conime.exe
C:\Program Files\Winamp\winamp.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\ESET\ESET Online Scanner\OnlineScannerApp.exe
C:\Program Files\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\firefox.exe
C:\Windows\regedit.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\taskeng.exe
C:\Users\Rodiče\Downloads\RSIT.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Rodiče.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Nikon Transfer Monitor] C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Update Completion 0] "C:\Program Files\QuickTime\QTSystem\QuickTimeUpdateHelper.exe" -atboottime "QuickTime Update Completion 0"
O4 - HKLM\..\RunOnce: [SpybotDeletingA2838] command.com /c del "C:\Windows\System32\drivers\str.sys"
O4 - HKLM\..\RunOnce: [SpybotDeletingC2047] cmd.exe /c del "C:\Windows\System32\drivers\str.sys"
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\RunOnce: [SpybotDeletingB484] command.com /c del "C:\Windows\System32\drivers\str.sys"
O4 - HKCU\..\RunOnce: [SpybotDeletingD3151] cmd.exe /c del "C:\Windows\System32\drivers\str.sys"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

--
End of file - 7479 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-06-29 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"NvSvc"=C:\Windows\system32\nvsvc.dll [2006-12-19 90191]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2006-12-19 7766016]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2006-12-19 81920]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-07-06 4669440]
"Skytel"=C:\Windows\Skytel.exe [2007-06-15 1826816]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2008-08-04 36352]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"Nikon Transfer Monitor"=C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe [2008-12-16 479232]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-04-07 2145000]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-06-15 141624]
"QuickTime Update Completion 0"=C:\Program Files\QuickTime\QTSystem\QuickTimeUpdateHelper.exe -atboottime QuickTime Update Completion 0 []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SpybotDeletingA2838"=command.com /c del C:\Windows\System32\drivers\str.sys []
"SpybotDeletingC2047"=cmd.exe /c del C:\Windows\System32\drivers\str.sys []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [2008-11-07 95536]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SpybotDeletingB484"=command.com /c del C:\Windows\System32\drivers\str.sys []
"SpybotDeletingD3151"=cmd.exe /c del C:\Windows\System32\drivers\str.sys []

C:\Users\Rodiče\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Users\RODIE~1\AppData\Local\Temp\0.833537249322275.exe"="C:\Users\RODIE~1\AppData\Local\Temp\0.833537249322275.exe:*:Enabled:ldrsoft"
"C:\Users\Rodiče\AppData\Roaming\download2\svcnost.exe"="C:\Users\Rodiče\AppData\Roaming\download2\svcnost.exe:*:Enabled:ldrsoft"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2010-09-17 16:07:25 ----D---- C:\Program Files\trend micro
2010-09-17 16:07:20 ----D---- C:\rsit
2010-09-17 13:33:35 ----A---- C:\Windows\wininit.ini
2010-09-17 11:37:49 ----SHD---- C:\Config.Msi
2010-09-15 17:17:43 ----A---- C:\Windows\system32\spoolsv.exe
2010-09-15 17:17:33 ----A---- C:\Windows\system32\usp10.dll
2010-09-15 17:17:23 ----A---- C:\Windows\system32\MP4SDECD.DLL
2010-09-15 17:16:28 ----A---- C:\Windows\system32\inetcomm.dll
2010-09-14 21:39:57 ----D---- C:\Users\Rodiče\AppData\Roaming\download2
2010-09-13 19:22:08 ----A---- C:\Program Files\file.exe

======List of files/folders modified in the last 1 months======

2010-09-17 16:07:25 ----RD---- C:\Program Files
2010-09-17 16:07:24 ----D---- C:\Windows\Temp
2010-09-17 15:24:31 ----D---- C:\Windows\Prefetch
2010-09-17 15:24:16 ----SHD---- C:\System Volume Information
2010-09-17 15:16:06 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-09-17 15:15:04 ----D---- C:\Windows\System32
2010-09-17 15:15:04 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-09-17 15:15:03 ----D---- C:\Windows\inf
2010-09-17 15:12:20 ----D---- C:\Program Files\ESET
2010-09-17 13:33:35 ----D---- C:\Windows
2010-09-17 12:14:02 ----D---- C:\Windows\system32\config
2010-09-17 12:13:56 ----D---- C:\Windows\Tasks
2010-09-17 12:13:56 ----D---- C:\Windows\system32\spool
2010-09-17 12:13:56 ----D---- C:\Windows\system32\Msdtc
2010-09-17 12:13:56 ----D---- C:\Windows\system32\drivers
2010-09-17 12:13:56 ----D---- C:\Windows\system32\CodeIntegrity
2010-09-17 12:13:56 ----D---- C:\Windows\system32\catroot2
2010-09-17 12:13:56 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-09-17 12:13:55 ----D---- C:\Program Files\plugins
2010-09-17 12:13:54 ----D---- C:\Windows\system32\wbem
2010-09-17 12:13:54 ----D---- C:\Windows\registration
2010-09-17 11:37:59 ----SHD---- C:\Windows\Installer
2010-09-16 22:15:19 ----D---- C:\Program Files\components
2010-09-16 22:07:43 ----D---- C:\Windows\Minidump
2010-09-16 18:58:52 ----D---- C:\Program Files\extensions
2010-09-16 16:43:49 ----D---- C:\Windows\winsxs
2010-09-15 23:16:07 ----A---- C:\Windows\system32\mrt.exe
2010-09-15 23:15:52 ----D---- C:\Windows\system32\catroot
2010-09-15 23:15:44 ----D---- C:\Program Files\Windows Mail
2010-09-15 17:08:04 ----D---- C:\Program Files\Microsoft Silverlight

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvstor32;nvstor32; C:\Windows\system32\DRIVERS\nvstor32.sys [2006-12-22 93696]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2006-07-24 36528]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-04-07 133512]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-04-07 134488]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-04-07 41312]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-04-07 32584]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-07-18 1841312]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2007-01-15 1032104]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2006-12-19 4447808]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\Windows\system32\DRIVERS\seehcri.sys [2008-01-09 27632]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2008-11-11 15600]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\Windows\system32\DRIVERS\s0016bus.sys [2008-05-16 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s0016mgmt.sys [2008-05-16 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\Windows\system32\DRIVERS\s0016nd5.sys [2008-05-16 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s0016obex.sys [2008-05-16 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\Windows\system32\DRIVERS\s0016unic.sys [2008-05-16 115752]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 OMSI download service;Sony Ericsson OMSI download service; C:\Program Files\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-06-15 540472]
S2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-04-07 810120]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-04-07 33560]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]

-----------------EOF-----------------

Re: ESET se nespouští + Trojan.Win32/Rustock + oopuhnpkpjv.s

Napsal: 17 zář 2010 16:08
od earl
Zdravim,

odinstalujte Spybot - je zastaraly a mate ESS-ten ma antispy stit.

:arrow: CTETE POZORNE NAVOD,TENTO SOFT NETOLERUJE CHYBY V POSTUPU APLIKOVANI!

Klidne si nasledujici radky vytisknete,at vite,co se bude na obrazovce odehravat.

Budte prihlasen na pc s administratorskymi pravy.

V operacnich systemech Windows Vista a Windows 7 je nutno spoustet aplikaci jako spravce (kliknutim pravym tlacitkem mysi na ikonu ComboFixu a klepnutim levym na volbu "Spustit jako spravce")

stahnete a ulozte nejlepe na plochu ComboFix

v pripade,ze nepujde stranka nacist-stahnete odtud download , popr. nepujde ComboFix spustit - prejmenujte jej na grinder.com a postupujte dale dle instrukci.

hned po startu se zobrazi Zreknuti se prava zaruky na funkcnost software, pokracujte kliknutim na tlacitko Ano:

Obrázek

pote muze nasledovat upozorneni na nainstalovane emulatory CD mechanik,typicky Daemon Tools nebo Alcohol 120

Obrázek

odklepnout OK

Souhlasit s instalaci Recovery console(Konzola pro zotaveni)-nutno funkcni internet :!:

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: upozorneni: Vypnete rezidentni stit u antiviru a antispywaru a zakazte docasne firewall-ComboFix by nemusel fungovat korektne-pokud budete mit stity vypnute a Combofix zahlasi,ze nejsou,pokracujte dal a potvrdte.

po restartu aplikace vytvori log, ulozeny na C:/Combofix.txt (pri opakovanem pouziti jsou logy oznaceny Combofix2.txt atd.), jeho obsah vlozte sem

Re: ESET se nespouští + Trojan.Win32/Rustock + oopuhnpkpjv.s

Napsal: 17 zář 2010 19:03
od Rainmaker
Ok tady je log, ale musel jsem ho hodit jinam - sem se nevejde.

http://pastebin.com/6dHTNwrG

Jinak Eset mi už jede, ale při restartu mi to psalo ještě než se začal načítat Windows, že mi chybí ten oopuhnpkpjv.sys, kterýho se já ale snažím zbavit. Tak jsem to resetnul F8 a použít poslední funkční nastavení a šlo to.

Re: ESET se nespouští + Trojan.Win32/Rustock + oopuhnpkpjv.s

Napsal: 17 zář 2010 19:23
od earl
Rozdelte ten log na vic casti a vlozte jej do vice postu,at to ostatni uzivatele tez vidi.

Re: ESET se nespouští + Trojan.Win32/Rustock + oopuhnpkpjv.s

Napsal: 17 zář 2010 19:28
od Rainmaker
Už to mohli vidět teď, ale ok no. Pastebin je v programátorském prostředí běžný a za postování takového kodu do fora by mě umlátili :D .

ComboFix 10-09-16.07 - Rodiče 17.09.2010 18:32:50.1.1 - x86
Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1250.420.1029.18.1983.1027 [GMT 2:00]
Spuštěný z: c:\users\Rodiče\Desktop\ComboFix.exe
SP: Spybot - Search and Destroy *disabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\INSTALL.LOG
c:\programdata\hpe2A3B.dll
c:\programdata\hpe5984.dll
c:\users\Public\Documents\Server\admin.txt
c:\users\Public\Documents\Server\server.dat
c:\users\Rodiče\AppData\Roaming\\Adobe\Acrobat\9.0\AdobeCMapFnt09.lst
c:\users\Rodiče\AppData\Roaming\\Adobe\Acrobat\9.0\AdobeSysFnt09.lst
c:\users\Rodiče\AppData\Roaming\\Adobe\Acrobat\9.0\JavaScripts\glob.js
c:\users\Rodiče\AppData\Roaming\\Adobe\Acrobat\9.0\JavaScripts\glob.settings.js
c:\users\Rodiče\AppData\Roaming\\Adobe\Acrobat\9.0\SharedDataEvents
c:\users\Rodiče\AppData\Roaming\\Adobe\Acrobat\9.0\UserCache.bin
c:\users\Rodiče\AppData\Roaming\\Adobe\CameraRaw\CameraProfiles\Index.dat
c:\users\Rodiče\AppData\Roaming\\Adobe\CameraRaw\Defaults\Preferences.xmp
c:\users\Rodiče\AppData\Roaming\\Adobe\Flash Player\AssetCache\KUK93GJ8\1846548181EAE8A4BB86AFC74FD021D9A0F6DFA6.heu
c:\users\Rodiče\AppData\Roaming\\Adobe\Flash Player\AssetCache\KUK93GJ8\1846548181EAE8A4BB86AFC74FD021D9A0F6DFA6.swz
c:\users\Rodiče\AppData\Roaming\\Adobe\Flash Player\AssetCache\KUK93GJ8\1C04C61346A1FA3139A37D860ED92632AA13DECF.heu
c:\users\Rodiče\AppData\Roaming\\Adobe\Flash Player\AssetCache\KUK93GJ8\1C04C61346A1FA3139A37D860ED92632AA13DECF.swz
c:\users\Rodiče\AppData\Roaming\\Adobe\Flash Player\AssetCache\KUK93GJ8\26F1F5A0DEB2FBFC5345C20FF79DFFAFEE4EC7A6.heu
c:\users\Rodiče\AppData\Roaming\\Adobe\Flash Player\AssetCache\KUK93GJ8\26F1F5A0DEB2FBFC5345C20FF79DFFAFEE4EC7A6.swz
c:\users\Rodiče\AppData\Roaming\\Adobe\Flash Player\AssetCache\KUK93GJ8\AF07B46903A6C5D87A24725CB7D50DE352A0383C.heu
c:\users\Rodiče\AppData\Roaming\\Adobe\Flash Player\AssetCache\KUK93GJ8\AF07B46903A6C5D87A24725CB7D50DE352A0383C.swz
c:\users\Rodiče\AppData\Roaming\\Adobe\Flash Player\AssetCache\KUK93GJ8\cacheSize.txt
c:\users\Rodiče\AppData\Roaming\\Adobe\Flash Player\AssetCache\KUK93GJ8\F7536EF0D78A77B889EEBE98BF96BA5321A1FDE0.heu
c:\users\Rodiče\AppData\Roaming\\Adobe\Flash Player\AssetCache\KUK93GJ8\F7536EF0D78A77B889EEBE98BF96BA5321A1FDE0.swz
c:\users\Rodiče\AppData\Roaming\\Ambient Design\ArtRage 2\ArtRage.prs
c:\users\Rodiče\AppData\Roaming\\Apple Computer\iTunes\Cookies\Cookies.plist
c:\users\Rodiče\AppData\Roaming\\Apple Computer\iTunes\iTunesPrefs.xml
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.054829_17Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.060627_23Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.064019_24Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.070852_15Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.071902_03Sep10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.100808_13Sep10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.103257_09Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.110402_09Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.124533_23Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.125158_19Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.135701_14Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.140635_04Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.145539_09Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.150632_28Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.153740_11Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.154100_19Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.154229_02Sep10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.154520_22Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.154816_16Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.154959_13Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.155328_14Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.155938_01Sep10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.161406_11Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.162901_11Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.162943_20Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.163732_06Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.172051_25Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.173439_15Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.173834_12Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.174917_19Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.175756_10Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.180755_24Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.180914_12Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.181444_17Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.184125_14Jul10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.202405_13Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.203816_08Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.214139_16Sep10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.220403_16Sep10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Logs\asl.231423_26Aug10.log
c:\users\Rodiče\AppData\Roaming\\Apple Computer\Preferences\com.apple.iTunes.plist
c:\users\Rodiče\AppData\Roaming\\ESET\ESET Smart Security\Antispam\productid
c:\users\Rodiče\AppData\Roaming\\ESET\ESET Smart Security\Antispam\rkd
c:\users\Rodiče\AppData\Roaming\\ESET\ESET Smart Security\Antispam\sc1.bin.full.2010.02.10.23.27.19
c:\users\Rodiče\AppData\Roaming\\ESET\ESET Smart Security\Antispam\sc1.bin.full.2010.02.10.23.27.19.lkr1
c:\users\Rodiče\AppData\Roaming\\ESET\ESET Smart Security\Antispam\sc2.bin.full.2005.02.11.04.44.13
c:\users\Rodiče\AppData\Roaming\\ESET\ESET Smart Security\Antispam\sc2.bin.full.2005.02.11.04.44.13.lkr1
c:\users\Rodiče\AppData\Roaming\\ESET\ESET Smart Security\Antispam\sc5.bin.full.0000.00.00.00.00.00
c:\users\Rodiče\AppData\Roaming\\ESET\ESET Smart Security\Antispam\sc5.bin.full.0000.00.00.00.00.00.lkr1
c:\users\Rodiče\AppData\Roaming\\ESET\ESET Smart Security\Antispam\scdns.bin
c:\users\Rodiče\AppData\Roaming\\ESET\ESET Smart Security\Antispam\scoffset.bin.incr
c:\users\Rodiče\AppData\Roaming\\FastStone\FSIV\FSSettings.db
c:\users\Rodiče\AppData\Roaming\\FastStone\FSIV\FSViewer.db
c:\users\Rodiče\AppData\Roaming\\FastStone\FSIV\FSViewerWallPaper.bmp
c:\users\Rodiče\AppData\Roaming\\FastStone\FSIV\HisFolderList.db
c:\users\Rodiče\AppData\Roaming\\FastStone\FSIV\TBSettings.db
c:\users\Rodiče\AppData\Roaming\\Google\GoogleEarth\myplaces.backup.kml
c:\users\Rodiče\AppData\Roaming\\Google\GoogleEarth\myplaces.kml
c:\users\Rodiče\AppData\Roaming\\Google\GoogleEarth\myplaces.kml.tmp
c:\users\Rodiče\AppData\Roaming\\GRETECH\GomPlayer\dvdbookmark.bmk
c:\users\Rodiče\AppData\Roaming\\GRETECH\GomPlayer\GrLauncher.exe
c:\users\Rodiče\AppData\Roaming\\GRETECH\GomPlayer\GrLauncher.ini
c:\users\Rodiče\AppData\Roaming\\GRETECH\GomPlayer\GrLauncherTempSetup.exe
c:\users\Rodiče\AppData\Roaming\\GRETECH\GomPlayer\GrVersion.ini
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\1.im.cz\carAccident.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\1.im.cz\my_banners.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\80.77.117.102\swf\embedPlayer.swf\livesex_embed_player3.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\80.77.117.102\swf\embedPlayer.swf\livesex_player3.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\80.77.117.102\swf\videoPlayer.swf\livesex_player3.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\95.128.120.102\swf\embedPlayer.swf\livesex_embed_player3.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\a.gogousenet.com\OSCACHE.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\aa.online-metrix.net\fpc.swf\session.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\abcnews.go.com\com.quantserve.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\adultwebmastercenter.biz\com.jeroenwijering.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\advprotraffic.com\noref\im.swf\userData.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\affiliates.quintura.com\flash\widget.swf\QuinturaSettingsSearchWidget.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\applets.inoveo.com\pf.live.VideoPlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\archiv.nova.cz\cookie.popplayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\archiv.nova.cz\static\cz\shared\app\MediaCenter_Catchup.swf\poptv.si.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\bandzone.cz\_static\swf\player-7.swf\bandzoneVolume.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\bbnaut.bbelements.com\flash\bbnaut.swf\user_data.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\bin.clearspring.com\clearspring.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\bondagezilla.com\fp\flowplayer.commercial-3.1.4.swf\org.flowplayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\bonus.postaffiliatepro.com\pap20.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\brightcove.com\StreamMinerInfo.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cache.reverbnation.com\com.quantserve.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cache.reverbnation.com\widgets\swf\31\widgetPlayerMicro.swf\flashwidgetPlayerCookie.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cash.femjoy.com\analytics.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn-edge.tnaflix.com\player_v0.3.21.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn-edge.tnaflix.com\player_v0.3.22.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn-edge.tnaflix.com\player_v0.3.32.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn-edge.tnaflix.com\player_v0.3.35.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn-static.viddler.com\flash\player694.swf\undefined.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.empflix.com\ck_empflix.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.empflix.com\player_v0.3.1.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.empflix.com\player_v0.3.14.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.empflix.com\player_v0.3.17.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.empflix.com\player_v0.3.22.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.empflix.com\player_v0.3.32.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.empflix.com\player_v0.3.35.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.gigya.com\gigya_SNAccountsStatus.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.livestream.com\analytics.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.livestream.com\com.quantserve.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.livestream.com\grid\PlayerV2.swf\playerCookie.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.livestream.com\grid\PlayerV2.swf\soClientInfo.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.smugmug.com\smfsss.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.static.viddler.com\flash\player746.swf\undefined.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.tnaflix.com\player_v0.3.1.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.tnaflix.com\player_v0.3.13.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.tnaflix.com\player_v0.3.14.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.tnaflix.com\player_v0.3.16.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.tnaflix.com\player_v0.3.17.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.tnaflix.com\player_v0.3.2.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.tnaflix.com\player_v0.3.20.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.tnaflix.com\player_v0.3.3.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.tnaflix.com\player_v0.3.5.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.tnaflix.com\player_v0.3.6.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.tnaflix.com\player_v0.3.8.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.tnaflix.com\player_v0.3.9.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.visiblemeasures.com\com.quantserve.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.visiblemeasures.com\configData.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.visiblemeasures.com\sessionData.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.visiblemeasures.com\swf\as2\AS2SOHandler.swf\configData.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.visiblemeasures.com\swf\as2\AS2SOHandler.swf\sessionData.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.visiblemeasures.com\swf\as2\AS2SOHandler.swf\userData.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.visiblemeasures.com\userData.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdn.widgetserver.com\com.quantserve.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdnt.empflix.com\player_v0.2.1.swf\flixstream_volume.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdnt.tnaflix.com\player_v0.2.1.swf\flixstream_volume.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cdnt.tnaflix.com\player_v0.3.1.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cds009.am4.hwcdn.net\com.jeroenwijering.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cds009.lo1.hwcdn.net\com.jeroenwijering.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cds049.lo1.hwcdn.net\com.jeroenwijering.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\centrumcz.adocean.pl\my_banners.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\ci-mpsnare.iovation.com\stm.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cs.s.mall.cz\ao\v2\AO4All_cz.swf\#AO_MALL_www.bilezbozi.cz\4520020.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\cummingtubes.com\#kernelteam\preferences.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\d.yimg.com\ks\sports\AdPlugin.swf\session.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\d.yimg.com\VolumePrefs.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\d.yimg.com\YEPBWPrefs.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\earth.google.com\datastore.swf\googleEarthSettings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\flash.quantserve.com\com.quantserve.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\flash.stream.cz\swf\streamPlayer_510.swf\streamPlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\flash.stream.cz\swf\streamPlayer_513.swf\streamPlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\flash.stream.cz\swf\streamPlayer_544.swf\streamPlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\flash.stream.cz\swf\streamPlayer_553.swf\streamPlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\flash.stream.cz\swf\streamPlayer_560.swf\streamPlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\flashservice.xvideos.com\sitevideos\xv-player.swf\hexaplayerVolumeCookie.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\flv.overbucks.com\com.jeroenwijering.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\flvplayer2.hardsextube.com\flvplayer_elite.swf\agriya_flv.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\fotbal.sport.cz\flash\newVideoplayer.swf\sznVideoPlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\fotbal.sport.cz\flash\videoplayer-4-9-09.swf\user_profile.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\g-ecx.images-amazon.com\images\G\01\x-locale\personalization\uts\flash\apnUserId.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\g-ecx.images-amazon.com\images\G\01\zeitgeist\mp3player\swf\zgMp3Player-1.0._V212274098_.swf\amazonZgMp3.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\g.idnes.cz\IDNES_PLAYER.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\go.eu.bbelements.com\flash\bbnaut.swf\user_data.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\googleads.g.doubleclick.net\pagead\googleadplayer.swf\mediaPlayerUserSettings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\gratishost.com\t.swf\idlive.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\heavy2.com\com.heavy2.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\hokej.sport.cz\flash\videoplayer-4-9-09.swf\user_profile.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\i0.bzpics.com\AdobeDynamicStream.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\i0.bzpics.com\player\wide_tour_player_minBW.swf\ph_options.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\i3.cn.cz\com.jeroenwijering.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\ia.media-imdb.com\IMDBTEST.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\images.ads.whaleads.com\f1\fb.swf\F.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\images.ads.whaleads.com\f1\sl86\fb.swf\F.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\images.ads.whaleads.com\f1\sp75\fb.swf\F.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\images.ads.whaleads.com\www\images\259d99bc00d0071b348d80bd0444f2f8.swf\F.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\images.ads.whaleads.com\www\images\629f1f29e94310483675ffd09dc555ee.swf\F.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\images.ads.whaleads.com\www\images\c521332ead5f2201b2807f5255bf43ad.swf\F.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\images.anilos.com\com.jeroenwijering.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\imlive.com\Flash_SDK\one2many_imlive10.swf\DontShowAlert.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\imlive.com\Flash_SDK\one2many_imlive10.swf\ShowCounter.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\imlive.com\Flash_SDK\one2many_imlive12.swf\DontShowAlert.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\imlive.com\Flash_SDK\one2many_imlive12.swf\ShowCounter.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\imlive.com\Flash_SDK\videochatguestapp27_net.swf\iml_free.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\imlive.com\Flash_SDK\videochatguestapp28_net.swf\iml_free.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\inplay.tubemogul.com\InPlayInfo.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\inplay.tubemogul.com\StreamMinerInfo.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\is4.myvideo.de\de\player\player_Vming18g.swf\myvideo.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\kaktuz.com\data\other\xmoovflv\player\xmoov-flv-player.swf\xmoov_vitaminAB_kaktus.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\km-static.phncdn.com\flash\player.swf\ivp_options.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\km-static.phncdn.com\flash\player.swf\ph_options.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\km-static.phncdn.com\flash\player_embed.swf\ph_options.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\km-static.phncdn.com\flash\player_old.swf\ph_options.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\lads.myspace.com\videos\Main.swf\preferences.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\lads.myspace.com\videos\vplayer.swf\preferences.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\lads.myspacecdn.com\videos\Main.swf\MSMediaPlayerClosedClients.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\lads.myspacecdn.com\videos\Main.swf\MSMediaPlayerCurrentlyPlaying.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\lads.myspacecdn.com\videos\Main.swf\preferences.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\madcitytube.com\#kernelteam\preferences.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\mcaonline.si\hk_258_cz.fsi.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\mcstatic.com\StreamMinerInfo.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\media.moblyng.com\com.quantserve.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\media.mtvnservices.com\global\apps\player\flex\Loader.swf\loaderLogging.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\media.mtvnservices.com\global\apps\player\gui\com\mtvnservices\media\player\gui\FFMod.swf\ffGUILogging.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\media.mtvnservices.com\player\gui\ffGUILogging.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\media.mtvnservices.com\player\loader\loaderLogging.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\media.mtvnservices.com\player\release\DownShiftHistory.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\media.mtvnservices.com\player\release\MetadataHistory.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\media.mtvnservices.com\player\release\playerCounter.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\media.mtvnservices.com\player\release\userPrefs.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\media.mtvnservices.com\s_br.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\media.scanscout.com\SS_ARE_CatFreqHist.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\media.scanscout.com\SS_ARE_RPCAdHistory.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\media.scanscout.com\SS_ARE_UserData.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\media1.break.com\break.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\mpsnare.iesnare.com\stm.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\n-joy.cz\swf\embed.swf\settings_audio.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\n-joy.cz\swf\embed.swf\volume.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\n1.brazzers.com\cdn\tour2\player\brazzers_new_player2.swf\ph_options.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\newsimg.bbc.co.uk\player\emp\2_26_20959_21121_1\C4629807-5F20-0001-C811-1EF81E553100.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\newsimg.bbc.co.uk\player\emp\2_26_20959_21121_1\expiryTable.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\oceans-lefilm.com\analytics.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\oceans-lefilm.com\swf\presite.swf\MMM_VOD_V1.00_117.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\overthumbs.com\analytics.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\p1.basrv.com\partners\cotr.swf\basrv.com.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\p1.soundcloud.com\analytics.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\p1.soundcloud.com\player.swf\SCPlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\partner.itek.cz\pap20.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\patrz.pl\static\flash\patrzplayr.nowy.swf\patrz_volume.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\pfiles.5min.com\analytics.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\ph-static.phncdn.com\flash\embed_player_v1.3.swf\ph_options.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\ph-static.phncdn.com\flash\player.swf\ivp_options.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\ph-static.phncdn.com\flash\player_v1.swf\ph_options.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\pics.video.qip.ru\user_volume.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\pix.familycreamvideos.com\com.jeroenwijering.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\pixmania.com\pixsettings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\pixmania.com\pixsettings_cz.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\player.hulu.com\BeaconService.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\player.hulu.com\DPPlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\player.hulu.com\embed\myspace_player_v002.swf\Lightningcast.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\pr-cdn-c.tnaflix.com\ck_tnaflix.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\pr-cdn-c.tnaflix.com\player_v0.3.40.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\pr-cdn-c.tnaflix.com\player_v0.3.45.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\pr-cdn-c.tnaflix.com\player_v0.3.46.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\pr-cdn-c.tnaflix.com\player_v0.3.47.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\prefs.hit.gemius.pl\gSmC.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\proscriptio.skinvideo.com\f\skinVideoRoot.swf\guba_video.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\pub.widgetbox.com\wbx_cookie.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\public0.ordienetworks.com\analytics.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\resources-p1.imeem.com\com.quant.got.served.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\resources-p2.imeem.com\com.quant.got.served.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\resources-p2.imeem.com\imeemPlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\resources-p3.imeem.com\com.quant.got.served.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\reverbnation.com\com.quantserve.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\s.mcstatic.com\MetacafeFlashVideoPlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\s.mcstatic.com\userItemRanks.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\s.mcstatic.com\UUID.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\s.mcstatic.com\version.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\s.mcstatic.com\vpPrefs.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\s.xvideos.com\player\xv-player.swf\hexaplayerVolumeCookie.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\s.ytimg.com\hdTooltipClue2.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\s.ytimg.com\soundData.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\s.ytimg.com\videostats.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\sa.cz\eurovikendy003.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\sa.cz\charterove_lety003.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\sa.cz\levne_jizdenky003.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\sa.cz\levne_letenky003.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\sa.kewego.com\swf\p3\epix.swf\capping_125.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\sa.kewego.com\swf\p3\epix.swf\KewegoEPIX_userData.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\secure-us.imrworldwide.com\_ggCvar.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\secure-us.imrworldwide.com\_ggCvar_temp.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\secure-us.imrworldwide.com\_ggMCvar_1.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\smilebox.com\smilebox_clientproperties.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\smutpack.com\volume.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\spe.atdmt.com\ft3629-1.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\ssl.hurra.com\restore.hurra.com.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\st.xhamster.com\com.jeroenwijerin.players.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\st0.mais.uol.com.br\embed.swf\uol_player.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.awempire.com\flash\custom-freechat\applet.swf\jasminmember01.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.awempire.com\flash\custom-freechat\freechat131.swf\jasminmember01.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.awempire.com\flash\custom-freechat\freechat133.swf\jasminmember01.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.awempire.com\flash\custom-freechat\freechat134.swf\jasminmember01.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.awempire.com\flash\custom-freechat\freechat135.swf\jasmin_versio.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.awempire.com\flash\custom-freechat\freechat135.swf\jasminmember01.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.awempire.com\flash\custom-freechat\freechat136.swf\jasmin_versio.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.awempire.com\flash\custom-freechat\freechat136.swf\jasminmember01.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.awempire.com\flash\custom-freechat\freechat137.swf\jasmin_versio.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.awempire.com\flash\custom-freechat\freechat137.swf\jasminmember01.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.brazzers.com\AdobeDynamicStream.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.brazzers.com\player\wide_tour_player_minBW.swf\ph_options.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.issuu.com\com.quantserve.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.prozeny.cz\static\videoplayer\videoplayer-4-9-09.swf\user_profile.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.scanscout.com\com.quantserve.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.trilulilu.ro\savedSoundData.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.trilulilu.ro\the_trilulist.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.wix.com\WixComputerID.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\static.xhamster.com\com.jeroenwijerin.players.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\t8-static.phncdn.com\swf\player.swf\ivp_options.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\tap-cdn.rubiconproject.com\anon_user.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\tn.nova.cz\analytics.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\tn.nova.cz\static\cz\shared\app\MediaCenter.swf\poptv.si.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\v.netlogstatic.com\NetlogMediaViewer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\video-one.com\player\player_v0.3.33.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\video.google.com\googleplayer.swf\mediaPlayerUserSettings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\video.google.com\s\rfufh2YZD4o\googleplayer.swf\mediaPlayerUserSettings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\video.google.com\s\RRTWThPsLH4\googleplayer.swf\mediaPlayerUserSettings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\video.google.com\s\yDw6HNdJsOk\googleplayer.swf\mediaPlayerUserSettings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\video.google.com\s\yV-QVSFYxvM\googleplayer.swf\mediaPlayerUserSettings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\video.google.com\s\ztlPrL9D4z8\googleplayer.swf\mediaPlayerUserSettings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\video.google.com\videostats.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\video.google.cz\s\RRTWThPsLH4\googleplayer.swf\mediaPlayerUserSettings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\video.google.cz\videostats.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\video.milfmovs.com\sitevideos\flv_player_site_v4.swf\VolCookie.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\video.super.cz\static\flash\newVideoplayer.swf\sznVideoPlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\video.super.cz\static\flash\videoplayer-4-9-09.swf\user_profile.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\video.super.cz\static\flash\videoplayer.swf\user_profile.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\vk.com\VkontaktePlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\wat.tv\images\v2.5\flash\player.swf\watPlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\webdata.vidz.com\demo\swf\FlashPlayerV2.swf\hexaplayerVolumeCookie.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\webdata.vidz.com\swf\FlashPlayerV2.swf\hexaplayerVolumeCookie.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\webdata2.vidz.com\swf\FlashPlayerV2.swf\hexaplayerVolumeCookie.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\widgets.clearspring.com\clearspring.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\wp.vizu.com\vizuUserData.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.bonus.cz\computer_hash.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.bravomamas.com\#kernelteam\preferences.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.ceknito.sk\analytics.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.ceknito.sk\com.jeroenwijerin.players.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.ceknito.sk\style\vp.swf\ceknito.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.ceknito.sk\style\vp.swf\GACOOKIE_UA-906655-13.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.ceknito.sk\style\vp.swf\playerSettings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.cleancafe.com\com.jeroenwijering.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.crocotube.com\#kernelteam\preferences.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.crocreview.com\#kernelteam\preferences.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.cum-in-air.com\com.jeroenwijering.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.dailymotion.com\analytics.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.dailymotion.com\flash\dmplayer\dmplayer.swf\dmplayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.dailymotion.com\flash\dmplayerv4\dmplayerv4.swf.v3b7067095e388809\com.dm.player.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.dailymotion.com\flash\dmplayerv4\dmplayerv4.swf.va02fedd285407605\com.dm.player.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.dailymotion.com\flash\dmplayerv4\dmplayerv4.swf\com.dm.player.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.dailymotion.com\player.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.drjizz.com\player.swf\application_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.emapa.pl\templates\default\swf\bottom.swf\TestMovie_Config_Info.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.empflix.com\embedding_player\player_v0.2.1.swf\flixstream_audio_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.empflix.com\embedding_player\player_v0.2.1.swf\flixstream_volume.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.empflix.com\empflix.swf\flixstream_volume.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.empflix.com\player_v0.2.1.swf\flixstream_volume.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.ena.lu\mce.swf\mce.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.ena.lu\mce.swf\TestMovie_Config_Info.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.eretail.cz\pap20.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.flickr.com\apps\video\video_player_prefs2.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.ftvplus.com\#kernelteam\preferences.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.he.playlist.com\mc\mp3player_new.swf\ppl4.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.he.playlist.com\players\893\mp3player.swf\ppl5.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.hulu.com\BeaconService.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.impuls.cz\com.jeroenwijering.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.internetdomobilu.cz\vf-xmas.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.jasonmraz.com\main.swf\mraz.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.lsl.com\flash\memberchat008.swf\jasminmember01.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.lsl.com\flash\memberchat019.swf\jasminmember01.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.mkmb.cz\player2.swf\mkmb_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.moblyng.com\com.quantserve.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.moviefap.com\embedding_player\player_v0.2.1.swf\flixstream_volume.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.n4x.com\1flvPlayer.swf\player_settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.novinky.cz\static\flash\gemiusVideoplayer.swf\sznVideoPlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.novinky.cz\static\flash\newVideoplayer.swf\sznVideoPlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.novinky.cz\static\flash\videoplayer.swf\user_profile.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.quelle.de\is-bin\intershop.static\WFS\Quelle-quelle_de-Site\-\de_DE\media\flashcookies.swf\Recommendation.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.sport.cz\flash\newVideoplayer.swf\sznVideoPlayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.sport.cz\flash\videoplayer-4-9-09.swf\user_profile.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.stileproject.com\analytics.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.stileproject.com\com.jeroenwijering.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.submityourflicks.com\player\main.swf\saveVol.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.submityourflicks.com\player\player_v2.swf\savedVol.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.submityourflicks.com\xmoov_flv\player\xmoov.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.submityourflicks.com\xmoov_flv\player\xmoov_younoob.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.super.cz\static\flash\newVideoplayer.swf

Re: ESET se nespouští + Trojan.Win32/Rustock + oopuhnpkpjv.s

Napsal: 17 zář 2010 19:31
od Rainmaker
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.super.cz\static\flash\videoplayer-4-9-09.swf\user_profile.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.traileraddict.com\player.swf\traileraddict.com.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.tripadvisor.ca\TA.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.tripadvisor.com\TA.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.tv7.cz\com.jeroenwijerin.players.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.tv7.cz\com.jeroenwijering.players.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.tvnota.cz\flv\flowplayer-3.0.0.swf\org.flowplayer.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.tvujsvet.cz\com.jeroenwijering.players.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.vid2c.com\player_v0.2.1.swf\flixstream_volume.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.videobox.com\beta\flash\playerSettings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.videobox.com\beta\flash\Z05HK143.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.videobox.com\playerSettings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.yobt.tv\player.swf\dat.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.yobt.tv\player.swf\satur.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.yobt.tv\playerhd.swf\dat.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.yobt.tv\playerhd.swf\satur.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.yourfilehost.com\adcontent\flvplayer9.swf\UserVolume.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.yourfilehost.com\com.jeroenwijering.players.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.yourfilehost.com\flash\flvplayer7.swf\UserVolume.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.yourfilehost.com\flash\flvplayer8.swf\UserVolume.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.youtube.com\soundData.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\#SharedObjects\6LXUYLBU\www.youtube.com\videostats.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#1.im.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#213.174.142.210\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#4tube.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#5min.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#80.77.117.102\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#88.208.32.102\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#95.128.120.102\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#99.192.139.194\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#a.gogousenet.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#aa.online-metrix.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#abax.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#abcnews.go.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#advprotraffic.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#affiliates.quintura.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#anatranny.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#applets.inoveo.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#archiv.nova.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bandzone.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#banners.securedataimages.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bbn.cache.bangbros.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bbnaut.bbelements.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#big.clipsgrabber.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bigtitavenue.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bondagezilla.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bonus.postaffiliatepro.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#brightcove.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#c01.codelnet.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cache.madthumbs.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cache.reverbnation.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cache.tgpsitecentral.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cash.femjoy.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn-edge.tnaflix.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn-static.viddler.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.empflix.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.gigya.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.livestream.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.smugmug.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.static.viddler.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.tnaflix.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.visiblemeasures.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.widgetserver.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdnt.empflix.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdnt.tnaflix.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cds009.am4.hwcdn.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cds009.lo1.hwcdn.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cds036.am4.hwcdn.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cds049.lo1.hwcdn.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#centrumcz.adocean.pl\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ci-mpsnare.iovation.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#common.eravage.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#content.beeg.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#content.codelnet.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cs.s.mall.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#d.yimg.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#diselgalls.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#e.stileproject.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#es2.karupsow.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#es2.karupspc.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#files.clipsmafia.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#files.videobomb.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flash.stream.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flashservice.xvideos.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flv.overbucks.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flvtools.spacash.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#fotbal.sport.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#free.sellyourgf.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#free.tubegoggles.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#g-ecx.images-amazon.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#g.idnes.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#galleries.atmovs.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#galleries.crocreview.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#galleries.ferronetwork.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#galleries.payserve.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#galleries.pimproll.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#gallys.50plusmilfs.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#gallys.scorehd.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#gallys.scorevideos.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#gapartner.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#go.eu.bbelements.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#gomoviesworld.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#googleads.g.doubleclick.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#gratishost.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#heavy2.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#hokej.sport.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#homestead.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#hot.yummytubes.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#hqtube.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#i0.bzpics.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#i3.cn.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ia.media-imdb.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#images.ads.whaleads.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#images.anilos.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#images.nubiles.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#images.pimproll.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#images.tv.adobe.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#img.blesk.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#img.livejasmin.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#img.maturescam.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#img.mycams.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#img.mytrannycams.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#img.nerdpass.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#imlive.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#inplay.tubemogul.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#is4.myvideo.de\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#jmetube.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#kaktuz.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#km-static.phncdn.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#lads.myspace.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#lads.myspacecdn.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#lana-tube.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#live.cdn.inethoster.org\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#liveintnet.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#load.tubemogul.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#local\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#lovelyteenmovs.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#lubetube.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#madcitytube.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mcaonline.si\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mcstatic.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.dreamhost.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.exgfdump.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.moblyng.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.mtvnservices.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.scanscout.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.shufuni.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media1.break.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media1.shufuni.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#members.livejasmin.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#members.maturescam.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#members.mytrannycams.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#miamisjuiciest.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mochiads.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mochibot.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#momsarchive.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mov.nerdpass.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#movies.gigantits.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#movies.hdteenmovs.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mpsnare.iesnare.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#n-joy.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#n1.brazzers.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#netyourwork.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#newpornsite.org\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#newpornsites.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#newsimg.bbc.co.uk\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#oceans-lefilm.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#overthumbs.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#p.basrv.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#p1.basrv.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#p1.soundcloud.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#partner.itek.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#patrz.pl\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pfiles.5min.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ph-static.phncdn.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#photo.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pics.video.qip.ru\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pix.familycreamvideos.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pixmania.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pl08.load.tubemogul.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pl13.load.tubemogul.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pl14.load.tubemogul.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pl15.load.tubemogul.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#player.cdn.targetspot.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#player.hulu.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#player.longtailvideo.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#porn.tube43.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pornminded.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#porno.dreammovies.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pornoprinzen.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pr-cdn-c.tnaflix.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#prefs.hit.gemius.pl\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#private-video.org\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#promo.8teensworld.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#promo.skokoff.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#promo.youngerpornstars.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#promo.ztod.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#proscriptio.skinvideo.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pub.widgetbox.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#public0.ordienetworks.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pupok.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#quantomobi.vo.llnwd.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#resources-p1.imeem.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#resources-p2.imeem.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#resources-p3.imeem.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#reverbnation.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#rp92802348hg39nbb392093b34dk88j.ratx.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.mcstatic.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s5.ypms.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#sa.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#sa.kewego.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#scashvideo.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#secure-us.imrworldwide.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#sfico.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#skype.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#smilebox.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#smutpack.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#spe.atdmt.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ssl.hurra.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#st.xhamster.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#st0.mais.uol.com.br\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static-nl.dosug.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.awempire.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.brazzers.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.eporner.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.issuu.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.prozeny.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.trilulilu.ro\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.wix.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.xhamster.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#streaming.si\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#superstarshop.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#t8-static.phncdn.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#tap-cdn.rubiconproject.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#tc-cdn-1.porned.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#teenshdd.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#the-tube.org\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#thumbs.deviantclip.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#thumbs.myhomeclip.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#tn.nova.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#tools.totale-defonce.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#tour.justfacialz.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#tube.mallcom.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#tube1.imagemaniac.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#tube5000.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#tubedope.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#tushygalls.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#unclevids.damhost.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#v.netlogstatic.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video-one.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.atmovs.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.fuck.sc\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.google.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.google.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.hubhunter.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.milfmovs.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.novinky.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.pornorama.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.super.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.unrulymedia.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.xnxx.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#videodetective.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#videos.allelitepass.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#videos.caught-on-video.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#videos.video-loader.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#vidii.hardsextube.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#vidii2.hardsextube.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#virtual-zoom.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#vk.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#wat.tv\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#webdata.vidz.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#webdata2.vidz.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#widgets.clearspring.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#widgets.nbcuni.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#wp.vizu.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.bonus.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.bravomamas.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.bravomilf.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.bustnow.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ceknito.sk\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.dailymotion.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.easy-thumbs.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.emapa.pl\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.empflix.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ena.lu\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.flickr.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.freudbox.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ftvplus.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.he.playlist.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.hostave3.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.hostave4.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.hotbbwvids.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.hulu.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.humoron.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.imagepost.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.impuls.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.internetdomobilu.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.jokeroo.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.kaktuz.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.mkmb.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.moblyng.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.moviefap.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.moviegator.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.moviesand.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.n4x.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.newsfilter.org\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.nonktube.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.novinky.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.nsgalleries.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.octopushost.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.onefullmovie.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.openjavascript.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.quelle.de\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.rk.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.shufuni.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.skinvideo.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.sledujvideo.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.sport.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.stileproject.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.super.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.traileraddict.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.tripadvisor.ca\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.tripadvisor.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.tube8.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.tubecat.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.tubekings.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.tubeko.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.tubethumbs.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.tuccus.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.tv7.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.tvnota.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.tvujsvet.cz\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.vho.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.vid2c.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.videobox.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.videotube.sk\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.vidoosh.tv\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.vids.net\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.youtube.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.zoig.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www3.karupsha.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www3.karupsow.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www3.karupspc.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#xreview.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#xt-static.phncdn.com\settings.sol
c:\users\Rodiče\AppData\Roaming\\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
c:\users\Rodiče\AppData\Roaming\\mdbu.bin
c:\users\Rodiče\AppData\Roaming\\Microsoft\Crypto\RSA\S-1-5-21-3360784991-3284122449-588302526-1001\5550e7cb640347345a345c63aa7a6848_cb371343-e3d9-46fd-85ab-95f7b8959c41
c:\users\Rodiče\AppData\Roaming\\Microsoft\Crypto\RSA\S-1-5-21-3360784991-3284122449-588302526-1001\6b29ae44e85efac3c72ff4d1865d73f1_cb371343-e3d9-46fd-85ab-95f7b8959c41
c:\users\Rodiče\AppData\Roaming\\Microsoft\Crypto\RSA\S-1-5-21-3360784991-3284122449-588302526-1001\83aa4cc77f591dfc2374580bbd95f6ba_cb371343-e3d9-46fd-85ab-95f7b8959c41
c:\users\Rodiče\AppData\Roaming\\Microsoft\Crypto\RSA\S-1-5-21-3360784991-3284122449-588302526-1001\e713ee43b23ca5d9b54b50e4775a319b_cb371343-e3d9-46fd-85ab-95f7b8959c41
c:\users\Rodiče\AppData\Roaming\\Microsoft\HTML Help\hh.dat
c:\users\Rodiče\AppData\Roaming\\Microsoft\Installer\{237CD223-1B9D-47E8-A76C-E478B83CCEA2}\1033.MST
c:\users\Rodiče\AppData\Roaming\\Microsoft\Installer\{237CD223-1B9D-47E8-A76C-E478B83CCEA2}\ARPPRODUCTICON.exe
c:\users\Rodiče\AppData\Roaming\\Microsoft\Installer\{87441A59-5E64-4096-A170-14EFE67200C3}\1033.MST
c:\users\Rodiče\AppData\Roaming\\Microsoft\Installer\{87441A59-5E64-4096-A170-14EFE67200C3}\ARPPRODUCTICON.exe
c:\users\Rodiče\AppData\Roaming\\Microsoft\Installer\{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}\1033.MST
c:\users\Rodiče\AppData\Roaming\\Microsoft\Installer\{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}\ARPPRODUCTICON.exe
c:\users\Rodiče\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\desktop.ini
c:\users\Rodiče\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Internet Explorer\UserData\index.dat
c:\users\Rodiče\AppData\Roaming\\Microsoft\Protect\CREDHIST
c:\users\Rodiče\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3360784991-3284122449-588302526-1001\097d0c89-a993-4253-ad05-a12b40c661b7
c:\users\Rodiče\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3360784991-3284122449-588302526-1001\26b90a0c-71d2-40b4-b8af-db08a03c2b3f
c:\users\Rodiče\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3360784991-3284122449-588302526-1001\2c752954-cd95-4749-95aa-c9ce2720fab5
c:\users\Rodiče\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3360784991-3284122449-588302526-1001\37bdab38-ab73-4203-ab9c-3836c555c1e5
c:\users\Rodiče\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3360784991-3284122449-588302526-1001\640256e5-8313-4de4-b8aa-cf82f92fdc70
c:\users\Rodiče\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3360784991-3284122449-588302526-1001\873c3677-75d4-4cd9-93e6-20c7fe96dbe0
c:\users\Rodiče\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3360784991-3284122449-588302526-1001\cf697e62-7050-49f7-93ea-9c956f69a916
c:\users\Rodiče\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3360784991-3284122449-588302526-1001\d7816766-32e6-460f-acb6-bdde7f3fa405
c:\users\Rodiče\AppData\Roaming\\Microsoft\Protect\S-1-5-21-3360784991-3284122449-588302526-1001\Preferred
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\desktop.ini
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\index.dat
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@addthis[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@adfox[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@adtech[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@aol[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@archiv.nova[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@atdmt[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@aukro[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@bety[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@bing[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@bing[3].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@c.bing[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@c.live[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@c.msn[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@client.winamp[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@client.winamp[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@connextra[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@connextra[3].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@cz.adocean[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@czgde.adocean[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@dl.javafx[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@girl-n-girl[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@gmodules[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@go.cz.bbelements[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@go.idnes.bbelements[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@gomlab[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@google[1].txt

Re: ESET se nespouští + Trojan.Win32/Rustock + oopuhnpkpjv.s

Napsal: 17 zář 2010 19:33
od Rainmaker
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@google[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@google[4].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@google[5].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@hit.gemius[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@idnes[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@idos-jizdni-rady-idos[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@iserialy[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@jizdnirady.idnes[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@jizdnirady.idnes[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@lekarske.slovniky[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@live[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@maps.google[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@msn[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@msn[3].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@nova[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@novinky[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@onlinestores.metaservices.microsoft[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@panoramio[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@profile.live[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@prozeny.blesk[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@rad.live[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@roztoky[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@scorecardresearch[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@search.live[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@search.msn[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@search.seznam[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@seznam[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@slovniky[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@spaces.live[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@sportvital[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@szn[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@tn.nova[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@toplist[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@toplist[3].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@tv.nova[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@ulice.nova[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@urdrive-store.p.fuhu[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@winamp[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@www.bety[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@www.bing[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@www.gomlab[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@www.panoramio[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@www.rb[3].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@www.roztoky[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@youtube[2].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Cookies\rodiče@zoner[1].txt
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\!!!-MAMKA-MAIL-!!!.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\+.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\1.aspx.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\16 8 .lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\16 8.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\18 8 .lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\18 8.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\18plus.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\19 8 .lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\19 8.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\2 (2).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\20101652030_kak.RFI.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\241.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\259.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\262.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\264.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\265.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\268.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\269.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\270.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\271.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\272.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\273.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\275.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\4 8 .lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\4 8.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Anežka 2003.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Anežka,Luděk,Dáša.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\ART.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\b.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\BD-VD.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\blabla.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\blabla1.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\CFScript.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\desktop.ini
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Dokument.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\dp1rawpack.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC-1.aspx.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_2266.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_2405.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_2406.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_2407.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_2408.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_2409.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_3080.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_3380.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_3385.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_3584.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_4019 (2).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_4941 (2).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_5562.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_5617.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_6019 (2).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_6269 (2).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DSC_6269.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\DUG'S Special Mission.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\dětský den.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\e-mail DALM.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\EE-MAIL-EE.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\ESET - Licencni ujednani.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\ESET Smart Security.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Filip Zeman - stanovisko.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\formulář.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Forrest.Gump.1994.720p.BluRay.x264-SiNNERS.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\frauen_02.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\free.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\FW_ Přeji ti_____.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Fwd_ Fw_ Fwd_Preji ti......lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\getfile-1.aspx.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\getfile.aspx.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\GetThumbNail.aspx.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\IMG_0388.CR2.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Jednotka CD-ROM.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Kasuistika Michael-prezentace (2).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Kasuistika Michael-prezentace.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Kawasakiho růže 2009.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\kazuistika_financni gramotnost.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Kritéria pro výběr a zařazování případů do projednávání před Komisí pro PP.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\log.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\mapcz_04.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Mapy.cz.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\message2(2).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\message2.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\meteopress.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Metodika Komise pro PP (2).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Metodika Komise pro PP (3).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Metodika Komise pro PP (4).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Metodika Komise pro PP (5).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Metodika Komise pro PP (6).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Metodika Komise pro PP.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\na chůdách.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Naše DIGI FOTKY.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\NGŘ č. 42 2009.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\NGR c. 42 2009 - SpO-1.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\NIKON-09-P.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\nikon-coolpix-p100.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\OESpamFilter.dat.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\olympus-e-620-kit.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\před budovou IV VS ČR.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\P1150777.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\P1150954.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\P1150976.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\P1160090.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\P1160409.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\P8170067.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\P8310039-1 (2).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\P9050057.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\pamětníci 2003.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\photo.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Photoserver.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\pilotni projekt - zprava 1.9.2010.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\pilotni projekt - zprava z cervence 2010.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\plan kontrol VOVT 2010-1.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\platform.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Plugins.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\pmp_usb.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Pocasi-radar.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\pp.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\ppc2bw(2).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\ppc2bw.8bf.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\ppc2bw.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\pRAHA wIMCUP.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\PREZENTACE-Michael.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\priroda_a_moudra (2).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\priroda_a_moudra (3).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\priroda_a_moudra (4).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\priroda_a_moudra (5).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\priroda_a_moudra.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Protector.cz.2009.DVDRip.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Provedení parolového slyšení.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\RAR-FFF.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Rarlab.WinRAR.v3.80.Final.Incl.DosRAR.WinALL.Cracked-YPOGEiOS (2).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Rarlab.WinRAR.v3.80.Final.Incl.DosRAR.WinALL.Cracked-YPOGEiOS.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\článek - vězeňství.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\rom_sharp_test-1.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\rom_sharp_test.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\rsit.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\SASKO.Švýc.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\sb037-09.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\SDIM0073.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Sorben.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\SpO (3).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Stažené soubory.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Stanovení plánu činnosti Komise v případu.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\statistika VO_2009.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\strekov2.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\strekov4.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\SVITLANA.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\SVITLANA1.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\SysInspector-RODICE-100917-1140.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\T-DALMACIE-T.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\ultimateLS.pwn.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Usneseni_vlady_090608.0715.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Valečov.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\vánoce 2004 - aktiv ŘV.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Vyměnitelný disk (E).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\VZOR_Oznameni_zmeny.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18005_none_f4739330689c1e73.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\ypogeios.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\ypp0208.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Zapis TK Straz.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\Záloha ze starého.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\zápis z porady 1.9.2010.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Recent\zápis z porady OVT 18.8.2010.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\SendTo\Compressed (zipped) Folder.ZFSendToTarget
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\SendTo\Desktop (create shortcut).DeskLink
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\SendTo\Desktop.ini
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\SendTo\Dokumenty.mydocs
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\SendTo\Mail Recipient.MAPIMail
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\desktop.ini
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\GOM Player.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Mozilla Firefox.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Přidat nebo odebrat programy\desktop.ini
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Přidat nebo odebrat programy\target.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\plan kontrol VOVT 2010-1.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Run.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\computer.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Control Panel.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\desktop.ini
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Maintenance\Help.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\The KMPlayer\KMPlayer Home Page.url
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\WinRAR\Console RAR manual.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR help.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Start Menu\QIP Infium.lnk
c:\users\Rodiče\AppData\Roaming\\Microsoft\Windows\Themes\Custom.theme
c:\users\Rodiče\AppData\Roaming\\MIDI Devices
c:\users\Rodiče\AppData\Roaming\\MIDI Patch Names
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime2008102920
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime2008120122
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime2009011913
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime2009021910
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime2009032609
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime2009040821
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime2009042316
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime2009060215
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime2009070611
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime2009073022
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime2009082707
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime2009101601
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime2009120208
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime2009122116
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime20091221164558
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime20100202165920
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime20100315083431
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime20100504093643
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime20100625231939
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime20100713130626
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\InstallTime20100722155716
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\LastCrash
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\submit.log
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Crash Reports\UserID
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\profiles.ini
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\blocklist.xml
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\bookmarkbackups\bookmarks-2010-09-12.json
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\bookmarkbackups\bookmarks-2010-09-13.json
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\bookmarkbackups\bookmarks-2010-09-14.json
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\bookmarkbackups\bookmarks-2010-09-15.json
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\bookmarkbackups\bookmarks-2010-09-16.json
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\bookmarks.html
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\cert8.db
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\compatibility.ini
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\compreg.dat
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\content-prefs.sqlite
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\cookies.sqlite
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\downloads.sqlite
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\extensions.cache
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\extensions.ini
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\extensions.log
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\extensions.rdf
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\defaults\preferences\defaults.js
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\chrome.manifest
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\chrome\chrome_user.jar
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\install.rdf
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}\components\downbar.js
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}\defaults\preferences\downbarconfig.js
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}\downbarPackage.jar
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}\chrome.manifest
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}\install.rdf
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}\license.txt
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\formhistory.sqlite
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\chrome\userContent-example.css
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\chrome\userChrome-example.css
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\key3.db
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\lightweighttheme-footer
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\lightweighttheme-header
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\localstore-1.rdf
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\localstore.rdf
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\mimeTypes.rdf
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\03e3c907-0858-4235-b102-e0b381b970a4.dmp
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\03e3c907-0858-4235-b102-e0b381b970a4.extra
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\4dae15ca-31ac-4795-90a3-662e4f0d9b81.dmp
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\4dae15ca-31ac-4795-90a3-662e4f0d9b81.extra
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\4fe4ff09-d358-44d7-8f1f-efa5865f703f.dmp
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\4fe4ff09-d358-44d7-8f1f-efa5865f703f.extra
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\5b06b3fd-1724-465f-b811-a560d64a1c52.dmp
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\5b06b3fd-1724-465f-b811-a560d64a1c52.extra
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\67b4467f-30b2-468e-8633-5abaec0c3032.dmp
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\67b4467f-30b2-468e-8633-5abaec0c3032.extra
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\75b7ab64-6a5b-49c5-9f6f-2de25a47683e.dmp
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\75b7ab64-6a5b-49c5-9f6f-2de25a47683e.extra
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\9f975c37-b822-4b1e-87df-2708dd28d7cc.dmp
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\9f975c37-b822-4b1e-87df-2708dd28d7cc.extra
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\ac8765a7-9b71-4166-93aa-a16d2001939f.dmp
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\ac8765a7-9b71-4166-93aa-a16d2001939f.extra
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\ae7ad40c-c998-4805-b451-08b9ec9ea132.dmp
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\ae7ad40c-c998-4805-b451-08b9ec9ea132.extra
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\b6a44f09-13dd-405b-873f-91eb1ef0e7d0.dmp
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\b6a44f09-13dd-405b-873f-91eb1ef0e7d0.extra
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\d207bfa6-5ebf-48d4-96d6-179d94c31a2f.dmp
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\d207bfa6-5ebf-48d4-96d6-179d94c31a2f.extra
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\eb0d04e0-693f-4b71-89f5-57349f3f231d.dmp
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\eb0d04e0-693f-4b71-89f5-57349f3f231d.extra
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\f0739c27-eeba-4dfa-9a01-c7b63d4b7c22.dmp
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\f0739c27-eeba-4dfa-9a01-c7b63d4b7c22.extra
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\f0a5f058-8c72-4ad5-85fe-118565b1e84e.dmp
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\minidumps\f0a5f058-8c72-4ad5-85fe-118565b1e84e.extra
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\permissions.sqlite
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\places.sqlite-journal
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\places.sqlite
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\pluginreg.dat
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\prefs-1.js
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\prefs.js
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\search.json
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\search.sqlite
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\secmod.db
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\sessionstore-1.js
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\sessionstore-2.js
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\signons.sqlite
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\signons3.txt
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\webappsstore.sqlite
c:\users\Rodiče\AppData\Roaming\\Mozilla\Firefox\Profiles\hmtulnrj.default\xpti.dat
c:\users\Rodiče\AppData\Roaming\\Nikon\Message Center\Config.xml
c:\users\Rodiče\AppData\Roaming\\Nikon\Message Center\PRODUCT_CATALOG\ProductCatalog.xml
c:\users\Rodiče\AppData\Roaming\\Nikon\Message Center\UPDATES\CurrentUpdateList.html
c:\users\Rodiče\AppData\Roaming\\Nikon\Message Center\UPDATES\mca-style.css
c:\users\Rodiče\AppData\Roaming\\Nikon\Message Center\UPDATES\update-10808.xml
c:\users\Rodiče\AppData\Roaming\\Nikon\Message Center\UPDATES\update-14793.xml
c:\users\Rodiče\AppData\Roaming\\Nikon\Message Center\UPDATES\update-14807.xml
c:\users\Rodiče\AppData\Roaming\\Nikon\Message Center\UPDATES\update-15160.xml
c:\users\Rodiče\AppData\Roaming\\Nikon\Message Center\UPDATES\update-15181.xml
c:\users\Rodiče\AppData\Roaming\\Nikon\Message Center\UPDATES\updateMessage-10808.html
c:\users\Rodiče\AppData\Roaming\\Nikon\Message Center\UPDATES\updateMessage-14793.html
c:\users\Rodiče\AppData\Roaming\\Nikon\Message Center\UPDATES\updateMessage-14807.html
c:\users\Rodiče\AppData\Roaming\\Nikon\Message Center\UPDATES\updateMessage-15160.html
c:\users\Rodiče\AppData\Roaming\\Nikon\Message Center\UPDATES\updateMessage-15181.html
c:\users\Rodiče\AppData\Roaming\\Nikon\Nikon Transfer\Database\Transfer.mdb
c:\users\Rodiče\AppData\Roaming\\Nikon\Nikon_Shared.xml
c:\users\Rodiče\AppData\Roaming\\Nikon\ViewNX\Cache\NkCacheFolder.nkd
c:\users\Rodiče\AppData\Roaming\\Nikon\ViewNX\Cache\NkCacheFolder.nki
c:\users\Rodiče\AppData\Roaming\\Nikon\ViewNX\Cache\NkCacheLarge.nkd
c:\users\Rodiče\AppData\Roaming\\Nikon\ViewNX\Cache\NkCacheLarge.nki
c:\users\Rodiče\AppData\Roaming\\Nikon\ViewNX\Cache\NkCacheNormal.nkd
c:\users\Rodiče\AppData\Roaming\\Nikon\ViewNX\Cache\NkCacheNormal.nki
c:\users\Rodiče\AppData\Roaming\\Nikon\ViewNX\Cache\NkCacheSmall.nkd
c:\users\Rodiče\AppData\Roaming\\Nikon\ViewNX\Cache\NkCacheSmall.nki
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\autocorr\acor_cs-CZ.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\autotext\mytexts.bau
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\basic\dialog.xlc
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\basic\script.xlc
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\basic\Standard\dialog.xlb
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\basic\Standard\Module1.xba
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\basic\Standard\script.xlb
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\arrowhd_cs.soe
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\autotbl.fmt
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\classic_cs.sog
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\cmyk.soc
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\gallery.soc
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\hatching_cs.soh
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\html.soc
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\modern_cs.sog
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\palette_cs.soc
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\soffice.cfg\global\accelerator\cs\current.xml
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\soffice.cfg\modules\dbbrowser\accelerator\cs\current.xml
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\soffice.cfg\modules\scalc\accelerator\cs\current.xml
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\soffice.cfg\modules\simpress\accelerator\cs\current.xml
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\soffice.cfg\modules\StartModule\accelerator\cs\current.xml
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\soffice.cfg\modules\sweb\accelerator\cs\current.xml
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\soffice.cfg\modules\swriter\accelerator\cs\current.xml
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\standard.sob
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\standard.soc
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\standard.sod
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\standard.soe
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\standard.sog
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\standard.soh
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\styles_cs.sod
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\sun-color.soc
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\config\web.soc
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\database\biblio.odb
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\database\biblio\biblio.dbf
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\database\biblio\biblio.dbt
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\- 09- James Blunt - You Are Beautiful(1).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\-FloydCramer-WhenAManLovesAWoman.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\! Albatross (3m12s) fein.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\!00aVogel-Musik.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Čekej tiše uprav.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\řekni kde ty kytky jsou.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\00-Vážná - 3,10.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\002 André Rieu - Sirtaki (La Danse De Zorba).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\01-Sentimental Journey-2.45 E.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\01 - Luciano Pavarotti - Chitarra romana wav.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\01 Come Tomorrow.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\02 - Frank Sinatra - Strangers In The Night.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\02 Stopa 2.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\03-Wonderful World 4.16 E.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\03 I Want Tomorrow.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\04-Spanish Eyes-4.13 E.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\04-Tulip-ny z Amsterdamu.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\04 (Everything I Do) I Do It For You.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\04 Avant de Partir.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\04. Chic - Good Times.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\05 - Lily Of The Valley.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\05 Unforgettable.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\06-AudioTrek 06.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\06 - Dream On.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\06 Poslední kovboj.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\06 Smoke Gets in Your Eyes.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\06 The Isle of Innisfree.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\07-petr_spaleny_-_az_me_andele-.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\08-Vánoce přicházejí-3,00.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\09-Puppy love.wav-10.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\09-Stormy Weather-2.19 E.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\09 -Merle noire..wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\09. Era - Enae Volare.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\1 - A_I'm alive.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\1 - Už koníček pádí.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\1_kenny-unchanged melody.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\10-Demis Roussos - Good Bye My Love Good Bye.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\10 10 Hudba se mnou vchází Karel Gott Rocky mého mládí Pop.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\10 He Ain't Heavy He's My Brother.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\10 No Bravery.pps.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\11-abych tu žil.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\11-Summertime-3.51 E.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\11 - Into Silence.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\111111111.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\12 - The Lake.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\12. artist - Track 12.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\12.Heart.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\125.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\125t.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\13-As Time Goes By-3.10 E.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\13 Garden of Love.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\135 sec Ern Cortazar - Stolen kiss.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\14-Moon River 2-3.30 E.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\14 Vaya con Dios.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\15 Spím v obilí.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\156 sec Ern Cortazar - Even through the distance.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\17-Jaroslav Wykrent _ Ruzova pentle.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\19 Já malý přicházím.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\190 sec Ern Cortazar - Two candles for two hearts.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\1Karel_Zich-Jak_jdem_tím_zdejším_světem.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\2 - Mám tam boudu dřevěnou.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\2 bi?res.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\20 - To se nikdo nedoví.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\20 let.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\2001theme.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\20090430??.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\29 - Růže z Texasu.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\3,04 Agnetha Faltskog - Artist.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\3,14 Zvuky lesa.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\3,28min EX Enya-boadicea.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\333333333333333333333333.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\4,24 Hymn To Her - The Pretenders.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\5555555555.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\6.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\960_001.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\A beautiful day..wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\ABBA - En Sang Om Sorg Och Glädje.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Abych tu žil.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Addam´s Familyb.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Africa.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\AfricanSimon-Hafannanah.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Albeniz.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Albert Babin - Dans Mon Shack.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\All by myself - Richard Clayderman - .wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Amapola.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\AmazingGrace-Panflute.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\AmazingGrace.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Amistades peligrosas_musical.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Amour violino.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Andrea Bocelli - Ave Maria.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\aneta_3.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\anjelik_moj_2.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\apocalipsis_vangelis.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Arie.2. 251.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\AUTOMNE ROSE1.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\AutumnLeavesCut.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Ave Maria maravilhosa.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\AveMariaSchubert.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\B.Streisand - Memories.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Back to Earth- Children Of Hope.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Bach Toccata and Fugue D min .wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Ballad Pour Adeline.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Ballade_AF8-dans_AF8-les_AF8-paysage_001.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\bandari_-_THE_SOUNDS_OF_SILENCE.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\bell airport theme.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\BenitoCabrera-Peque?oVals.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Benny 15s.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\berceuse_andre_rieu.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\big-bell.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\BILITIS POURCEL.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Blade runner.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Bobby McFerrin - Don't Worry Be Happy.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\bomb.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\breeze.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Bruit - RIRE 6.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\bébé ours polaire.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\bílá orchidej.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\camera.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Can't take my eyes off of you - Jay & The Americans.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Can Love.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Canal du MIDI.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\canto_gregoriano_hosanna_filio_david.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\carbrake.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Carmina Burana's O Fortuna.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\cashreg.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Cathar-ERA-zeka.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\CD-Track-01-mp3-7123-6246.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Cesky raj.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Cesta ke stesti.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\click.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\coin.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\cojeto zaho.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Comico - Bebe riendo.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Compagnie Créole_c'a fait rire les oiseaux.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Corcovado (Quiet Nights) - Astrud Gilberto.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Coucou_.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\cupcake[1].wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\CurseotDemon12 SEK..wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\CZ Karel Gott a Darina Rolincová - Zvonky št?stí(1).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Dave Stewart & Candy Dulfer - Lily Was Here.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Den kdy se vrati laska (Pojistovna stesti).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\deRosyRichardClaydermanRomeoyJulieta.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\DevilRidesOut 28 SEK..wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\DIGITAR.WAV
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Donau Walzer.Joh.Strauss.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Dreams of Peace.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\driveby.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Děti z pirea2.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\eamon_-_fuck_it.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Eminem - Lose Yourself2b.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\ENVOLE~1.WAV
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Enya-Watermark.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Enya - Flora's Secret(ts)(1)32.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Enya - Lothlórien.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Enya - Wild Child.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\enya onlytime 311.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Ernesto Cortazar - Lonely Island.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Ernesto Cortazar - Sicilian Romance.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\eterea-so-many things.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\explode.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\ffff.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\FROESCHE.WAV
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Guelgunul- piano.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\hammer.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\happy new year.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Helena Vondráčková, Waldemar Matuška - Tisíc mil.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Hendel - Ouverture.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Hino Nacional BrasileiroPassaros.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Howard Shore - Many Meetings.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Chant choeur de chant JoliBeau.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\CHARLES AZNAVOUR- desormais(MAIL)))).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\chicken.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\chicken_balk81811.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Chickitita.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\chimes.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Chiquitita.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Chopin - Tristesse (piano).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\CHRIS SPHEERIS - Culture2.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Inga_Jankauskaite_-_Laseliai (6).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Irish Folk 02.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\J'entends siffler le train-Richard Antony.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Ja se vznasím.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\jak je krasna ceska zem.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Jakub Smolík Nestálá.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Japanese - Kodo Heartbeat Drummers - Taiko Drums Track 8-1 33.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Jede šohaj z Vídňa.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\JeT'aimeMoi.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Jiri Korn - Tam u dvou cest.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\john barry - the girl with the sun in her hair.WAV
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\kůň bílý.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Karel Gott - Jsou svátky.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Karel Gott - Kde pak ty ptáčku hnízdo máš(128).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\keby ste to mamko moja věděly.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Kenny_G_Brahms_Lullaby_M1.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Koledy - Vanocni Koledy - Ticha Noc - Karel Gott (2).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Kopretiny - Roháči z Lokte.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\krejčíř
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\kupredu_leva.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Kytara hezké.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\La Compagnie Creole - Ca Fait Rire Les Oiseaux.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\labut.wav

Re: ESET se nespouští + Trojan.Win32/Rustock + oopuhnpkpjv.s

Napsal: 17 zář 2010 19:34
od Rainmaker
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\LaCaliffa(SarahBrightman)Mpg-menor.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Langour.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\LASER.WAV
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Laugh
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\LeeGalloway_Canon243.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Lorencová Zdenka , Jan Přeučil - Proč žiješ rád.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Los-Indios-Tabajaras- Lamento-Boricano.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Lothlorien227.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Love Hurts111.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Love Paris (2m 20s).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\LUIS COBOS Aria de Amor ToscaMINI.WAV
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\lullaby.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\M.Tučný - Vanek s vuni burcaku.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\M206 - TRES BON FOND.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\March_of_the_Celts.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Maurice Williams_Stay.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Maxi cd dance.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\MayItBe_Enya_LordOfTheRings135.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Melounování.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\MHBExitWin.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\MHBStartWin.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Michal David Pár přátel.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Michal Tucny - Vsichni jsou uz v Mexiku.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Michal Tučný-Dám sbohem řekám 96kbps.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Michal Tučný-Nádraží.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Michal Tučný - Rád se brouzdám rosou.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Michal Tučný - Tam u nebeskych bran.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Miscellaneous-pictures.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Misik-To_byl_zas_den.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Moonlight Sonata.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Mozart chidren 2.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\musicaturca1.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Měk jsem já trajárku.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Nahraný zvuk
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Nachtegaal Serenade 1.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\natura.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\nedaleko za dědinů polečko.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\noche_de_paz.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Nuevo01.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\odbila jedna odbila druhá.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Official Hymn from USA.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Omely.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\On a soif.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\onlytime.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Op lengte voor PPS.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Over tne Raibow.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Přítel můj.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Panfluit 12.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Paul Anka, Anthea Anka, Barry Gibb - Yo Te Amo.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Peliculas-Exodo.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Petula - Downtown(MAIL)))).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Phil Collins - Another Day In Paradise.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\pian elegant.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\piano 1.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\pianosuave.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Piet Veerman - Sailing home.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Plavci - Pes suveren.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Podivný spáč - Pavel Novák.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\PPageWhisperingWinds.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Praha-srdce Evropy-184-16-8m.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Praha Sloky-o-Praze_Lenka-Filipova.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Pretenders- Hymn to Her.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\push.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Relaxation Meditation Nature Sounds.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Retirement Song.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Return.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Ricky King - Spanish eyes (1988).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\richard abel.le lac de come.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Richard ClaydermanRenaissance.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Richard Marx efekt.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\rire.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\RISADA MUTLEY-AGOSTO.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Robert Miles - One And One.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\RomHier Encore.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Roy Orbison - California Blue.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\rád bych k vám milá chodíval.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Sarah Brightman e Jose Carreras - Amigos Para Siempre.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Scorpions - Wind Of Change.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Sedmikráska - Štědroň.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Serenade Schubert (2m 30s).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\sg100.sdv
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\sg100.thm
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\sg30.sdg
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\sg30.sdv
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\sg30.thm
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\ShaniaTwain_YoureStillTheOne.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Simply Red - Holding Back The Years.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\slow_019.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Smetana - Die Moldau - Symphonic Poem.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Smoke show.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Snow Slope Recycle.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Snídaně v trávě.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\solar stone - Seven Cities (Ambient Dub).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\songbird_barbra_streisand[1].wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\sorriso_wave.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\sound-L'amour r?ve(AndréGagnon).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Sound x.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\sound001.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\sound002.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\sound003.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\sound007.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\sound008.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\stevie-wonder-i-just-called-to-say-i-love-yo.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\TADA.WAV
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\tai chi music.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Tema De Lara-Orquesta Jean Philippe Andre.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\The Kelly Familie - Roses Of Red.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Titanic-Musica Celta - La Musica de los Dioses Titanic-0001.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\tom jones sex bomb.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Tom Jones The Impossible Dream (wav).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Track 02 conv..wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Track01.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\trakt 16.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\type.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\u tej boží muky.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\UFO.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Unchained Melody(2m34s).wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\V Hodoníně.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Vale Tudo.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Vangelis - from Antarctica.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Vangelis_AquaticDance.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\VangelisMissing.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\vecerka.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Vioolmuziek 1.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Vogels fluiten achtergrond.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\voltage.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\W+V tmavomodrý svět.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Waldemar Matuška - A tak dál nosíš po kapsách sny mládí.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Waldemar Matuška - Pojď se mnou, lásko má.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Waldemar Matuška - Sbohem lasko.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Waldemar Matuška.-Píseň pro Kristýnku.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\WAV - krkonosske pohadky - cas 7,36.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\WavdeRosyPeliculasPropuestaIndecente.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\WAVdeRosySoledadPastoruttiYoSiQuieroAMiPais.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\wave_song_for_peace.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Wawe Večerníček.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\When Youre in Love.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\whoosh.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\wind.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Yanni-One_Man_s_Dream.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Yanni - In The Morning Light1.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\YOU'RE BEAUTIFUL (JAMES BLUNT)...wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Za Lanžhotem oprav.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\zahrada13.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Zanfir-TheLonelyShepherd.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Zima Ladovská.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\Zizi.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\gallery\zlato_moje.wav
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.FirstStartWizard.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Inet.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.LDAP.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Addons.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Calc.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Canvas.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Commands.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Common.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Compatibility.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.DataAccess.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Embedding.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Events.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Impress.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Jobs.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Linguistic.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Logging.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.OptionsDialog.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Paths.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.ProtocolHandler.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Recovery.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Security.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.SFX.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Substitution.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.TabBrowse.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.TypeDetection.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.CalcCommands.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.CalcWindowState.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.Controller.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.DbBrowserWindowState.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.DbuCommands.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.DrawImpressCommands.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.Effects.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.Factories.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.GenericCommands.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.GlobalSettings.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.ImpressWindowState.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.StartModuleCommands.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.StartModuleWindowState.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.WriterCommands.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.WriterWebWindowState.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.UI.WriterWindowState.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Views.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.Writer.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Office.WriterWeb.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.Setup.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.System.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.TypeDetection.Filter.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.TypeDetection.GraphicFilter.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.TypeDetection.Misc.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.TypeDetection.Types.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.TypeDetection.UISort.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.ucb.Configuration.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.ucb.Hierarchy.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.ucb.Store.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.UserProfile.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\cache\org.openoffice.VCL.dat
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Common.xcu
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Linguistic.xcu
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Recovery.xcu
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\data\org\openoffice\Office\UI.xcu
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\data\org\openoffice\Office\UI\ImpressWindowState.xcu
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\data\org\openoffice\Office\UI\WriterWindowState.xcu
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Views.xcu
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\data\org\openoffice\Office\Writer.xcu
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\data\org\openoffice\Setup.xcu
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\data\org\openoffice\ucb\Hierarchy.xcu
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\data\org\openoffice\ucb\Store.xcu
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\registry\data\org\openoffice\UserProfile.xcu
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\store\.templdir.cache
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\uno_packages\cache\log.txt
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\uno_packages\cache\registry\com.sun.star.comp.deployment.configuration.PackageRegistryBackend\registered_packages.db
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
c:\users\Rodiče\AppData\Roaming\\OpenOffice.org\3\user\uno_packages\cache\uno_packages.db
c:\users\Rodiče\AppData\Roaming\\Real\RealPlayer\RealPlayer-log.txt
c:\users\Rodiče\AppData\Roaming\\Winamp\demoedit.aac
c:\users\Rodiče\AppData\Roaming\\Winamp\links.xml
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\dropbox.ini
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\gen_ml.ini
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\Gracenote\cddb.db
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\Gracenote\elists.db
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\milk2.ini
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\milk2_img.ini
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\milk2_msg.ini
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\feeds.xml
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\main.dat
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\main.idx
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\met83A0.vmd
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\met83B0.vmd
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\met83BF.vmd
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\met83CF.vmd
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\met9382.vmd
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\met9391.vmd
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\metA363.vmd
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\ml_dash.ini
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\ml_online.ini
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\ml_orb.ini
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\playlists.xml
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\recent.dat
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\recent.idx
c:\users\Rodiče\AppData\Roaming\\Winamp\Plugins\ml\rss.xml
c:\users\Rodiče\AppData\Roaming\\Winamp\studio.xnf
c:\users\Rodiče\AppData\Roaming\\Winamp\winamp.ini
c:\users\Rodiče\AppData\Roaming\\Winamp\winamp.m3u
c:\users\Rodiče\AppData\Roaming\\Winamp\Winamp.m3u8
c:\users\Rodiče\AppData\Roaming\\Winamp\Winamp.q1
c:\users\Rodiče\AppData\Roaming\\XnView\category.bak
c:\users\Rodiče\AppData\Roaming\\XnView\category.db
c:\users\Rodiče\AppData\Roaming\\XnView\XnView.db
c:\users\Rodiče\AppData\Roaming\\XnView\xnview.ini
c:\users\Rodiče\AppData\Roaming\\Zoner\NLMDB\product.0032\autoupdate.cz\ZPS12_Update_Build09.exe
c:\users\Rodiče\AppData\Roaming\\Zoner\NLMDB\product.0032\autoupdate.cz\ZPS12_Update_Build09.exe.size
c:\users\Rodiče\AppData\Roaming\\Zoner\NLMDB\product.0032\autoupdate.cz\ZPS12_Update_Build10.exe
c:\users\Rodiče\AppData\Roaming\\Zoner\NLMDB\product.0032\autoupdate.cz\ZPS12_Update_Build10.exe.size
c:\users\Rodiče\AppData\Roaming\\Zoner\NLMDB\product.0032\nlmdb0002.dat
c:\users\Rodiče\AppData\Roaming\\Zoner\NLMDB\product.0032\resources.0032.cz.0004\hotline.htm
c:\users\Rodiče\AppData\Roaming\\Zoner\NLMDB\product.0032\resources.0032.cz.0004\resources.xml
c:\users\Rodiče\AppData\Roaming\\Zoner\NLMDB\product.0032\resources.0032.cz.0004\start_full.htm
c:\users\Rodiče\AppData\Roaming\\Zoner\NLMDB\product.0032\resources.0032.cz.0004\start_trial.htm
c:\users\Rodiče\AppData\Roaming\\Zoner\NLMDB\product.0032\resources.0032.cz.0004\start_trial_period_expired.htm
c:\users\Rodiče\AppData\Roaming\\Zoner\NLMDB\product.0032\resources.0032.cz.0004\start_trial_periodandstarts_expired.htm
c:\users\Rodiče\AppData\Roaming\\Zoner\NLMDB\product.0032\resources.0032.cz.0004\zps_logo.png
c:\users\Rodiče\AppData\Roaming\\Zoner\NLMDB\product.0032\rss.CZ\rss.xml
c:\users\Rodiče\AppData\Roaming\\Zoner\ZPS 11\ZPSCache.dat
c:\users\Rodiče\AppData\Roaming\\Zoner\zps11emm-a.hd
c:\users\Rodiče\AppData\Roaming\\Zoner\ZVS\ZVSImagesCache.dat
c:\users\Rodiče\AppData\Roaming\ . . . . nemohl být smazán

Nakažená kopie c:\windows\explorer.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe

Nakažená kopie c:\windows\System32\wininit.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-08-17 do 2010-09-17 )))))))))))))))))))))))))))))))
.

2010-09-17 17:02 . 2010-09-17 17:02 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-09-17 14:07 . 2010-09-17 14:08 -------- d-----w- c:\program files\trend micro
2010-09-17 14:07 . 2010-09-17 14:09 -------- d-----w- C:\rsit
2010-09-16 19:36 . 2010-09-16 19:36 172064 ------w- c:\windows\system32\drivers\str.sys
2010-09-16 19:36 . 2010-09-17 17:17 69120 ----a-w- c:\windows\system32\drivers\oopuhnpkpjv.sys
2010-09-15 15:17 . 2010-08-17 14:11 128000 ----a-w- c:\windows\system32\spoolsv.exe
2010-09-15 15:17 . 2010-04-16 16:46 502272 ----a-w- c:\windows\system32\usp10.dll
2010-09-15 15:17 . 2010-04-05 17:02 317952 ----a-w- c:\windows\system32\MP4SDECD.DLL
2010-09-15 15:16 . 2010-05-27 20:08 739328 ----a-w- c:\windows\system32\inetcomm.dll
2010-09-13 17:22 . 2010-09-13 17:22 1536 ----a-w- c:\program files\file.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-17 13:16 . 2009-03-18 10:36 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-09-17 13:15 . 2008-01-21 06:13 82150 ----a-w- c:\windows\system32\perfh005.dat
2010-09-17 13:15 . 2008-01-21 06:13 30822 ----a-w- c:\windows\system32\perfc005.dat
2010-09-17 13:12 . 2008-11-14 14:48 -------- d-----w- c:\program files\ESET
2010-09-17 11:27 . 2010-09-17 11:27 11626 ----a-w- c:\program files\updates.xml
2010-09-17 11:27 . 2010-09-17 11:27 57 ----a-w- c:\program files\active-update.xml
2010-09-17 10:13 . 2009-03-18 10:36 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2010-09-17 10:13 . 2008-11-14 09:30 -------- d-----w- c:\program files\plugins
2010-09-16 20:15 . 2008-11-14 09:30 -------- d-----w- c:\program files\components
2010-09-16 16:58 . 2008-11-14 09:30 -------- d-----w- c:\program files\extensions
2010-09-15 21:15 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-09-15 15:08 . 2008-12-31 16:18 -------- d-----w- c:\program files\Microsoft Silverlight
2010-09-12 00:09 . 2009-07-25 19:52 20 ---h--w- c:\programdata\PKP_DLdw.DAT
2010-09-12 00:01 . 2009-07-25 19:50 20 ---h--w- c:\programdata\PKP_DLdu.DAT
2010-07-25 04:33 . 2008-11-14 09:30 910296 ----a-w- c:\program files\firefox.exe
2010-07-25 04:33 . 2008-11-14 09:30 478 ----a-w- c:\program files\freebl3.chk
2010-07-25 04:33 . 2008-11-14 09:30 249856 ----a-w- c:\program files\freebl3.dll
2010-07-25 04:33 . 2008-11-14 09:30 105432 ----a-w- c:\program files\crashreporter.exe
2010-07-25 04:33 . 2008-11-14 09:30 1015768 ----a-w- c:\program files\js3250.dll
2010-07-25 04:33 . 2008-11-14 09:30 2126 ----a-w- c:\program files\application.ini
2010-07-25 04:33 . 2008-11-14 09:30 17880 ----a-w- c:\program files\AccessibleMarshal.dll
2010-07-21 18:10 . 2010-07-21 18:10 115 ----a-w- c:\program files\dependentlibs.list
2010-07-21 18:10 . 2008-11-14 09:30 -------- d-----w- c:\program files\modules
2010-07-21 18:10 . 2008-11-14 09:30 -------- d-----w- c:\program files\greprefs
2010-07-20 14:53 . 2008-11-14 09:30 -------- d-----w- c:\program files\searchplugins
2010-07-20 14:53 . 2008-11-14 09:30 -------- d-----w- c:\program files\res
2010-07-20 14:53 . 2010-02-12 06:13 3 ----a-w- c:\program files\update.locale
2010-07-20 14:53 . 2008-11-14 09:30 708 ----a-w- c:\program files\updater.ini
2010-07-20 14:52 . 2010-02-12 06:13 16246 ----a-w- c:\program files\removed-files
2010-07-20 14:52 . 2008-11-14 09:30 4236 ----a-w- c:\program files\crashreporter.ini
2010-07-20 14:52 . 2008-11-14 09:30 695 ----a-w- c:\program files\crashreporter-override.ini
2010-07-20 14:52 . 2010-02-12 06:13 0 ----a-w- c:\program files\.autoreg
2010-07-20 14:52 . 2008-11-14 09:30 220 ----a-w- c:\program files\browserconfig.properties
2010-07-20 14:52 . 2008-11-14 09:30 31393 ----a-w- c:\program files\LICENSE
2010-07-20 14:52 . 2008-11-14 09:30 2530 ----a-w- c:\program files\blocklist.xml
2010-07-20 14:52 . 2008-11-14 09:30 199 ----a-w- c:\program files\README.txt
2010-07-15 03:21 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2010-07-11 11:00 . 2010-07-11 10:56 129 ----a-w- c:\program files\FixMebroot.log
2010-06-29 15:47 . 2010-08-11 19:26 834048 ----a-w- c:\windows\system32\wininet.dll
2010-06-28 16:13 . 2010-08-11 19:26 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-06-28 13:39 . 2010-06-28 13:39 72504 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.2.0.61\SetupAdmin.exe
2010-06-21 13:37 . 2010-08-11 19:25 2037760 ----a-w- c:\windows\system32\win32k.sys
.

------- Sigcheck -------

[-] 2009-04-11 . 9691D94DDC3CB959C0A0E5ED28451581 . 2926592 . . [6.0.6000.16386] . . c:\windows\explorer.exe

[-] 2008-01-21 . ED933B794D1FB2FBE528554FCD1AB57B . 96768 . . [6.0.6000.16386] . . c:\windows\System32\wininit.exe
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" [2008-11-07 95536]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2006-12-19 90191]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-12-19 7766016]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-12-19 81920]
"RtHDVCpl"="RtHDVCpl.exe" [2007-07-06 4669440]
"Skytel"="Skytel.exe" [2007-06-15 1826816]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-08-03 36352]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"Nikon Transfer Monitor"="c:\program files\Common Files\Nikon\Monitor\NkMonitor.exe" [2008-12-16 479232]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2010-04-07 2145000]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-06-15 141624]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-3360784991-3284122449-588302526-1001]
"EnableNotificationsRef"=dword:00000002

R3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\DRIVERS\s0016bus.sys [2008-05-16 89256]
R3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 15016]
R3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 120744]
R3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s0016mgmt.sys [2008-05-16 114216]
R3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\system32\DRIVERS\s0016nd5.sys [2008-05-16 25512]
R3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s0016obex.sys [2008-05-16 110632]
R3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\system32\DRIVERS\s0016unic.sys [2008-05-16 115752]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-04-07 133512]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [2010-04-07 810120]
S2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2010-04-07 41312]
S2 OMSI download service;Sony Ericsson OMSI download service;c:\program files\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\DRIVERS\seehcri.sys [2008-01-09 27632]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
FF - ProfilePath -
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKLM-Run-QuickTime Update Completion 0 - c:\program files\QuickTime\QTSystem\QuickTimeUpdateHelper.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-09-17 19:21
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(2068)
c:\progra~1\SPYBOT~1\SDHelper.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\conime.exe
c:\windows\RtHDVCpl.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\System32\rundll32.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\Windows Media Player\wmpnscfg.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\System32\rundll32.exe
c:\windows\system32\DllHost.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\DrvInst.exe
.
**************************************************************************
.
Celkový čas: 2010-09-17 19:28:45 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-09-17 17:28

Před spuštěním: Volných bajtů: 57 472 450 560
Po spuštění: Volných bajtů: 59 829 637 120

- - End Of File - - 1CE0F9BADD13120A6A18A3ADFD0AF9FF


Kooonečně. Divím se, že mě forum už nezabanovalo jako spambota :D .

Re: ESET se nespouští + Trojan.Win32/Rustock + oopuhnpkpjv.s

Napsal: 17 zář 2010 19:40
od earl
Procpak,vkladani logu je bezna vec :D

:arrow: Odinstalujte Spybot - mate Windows Defender.

:arrow: otestujte na VIRUSTOTALu

c:\program files\file.exe

c:\windows\explorer.exe

c:\windows\System32\wininit.exe

(navod prosty: po nacteni stranky kliknete na tlacitko Prochazet , najdete cestu k vyse zminenemu souboru a kliknete na tlacitko Odeslat soubor; dejte skenerum nejakych deset minut; vysledek sem vlozte)

Pokud skener napíše, že soubor již byl testován, dejte otestovat znovu.

Re: ESET se nespouští + Trojan.Win32/Rustock + oopuhnpkpjv.s

Napsal: 17 zář 2010 20:00
od Rainmaker
Ok ...

File name: file.exe
Submission date: 2010-09-17 18:45:20 (UTC)
Current status: queued queued analysing finished
Result: 19/ 43 (44.2%)
VT Community not reviewed
Safety score: -

Antivirus Version Last Update Result
AhnLab-V3 2010.09.17.02 2010.09.17 -
AntiVir 8.2.4.52 2010.09.17 TR/Crypt.XPACK.Gen
Antiy-AVL 2.0.3.7 2010.09.17 -
Authentium 5.2.0.5 2010.09.17 -
Avast 4.8.1351.0 2010.09.17 Win32:Malware-gen
Avast5 5.0.594.0 2010.09.17 Win32:Malware-gen
AVG 9.0.0.851 2010.09.17 Downloader.Rozena
BitDefender 7.2 2010.09.17 Gen:Win32.ExplorerHijack.aeW@amOJruk
CAT-QuickHeal 11.00 2010.09.17 (Suspicious) - DNAScan
ClamAV 0.96.2.0-git 2010.09.17 -
Comodo 6112 2010.09.17 -
DrWeb 5.0.2.03300 2010.09.17 -
Emsisoft 5.0.0.37 2010.09.17 Gen.Trojan-Downloader!IK
eSafe 7.0.17.0 2010.09.17 -
eTrust-Vet 36.1.7861 2010.09.17 -
F-Prot 4.6.1.107 2010.09.16 -
F-Secure 9.0.15370.0 2010.09.17 Gen:Win32.ExplorerHijack.aeW@amOJruk
Fortinet 4.1.143.0 2010.09.17 -
GData 21 2010.09.17 Gen:Win32.ExplorerHijack.aeW@amOJruk
Ikarus T3.1.1.88.0 2010.09.17 Gen.Trojan-Downloader
Jiangmin 13.0.900 2010.09.17 -
K7AntiVirus 9.63.2542 2010.09.17 -
Kaspersky 7.0.0.125 2010.09.17 Trojan.Win32.Sasfis.atuu
McAfee 5.400.0.1158 2010.09.17 Generic.dx!tsm
McAfee-GW-Edition 2010.1C 2010.09.17 Generic.dx!tsm
Microsoft 1.6201 2010.09.17 -
NOD32 5458 2010.09.17 -
Norman 6.06.06 2010.09.17 W32/Suspicious_Gen2.CHAVV
nProtect 2010-09-17.01 2010.09.17 -
Panda 10.0.2.7 2010.09.17 Adware/SecurityTool
PCTools 7.0.3.5 2010.09.17 -
Prevx 3.0 2010.09.17 -
Rising 22.65.04.01 2010.09.17 -
Sophos 4.57.0 2010.09.17 Mal/EncPk-MK
Sunbelt 6888 2010.09.17 Trojan.Win32.Generic!BT
SUPERAntiSpyware 4.40.0.1006 2010.09.17 -
Symantec 20101.1.1.7 2010.09.17 WS.Reputation.1
TheHacker 6.7.0.0.022 2010.09.17 -
TrendMicro 9.120.0.1004 2010.09.17 -
TrendMicro-HouseCall 9.120.0.1004 2010.09.17 -
VBA32 3.12.14.0 2010.09.17 Trojan.Sasfis.ardh
ViRobot 2010.8.25.4006 2010.09.17 -
VirusBuster 12.65.12.0 2010.09.17 -
Additional information
Show all
MD5 : a134c72e80998da6e78b077a7ea96e1e
SHA1 : 3330037d16655255623f3f459279c9cf49862a32
SHA256: 8005f002ff2c3904d0add718c387e259bf6ee15a0f727fe0849dea74c3158a7f
ssdeep: 24:ZHGStmoZMijR5/qmbcGHR+DPRL2lE6BH4+lTNxol9sJr:ZvtrZtn/+GHl4aT4lKJ
File size : 1536 bytes
First seen: 2010-09-08 20:38:35
Last seen : 2010-09-17 18:45:20
TrID:
Generic Win/DOS Executable (49.6%)
DOS Executable Generic (49.5%)
VXD Driver (0.7%)
sigcheck:
publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
PEInfo: PE structure information

[[ basic data ]]
entrypointaddress: 0x1000
timedatestamp....: 0x4C75604E (Wed Aug 25 18:26:22 2010)
machinetype......: 0x14c (I386)

[[ 1 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
.text, 0x1000, 0x40D, 0x400, 6.12, 8340a048c428a8ba7ec9c6bbc8b8cf1d

_____________________

File name: explorer.exe
Submission date: 2010-09-17 18:52:14 (UTC)
Current status: analysing finished
Result: 11/ 43 (25.6%)

VT Community not reviewed
Safety score: -

Antivirus Version Last Update Result
AhnLab-V3 2010.09.17.02 2010.09.17 -
AntiVir 8.2.4.52 2010.09.17 TR/Crypt.XPACK.Gen2
Antiy-AVL 2.0.3.7 2010.09.17 -
Authentium 5.2.0.5 2010.09.17 -
Avast 4.8.1351.0 2010.09.17 Win32:Patched-RP
Avast5 5.0.594.0 2010.09.17 Win32:Patched-RP
AVG 9.0.0.851 2010.09.17 -
BitDefender 7.2 2010.09.17 Gen:Trojan.Heur.TP.Ys0@bW6wQ6i
CAT-QuickHeal 11.00 2010.09.17 -
ClamAV 0.96.2.0-git 2010.09.17 -
Comodo 6112 2010.09.17 -
DrWeb 5.0.2.03300 2010.09.17 Win32.Dat.4
Emsisoft 5.0.0.37 2010.09.17 -
eSafe 7.0.17.0 2010.09.17 -
eTrust-Vet 36.1.7861 2010.09.17 Win32/Patcher.M
F-Prot 4.6.1.107 2010.09.16 -
F-Secure 9.0.15370.0 2010.09.17 Gen:Trojan.Heur.TP.Ys0@bW6wQ6i
Fortinet 4.1.143.0 2010.09.17 -
GData 21 2010.09.17 Gen:Trojan.Heur.TP.Ys0@bW6wQ6i
Ikarus T3.1.1.88.0 2010.09.17 -
Jiangmin 13.0.900 2010.09.17 -
K7AntiVirus 9.63.2542 2010.09.17 -
Kaspersky 7.0.0.125 2010.09.17 -
McAfee 5.400.0.1158 2010.09.17 -
McAfee-GW-Edition 2010.1C 2010.09.17 -
Microsoft 1.6201 2010.09.17 -
NOD32 5458 2010.09.17 -
Norman 6.06.06 2010.09.17 -
nProtect 2010-09-17.01 2010.09.17 -
Panda 10.0.2.7 2010.09.17 -
PCTools 7.0.3.5 2010.09.17 -
Prevx 3.0 2010.09.17 -
Rising 22.65.04.01 2010.09.17 Trojan.Win32.Generic.5232D853
Sophos 4.57.0 2010.09.17 Troj/Patched-O
Sunbelt 6888 2010.09.17 -
SUPERAntiSpyware 4.40.0.1006 2010.09.17 -
Symantec 20101.1.1.7 2010.09.17 Suspicious.Mystic
TheHacker 6.7.0.0.022 2010.09.17 -
TrendMicro 9.120.0.1004 2010.09.17 -
TrendMicro-HouseCall 9.120.0.1004 2010.09.17 -
VBA32 3.12.14.0 2010.09.17 -
ViRobot 2010.8.25.4006 2010.09.17 -
VirusBuster 12.65.12.0 2010.09.17 -
Additional information
Show all
MD5 : 9691d94ddc3cb959c0a0e5ed28451581
SHA1 : 486ae0ba6900588b2bd872a2ea43d4ac7c90b1db
SHA256: e721e45953bc6429c9da8d07334c831ebfd4470c3787dfea60464fb6beea8cc5
ssdeep: 24576:nd8uLOc/QpDk5pGYCW5uXSA7jTeFadRsxFb/g/J/ulZr:rOcLC8A7/eFwY3lV
File size : 2926592 bytes
First seen: 2010-09-17 18:52:14
Last seen : 2010-09-17 18:52:14
TrID:
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
sigcheck:
publisher....: Microsoft Corporation
copyright....: (c) Microsoft Corporation. All rights reserved.
product......: Microsoft_ Windows_ Operating System
description..: Windows Explorer
original name: EXPLORER.EXE
internal name: explorer
file version.: 6.0.6002.18005 (lh_sp2rtm.090410-1830)
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
PEInfo: PE structure information

[[ basic data ]]
entrypointaddress: 0x25E33
timedatestamp....: 0x49E01DA5 (Sat Apr 11 04:33:41 2009)
machinetype......: 0x14c (I386)

[[ 4 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
.text, 0x1000, 0x6BD15, 0x6BE00, 6.42, caf407b237b481842e34506638f21db9
.data, 0x6D000, 0x2164, 0x2000, 0.83, 8d2597b8ca27314e6e6987b53b153d90
.rsrc, 0x70000, 0x2567A3, 0x256800, 7.04, 7d17b16a494081ff71f0db69f67f66d2
.reloc, 0x2C7000, 0x5A20, 0x5C00, 6.74, fd3a318db160df3b955ceeb65f70e7f6

[[ 19 import(s) ]]
ADVAPI32.dll: RegCloseKey, RegCreateKeyW, RegGetValueW, RegOpenKeyExW, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, RegCreateKeyExW, RegSetValueExW, RegQueryValueExW, EventWrite, EventEnabled, GetLengthSid, GetTokenInformation, OpenProcessToken, EventUnregister, EventRegister, GetUserNameW, RegDeleteValueW, RegEnumKeyExW, RegQueryInfoKeyW, TraceMessage, RegOpenKeyW, RegEnumKeyW, RegEnumValueW, CloseServiceHandle, OpenServiceW, OpenSCManagerW, QueryServiceStatus, CheckTokenMembership, ConvertStringSecurityDescriptorToSecurityDescriptorW, OpenThreadToken, ConvertSidToStringSidW, StartServiceW, CreateWellKnownSid
KERNEL32.dll: GetSystemTime, GetFileAttributesW, FindClose, FindNextFileW, FindFirstFileW, GetLocalTime, GetDateFormatW, GetTimeFormatW, GetLocaleInfoW, FlushInstructionCache, RaiseException, GetSystemWindowsDirectoryW, SetLastError, ReadFile, GetFileSize, CreateFileW, InterlockedCompareExchange, LoadLibraryA, SystemTimeToFileTime, ExpandEnvironmentStringsW, GlobalGetAtomNameW, MultiByteToWideChar, GetEnvironmentVariableW, GetCurrentProcessId, GetModuleHandleW, lstrlenW, OpenEventW, SetEvent, GetBinaryTypeW, EnterCriticalSection, LeaveCriticalSection, GetSystemTimeAsFileTime, CompareFileTime, GlobalFree, GetTickCount, MulDiv, GetUserDefaultLangID, GetPrivateProfileIntW, GetCurrentThread, GetThreadPriority, GetCurrentThreadId, SetThreadPriority, CompareStringOrdinal, lstrcmpiW, HeapSetInformation, SetErrorMode, CreateMutexW, ReleaseMutex, GetTimeZoneInformation, SetFilePointer, SetProcessShutdownParameters, GetSystemDirectoryW, CreateEventW, SetTermsrvAppInstallMode, RegisterApplicationRestart, ExitProcess, GetModuleFileNameW, GetPrivateProfileStringW, HeapDestroy, InitializeCriticalSection, DeleteCriticalSection, GetCurrentProcess, GetProcessHeap, HeapAlloc, QueryPerformanceFrequency, GetFileAttributesExW, QueueUserWorkItem, GetLongPathNameW, GetProcessTimes, TerminateThread, GetProcessId, CreateIoCompletionPort, GetQueuedCompletionStatus, GetWindowsDirectoryW, FormatMessageW, QueryFullProcessImageNameW, GlobalAlloc, DuplicateHandle, GetCurrentDirectoryW, WideCharToMultiByte, WriteFile, DeactivateActCtx, ActivateActCtx, ReleaseActCtx, CreateActCtxW, FindResourceExW, LoadResource, LockResource, GetUserDefaultUILanguage, LoadLibraryW, GetProcAddress, FreeLibrary, WaitForSingleObject, CreateProcessW, GetCommandLineW, GetStartupInfoW, CreateThread, AssignProcessToJobObject, ResumeThread, Sleep, QueryInformationJobObject, LocalAlloc, LocalFree, CloseHandle, OpenProcess, SetPriorityClass, GetPriorityClass, CreateJobObjectW, SetInformationJobObject, GetLastError, InterlockedDecrement, InterlockedIncrement, HeapFree, UnhandledExceptionFilter, TerminateProcess, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, InterlockedExchange, VirtualAlloc, VirtualFree, DelayLoadFailureHook
GDI32.dll: GetStockObject, CombineRgn, GetLayout, CreatePatternBrush, OffsetViewportOrgEx, GdiAlphaBlend, GetTextExtentPoint32W, ExtTextOutW, SetWindowOrgEx, GetPixel, PatBlt, CreateRectRgn, GetClipRgn, IntersectClipRect, GetViewportOrgEx, SetViewportOrgEx, SelectClipRgn, GetBkColor, CreateCompatibleBitmap, OffsetWindowOrgEx, SetBkColor, GetTextExtentPointW, GetClipBox, CreateDIBSection, CreateRectRgnIndirect, SetTextColor, SetBkMode, GetTextMetricsW, CreateFontIndirectW, CreateSolidBrush, GetObjectW, DeleteObject, CreateCompatibleDC, SelectObject, BitBlt, DeleteDC, GetDeviceCaps
USER32.dll: GetDlgItem, LoadCursorW, RegisterClassW, IsChild, SetTimer, MonitorFromRect, SetWindowTextW, SetClassLongW, GetClassInfoW, GetClassLongW, KillTimer, GetClassInfoExW, IsWindowEnabled, GetShellWindow, GetIconInfo, SetScrollInfo, GetLastActivePopup, GetSystemMenu, IsIconic, IsZoomed, EnableMenuItem, IsWindowVisible, IsWindow, MonitorFromWindow, GetMonitorInfoW, GetWindowInfo, BeginDeferWindowPos, DeferWindowPos, EndDeferWindowPos, SetFocus, SetForegroundWindow, LoadMenuW, SetMenuInfo, SetMenuDefaultItem, GetSubMenu, TrackPopupMenuEx, LoadImageW, InsertMenuItemW, DestroyIcon, DeleteMenu, GetMenuItemInfoW, SetMenuItemInfoW, CharUpperBuffW, PostQuitMessage, LoadStringW, ShutdownBlockReasonCreate, GetWindowLongA, SetWindowLongW, UnregisterDeviceNotification, RegisterDeviceNotificationW, RegisterWindowMessageW, SetWindowPos, RegisterClassExW, GetDesktopWindow, UpdateWindow, InvalidateRect, BeginPaint, LoadBitmapW, SetLayeredWindowAttributes, EndPaint, ShowWindow, DefWindowProcW, MoveWindow, DestroyWindow, UnregisterClassW, SetProcessDPIAware, PeekMessageW, CreateWindowExW, DialogBoxParamW, MsgWaitForMultipleObjects, GetKeyboardLayout, ActivateKeyboardLayout, IsProcessDPIAware, PrintWindow, GetDCEx, GetPropW, GetNextDlgGroupItem, GetNextDlgTabItem, GetDlgCtrlID, ChildWindowFromPointEx, GetCapture, GetGUIThreadInfo, SetWindowLongA, CharUpperW, GetWindowDC, RegisterClipboardFormatW, UnhookWinEvent, SetWinEventHook, ReleaseCapture, GetUserObjectInformationW, GetProcessWindowStation, FlashWindowEx, GetForegroundWindow, PostMessageW, CreatePopupMenu, GetWindowThreadProcessId, MsgWaitForMultipleObjectsEx, CharPrevW, CharNextW, DispatchMessageW, TranslateMessage, GetMessageW, EqualRect, UnionRect, MapWindowPoints, GetClientRect, EnumWindows, EndTask, SetThreadDesktop, GetThreadDesktop, GetMenuItemID, IsHungAppWindow, DrawTextW, GetSysColor, TrackPopupMenu, SendMessageCallbackW, DeregisterShellHookWindow, EndDialog, IsDlgButtonChecked, LoadIconW, GetSysColorBrush, CloseDesktop, OpenInputDesktop, SetActiveWindow, IsRectEmpty, GetAsyncKeyState, RegisterShellHookWindow, FillRect, GetCursorPos, SetPropW, CopyRect, LockSetForegroundWindow, MonitorFromPoint, InflateRect, GetClassNameW, SubtractRect, RedrawWindow, EnumDisplayMonitors, OffsetRect, IntersectRect, SetWindowRgn, GetMenuState, GhostWindowFromHungWindow, HungWindowFromGhostWindow, GetWindowPlacement, RemovePropW, SendMessageTimeoutW, UnregisterHotKey, RegisterHotKey, InsertMenuW, ModifyMenuW, ClientToScreen, ScreenToClient, GetMenuItemCount, GetFocus, GetScrollInfo, InternalGetWindowText, GetKeyState, ChangeDisplaySettingsW, GetWindowLongW, EnumChildWindows, SendMessageW, GetWindow, GetWindowRect, PtInRect, SetCursor, ChildWindowFromPoint, SetCursorPos, GetMessagePos, LoadAcceleratorsW, WaitMessage, TranslateAcceleratorW, GetWindowRgnBox, GetActiveWindow, MessageBeep, SetWindowPlacement, SetRect, SendNotifyMessageW, UpdateLayeredWindow, GetLastInputInfo, SendDlgItemMessageW, AllowSetForegroundWindow, RemoveMenu, SetParent, CallWindowProcW, EnableWindow, GetDlgItemInt, SetDlgItemInt, CheckDlgButton, CopyIcon, DrawFocusRect, NotifyWinEvent, ExitWindowsEx, DrawEdge, WindowFromPoint, GetDoubleClickTime, SetCapture, TrackMouseEvent, LockWorkStation, AppendMenuW, GetParent, SetScrollPos, SetRectEmpty, AdjustWindowRectEx, BringWindowToTop, CascadeWindows, GetSystemMetrics, SystemParametersInfoW, FindWindowW, ReleaseDC, GetDC, DestroyMenu, GetMenuDefaultItem, TileWindows, GetAncestor, SwitchToThisWindow, CheckMenuItem, ShowWindowAsync
msvcrt.dll: memset, _unlock, _ftol2_sse, _except_handler4_common, __set_app_type, memcpy, free, memmove, realloc, __dllonexit, _lock, _onexit, _terminate@@YAXXZ, _controlfp, _vsnwprintf, malloc, __wgetmainargs, _cexit, _exit, __p__fmode, _XcptFilter, exit, _wcmdln, _initterm, _amsg_exit, __setusermatherr, _adjust_fdiv, __p__commode
ntdll.dll: NtOpenThreadToken, NtOpenProcessToken, RtlGetProductInfo, NtQueryInformationToken, NtClose, NtQueryInformationProcess, NtSetInformationProcess, WinSqmAddToStream, NtSetSystemInformation
SHLWAPI.dll: PathGetDriveNumberW, -, -, PathRemoveFileSpecW, -, -, SHRegGetUSValueW, -, StrDupW, PathQuoteSpacesW, -, -, -, -, StrChrIW, -, -, -, SHRegOpenUSKeyW, SHRegQueryUSValueW, StrCmpW, AssocQueryStringW, -, -, -, -, -, AssocQueryKeyW, PathParseIconLocationW, PathIsPrefixW, -, PathRemoveExtensionW, SHOpenRegStream2W, PathFileExistsW, -, -, -, -, PathFindExtensionW, SHQueryInfoKeyW, -, -, -, -, -, -, -, -, SHDeleteKeyW, PathAppendW, SHDeleteValueW, -, -, -, PathRemoveArgsW, PathRemoveBlanksW, StrCmpNIW, PathFindFileNameW, -, SHSetValueW, SHGetValueW, SHCreateThreadRef, SHSetThreadRef, -, -, PathCombineW, SHRegGetValueW, StrToIntW, -, -, -, PathGetArgsW, StrChrW, -, -, -, -, SHStrDupW, -, -, -, -, -, StrRetToBufW, -, -, -, -, -, -, StrRetToStrW, -, -, StrStrIW, -, -, PathMatchSpecW, PathIsRootW, PathIsNetworkPathW, SHQueryValueExW, AssocCreate, StrCmpIW, -, -, -, StrCmpNW, -, -, StrPBrkW, -, -, -, PathStripToRootW, -, PathIsDirectoryW, -
SHELL32.dll: -, -, -, -, -, -, -, -, SHGetDesktopFolder, -, SHBindToFolderIDListParent, -, -, -, -, -, -, SHGetIDListFromObject, -, -, -, -, -, -, SHCreateShellItemArrayFromIDLists, -, -, SHCreateItemFromIDList, SHCreateShellItemArrayFromShellItem, -, -, SHBindToFolderIDListParentEx, SHChangeNotify, SHAddToRecentDocs, DuplicateIcon, -, -, -, ShellExecuteW, -, -, SHGetPathFromIDListA, SHUpdateRecycleBinIcon, SHGetKnownFolderIDList, SHGetFolderPathEx, SHFileOperationW, -, -, -, -, -, -, SHGetPathFromIDListW, -, -, -, -, -, -, -, -, -, ExtractIconExW, -, -, -, -, SHGetSpecialFolderLocation, -, -, SHBindToParent, Shell_NotifyIconW, SHGetFolderPathAndSubDirW, Shell_GetCachedImageIndexW, SHGetFolderPathW, -, SHEvaluateSystemCommandTemplate, -, -, -, -, -, -, -, -, -, -, -, SHBindToObject, -, ShellExecuteExW, -, -, SHGetSpecialFolderPathW, -, SHParseDisplayName, -, SHGetFolderLocation, -, -, -, -, -
ole32.dll: CoTaskMemFree, CoCreateInstance, CoRegisterClassObject, CoRevokeClassObject, CoGetClassObject, OleInitialize, OleUninitialize, CoGetObject, StringFromGUID2, CoUninitialize, CoInitialize, RevokeDragDrop, RegisterDragDrop, CoRegisterMessageFilter, CoMarshalInterThreadInterfaceInStream, CoGetInterfaceAndReleaseStream, CoTaskMemAlloc, CoCreateFreeThreadedMarshaler, DoDragDrop, CoInitializeEx, CreateBindCtx, CoFreeUnusedLibraries, PropVariantClear
OLEAUT32.dll: -, -, -, -, -, -
SHDOCVW.dll: -, -
UxTheme.dll: IsCompositionActive, IsAppThemed, GetThemeMargins, GetThemeRect, IsThemePartDefined, GetThemeBackgroundRegion, DrawThemeTextEx, GetThemeFont, GetThemeColor, GetThemeBool, GetThemeInt, SetWindowTheme, DrawThemeText, GetThemeTextExtent, DrawThemeBackground, CloseThemeData, OpenThemeData, DrawThemeParentBackground, GetThemePartSize, GetThemeMetric, GetThemeBackgroundContentRect
POWRPROF.dll: GetPwrCapabilities
dwmapi.dll: DwmIsCompositionEnabled, -, DwmSetWindowAttribute, DwmEnableBlurBehindWindow, DwmQueryThumbnailSourceSize, DwmGetColorizationColor, DwmUpdateThumbnailProperties, DwmRegisterThumbnail, DwmUnregisterThumbnail
gdiplus.dll: GdiplusShutdown, GdipCloneImage, GdipDrawImageRectI, GdipSetInterpolationMode, GdiplusStartup, GdipCreateFromHDC, GdipCreateBitmapFromStreamICM, GdipCreateBitmapFromStream, GdipGetImageHeight, GdipGetImageWidth, GdipDisposeImage, GdipLoadImageFromFileICM, GdipLoadImageFromFile, GdipDeleteGraphics, GdipFree, GdipAlloc, GdipSetCompositingMode
slc.dll: SLGetWindowsInformationDWORD
RPCRT4.dll: RpcBindingFree, RpcStringFreeW, RpcBindingFromStringBindingW, NdrClientCall2, RpcStringBindingComposeW, I_RpcExceptionFilter, RpcBindingSetAuthInfoExW
PROPSYS.dll: PSGetPropertyKeyFromName, PSPropertyKeyFromString, PSGetPropertyDescription, PSGetNameFromPropertyKey, VariantToBooleanWithDefault, VariantToInt32WithDefault, VariantToStringWithDefault, PSCreateMemoryPropertyStore, VariantToStringAlloc, PropVariantToStringAlloc
BROWSEUI.dll: -, -


_____________________

File name: wininit.exe
Submission date: 2010-09-17 18:57:02 (UTC)
Current status: analysing finished
Result: 11/ 43 (25.6%)

VT Community not reviewed
Safety score: -

Antivirus Version Last Update Result
AhnLab-V3 2010.09.17.02 2010.09.17 -
AntiVir 8.2.4.52 2010.09.17 TR/Crypt.XPACK.Gen2
Antiy-AVL 2.0.3.7 2010.09.17 -
Authentium 5.2.0.5 2010.09.17 -
Avast 4.8.1351.0 2010.09.17 Win32:Patched-RP
Avast5 5.0.594.0 2010.09.17 Win32:Patched-RP
AVG 9.0.0.851 2010.09.17 -
BitDefender 7.2 2010.09.17 Gen:Trojan.Heur.TP.fq0@bWBx15c
CAT-QuickHeal 11.00 2010.09.17 -
ClamAV 0.96.2.0-git 2010.09.17 -
Comodo 6112 2010.09.17 -
DrWeb 5.0.2.03300 2010.09.17 Win32.Dat.4
Emsisoft 5.0.0.37 2010.09.17 Virus.Win32.Patched.RP!IK
eSafe 7.0.17.0 2010.09.17 -
eTrust-Vet 36.1.7861 2010.09.17 Win32/Patcher.M
F-Prot 4.6.1.107 2010.09.16 -
F-Secure 9.0.15370.0 2010.09.17 Gen:Trojan.Heur.TP.fq0@bWBx15c
Fortinet 4.1.143.0 2010.09.17 -
GData 21 2010.09.17 Gen:Trojan.Heur.TP.fq0@bWBx15c
Ikarus T3.1.1.88.0 2010.09.17 Virus.Win32.Patched.RP
Jiangmin 13.0.900 2010.09.17 -
K7AntiVirus 9.63.2542 2010.09.17 -
Kaspersky 7.0.0.125 2010.09.17 -
McAfee 5.400.0.1158 2010.09.17 -
McAfee-GW-Edition 2010.1C 2010.09.17 -
Microsoft 1.6201 2010.09.17 -
NOD32 5458 2010.09.17 -
Norman 6.06.06 2010.09.17 -
nProtect 2010-09-17.01 2010.09.17 -
Panda 10.0.2.7 2010.09.17 -
PCTools 7.0.3.5 2010.09.17 -
Prevx 3.0 2010.09.17 -
Rising 22.65.04.01 2010.09.17 -
Sophos 4.57.0 2010.09.17 Troj/Patched-O
Sunbelt 6888 2010.09.17 -
SUPERAntiSpyware 4.40.0.1006 2010.09.17 -
Symantec 20101.1.1.7 2010.09.17 -
TheHacker 6.7.0.0.022 2010.09.17 -
TrendMicro 9.120.0.1004 2010.09.17 -
TrendMicro-HouseCall 9.120.0.1004 2010.09.17 -
VBA32 3.12.14.0 2010.09.17 -
ViRobot 2010.8.25.4006 2010.09.17 -
VirusBuster 12.65.12.0 2010.09.17 -
Additional information
Show all
MD5 : ed933b794d1fb2fbe528554fcd1ab57b
SHA1 : 8b43afec1ce2779c711b91a984e3b7feab2f4837
SHA256: 0da35d3fc62a336f25750597f8f4850044f65cfa23d7a09510956918a4ce7205
ssdeep: 1536:vWH2/rts2gq3yQlEQiFXKREc7Mom5dFmEO+OKXQqK4Mk:vWY5zfEQiFXKREbdFmEO+OoPK
x
File size : 96768 bytes
First seen: 2010-09-17 18:57:02
Last seen : 2010-09-17 18:57:02
TrID:
Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)
sigcheck:
publisher....: Microsoft Corporation
copyright....: (c) Microsoft Corporation. All rights reserved.
product......: Microsoft_ Windows_ Operating System
description..: Windows Start-Up Application
original name: WinInit.exe
internal name: WinInit
file version.: 6.0.6001.18000 (longhorn_rtm.080118-1840)
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
PEInfo: PE structure information

[[ basic data ]]
entrypointaddress: 0x634B
timedatestamp....: 0x47918DB8 (Sat Jan 19 05:42:16 2008)
machinetype......: 0x14c (I386)

[[ 4 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
.text, 0x1000, 0x13FDC, 0x14000, 6.32, 3eec6637e20415b564faca1d4ed8eff6
.data, 0x15000, 0x940, 0x800, 2.63, faf02dcc9f10e36f50dc62e1022389ff
.rsrc, 0x16000, 0x1750, 0x1800, 3.95, a1082da9a24924d9e0032925125eadb3
.reloc, 0x18000, 0x1520, 0x1600, 6.71, 3328cf6428f201692357a3e93fad0c5e

[[ 7 import(s) ]]
ADVAPI32.dll: TraceMessage, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, RegCloseKey, RegDeleteValueW, RegOpenKeyExW, RegSetValueExW, RegQueryValueExW, EventRegister, EventUnregister, EventWrite, EventEnabled, RegOpenKeyW, LsaGetUserName, EventWriteEndScenario, EventWriteStartScenario, EventActivityIdControl, CheckTokenMembership, RevertToSelf, ImpersonateLoggedOnUser, EqualSid, GetTokenInformation, SetNamedSecurityInfoW, GetSecurityDescriptorSacl, GetSecurityDescriptorDacl, GetSecurityDescriptorGroup, GetSecurityDescriptorOwner, GetSecurityDescriptorControl, ConvertStringSecurityDescriptorToSecurityDescriptorW, DeregisterEventSource, RegisterEventSourceW, RegEnumValueW, RegQueryInfoKeyW, RegQueryInfoKeyA, RegQueryValueExA, QueryTraceW, EnableTrace, ControlTraceW, StartTraceW, OpenSCManagerW, OpenServiceW, QueryServiceStatus, NotifyServiceStatusChangeW, CloseServiceHandle, NotifyBootConfigStatus, OpenProcessToken, CreateWellKnownSid, LookupAccountSidW, RegDeleteTreeW, CreateProcessAsUserW, DuplicateTokenEx, I_ScSendTSMessage, ReportEventW
KERNEL32.dll: HeapAlloc, HeapFree, WaitForSingleObjectEx, ResetEvent, CreateEventW, Sleep, SetThreadExecutionState, MoveFileExW, DeleteFileW, GetSystemDirectoryW, GetCurrentProcessId, SleepEx, CreateThread, InterlockedExchange, CreateProcessW, HeapDestroy, FindClose, FindFirstFileW, GetWindowsDirectoryW, GetTickCount, SetErrorMode, CreateTimerQueueTimer, SetEvent, HeapSetInformation, QueueUserWorkItem, DeleteTimerQueueTimer, GetVersionExW, GetDateFormatW, GetTimeFormatW, FileTimeToSystemTime, SystemTimeToFileTime, GetLocalTime, LockResource, LoadResource, FindResourceExW, ExpandEnvironmentStringsW, lstrlenW, SetLastError, LocalFree, CreateDirectoryW, ReadFile, LocalAlloc, CreateFileW, GetShortPathNameW, lstrcmpiW, FindVolumeClose, FindNextVolumeW, GetDriveTypeW, FindFirstVolumeW, LocalReAlloc, LocalSize, InterlockedCompareExchange, LoadLibraryA, SetUnhandledExceptionFilter, GetStartupInfoA, DelayLoadFailureHook, HeapCreate, QueryPerformanceCounter, GetCurrentThreadId, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, GetProcessHeap, ResumeThread, CreateRemoteThread, GetModuleHandleW, OpenProcess, SetTimerQueueTimer, GetFileAttributesW, LoadLibraryW, GetProcAddress, FreeLibrary, GetComputerNameW, SetEnvironmentVariableW, GetLastError, GetCurrentProcess, SetPriorityClass, GetCurrentThread, SetThreadPriority, GetExitCodeProcess, CloseHandle, WaitForMultipleObjectsEx, WaitForSingleObject, GetModuleHandleA
USER32.dll: GetAsyncKeyState, RecordShutdownReason, UnhookWindowsHookEx, SwitchDesktopWithFade, SetThreadDesktop, UpdatePerUserSystemParameters, LoadLocalFonts, SetWindowStationUser, SwitchDesktop, SetUserObjectSecurity, SetWindowsHookExW, CloseWindowStation, CloseDesktop, CreateDesktopW, SetProcessWindowStation, CreateWindowStationW, RegisterLogonProcess, ExitWindowsEx
msvcrt.dll: _vsnwprintf, _wcsicmp, memcpy, memmove, wcschr, __getmainargs, _cexit, _exit, _XcptFilter, _ismbblead, exit, _acmdln, _initterm, _amsg_exit, __setusermatherr, _adjust_fdiv, __p__commode, __p__fmode, __set_app_type, _except_handler4_common, _terminate@@YAXXZ, _controlfp, memset, wcsstr
ntdll.dll: NtCreatePagingFile, NtShutdownSystem, RtlDeregisterWaitEx, NtOpenProcessToken, RtlRemovePrivileges, NtClose, RtlDosPathNameToNtPathName_U, NtReplyPort, NtCompleteConnectPort, NtReplyWaitReceivePort, NtAcceptConnectPort, NtCreatePort, NtAllocateLocallyUniqueId, RtlFreeSid, RtlSetSaclSecurityDescriptor, RtlAddMandatoryAce, RtlCreateAcl, RtlInitUnicodeString, NtQueryInformationProcess, RtlGetDaclSecurityDescriptor, RtlCopySid, RtlLengthSid, RtlSetDaclSecurityDescriptor, RtlAddAce, TpSimpleTryPost, RtlUnhandledExceptionFilter, NtQuerySystemInformation, RtlNtStatusToDosError, RtlRegisterWait, RtlDestroyEnvironment, NtSetValueKey, NtCreateKey, RtlSetThreadIsCritical, RtlSetProcessIsCritical, RtlLeaveCriticalSection, RtlEnterCriticalSection, RtlCompareUnicodeString, NtPrivilegeObjectAuditAlarm, NtPrivilegeCheck, NtOpenThreadToken, RtlAllocateAndInitializeSid, RtlInitializeCriticalSection, NtQueryInformationToken, RtlSetEnvironmentVariable, RtlQueryEnvironmentVariable_U, RtlInitUnicodeStringEx, RtlCreateEnvironment, NtCreateEvent, RtlAdjustPrivilege, NtSystemDebugControl, DbgBreakPoint, RtlCreateSecurityDescriptor, RtlFreeHeap
RPCRT4.dll: RpcServerRegisterIfEx, RpcServerListen, RpcServerInqCallAttributesW, RpcImpersonateClient, RpcRevertToSelf, RpcBindingServerFromClient, RpcBindingToStringBindingW, RpcStringBindingParseW, RpcBindingFree, RpcServerUseProtseqW, RpcServerInqDefaultPrincNameW, NdrServerCall2, RpcBindingSetAuthInfoExW, RpcBindingFromStringBindingW, RpcStringBindingComposeW, RpcMgmtIsServerListening, NdrClientCall2, RpcBindingUnbind, RpcAsyncCompleteCall, RpcAsyncCancelCall, RpcAsyncInitializeHandle, RpcBindingBind, RpcBindingCreateW, RpcBindingCopy, NdrAsyncClientCall, I_RpcBindingIsClientLocal, RpcAsyncAbortCall, RpcServerTestCancel, NdrAsyncServerCall, RpcServerUseProtseqEpW, RpcServerRegisterAuthInfoW, RpcStringFreeW, RpcServerInqBindings, UuidFromStringW, RpcEpRegisterW, RpcServerUnregisterIf, RpcEpUnregister, RpcBindingVectorFree
USERENV.dll: GetAllUsersProfileDirectoryW, -, -, GetUserProfileDirectoryW
Symantec reputation:Suspicious.Insight

Re: ESET se nespouští + Trojan.Win32/Rustock + oopuhnpkpjv.s

Napsal: 17 zář 2010 21:34
od earl
:arrow: pokud jste tak jeste neucinil(a), presunte Combofix na plochu

otevrete si Poznamkovy blok

do nej zkopirujte skript z nasledujiciho okna:

Kód: Vybrat vše

Collect::
c:\program files\file.exe
c:\windows\system32\drivers\str.sys
c:\windows\system32\drivers\oopuhnpkpjv.sys
Driver::
str
oopuhnpkpjv
FCopy::
c:\windows\ServicePackFiles\i386\explorer.exe | c:\windows\explorer.exe
c:\windows\ServicePackFiles\i386\wininit.exe | c:\windows\System32\wininit.exe
Reboot::
ulozte vami vytvoreny textovy soubor jako CFScript.txt na plochu

po ulozeni uchopte vami vytvoreny skript levym tlacitkem mysi a presunte jej nad ikonu Combofixu, nad niz skript upustte:

Obrázek

po aplikaci by na vas mel vyskocit dalsi log, vlozte jej sem

Upozorneni: je mozne, ze po aplikaci skriptu a restartu nenabehnou Windows,

v takovem pripade znovu restartujte, po restartu mackejte F8 a zvolte Posledni znamou funkcni konfiguraci

Re: ESET se nespouští + Trojan.Win32/Rustock + oopuhnpkpjv.s

Napsal: 18 zář 2010 11:20
od Rainmaker
c:\windows\ServicePackFiles\
Takovou složku nemám.

ComboFix 10-09-17.04 - Rodiče 18.09.2010 11:47:21.2.1 - x86
Spuštěný z: c:\users\Rodiče\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Rodiče\Desktop\CFScript.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý


file zipped: c:\program files\file.exe
file zipped: c:\windows\system32\drivers\oopuhnpkpjv.sys
file zipped: c:\windows\system32\drivers\str.sys
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\file.exe
c:\windows\system32\drivers\oopuhnpkpjv.sys
c:\windows\system32\drivers\str.sys

Nakažená kopie c:\windows\explorer.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe

Nakažená kopie c:\windows\System32\wininit.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe

Nakažená kopie c:\windows\explorer.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-08-18 do 2010-09-18 )))))))))))))))))))))))))))))))
.

2010-09-18 09:55 . 2010-09-18 09:55 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-09-18 09:55 . 2010-09-18 09:55 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-09-17 18:07 . 2010-09-17 18:07 0 ----a-w- c:\windows\nsreg.dat
2010-09-17 14:07 . 2010-09-17 14:08 -------- d-----w- c:\program files\trend micro
2010-09-17 14:07 . 2010-09-17 14:09 -------- d-----w- C:\rsit
2010-09-15 15:17 . 2010-08-17 14:11 128000 ----a-w- c:\windows\system32\spoolsv.exe
2010-09-15 15:17 . 2010-04-16 16:46 502272 ----a-w- c:\windows\system32\usp10.dll
2010-09-15 15:17 . 2010-04-05 17:02 317952 ----a-w- c:\windows\system32\MP4SDECD.DLL
2010-09-15 15:16 . 2010-05-27 20:08 739328 ----a-w- c:\windows\system32\inetcomm.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-17 19:22 . 2009-03-18 10:36 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-09-17 19:08 . 2009-03-18 10:36 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2010-09-17 13:15 . 2008-01-21 06:13 82150 ----a-w- c:\windows\system32\perfh005.dat
2010-09-17 13:15 . 2008-01-21 06:13 30822 ----a-w- c:\windows\system32\perfc005.dat
2010-09-17 13:12 . 2008-11-14 14:48 -------- d-----w- c:\program files\ESET
2010-09-17 11:27 . 2010-09-17 11:27 11626 ----a-w- c:\program files\updates.xml
2010-09-17 11:27 . 2010-09-17 11:27 57 ----a-w- c:\program files\active-update.xml
2010-09-17 10:13 . 2008-11-14 09:30 -------- d-----w- c:\program files\plugins
2010-09-16 20:15 . 2008-11-14 09:30 -------- d-----w- c:\program files\components
2010-09-16 16:58 . 2008-11-14 09:30 -------- d-----w- c:\program files\extensions
2010-09-15 21:15 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-09-15 15:08 . 2008-12-31 16:18 -------- d-----w- c:\program files\Microsoft Silverlight
2010-09-12 00:09 . 2009-07-25 19:52 20 ---h--w- c:\programdata\PKP_DLdw.DAT
2010-09-12 00:01 . 2009-07-25 19:50 20 ---h--w- c:\programdata\PKP_DLdu.DAT
2010-07-25 04:33 . 2008-11-14 09:30 910296 ----a-w- c:\program files\firefox.exe
2010-07-25 04:33 . 2008-11-14 09:30 478 ----a-w- c:\program files\freebl3.chk
2010-07-25 04:33 . 2008-11-14 09:30 249856 ----a-w- c:\program files\freebl3.dll
2010-07-25 04:33 . 2008-11-14 09:30 105432 ----a-w- c:\program files\crashreporter.exe
2010-07-25 04:33 . 2008-11-14 09:30 1015768 ----a-w- c:\program files\js3250.dll
2010-07-25 04:33 . 2008-11-14 09:30 2126 ----a-w- c:\program files\application.ini
2010-07-25 04:33 . 2008-11-14 09:30 17880 ----a-w- c:\program files\AccessibleMarshal.dll
2010-07-21 18:10 . 2010-07-21 18:10 115 ----a-w- c:\program files\dependentlibs.list
2010-07-21 18:10 . 2008-11-14 09:30 -------- d-----w- c:\program files\modules
2010-07-21 18:10 . 2008-11-14 09:30 -------- d-----w- c:\program files\greprefs
2010-07-20 14:53 . 2008-11-14 09:30 -------- d-----w- c:\program files\searchplugins
2010-07-20 14:53 . 2008-11-14 09:30 -------- d-----w- c:\program files\res
2010-07-20 14:53 . 2010-02-12 06:13 3 ----a-w- c:\program files\update.locale
2010-07-20 14:53 . 2008-11-14 09:30 708 ----a-w- c:\program files\updater.ini
2010-07-20 14:52 . 2010-02-12 06:13 16246 ----a-w- c:\program files\removed-files
2010-07-20 14:52 . 2008-11-14 09:30 4236 ----a-w- c:\program files\crashreporter.ini
2010-07-20 14:52 . 2008-11-14 09:30 695 ----a-w- c:\program files\crashreporter-override.ini
2010-07-20 14:52 . 2010-02-12 06:13 0 ----a-w- c:\program files\.autoreg
2010-07-20 14:52 . 2008-11-14 09:30 220 ----a-w- c:\program files\browserconfig.properties
2010-07-20 14:52 . 2008-11-14 09:30 31393 ----a-w- c:\program files\LICENSE
2010-07-20 14:52 . 2008-11-14 09:30 2530 ----a-w- c:\program files\blocklist.xml
2010-07-20 14:52 . 2008-11-14 09:30 199 ----a-w- c:\program files\README.txt
2010-07-15 03:21 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2010-07-11 11:00 . 2010-07-11 10:56 129 ----a-w- c:\program files\FixMebroot.log
2010-06-29 15:47 . 2010-08-11 19:26 834048 ----a-w- c:\windows\system32\wininet.dll
2010-06-28 16:13 . 2010-08-11 19:26 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-06-28 13:39 . 2010-06-28 13:39 72504 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.2.0.61\SetupAdmin.exe
2010-06-21 13:37 . 2010-08-11 19:25 2037760 ----a-w- c:\windows\system32\win32k.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" [2008-11-07 95536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2006-12-19 90191]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-12-19 7766016]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-12-19 81920]
"RtHDVCpl"="RtHDVCpl.exe" [2007-07-06 4669440]
"Skytel"="Skytel.exe" [2007-06-15 1826816]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-08-03 36352]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"Nikon Transfer Monitor"="c:\program files\Common Files\Nikon\Monitor\NkMonitor.exe" [2008-12-16 479232]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2010-04-07 2145000]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-06-15 141624]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-3360784991-3284122449-588302526-1001]
"EnableNotificationsRef"=dword:00000002

R3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\DRIVERS\s0016bus.sys [2008-05-16 89256]
R3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 15016]
R3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 120744]
R3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s0016mgmt.sys [2008-05-16 114216]
R3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\system32\DRIVERS\s0016nd5.sys [2008-05-16 25512]
R3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s0016obex.sys [2008-05-16 110632]
R3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\system32\DRIVERS\s0016unic.sys [2008-05-16 115752]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-04-07 133512]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [2010-04-07 810120]
S2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2010-04-07 41312]
S2 OMSI download service;Sony Ericsson OMSI download service;c:\program files\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
S3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\DRIVERS\seehcri.sys [2008-01-09 27632]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
FF - ProfilePath - c:\users\Rodiče\AppData\Roaming\Mozilla\Firefox\Profiles\3kz6bwws.default\
FF - prefs.js: browser.startup.homepage - seznam.cz
FF - plugin: c:\program files\plugins\np-mswmp.dll
FF - plugin: c:\program files\plugins\npdeployJava1.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-09-18 11:58
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\conime.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\RtHDVCpl.exe
c:\program files\Windows Media Player\wmpnscfg.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\System32\rundll32.exe
c:\program files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Celkový čas: 2010-09-18 12:05:56 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-09-18 10:05
ComboFix2.txt 2010-09-17 17:28

Před spuštěním: Volných bajtů: 59 484 323 840
Po spuštění: Volných bajtů: 59 445 755 904

- - End Of File - - 4E21EE8078FCCB9838C3B347804E01C9
Nahr nˇ probŘhlo ŁspŘçnŘ

____________________________

Wininit i Explorer už jsou na VirusTotalu čisté. Je tedy vše v pořádku ?
Jen ještě jedna věc, že po skončení těch 50ti fází ComboFixu a smazání souborů, vyléčení exploreru atd., se mi stejně jako včera extrémně dlouho vypínal počítač - včera obrazovka "odhlašování" trvala přes 15 minut, tak jsem počítač restartoval ručně. Stejně tak dnes po testu se tvářilo vypínání stejně beznadějně, tak jsem také raději provedl manuální restart. Doufám, že jsem tím nic nemohl pokazit. Program po restartu pokračoval vždy v práci.

EDIT:
Teď jsem dal restart a vše probíhalo vklidu. Rychlé vypnutí, rychlý start. Zdá se, že je tedy vše v pořádku. Jediný nedostatek vidím v tom, že se mi nedaří spustit panel snadného spuštění. Prostě na něj kliknu a nic se nestane a nezaškrtne se. Pro změnu panelu jazyků se absolutně nemůžu zbavit. Odškrtnu ho a opět po vteřině naskočí. Zajímavé. Ostatní funguje.

Re: ESET se nespouští + Trojan.Win32/Rustock + oopuhnpkpjv.s

Napsal: 18 zář 2010 11:36
od earl
:arrow: Start - spustit - napiste ComboFix /Uninstall - a klepnout na OK,

pokud to takto nepujde,tak přejmenovat ComboFix.exe na Uninstall.exe a spustit ho.

:arrow: Stahnete OTC

spustte a klepnete na CleanUp.

Obrázek

:arrow: Vycistete pc Ccleanerem.

Vzdy nejprve Analyzovat a pak Spustit Cleaner.2x po sobe.

Windows-odskrtnout historii a historii automatickeho vyplnovani formularu - prisel byste o historii navstivenych stranek a o ulozena hesla ve formularich

(je to sice z pohledu zabezpeceni spatne,ale aspon pak uzivatel nenadava,kam ze mu to zmizelo :D )

Aplikace-u prohlizecu internetu odskrtnout Historii internetu.

Registry-nechat vse zaskrtle,Hledej problemy,Opravit vybrane problemy

(nechat ho udelat zalohu-ta je ulozena v Dokumentech-DULEZITE).

Taktez 2x-3x po sobe.

Pak popiste stav pc.

Re: ESET se nespouští + Trojan.Win32/Rustock + oopuhnpkpjv.s

Napsal: 18 zář 2010 13:38
od Rainmaker
Ok vše provedeno. CCleaner něco našel jen při pravní analýze a hledání problémů - potom už nic.

PC se chová normálně. Od stisknutí startu naběhne Windows i se všemi aplikacemi za minutu, což je u Sempronu 2Ghz podle mne slušné. Jsem spokojen.

Jediný problém zůstává s tím panelem rychlého spuštění. Tady přikládám obrázek 2 oken nastavení. Ať se ho snažím zapnout přes kliknutí pravým myšítkem na hlavní panel a zvolení položky snadné spuštění v záložce panely nástrojů nebo přes vlastnosti panelu, jak je vidět na obrázku, tak se neukáže. U vlastností dokonce dám použít - je zaškrtlý ale není vidět, dám ok, stále není vidět a když dám opět vlastnosti, tak zase není zaškrtlý. Zkoušel jsem také v tomto odemklém panelu posouvat "přepážkami" z jedné strany na druhou, ale nikde není skrytý.
Není to nějaký dramatický problém, ale divím se, že to nejde.
http://i54.tinypic.com/fwu5u0.jpg

Re: ESET se nespouští + Trojan.Win32/Rustock + oopuhnpkpjv.s

Napsal: 18 zář 2010 17:37
od earl
S timto jsem se zatim nesetkal.

Pokud prijdete na to,co s tim,dejte vedet :)
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz