VIRY.CZ

Zdravim ,prosim o pomoc,zadne aplikace nejdou otevirat ,v nabidce chybi veta otevrit v...,taky mi zmizla ikona antiviru a proste nevim co stim.Prihlasuju se pod uctem administrator tam je to ok teda ty .exe soubory jdou.predem dekuji,zasilam log z combofix

ComboFix 11-03-01.03 - Administrator 06.03.2011 18:29:17.4.1 - x86 NETWORK
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.2038.1533 [GMT 1:00]
Spuštěný z: d:\users\Administrator\Desktop\ComboFix.exe
AV: avast! Antivirus *Enabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
FW: ZoneAlarm Firewall *Enabled* {D17DF357-CFF5-F001-D1C1-FCD21DFE3D5E}
SP: avast! Antivirus *Enabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((( Soubory vytvořené od 2011-02-06 do 2011-03-06 )))))))))))))))))))))))))))))))
.

2011-03-06 17:35 . 2011-03-06 17:35 -------- d-----w- d:\users\RUTH 33\AppData\Local\temp
2011-03-06 17:35 . 2011-03-06 17:35 -------- d-----w- d:\users\Public\AppData\Local\temp
2011-03-06 17:35 . 2011-03-06 17:35 -------- d-----w- d:\users\Default\AppData\Local\temp
2011-03-06 15:57 . 2011-03-06 15:57 -------- d-----w- d:\users\Administrator\AppData\Local\Apple
2011-03-06 15:55 . 2011-03-06 15:55 -------- d-----w- d:\users\Administrator\AppData\Roaming\Bytemobile
2011-03-05 23:07 . 2011-03-05 23:07 -------- d-----w- d:\users\RUTH 33\AppData\Local\{1EDC1FC1-83F9-450C-84B2-09B4E134C325}
2011-03-05 01:01 . 2011-02-11 06:54 5943120 ----a-w- d:\programdata\Microsoft\Windows Defender\Definition Updates\{F31034F6-1811-4910-B712-849CAC8A62D3}\mpengine.dll
2011-03-04 19:19 . 2011-03-04 19:19 -------- d-----w- d:\users\RUTH 33\AppData\Roaming\Bytemobile
2011-03-04 19:15 . 2009-06-30 16:46 9216 ----a-r- d:\windows\system32\drivers\massfilter.sys
2011-03-04 19:14 . 2011-03-04 19:14 8464 ----a-w- d:\windows\system32\SpOrder.dll
2011-03-04 19:14 . 2011-03-04 19:14 -------- d-----w- d:\users\RUTH 33\AppData\Local\{66D7E9E3-7414-4F31-9409-6A7CAE09597F}
2011-03-03 19:40 . 2010-07-01 02:32 67312 ----a-w- d:\windows\UnDeployV.exe
2011-03-02 18:34 . 2011-03-02 18:34 -------- d-----w- d:\program files\Common Files\Java
2011-03-02 18:33 . 2011-03-02 18:33 -------- d-----w- d:\programdata\McAfee
2011-03-02 13:47 . 2011-03-06 17:35 -------- d-----w- d:\users\Administrator\AppData\Local\temp
2011-03-01 23:41 . 2011-03-01 23:41 -------- d-----w- d:\program files\Cisco
2011-03-01 23:40 . 2010-07-13 03:15 636008 ----a-r- d:\windows\system32\drivers\rtl8192cu.sys
2011-03-01 23:40 . 2009-03-31 13:31 380928 ----a-w- d:\windows\RtlUI2.exe
2011-03-01 23:40 . 2008-07-01 11:31 614400 ----a-w- d:\windows\system32\Rtlihvs.dll
2011-03-01 23:40 . 2009-04-02 09:27 188416 ----a-w- d:\windows\system32\RTLExtUI.dll
2011-03-01 23:40 . 2011-03-01 23:40 -------- d-----w- d:\program files\ZyXEL
2011-02-27 20:32 . 2011-02-28 23:57 -------- d-----w- d:\users\RUTH 33\AppData\Roaming\TorrentBitch
2011-02-24 09:48 . 2011-02-24 09:48 -------- d-----w- d:\users\Administrator\AppData\Local\K-Meleon
2011-02-24 09:48 . 2011-02-24 09:48 -------- d-----w- d:\users\Administrator\AppData\Roaming\K-Meleon
2011-02-24 00:16 . 2010-09-14 06:07 276992 ----a-w- d:\windows\system32\wcncsvc.dll
2011-02-24 00:11 . 2011-02-24 00:11 -------- d-----w- d:\programdata\Nokia
2011-02-23 21:59 . 2011-02-24 16:20 -------- d-----w- d:\programdata\Norton
2011-02-23 21:59 . 2011-02-23 21:59 -------- d-----w- d:\programdata\Symantec
2011-02-23 19:19 . 2009-05-27 16:32 516608 ----a-w- d:\windows\system32\drivers\RTL8192su.sys
2011-02-23 19:19 . 2011-02-23 19:19 -------- d-----w- d:\users\RUTH 33\AppData\Roaming\InstallShield
2011-02-23 19:13 . 2011-01-07 07:31 442880 ----a-w- d:\windows\system32\XpsPrint.dll
2011-02-23 19:13 . 2011-01-07 07:31 288256 ----a-w- d:\windows\system32\XpsGdiConverter.dll
2011-02-22 21:20 . 2011-02-22 21:20 -------- d-----w- d:\program files\Mozilla Thunderbird
2011-02-22 14:12 . 2011-02-22 14:12 94208 ----a-w- d:\program files\Internet Explorer\cs\iediag.resources.dll
2011-02-22 14:11 . 2011-02-22 14:11 -------- d-----w- d:\program files\Feedback Tool
2011-02-22 13:39 . 2009-02-05 01:49 451072 ----a-w- d:\windows\system32\ISSRemoveSP.exe
2011-02-20 23:46 . 2011-02-20 23:46 -------- d-----w- d:\users\RUTH 33\AppData\Local\{A62882AF-F870-4892-8420-CCE6F7B10DAA}
2011-02-20 16:09 . 2011-02-20 16:09 -------- d-----w- d:\program files\MSXML 4.0
2011-02-20 15:52 . 2011-02-20 15:52 -------- d-----w- d:\users\RUTH 33\AppData\Local\K-Meleon
2011-02-20 15:51 . 2011-02-20 15:57 -------- d-----w- d:\users\RUTH 33\AppData\Roaming\K-Meleon
2011-02-20 15:49 . 2011-02-20 15:49 -------- d-----w- d:\program files\K-Meleon
2011-02-18 23:02 . 2011-02-18 23:04 -------- d-----w- d:\users\RUTH 33\AppData\Local\Nokia
2011-02-18 18:17 . 2011-02-18 18:17 -------- d-----w- d:\users\RUTH 33\AppData\Roaming\Apple Computer
2011-02-18 17:58 . 2011-02-18 17:58 -------- d-----w- d:\users\RUTH 33\AppData\Local\Apple Computer
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin.dll
2011-02-18 17:49 . 2011-02-18 17:51 -------- d-----w- d:\program files\QuickTime
2011-02-18 17:49 . 2011-02-18 17:49 -------- d-----w- d:\programdata\Apple Computer
2011-02-18 17:48 . 2011-02-18 17:48 -------- d-----w- d:\program files\Common Files\Apple
2011-02-18 17:48 . 2011-02-18 17:48 -------- d-----w- d:\users\RUTH 33\AppData\Local\Apple
2011-02-18 17:48 . 2011-02-18 17:48 -------- d-----w- d:\program files\Apple Software Update
2011-02-18 17:48 . 2011-02-18 17:48 -------- d-----w- d:\programdata\Apple
2011-02-17 21:03 . 2011-03-03 23:26 -------- d-----w- d:\users\Administrator\AppData\Local\ElevatedDiagnostics
2011-02-17 19:27 . 2011-02-18 16:57 -------- d-----w- d:\programdata\TP-LINK Driver
2011-02-17 19:27 . 2010-07-30 08:53 776480 ----a-w- d:\windows\system32\RAIHV.dll
2011-02-17 19:27 . 2010-07-30 08:53 1590560 ----a-w- d:\windows\system32\RaCertMgr.dll
2011-02-17 19:27 . 2010-07-30 08:53 102688 ----a-w- d:\windows\system32\RAEXTUI.dll
2011-02-17 17:24 . 2011-02-17 17:24 -------- d-----w- d:\program files\FreshDevices
2011-02-16 18:50 . 2011-02-16 18:51 -------- d-----w- d:\users\RUTH 33\AppData\Roaming\Unreal Commander
2011-02-16 18:45 . 2011-02-16 19:54 -------- d-----w- d:\program files\Unreal Commander
2011-02-15 13:20 . 2011-02-17 20:57 -------- d-----w- d:\users\Administrator\AppData\Roaming\Spyware Terminator
2011-02-13 21:53 . 2011-02-17 21:24 -------- d-----w- d:\users\Administrator\AppData\Roaming\BitTorrent
2011-02-13 19:55 . 2011-02-13 19:55 -------- d-----w- d:\users\Administrator\AppData\Roaming\vlc
2011-02-08 19:03 . 2010-12-18 05:29 541184 ----a-w- d:\windows\system32\kerberos.dll
2011-02-08 19:03 . 2010-10-27 04:40 1289536 ----a-w- d:\windows\system32\ntdll.dll
2011-02-08 19:03 . 2010-10-27 04:43 3901824 ----a-w- d:\windows\system32\ntoskrnl.exe
2011-02-08 19:03 . 2010-10-27 04:43 3957120 ----a-w- d:\windows\system32\ntkrnlpa.exe
2011-02-08 19:03 . 2011-01-07 07:27 34304 ----a-w- d:\windows\system32\atmlib.dll
2011-02-08 19:03 . 2011-01-07 05:33 294400 ----a-w- d:\windows\system32\atmfd.dll
2011-02-08 19:03 . 2010-12-21 05:38 204288 ----a-w- d:\windows\system32\upnp.dll
2011-02-08 19:03 . 2010-12-21 05:36 1389568 ----a-w- d:\windows\system32\msxml6.dll
2011-02-08 19:03 . 2010-12-21 05:36 1236992 ----a-w- d:\windows\system32\msxml3.dll
2011-02-08 19:02 . 2010-12-21 05:38 51200 ----a-w- d:\windows\system32\wscapi.dll
2011-02-08 19:02 . 2010-12-21 05:38 350720 ----a-w- d:\windows\system32\winhttp.dll
2011-02-08 19:02 . 2010-12-21 05:38 204800 ----a-w- d:\windows\system32\WebClnt.dll
2011-02-08 19:02 . 2010-12-21 05:38 14336 ----a-w- d:\windows\system32\slwga.dll
2011-02-08 19:02 . 2010-12-21 05:34 80384 ----a-w- d:\windows\system32\davclnt.dll
2011-02-08 19:02 . 2010-12-21 05:38 73728 ----a-w- d:\windows\system32\wscsvc.dll
2011-02-08 19:02 . 2011-01-05 03:37 2329088 ----a-w- d:\windows\system32\win32k.sys
2011-02-08 19:02 . 2011-02-03 05:45 219008 ----a-w- d:\windows\system32\drivers\dxgmms1.sys
2011-02-06 02:18 . 2011-02-21 22:14 -------- d-----w- d:\program files\The KMPlayer
2011-02-06 02:11 . 2011-02-07 21:27 -------- d-----w- d:\program files\TrueCrypt
2011-02-06 00:44 . 2011-02-06 00:44 -------- d-----w- d:\users\RUTH 33\AppData\Local\{3873F87E-FE1A-4884-99FA-F1AF380967EF}
2011-02-06 00:44 . 2011-02-06 00:44 -------- d-----w- d:\users\RUTH 33\AppData\Local\{9116057A-5DDB-4FED-8746-D71BC37D7E89}
2011-02-05 22:22 . 2011-02-05 22:23 -------- d-----w- d:\program files\Google
2011-02-05 22:22 . 2011-02-05 22:22 -------- d-----w- d:\users\RUTH 33\AppData\Local\Google
2011-02-05 22:02 . 2011-02-05 22:02 -------- d-----w- d:\users\RUTH 33\AppData\Local\Ashampoo Translation Studio
2011-02-05 21:42 . 2011-02-05 22:20 -------- d-----w- d:\program files\Ashampoo
2011-02-05 20:32 . 2011-02-05 20:32 -------- d-----w- d:\users\RUTH 33\AppData\Local\Mozilla
2011-02-05 20:26 . 2011-02-17 00:49 -------- d-----w- d:\program files\Mozilla Firefox 4.0 Beta 10
2011-02-05 18:57 . 2011-02-05 18:57 2560 ----a-w- d:\windows\_MSRSTRT.EXE
2011-02-05 18:45 . 2011-02-05 18:45 -------- d-----w- d:\users\Administrator\AppData\Roaming\OpenOffice.org
2011-02-05 16:04 . 2011-02-17 21:24 -------- d-----w- d:\users\Administrator\AppData\Local\MediaMonkey
2011-02-05 15:53 . 2011-02-17 21:24 -------- d-----w- d:\users\Administrator\AppData\Roaming\Media Player Classic
2011-02-05 15:51 . 2011-02-05 15:51 -------- d-----w- d:\users\Administrator\AppData\Roaming\CheckPoint
2011-02-05 15:21 . 2010-04-09 07:24 240008 ----a-w- d:\windows\system32\drivers\netio.sys
2011-02-05 15:21 . 2010-11-16 16:45 69120 ----a-w- d:\windows\system32\zlcomm.dll
2011-02-05 15:21 . 2010-11-16 16:45 104448 ----a-w- d:\windows\system32\zlcommdb.dll
2011-02-05 14:51 . 2011-02-05 14:51 -------- d-----w- d:\users\RUTH 33\AppData\Roaming\CheckPoint
2011-02-05 14:51 . 2011-02-05 14:51 -------- d-----w- d:\program files\CheckPoint
2011-02-05 14:50 . 2010-11-16 16:45 1238528 ----a-w- d:\windows\system32\zpeng25.dll
2011-02-05 14:50 . 2011-02-05 15:24 -------- d-----w- d:\windows\system32\ZoneLabs
2011-02-05 14:50 . 2010-05-15 15:30 461400 ----a-w- d:\windows\system32\drivers\vsdatant.sys
2011-02-05 14:50 . 2011-02-05 14:50 -------- d-----w- d:\program files\Zone Labs
2011-02-05 14:50 . 2011-02-05 14:50 -------- d-----w- d:\programdata\CheckPoint
2011-02-05 14:50 . 2011-03-06 17:30 -------- d-----w- d:\windows\Internet Logs
2011-02-05 14:17 . 2011-02-05 14:17 -------- d-----w- d:\users\RUTH 33\AppData\Roaming\SeriousBit
2011-02-05 14:17 . 2011-02-05 14:17 -------- d-----w- d:\program files\EnhanceMySe7en

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-05 19:56 . 2010-12-27 21:54 48648 ----a-w- d:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2011-03-04 17:45 . 2011-01-11 16:33 48648 ----a-w- d:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2011-03-04 17:45 . 2011-01-11 16:33 484160 ----a-w- d:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2011-02-22 14:02 . 2011-02-22 14:02 203776 ----a-w- d:\windows\system32\webcheck.dll
2011-02-09 17:12 . 2010-12-27 21:54 484160 ----a-w- d:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-02-02 20:40 . 2011-01-19 23:35 472808 ----a-w- d:\windows\system32\deployJava1.dll
2011-02-02 16:11 . 2010-12-15 18:09 222080 ------w- d:\windows\system32\MpSigStub.exe
2011-01-23 22:41 . 2011-01-23 22:42 29480 ----a-w- d:\windows\system32\msxml3a.dll
2011-01-23 22:41 . 2005-11-11 19:40 505128 ----a-w- d:\windows\system32\msvcp71.dll
2011-01-23 22:41 . 2005-11-11 19:40 353576 ----a-w- d:\windows\system32\msvcr71.dll
2011-01-23 21:24 . 2011-01-23 21:23 124 ----a-w- d:\programdata\xlink.sys
2011-01-22 22:23 . 2011-01-22 22:23 58126 ----a-w- d:\users\RUTH 33\AppData\Roaming\RUTH 333SQLite3.dll
2011-01-20 18:38 . 2011-01-20 18:37 319456 ----a-w- d:\windows\DIFxAPI.dll
2011-01-13 08:47 . 2011-01-23 18:02 38848 ----a-w- d:\windows\avastSS.scr
2011-01-13 08:47 . 2011-01-23 18:02 188216 ----a-w- d:\windows\system32\aswBoot.exe
2011-01-13 08:41 . 2011-01-23 18:02 294608 ----a-w- d:\windows\system32\drivers\aswSP.sys
2011-01-13 08:40 . 2011-01-23 18:02 47440 ----a-w- d:\windows\system32\drivers\aswTdi.sys
2011-01-13 08:37 . 2011-01-23 18:02 23632 ----a-w- d:\windows\system32\drivers\aswRdr.sys
2011-01-13 08:37 . 2011-01-23 18:02 51280 ----a-w- d:\windows\system32\drivers\aswMonFlt.sys
2011-01-13 08:37 . 2011-01-23 18:02 17744 ----a-w- d:\windows\system32\drivers\aswFsBlk.sys
2011-01-13 08:00 . 2010-12-15 17:31 80896 ----a-w- d:\windows\system32\ff_vfw.dll
2011-01-03 09:59 . 2009-03-26 10:14 21000 ----a-w- d:\windows\system32\drivers\DKbFltr.sys
2011-01-03 09:58 . 2009-09-09 13:41 348680 ----a-w- d:\windows\UNINST32.EXE
2010-12-15 18:42 . 2010-12-15 18:42 315392 ----a-w- d:\windows\HideWin.exe
2010-12-15 17:36 . 2010-12-15 17:36 21035 ----a-w- d:\windows\system32\drivers\AegisP.sys
2010-12-07 18:40 . 2010-12-15 17:31 183808 ----a-w- d:\windows\system32\xvidvfw.dll
2010-12-07 18:22 . 2010-12-15 17:31 810496 ----a-w- d:\windows\system32\xvidcore.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"="d:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2010-12-21 1483264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="d:\windows\system32\igfxtray.exe" [2009-09-23 141848]
"HotKeysCmds"="d:\windows\system32\hkcmd.exe" [2009-09-23 173592]
"Persistence"="d:\windows\system32\igfxpers.exe" [2009-09-23 150552]
"RtHDVCpl"="RtHDVCpl.exe" [2008-01-07 4853760]
"ZoneAlarm Client"="d:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2010-11-16 1043968]
"SunJavaUpdateSched"="d:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"Adobe Reader Speed Launcher"="d:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="d:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"="grpconv -o" [X]

d:\users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - d:\program files\OpenOffice.org 3\program\quickstart.exe [2010-6-7 1195520]

d:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Empowering Technology Launcher.lnk - d:\acer\Empowering Technology\eAPLauncher.exe [2010-12-19 535336]
Wireless N USB Utility.lnk - d:\program files\ZyXEL\NWD2205\NWD2205.exe [2011-3-2 1867776]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
d:\program files\Common Files\Nokia\MPlatform\NokiaMServer [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-20 22:07 932288 ----a-r- d:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2011-01-31 08:44 35760 ----a-w- d:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDRegion]
2010-03-13 11:58 75048 ------w- d:\program files\CyberLink\Shared files\brs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivX Download Manager]
2011-02-08 00:17 63360 ----a-w- d:\program files\DivX\DivX Plus Web Player\DDMService.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2011-01-10 23:25 1230704 ----a-w- d:\program files\DivX\DivX Update\DivXUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2010-12-21 10:53 1483264 ----a-w- d:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 16:38 421888 ----a-w- d:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl10]
2010-02-02 23:08 87336 ------w- d:\program files\CyberLink\PowerDVD10\PDVD10Serv.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2011-01-03 14:44 15028104 ----a-r- d:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snpstd3]
2005-09-05 21:55 339968 ----a-w- d:\windows\vsnpstd3.exe

R1 aswSP;aswSP; [x]
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2011/01/23 23:45];d:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl [2010-03-13 11:58 87536]
R2 aswFsBlk;aswFsBlk; [x]
R2 aswMonFlt;aswMonFlt;d:\windows\system32\drivers\aswMonFlt.sys [2011-01-13 51280]
R2 Belkin Wifi Service;Belkin Wifi Service;d:\program files\Belkin\F5D8053\v6\WifiSvc.exe [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;d:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 eamonm;eamonm;d:\windows\system32\DRIVERS\eamonm.sys [x]
R2 gupdate;Google Update Service (gupdate);d:\program files\Google\Update\GoogleUpdate.exe [2011-02-05 136176]
R2 Realtek11nCU;Realtek11nCU;d:\program files\ZyXEL\NWD2205\RtlService.exe [2010-04-16 36864]
R3 ewusbnet;HUAWEI USB-NDIS miniport;d:\windows\system32\DRIVERS\ewusbnet.sys [2009-07-23 112128]
R3 hwusbfake;Huawei DataCard USB Fake;d:\windows\system32\DRIVERS\ewusbfake.sys [2009-07-23 100736]
R3 netr28u;TP-LINK 150Mbps Wireless Lite N Adapter;d:\windows\system32\DRIVERS\netr28u.sys [x]
R3 netr73;RT73 USB Extensible Wireless LAN Card Driver;d:\windows\system32\DRIVERS\netr73.sys [x]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;d:\windows\system32\drivers\nmwcdnsu.sys [2010-07-26 137600]
R3 nmwcdnsuc;Nokia USB Flashing Generic;d:\windows\system32\drivers\nmwcdnsuc.sys [2010-07-26 8576]
R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;d:\windows\system32\DRIVERS\RTL8192su.sys [2009-05-27 516608]
R3 SrvHsfHDA;SrvHsfHDA;d:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
R3 SrvHsfV92;SrvHsfV92;d:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
R3 SrvHsfWinac;SrvHsfWinac;d:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;d:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
R3 WatAdminSvc;Služba Technologie aktivace Windows;d:\windows\system32\Wat\WatAdminSvc.exe [2010-12-18 1343400]
R4 VMCService;Vodafone Mobile Connect Service;d:\program files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [2009-09-18 9216]
R4 wlcrasvc;Windows Live Mesh remote connections service;d:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S1 vwififlt;Virtual WiFi Filter Driver;d:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S3 RTL8192cu;Wireless N USB Utility;d:\windows\system32\DRIVERS\RTL8192cu.sys [2010-07-13 636008]


--- Ostatní služby/ovladače v paměti ---

*Deregistered* - BMLoad
.
Obsah adresáře 'Naplánované úlohy'

2011-03-06 d:\windows\Tasks\Free File Viewer Update Checker.job
- d:\program files\FreeFileViewer\FFVCheckForUpdates.exe [2011-02-01 15:35]

2011-03-06 d:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- d:\program files\Google\Update\GoogleUpdate.exe [2011-02-05 22:22]

2011-03-06 d:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- d:\program files\Google\Update\GoogleUpdate.exe [2011-02-05 22:22]

2011-03-06 d:\windows\Tasks\RtlVistaStart.job
- d:\program files\ZyXEL\NWD2205\NWD2205.exe [2011-03-01 16:32]

2011-03-06 d:\windows\Tasks\User_Feed_Synchronization-{DA676402-995C-44AF-B0ED-98AB30CDC067}.job
- d:\windows\system32\msfeedssync.exe [2011-02-22 14:02]
.
.
------- Doplňkový sken -------
.
IE: &Blokovat obrázek (ABP) - d:\program files\Adblock Pro\blockimg.html
IE: Stáhnout odkaz s použitím BitCometu - d:\program files\BitComet\BitComet.exe/AddLink.htm
IE: Stáhnout všechny odkazy s použitím BitCometu - d:\program files\BitComet\BitComet.exe/AddAllLink.htm
IE: ????3?? - d:\users\Administrator\AppData\Roaming\FlashGetBHO\GetUrl.htm
IE: ????3?????? - d:\users\Administrator\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
IE: {{54C2BD1F-F268-4E95-A03A-C67AAD326E6F} - d:\program files\FreshDevices\FreshDownload\fd.exe
LSP: bmnet.dll
Name-Space Handler: ftp\FD - {3BF4771A-18F5-4EAB-80B7-AC254D3C7503} - d:\progra~1\FRESHD~1\FRESHD~1\fdcatch.dll
Name-Space Handler: http\FD - {3BF4771A-18F5-4EAB-80B7-AC254D3C7503} - d:\progra~1\FRESHD~1\FRESHD~1\fdcatch.dll
FF - ProfilePath - d:\users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://www.searchqu.com/web?src=ffb&systemid=403&q=
FF - prefs.js: network.proxy.type - 0
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - d:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - d:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Element Hiding Helper for Adblock Plus: elemhidehelper@adblockplus.org - %profile%\extensions\elemhidehelper@adblockplus.org
FF - Ext: Nuvola: NuvolaFF@paenglab.ch - %profile%\extensions\NuvolaFF@paenglab.ch
FF - Ext: Feedback: testpilot@labs.mozilla.com - %profile%\extensions\testpilot@labs.mozilla.com
FF - Ext: ImTranslator: {9AA46F4F-4DC7-4c06-97AF-5035170634FE} - %profile%\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: Tab Mix Plus: {dc572301-7619-498c-a57d-39143191b318} - %profile%\extensions\{dc572301-7619-498c-a57d-39143191b318}
FF - Ext: FoxTab: {ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a} - %profile%\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}
FF - Ext: Nuri: {beab8ae9-eb2d-4ded-3b29-d35f6b82bfa5} - %profile%\extensions\{beab8ae9-eb2d-4ded-3b29-d35f6b82bfa5}
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKLM-RunOnce-<NO NAME> - (no file)
AddRemove-FolderLock6 - c:\program files\Folder Lock\Uninstall.exe



[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}]
"ImagePath"="\??\d:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{EBFCD017-BCAD-42C3-9ED5-89DBDFC59171}"=hex:51,66,7a,6c,4c,1d,38,12,79,d3,ef,
ef,9f,f2,ad,07,e1,c3,ca,9b,da,9b,d5,65
"{425E30F0-CCC6-4E24-BBEB-BCBD31720B37}"=hex:51,66,7a,6c,4c,1d,38,12,9e,33,4d,
46,f4,82,4a,0b,c4,fd,ff,fd,34,2c,4f,23
"{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc,
1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7
"{326E768D-4182-46FD-9C16-1449A49795F4}"=hex:51,66,7a,6c,4c,1d,38,12,e3,75,7d,
36,b0,0f,93,03,e3,00,57,09,a1,c9,d1,e0
"{593DDEC6-7468-4CDD-90E1-42DADAA222E9}"=hex:51,66,7a,6c,4c,1d,38,12,a8,dd,2e,
5d,5a,3a,b3,09,ef,f7,01,9a,df,fc,66,fd
"{389943B0-C3A2-4E69-82CB-8596A84CB3DC}"=hex:51,66,7a,6c,4c,1d,38,12,de,40,8a,
3c,90,8d,07,0b,fd,dd,c6,d6,ad,12,f7,c8
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{9FDDE16B-836F-4806-AB1F-1455CBEFF289}"=hex:51,66,7a,6c,4c,1d,38,12,05,e2,ce,
9b,5d,cd,68,0d,d4,09,57,15,ce,b1,b6,9d
"{D6451DB9-67E1-4CA3-BFBA-4D77FFACE17F}"=hex:51,66,7a,6c,4c,1d,38,12,d7,1e,56,
d2,d3,29,cd,09,c0,ac,0e,37,fa,f2,a5,6b
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
"{FF6C3CF0-4B15-11D1-ABED-709549C10000}"=hex:51,66,7a,6c,4c,1d,38,12,9e,3f,7f,
fb,27,05,bf,54,d4,fb,33,d5,4c,9f,44,14

[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,86,dc,a2,16,ef,24,26,4d,a9,35,4f,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,86,dc,a2,16,ef,24,26,4d,a9,35,4f,\

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (Administrator)
"{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,3b,1b,0c,17,cf,
06,99,bf,ea,06,bd,9d,b8,17,8d,6d,f8,d6
"{326E768D-4182-46FD-9C16-1449A49795F4}"=hex:51,66,7a,6c,4c,1d,3b,1b,9d,69,7e,
2c,b6,16,94,02,84,1d,56,09,a5,d4,d0,e1
"{593DDEC6-7468-4CDD-90E1-42DADAA222E9}"=hex:51,66,7a,6c,4c,1d,3b,1b,d6,c1,2d,
47,5c,23,b4,08,88,ea,00,9a,db,e1,67,fc
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,3b,1b,74,cb,20,
8e,36,1b,d6,0e,96,c7,13,24,77,4b,26,d3
"{9FDDE16B-836F-4806-AB1F-1455CBEFF289}"=hex:51,66,7a,6c,4c,1d,3b,1b,7b,fe,cd,
81,5b,d4,6f,0c,b3,14,56,15,ca,ac,b7,9c
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,3b,1b,54,1f,d8,
c5,71,f3,32,07,a4,7f,de,65,c0,86,cd,bc
"{929801A8-4AEF-4D12-BE31-D85BF666452B}"=hex:51,66,7a,6c,4c,1d,3b,1b,b8,1e,88,
8c,db,1d,7b,09,a6,3a,9a,1b,f7,25,00,3e
"{F385C231-605B-4D8F-ACA9-DBFF765BBE17}"=hex:51,66,7a,6c,4c,1d,3b,1b,21,dd,95,
ed,6f,37,e6,09,b4,a2,99,bf,77,18,fb,02
"{ED0E8CA5-42FB-4B18-997B-769E0408E79D}"=hex:51,66,7a,6c,4c,1d,3b,1b,b5,93,1e,
f3,cf,15,71,0f,81,70,34,de,05,4b,a2,88
"{206E52E0-D52E-11D4-AD54-0000E86C26F6}"=hex:51,66,7a,6c,4c,1d,3b,1b,f0,4d,7e,
3e,1a,82,bd,55,b5,5f,42,40,e9,2f,63,e3

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
@Denied: (2) (Administrator)
"Timestamp"=hex:cf,b7,68,cf,1f,dc,cb,01

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Internet Explorer\MenuExt\O(uë_fŹ3*N}Ź]
@="d:\\Users\\Administrator\\AppData\\Roaming\\FlashGetBHO\\GetUrl.htm"
"contexts"=dword:00000022

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Internet Explorer\MenuExt\O(uë_fŹ3*N}ŹhQčţ”Ąc]
@="d:\\Users\\Administrator\\AppData\\Roaming\\FlashGetBHO\\GetAllUrl.htm"
"contexts"=dword:000000f3

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,2d,e7,7e,8e,35,64,29,4f,97,eb,34,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,2d,e7,7e,8e,35,64,29,4f,97,eb,34,\

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3g2\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.3G2"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.3GP"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp2\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.3G2"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gpp\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.3GP"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AAC\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ADTS"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ac3\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ac3"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ADT\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ADTS"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ADTS\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ADTS"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aif\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.AIFF"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.AIFF"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aiff\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.AIFF"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.alac\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.alac"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.amr"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ape\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ape"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apl\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.apl"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asf\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ASF"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asx\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ASX"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.au\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.AU"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.AVI"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cda\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.CDA"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.divx\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.divx"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dts\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.dts"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flac\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.flac"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flv\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.flv"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdmov\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.hdmov"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1v\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2t\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.M2TS"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2ts\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.M2TS"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2v\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.m3u"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4a\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.M4A"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4v\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MP4"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MIDI"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.midi\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MIDI"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mka\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.mka"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mkv\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.mkv"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mod\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MOV"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MP3"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2v\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MP3"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MP4"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4v\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MP4"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpa\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpe\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpg\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpls\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.mpls"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv2\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv4\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.mpv4"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mts\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.M2TS"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.oga\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.oga"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogg\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ogg"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ogm"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogv\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ogv"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ra\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ra"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ram\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.ram"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.rm"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmi\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MIDI"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmvb\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.rmvb"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.snd\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.AU"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tps\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.tps"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ts\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.TTS"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tta\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.tta"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tts\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.TTS"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wav\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WAV"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wax\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WAX"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.webm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.webm"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ASF"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wma\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WMA"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmd\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WMD"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wms\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WMS"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmv\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WMV"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmx\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ASX"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmz\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WMZ"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wpl\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WPL"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wv\UserChoice]
@Denied: (2) (Administrator)
"Progid"="KLCP.WMP.wv"

[HKEY_USERS\S-1-5-21-1273469400-1009861213-2214121201-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wvx\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WVX"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0009\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0010\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'lsass.exe'(456)
d:\windows\system32\bmnet.dll
.
Celkový čas: 2011-03-06 18:37:25
ComboFix-quarantined-files.txt 2011-03-06 17:37
ComboFix2.txt 2011-03-02 13:47
ComboFix3.txt 2011-02-17 08:19
ComboFix4.txt 2011-01-25 20:03

Před spuštěním: Volných bajtů: 13 443 407 872
Po spuštění: Volných bajtů: 13 430 296 576

- - End Of File - - 88832914B9DD1EA9ED0526E7BEFED522

Zkuste restartovat do nouz. režimu. Tam se přihlašte pod svým účtem´a zkuste spustit ComboFix. Pokud by ani tam nešel spustit, přejmenujte třeba na cokoli.com. Zde není nic nebezpečného vidět, ba ani to, že by CF něco mazal.

No ja se sice do nouzoveho rezimu dostanu,ale mam ten problem s exe soubory .vetsina aplikaci nejde spustit a porad mi to pise chybi rundll32 apod.a combofix ani po tom prejmenovani spustit nesel.Tak jedine asi z toho ucet Administratora tam je vse funkcni.Taky mi vcera MBAM NASEL 3 viry. dejte vedet co delat dal .dekujii

Problém je patrně v onom profilu smaotném. Pokud spustíte CF pod adminem, nemusí být zobrazeno vše, co se spouští pod profilem, který není v pořádku. Navrhuji tohle: Vytvořte nový profil a do něj zkopírujte dokumenty a vše, co máte uloženo v tom profilu, který dělá problémy. Až se přesvědčíte, že nový profil korektně funguje, ten starý odstraňte.

Tak jsem to nejak ...no snad dobre zkopirovala a tady je combolog.

ComboFix 11-03-12.01 - Martinka 14.03.2011 0:10.5.1 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.2038.1150 [GMT 1:00]
Spuštěný z: d:\users\Martinka\Desktop\123.exe.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-02-13 do 2011-03-13 )))))))))))))))))))))))))))))))
.
.
2011-03-13 23:19 . 2011-03-13 23:19 -------- d-----w- d:\users\Public\AppData\Local\temp
2011-03-13 23:19 . 2011-03-13 23:19 -------- d-----w- d:\users\Default\AppData\Local\temp
2011-03-13 23:19 . 2011-03-13 23:19 -------- d-----w- d:\users\Administrator\AppData\Local\temp
2011-03-13 23:01 . 2011-03-13 23:02 301568 ----a-w- d:\windows\system32\cmd.execf
2011-03-13 20:11 . 2011-03-13 20:11 -------- d-----w- d:\program files\Ask.com
2011-03-13 20:10 . 2011-03-13 20:16 -------- d-----w- d:\program files\Driver Robot
2011-03-13 15:56 . 2011-03-13 15:57 -------- d-----w- d:\users\Martinka
2011-03-13 15:45 . 2011-03-13 15:46 -------- dc----w- d:\users\Administrator\AppData\Local\MigWiz
2011-03-12 16:37 . 2011-03-12 16:38 -------- d-----w- d:\users\Administrator\AppData\Local\Adobe
2011-03-12 15:44 . 2011-03-12 15:44 -------- d-----w- d:\windows\Internet Logs
2011-03-12 15:25 . 2010-07-13 03:15 636008 ----a-r- d:\windows\system32\drivers\rtl8192cu.sys
2011-03-12 15:25 . 2009-03-31 13:31 380928 ----a-w- d:\windows\RtlUI2.exe
2011-03-12 15:25 . 2008-07-01 11:31 614400 ----a-w- d:\windows\system32\Rtlihvs.dll
2011-03-12 15:25 . 2009-04-02 09:27 188416 ----a-w- d:\windows\system32\RTLExtUI.dll
2011-03-11 20:33 . 2011-02-23 14:56 371544 ----a-w- d:\windows\system32\drivers\aswSnx.sys
2011-03-11 16:43 . 2011-02-11 06:54 5943120 ----a-w- d:\programdata\Microsoft\Windows Defender\Definition Updates\{84020CA9-0C58-44AC-8E43-581EAA4DEA2A}\mpengine.dll
2011-03-10 22:57 . 2011-02-19 05:56 805376 ----a-w- d:\windows\system32\FntCache.dll
2011-03-10 22:57 . 2011-02-19 05:56 1076736 ----a-w- d:\windows\system32\DWrite.dll
2011-03-10 22:57 . 2011-02-19 05:56 739840 ----a-w- d:\windows\system32\d2d1.dll
2011-03-10 22:57 . 2010-12-23 05:28 642048 ----a-w- d:\windows\system32\CPFilters.dll
2011-03-10 22:57 . 2010-12-23 05:28 850432 ----a-w- d:\windows\system32\sbe.dll
2011-03-10 22:57 . 2010-12-23 05:28 534528 ----a-w- d:\windows\system32\EncDec.dll
2011-03-10 22:57 . 2010-12-23 05:24 199680 ----a-w- d:\windows\system32\mpg2splt.ax
2011-03-10 22:57 . 2010-12-18 05:30 2690560 ----a-w- d:\windows\system32\mstscax.dll
2011-03-10 22:57 . 2010-12-18 05:26 1034240 ----a-w- d:\windows\system32\mstsc.exe
2011-03-10 22:48 . 2011-03-10 22:48 -------- d-----w- d:\program files\X-Setup Pro
2011-03-10 22:48 . 2011-03-10 22:48 -------- d-----w- d:\users\Administrator\AppData\Roaming\X-Setup Pro
2011-03-10 22:48 . 2011-03-10 22:48 -------- d-----w- d:\programdata\X-Setup Pro
2011-03-10 22:46 . 2011-03-10 22:46 -------- d-----w- d:\users\Administrator\AppData\Local\Google
2011-03-10 22:12 . 2011-03-10 22:12 -------- d-----w- d:\users\Administrator\AppData\Roaming\Malwarebytes
2011-03-10 22:12 . 2010-12-20 17:09 38224 ----a-w- d:\windows\system32\drivers\mbamswissarmy.sys
2011-03-10 22:12 . 2011-03-10 22:12 -------- d-----w- d:\programdata\Malwarebytes
2011-03-10 22:12 . 2010-12-20 17:08 20952 ----a-w- d:\windows\system32\drivers\mbam.sys
2011-03-10 22:12 . 2011-03-10 22:12 -------- d-----w- d:\program files\Malwarebytes' Anti-Malware
2011-03-08 23:18 . 2011-03-08 23:18 98304 ----a-w- d:\windows\system32\CmdLineExt.dll
2011-03-08 22:57 . 2011-03-08 22:57 -------- d-----w- d:\program files\Ubisoft
2011-03-06 21:25 . 2011-03-06 21:25 -------- d-----w- d:\users\Administrator\AppData\Local\Nokia
2011-03-06 21:09 . 2011-03-06 21:09 -------- d-----w- d:\programdata\GroupPolicy
2011-03-06 19:52 . 2011-03-06 19:52 -------- d-----w- d:\program files\Yamicsoft
2011-03-06 18:15 . 2011-03-06 18:15 -------- d-----w- d:\users\Administrator\AppData\Roaming\FLEXnet
2011-03-06 18:05 . 2011-03-06 18:05 -------- d-----w- d:\users\Administrator\AppData\Roaming\Vodafone
2011-03-06 15:57 . 2011-03-06 15:57 -------- d-----w- d:\users\Administrator\AppData\Local\Apple
2011-03-06 15:55 . 2011-03-06 15:55 -------- d-----w- d:\users\Administrator\AppData\Roaming\Bytemobile
2011-03-04 19:15 . 2009-06-30 16:46 9216 ----a-r- d:\windows\system32\drivers\massfilter.sys
2011-03-04 19:14 . 2011-03-04 19:14 8464 ----a-w- d:\windows\system32\SpOrder.dll
2011-03-03 19:40 . 2010-07-01 02:32 67312 ----a-w- d:\windows\UnDeployV.exe
2011-03-02 18:34 . 2011-03-02 18:34 -------- d-----w- d:\program files\Common Files\Java
2011-03-02 18:33 . 2011-03-02 18:33 -------- d-----w- d:\programdata\McAfee
2011-03-01 23:40 . 2011-03-01 23:40 -------- d-----w- d:\program files\ZyXEL
2011-02-24 09:48 . 2011-02-24 09:48 -------- d-----w- d:\users\Administrator\AppData\Local\K-Meleon
2011-02-24 09:48 . 2011-03-10 21:43 -------- d-----w- d:\users\Administrator\AppData\Roaming\K-Meleon
2011-02-24 00:16 . 2010-09-14 06:07 276992 ----a-w- d:\windows\system32\wcncsvc.dll
2011-02-24 00:11 . 2011-02-24 00:11 -------- d-----w- d:\programdata\Nokia
2011-02-23 21:59 . 2011-02-24 16:20 -------- d-----w- d:\programdata\Norton
2011-02-23 21:59 . 2011-02-23 21:59 -------- d-----w- d:\programdata\Symantec
2011-02-23 19:19 . 2009-05-27 16:32 516608 ----a-w- d:\windows\system32\drivers\RTL8192su.sys
2011-02-23 19:13 . 2011-01-07 07:31 442880 ----a-w- d:\windows\system32\XpsPrint.dll
2011-02-23 19:13 . 2011-01-07 07:31 288256 ----a-w- d:\windows\system32\XpsGdiConverter.dll
2011-02-22 21:20 . 2011-02-22 21:20 -------- d-----w- d:\program files\Mozilla Thunderbird
2011-02-22 14:12 . 2011-02-22 14:12 94208 ----a-w- d:\program files\Internet Explorer\cs\iediag.resources.dll
2011-02-22 14:11 . 2011-02-22 14:11 -------- d-----w- d:\program files\Feedback Tool
2011-02-22 13:39 . 2009-02-05 01:49 451072 ----a-w- d:\windows\system32\ISSRemoveSP.exe
2011-02-20 16:09 . 2011-02-20 16:09 -------- d-----w- d:\program files\MSXML 4.0
2011-02-20 15:49 . 2011-02-20 15:49 -------- d-----w- d:\program files\K-Meleon
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin.dll
2011-02-18 17:49 . 2011-02-18 17:51 -------- d-----w- d:\program files\QuickTime
2011-02-18 17:49 . 2011-02-18 17:49 -------- d-----w- d:\programdata\Apple Computer
2011-02-18 17:48 . 2011-02-18 17:48 -------- d-----w- d:\program files\Common Files\Apple
2011-02-18 17:48 . 2011-02-18 17:48 -------- d-----w- d:\program files\Apple Software Update
2011-02-18 17:48 . 2011-02-18 17:48 -------- d-----w- d:\programdata\Apple
2011-02-17 21:03 . 2011-03-12 15:36 -------- d-----w- d:\users\Administrator\AppData\Local\ElevatedDiagnostics
2011-02-17 19:27 . 2011-02-18 16:57 -------- d-----w- d:\programdata\TP-LINK Driver
2011-02-17 17:24 . 2011-02-17 17:24 -------- d-----w- d:\program files\FreshDevices
2011-02-16 18:45 . 2011-02-16 19:54 -------- d-----w- d:\program files\Unreal Commander
2011-02-15 13:20 . 2011-02-17 20:57 -------- d-----w- d:\users\Administrator\AppData\Roaming\Spyware Terminator
2011-02-13 21:53 . 2011-03-12 22:16 -------- d-----w- d:\users\Administrator\AppData\Roaming\BitTorrent
2011-02-13 19:55 . 2011-02-13 19:55 -------- d-----w- d:\users\Administrator\AppData\Roaming\vlc
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-11 17:18 . 2010-12-27 21:54 48648 ----a-w- d:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2011-03-11 17:18 . 2011-01-11 16:33 484160 ----a-w- d:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2011-03-09 22:20 . 2011-01-11 16:33 48648 ----a-w- d:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2011-03-09 22:20 . 2010-12-27 21:54 484160 ----a-w- d:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-02-23 15:04 . 2011-01-23 18:02 40648 ----a-w- d:\windows\avastSS.scr
2011-02-23 15:04 . 2011-01-23 18:02 190016 ----a-w- d:\windows\system32\aswBoot.exe
2011-02-23 14:56 . 2011-01-23 18:02 301528 ----a-w- d:\windows\system32\drivers\aswSP.sys
2011-02-23 14:55 . 2011-01-23 18:02 49240 ----a-w- d:\windows\system32\drivers\aswTdi.sys
2011-02-23 14:55 . 2011-01-23 18:02 25432 ----a-w- d:\windows\system32\drivers\aswRdr.sys
2011-02-23 14:55 . 2011-01-23 18:02 53592 ----a-w- d:\windows\system32\drivers\aswMonFlt.sys
2011-02-23 14:54 . 2011-01-23 18:02 19544 ----a-w- d:\windows\system32\drivers\aswFsBlk.sys
2011-02-05 18:57 . 2011-02-05 18:57 2560 ----a-w- d:\windows\_MSRSTRT.EXE
2011-02-03 05:45 . 2011-02-08 19:02 219008 ----a-w- d:\windows\system32\drivers\dxgmms1.sys
2011-02-02 20:40 . 2011-01-19 23:35 472808 ----a-w- d:\windows\system32\deployJava1.dll
2011-02-02 16:11 . 2010-12-15 18:09 222080 ------w- d:\windows\system32\MpSigStub.exe
2011-01-23 22:41 . 2011-01-23 22:42 29480 ----a-w- d:\windows\system32\msxml3a.dll
2011-01-23 22:41 . 2005-11-11 19:40 505128 ----a-w- d:\windows\system32\msvcp71.dll
2011-01-23 22:41 . 2005-11-11 19:40 353576 ----a-w- d:\windows\system32\msvcr71.dll
2011-01-23 21:24 . 2011-01-23 21:23 124 ----a-w- d:\programdata\xlink.sys
2011-01-20 18:38 . 2011-01-20 18:37 319456 ----a-w- d:\windows\DIFxAPI.dll
2011-01-13 08:00 . 2010-12-15 17:31 80896 ----a-w- d:\windows\system32\ff_vfw.dll
2011-01-07 07:27 . 2011-02-08 19:03 34304 ----a-w- d:\windows\system32\atmlib.dll
2011-01-07 05:33 . 2011-02-08 19:03 294400 ----a-w- d:\windows\system32\atmfd.dll
2011-01-05 03:37 . 2011-02-08 19:02 2329088 ----a-w- d:\windows\system32\win32k.sys
2011-01-03 09:59 . 2009-03-26 10:14 21000 ----a-w- d:\windows\system32\drivers\DKbFltr.sys
2011-01-03 09:58 . 2009-09-09 13:41 348680 ----a-w- d:\windows\UNINST32.EXE
2010-12-21 05:38 . 2011-02-08 19:02 51200 ----a-w- d:\windows\system32\wscapi.dll
2010-12-21 05:38 . 2011-02-08 19:02 73728 ----a-w- d:\windows\system32\wscsvc.dll
2010-12-21 05:38 . 2011-02-08 19:02 350720 ----a-w- d:\windows\system32\winhttp.dll
2010-12-21 05:38 . 2011-02-08 19:02 204800 ----a-w- d:\windows\system32\WebClnt.dll
2010-12-21 05:38 . 2011-02-08 19:03 204288 ----a-w- d:\windows\system32\upnp.dll
2010-12-21 05:38 . 2011-02-08 19:02 14336 ----a-w- d:\windows\system32\slwga.dll
2010-12-21 05:36 . 2011-02-08 19:03 1389568 ----a-w- d:\windows\system32\msxml6.dll
2010-12-21 05:36 . 2011-02-08 19:03 1236992 ----a-w- d:\windows\system32\msxml3.dll
2010-12-21 05:34 . 2011-02-08 19:02 80384 ----a-w- d:\windows\system32\davclnt.dll
2010-12-18 05:29 . 2011-02-08 19:03 541184 ----a-w- d:\windows\system32\kerberos.dll
2010-12-15 18:42 . 2010-12-15 18:42 315392 ----a-w- d:\windows\HideWin.exe
2010-12-15 17:36 . 2010-12-15 17:36 21035 ----a-w- d:\windows\system32\drivers\AegisP.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-09-28 21:44 1400712 ----a-w- d:\program files\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "d:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "d:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-02-23 15:04 122512 ----a-w- d:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="d:\windows\system32\igfxtray.exe" [2009-09-23 141848]
"HotKeysCmds"="d:\windows\system32\hkcmd.exe" [2009-09-23 173592]
"Persistence"="d:\windows\system32\igfxpers.exe" [2009-09-23 150552]
"RtHDVCpl"="RtHDVCpl.exe" [2008-01-07 4853760]
"SunJavaUpdateSched"="d:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"Adobe Reader Speed Launcher"="d:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="d:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
.
d:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Empowering Technology Launcher.lnk - d:\acer\Empowering Technology\eAPLauncher.exe [2010-12-19 535336]
Wireless N USB Utility.lnk - d:\program files\ZyXEL\NWD2205\NWD2205.exe [2011-3-12 1867776]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLUA"= 2 (0x2)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKLM\~\startupfolder\D:^Users^Administrator^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Registration Ghost Recon Advanced Warfighter.LNK]
path=d:\users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Registration Ghost Recon Advanced Warfighter.LNK
backup=d:\windows\pss\Registration Ghost Recon Advanced Warfighter.LNK.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
d:\program files\Common Files\Nokia\MPlatform\NokiaMServer [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-20 22:07 932288 ----a-r- d:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2011-01-31 08:44 35760 ----a-w- d:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivX Download Manager]
2011-02-08 00:17 63360 ----a-w- d:\program files\DivX\DivX Plus Web Player\DDMService.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2011-01-10 23:25 1230704 ----a-w- d:\program files\DivX\DivX Update\DivXUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2010-12-21 10:53 1483264 ----a-w- d:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 16:38 421888 ----a-w- d:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2011-01-03 14:44 15028104 ----a-r- d:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snpstd3]
2005-09-05 21:55 339968 ----a-w- d:\windows\vsnpstd3.exe
.
R2 Belkin Wifi Service;Belkin Wifi Service;d:\program files\Belkin\F5D8053\v6\WifiSvc.exe [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;d:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 eamonm;eamonm;d:\windows\system32\DRIVERS\eamonm.sys [x]
R2 gupdate;Google Update Service (gupdate);d:\program files\Google\Update\GoogleUpdate.exe [2011-02-05 136176]
R3 hwusbfake;Huawei DataCard USB Fake;d:\windows\system32\DRIVERS\ewusbfake.sys [2009-07-23 100736]
R3 netr28u;TP-LINK 150Mbps Wireless Lite N Adapter;d:\windows\system32\DRIVERS\netr28u.sys [x]
R3 netr73;RT73 USB Extensible Wireless LAN Card Driver;d:\windows\system32\DRIVERS\netr73.sys [x]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;d:\windows\system32\drivers\nmwcdnsu.sys [2010-07-26 137600]
R3 nmwcdnsuc;Nokia USB Flashing Generic;d:\windows\system32\drivers\nmwcdnsuc.sys [2010-07-26 8576]
R3 RTL8192cu;Wireless N USB Utility;d:\windows\system32\DRIVERS\RTL8192cu.sys [2010-07-13 636008]
R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;d:\windows\system32\DRIVERS\RTL8192su.sys [2009-05-27 516608]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;d:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
R3 WatAdminSvc;Služba Technologie aktivace Windows;d:\windows\system32\Wat\WatAdminSvc.exe [2010-12-18 1343400]
R4 VMCService;Vodafone Mobile Connect Service;d:\program files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [2009-09-18 9216]
R4 wlcrasvc;Windows Live Mesh remote connections service;d:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 vwififlt;Virtual WiFi Filter Driver;d:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;d:\windows\system32\drivers\aswMonFlt.sys [2011-02-23 53592]
S2 Realtek11nCU;Realtek11nCU;d:\program files\ZyXEL\NWD2205\RtlService.exe [2010-04-16 36864]
S3 ewusbnet;HUAWEI USB-NDIS miniport;d:\windows\system32\DRIVERS\ewusbnet.sys [2009-07-23 112128]
S3 SrvHsfHDA;SrvHsfHDA;d:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
S3 SrvHsfV92;SrvHsfV92;d:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
S3 SrvHsfWinac;SrvHsfWinac;d:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*Deregistered* - BMLoad
.
Obsah adresáře 'Naplánované úlohy'
.
2011-03-13 d:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- d:\program files\Google\Update\GoogleUpdate.exe [2011-02-05 22:22]
.
2011-03-13 d:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- d:\program files\Google\Update\GoogleUpdate.exe [2011-02-05 22:22]
.
2011-03-13 d:\windows\Tasks\RtlVistaStart.job
- d:\progra~1\ZyXEL\NWD2205\NWD2205.exe [2011-03-12 16:32]
.
.
------- Doplňkový sken -------
.
IE: {{54C2BD1F-F268-4E95-A03A-C67AAD326E6F} - d:\program files\FreshDevices\FreshDownload\fd.exe
LSP: bmnet.dll
Name-Space Handler: ftp\FD - {3BF4771A-18F5-4EAB-80B7-AC254D3C7503} -
Name-Space Handler: http\FD - {3BF4771A-18F5-4EAB-80B7-AC254D3C7503} -
FF - ProfilePath -
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
MSConfigStartUp-BDRegion - d:\program files\Cyberlink\Shared files\brs.exe
MSConfigStartUp-RemoteControl10 - d:\program files\CyberLink\PowerDVD10\PDVD10Serv.exe
AddRemove-Recuva - d:\program files\Recuva\uninst.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{EBFCD017-BCAD-42C3-9ED5-89DBDFC59171}"=hex:51,66,7a,6c,4c,1d,38,12,79,d3,ef,
ef,9f,f2,ad,07,e1,c3,ca,9b,da,9b,d5,65
"{425E30F0-CCC6-4E24-BBEB-BCBD31720B37}"=hex:51,66,7a,6c,4c,1d,38,12,9e,33,4d,
46,f4,82,4a,0b,c4,fd,ff,fd,34,2c,4f,23
"{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc,
1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7
"{326E768D-4182-46FD-9C16-1449A49795F4}"=hex:51,66,7a,6c,4c,1d,38,12,e3,75,7d,
36,b0,0f,93,03,e3,00,57,09,a1,c9,d1,e0
"{593DDEC6-7468-4CDD-90E1-42DADAA222E9}"=hex:51,66,7a,6c,4c,1d,38,12,a8,dd,2e,
5d,5a,3a,b3,09,ef,f7,01,9a,df,fc,66,fd
"{389943B0-C3A2-4E69-82CB-8596A84CB3DC}"=hex:51,66,7a,6c,4c,1d,38,12,de,40,8a,
3c,90,8d,07,0b,fd,dd,c6,d6,ad,12,f7,c8
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{9FDDE16B-836F-4806-AB1F-1455CBEFF289}"=hex:51,66,7a,6c,4c,1d,38,12,05,e2,ce,
9b,5d,cd,68,0d,d4,09,57,15,ce,b1,b6,9d
"{D6451DB9-67E1-4CA3-BFBA-4D77FFACE17F}"=hex:51,66,7a,6c,4c,1d,38,12,d7,1e,56,
d2,d3,29,cd,09,c0,ac,0e,37,fa,f2,a5,6b
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
"{FF6C3CF0-4B15-11D1-ABED-709549C10000}"=hex:51,66,7a,6c,4c,1d,38,12,9e,3f,7f,
fb,27,05,bf,54,d4,fb,33,d5,4c,9f,44,14
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,86,dc,a2,16,ef,24,26,4d,a9,35,4f,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,86,dc,a2,16,ef,24,26,4d,a9,35,4f,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0009\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0010\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'lsass.exe'(576)
d:\windows\system32\bmnet.dll
.
- - - - - - - > 'Explorer.exe'(4184)
d:\acer\Empowering Technology\EPOWER\SysHook.dll
.
Celkový čas: 2011-03-14 00:23:40
ComboFix-quarantined-files.txt 2011-03-13 23:23
ComboFix2.txt 2011-03-06 17:37
ComboFix3.txt 2011-03-02 13:47
ComboFix4.txt 2011-02-17 08:19
ComboFix5.txt 2011-03-13 23:08
.
Před spuštěním: 6 054 125 568
Po spuštění: 5 992 378 368
.
- - End Of File - - BFABF7061AFF4553911478230F7A8BCF

Jeste bych se chtela zeptat co to znamena ty zamknute klice v registru a ted jsem koukala na .txt
Qoobox\Quarantine a tak vam to taky radeji posilam .to jen jestli to mam tak jako,ze docela dost zavirovane nebo jsem se az lekla.Ja vim,ze to posilat nemam ,ale aspon me nejak jednou vetou uklidnete .Dekuji

Toolbar\ToolBar\chrome\skin\widget_calcal.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 593 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_calculator.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 811 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_gservices.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 610 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_sudoku.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 831 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_todo.jpg.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 510 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_todo.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 708 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_trio.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 586 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\wikipedia.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 7,856 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\yahoosearch.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 153 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\yellow.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 608 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\youtube.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 732 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\zoom.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 637 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\add.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,310 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\aol.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 46 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\arrow-dn.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 46 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\arrow-right.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 46 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\arrow-up.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 296 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-end.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 189 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-mdl.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 203 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-mdl_ff.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 326 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-start.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 284 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-end.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 193 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-mdl.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 2,862 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-mdl_ff.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 335 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-start.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 55 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\blank.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 191 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnback-down-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 191 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnback-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 294 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnleft-down-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 293 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnleft-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 274 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnright-down-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 297 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnright-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 245 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\button-splitter-down-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 248 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\button-splitter-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 293 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\checkmark.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 175 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\chevron.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 248 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\collapse.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,115 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\comcast.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 209 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\edit-back-hot.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 205 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\edit-back.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 287 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\expand.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 886 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\found.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,376 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\gmail.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 795 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 293 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_blue.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 283 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_cyan.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 284 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_lime.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 286 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_magenta.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 293 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_yellow.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 2,961 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\hotmail.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 2,952 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\imap.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 1,895 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\lastsearch-thumb-back.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 7,823 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\loadingMid.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 300 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\lock.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,656 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\mailcom.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 120 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitem-splitter.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 186 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemback-down-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 191 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemback-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 270 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemleft-down-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 293 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemleft-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 235 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemright-down-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 297 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemright-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,136 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menu_bg-basic.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 2,812 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menu_separator_bar.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 58 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\move.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 491 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\movetarget.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,202 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\pop.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 323 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 1,021 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\remove.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 223 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rename.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 92 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\resize-box.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 816 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rss.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,271 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rsschannelback.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 7,264 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\RSSLogo.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 85 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rsstabdivider.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 236 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\scroll-left.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 235 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\scroll-right.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 824 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\search-go.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 696 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\search.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 423 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\text-ellipsis.xml.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 76 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\toolbarsplitter.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 45 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\transparent_1px.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 2,906 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\yahoo.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 153 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\bluelite.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 153 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\bluesky.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 2,583 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-search-over.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 2,691 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-search.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 1,324 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-settings-over.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 1,368 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-settings.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 1,391 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn_settings.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 2,821 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-back-ff.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 239 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-right.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 192 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-splitter.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 123 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-drop-back.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 121 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-drop-left.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 121 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-drop-right.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 2,837 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-back-ff.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 168 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-back.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 272 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-left.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 264 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-right.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 192 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-splitter.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 763 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\ca.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 746 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\dictionary.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 134 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\divider.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 972 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\downloadcom.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,447 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\email.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,303 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\email_on.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 1,457 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\games.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,065 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\graphred0.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,117 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\graphred0_5.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 152 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\grey.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 261 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\headsup.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 740 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\ico-shield.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 608 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\images.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 153 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lichen.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 678 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\maps.bmp.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 165 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\menuseparatorback.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 1,415 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\modify-save.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 708 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\modify.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 149 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\modifyhot.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 570 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\music.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,442 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\news.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 153 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\orange.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 690 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\pixsy.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 691 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\relatedlinks.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 187 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-collapse.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 511 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-delete.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 196 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-expand.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 498 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-feed.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 540 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-folder-remove.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 621 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-folder-rename.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 630 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-folder.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 677 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-found.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 384 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-reload.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 2,890 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-subscribe.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 772 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 469 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rssback.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 1,876 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rsstopback.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 1,445 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\search-over.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 2,438 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\search.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 902 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\settings.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 784 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\shopping.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 792 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\siteinfo.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,198 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-bluelite.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,166 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-grey.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,116 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-lichen.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,683 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-orange.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,156 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-yellow.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 493 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\technorati.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 825 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\throbber.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 763 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\toolbarsplitter.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 678 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\video.bmp.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,435 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\weather.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 4,012 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\web.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,407 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widgets-square-16px.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 563 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widgets.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 422 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_allocine.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 1,204 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_bliptv.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 585 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_calcal.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 593 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_calculator.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 811 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_gservices.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 610 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_sudoku.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 831 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_todo.jpg.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 510 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_todo.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 708 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_trio.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 586 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\wikipedia.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 7,856 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\yahoosearch.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 153 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\yellow.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 608 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\youtube.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 732 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\zoom.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 637 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\add.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,310 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\aol.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 46 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\arrow-dn.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 46 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\arrow-right.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 46 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\arrow-up.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 296 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btn-end.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 189 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btn-mdl.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 203 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btn-mdl_ff.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 326 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btn-start.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 284 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btnover-end.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 193 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btnover-mdl.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 2,862 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btnover-mdl_ff.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 335 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btnover-start.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 55 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\blank.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 191 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnback-down-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 191 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnback-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 294 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnleft-down-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 293 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnleft-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 274 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnright-down-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 297 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnright-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 245 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\button-splitter-down-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 248 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\button-splitter-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 293 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\checkmark.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 175 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\chevron.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 248 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\collapse.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,115 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\comcast.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 209 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\edit-back-hot.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 205 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\edit-back.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 287 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\expand.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 886 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\found.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,376 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\gmail.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 795 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 293 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_blue.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 283 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_cyan.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 284 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_lime.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 286 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_magenta.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 293 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_yellow.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 2,961 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\hotmail.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 2,952 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\imap.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 1,895 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\lastsearch-thumb-back.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 7,823 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\loadingMid.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 300 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\lock.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,656 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\mailcom.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 120 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitem-splitter.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 186 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemback-down-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 191 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemback-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 270 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemleft-down-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 293 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemleft-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 235 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemright-down-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 297 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemright-vista.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,136 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menu_bg-basic.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 2,812 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menu_separator_bar.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 58 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\move.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 491 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\movetarget.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,202 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\pop.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 323 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 1,021 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\remove.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 223 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\rename.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 92 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\resize-box.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 816 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\rss.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 3,271 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\rsschannelback.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 7,264 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\RSSLogo.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 85 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\rsstabdivider.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 236 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\scroll-left.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 235 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\scroll-right.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 824 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\search-go.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 696 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\search.png.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 423 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\text-ellipsis.xml.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 76 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\toolbarsplitter.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 45 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\transparent_1px.gif.vir
2009-12-12 00:11:38 . 2009-12-12 00:11:38 2,906 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\yahoo.png.vir
2009-12-07 21:38:16 . 2009-12-07 21:38:16 7,053 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\icons.xml.vir
2009-12-07 21:38:16 . 2009-12-07 21:38:16 7,053 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\icons.xml.vir
2009-11-27 19:33:40 . 2009-11-27 19:33:40 6,267 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\css\popupGames.css.vir
2009-11-27 19:33:40 . 2009-11-27 19:33:40 8,756 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\css\popupWidgets.css.vir
2009-11-27 19:33:40 . 2009-11-27 19:33:40 7,143 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.css.vir
2009-11-27 19:33:40 . 2009-11-27 19:33:40 6,267 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\css\popupGames.css.vir
2009-11-27 19:33:40 . 2009-11-27 19:33:40 8,756 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\css\popupWidgets.css.vir
2009-11-27 19:33:40 . 2009-11-27 19:33:40 7,143 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\popupWeather.css.vir
2009-11-25 19:14:52 . 2009-11-25 19:14:52 6,198 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\templateFF.html.vir
2009-11-25 19:14:52 . 2009-11-25 19:14:52 6,198 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\templateFF.html.vir
2009-11-12 17:19:28 . 2009-11-12 17:19:28 625 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\tb_icon.png.vir
2009-11-12 17:19:28 . 2009-11-12 17:19:28 625 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\tb_icon.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 456 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-mdl.gif.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 3,449 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tl.gif.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 2,978 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tr.gif.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 317 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-dragresize.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,261 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-down.PNG.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,265 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-over.PNG.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,262 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 724 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-down.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 737 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-over.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 514 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,226 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-down.PNG.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,222 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-over.PNG.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,167 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize.PNG.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 591 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next-off.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 627 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 633 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous-off.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 667 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,037 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\navico-home.gif.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,706 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\powered-mystart.gif.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,432 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\tb_icon.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 456 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-mdl.gif.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 3,449 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tl.gif.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 2,978 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tr.gif.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 317 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-dragresize.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,261 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-down.PNG.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,265 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-over.PNG.vir

2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,262 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 724 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-down.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 737 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-over.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 514 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,226 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-down.PNG.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,222 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-over.PNG.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,167 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize.PNG.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 591 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next-off.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 627 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 633 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous-off.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 667 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous.png.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,037 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\navico-home.gif.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,706 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\powered-mystart.gif.vir
2009-11-11 22:05:50 . 2009-11-11 22:05:50 1,432 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\tb_icon.png.vir
2009-11-03 15:19:14 . 2009-11-03 15:19:14 696 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\css\popupAbout.css.vir
2009-11-03 15:19:14 . 2009-11-03 15:19:14 696 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\css\popupAbout.css.vir
2009-10-22 15:36:00 . 2009-10-22 15:36:00 344 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\neterror.xhtml.vir
2009-10-22 15:36:00 . 2009-10-22 15:36:00 344 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\neterror.xhtml.vir
2009-10-21 17:14:48 . 2009-10-21 17:14:48 7,526 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\template.html.vir
2009-10-21 17:14:48 . 2009-10-21 17:14:48 7,526 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\template.html.vir
2009-10-14 18:44:34 . 2009-10-14 18:44:34 701 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options-design-on.png.vir
2009-10-14 18:44:34 . 2009-10-14 18:44:34 704 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options-design.png.vir
2009-10-14 18:44:34 . 2009-10-14 18:44:34 701 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-options-design-on.png.vir
2009-10-14 18:44:34 . 2009-10-14 18:44:34 704 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-options-design.png.vir
2009-10-08 19:42:14 . 2009-10-08 19:42:14 775 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\music-note.png.vir
2009-10-08 19:42:14 . 2009-10-08 19:42:14 775 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\music-note.png.vir
2009-10-07 19:50:40 . 2009-10-07 19:50:40 769 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-busy.gif.vir
2009-10-07 19:50:40 . 2009-10-07 19:50:40 769 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-busy.gif.vir
2009-10-07 13:44:56 . 2009-10-07 13:44:56 485 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options-on.png.vir
2009-10-07 13:44:56 . 2009-10-07 13:44:56 493 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options.png.vir
2009-10-07 13:44:56 . 2009-10-07 13:44:56 485 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-options-on.png.vir
2009-10-07 13:44:56 . 2009-10-07 13:44:56 493 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-options.png.vir
2009-10-06 16:18:36 . 2009-10-06 16:18:36 1,706 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\powered-mystart.gif.vir
2009-10-06 16:18:36 . 2009-10-06 16:18:36 1,706 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\powered-mystart.gif.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 456 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-mdl.gif.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 3,449 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tl.gif.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 2,978 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tr.gif.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 317 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-dragresize.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 1,261 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-down.PNG.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 1,265 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-over.PNG.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 1,262 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 724 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-down.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 737 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-over.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 514 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 1,226 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-down.PNG.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 1,222 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-over.PNG.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 1,167 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize.PNG.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 591 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next-off.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 627 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 633 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous-off.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 667 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 1,037 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\navico-home.gif.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 456 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-mdl.gif.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 3,449 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tl.gif.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 2,978 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tr.gif.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 317 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-dragresize.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 1,261 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-down.PNG.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 1,265 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-over.PNG.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 1,262 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 724 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-down.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 737 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-over.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 514 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 1,226 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-down.PNG.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 1,222 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-over.PNG.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 1,167 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize.PNG.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 591 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next-off.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 627 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 633 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous-off.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 667 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous.png.vir
2009-10-06 16:18:34 . 2009-10-06 16:18:34 1,037 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\navico-home.gif.vir
2009-10-02 20:18:04 . 2009-10-02 20:18:04 824 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-off.png.vir
2009-10-02 20:18:04 . 2009-10-02 20:18:04 824 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-off.png.vir
2009-10-02 19:54:50 . 2009-10-02 19:54:50 155 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\scrollbar-handle.png.vir
2009-10-02 19:54:50 . 2009-10-02 19:54:50 92 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\scrollbar-track.png.vir
2009-10-02 19:54:50 . 2009-10-02 19:54:50 155 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\scrollbar-handle.png.vir
2009-10-02 19:54:50 . 2009-10-02 19:54:50 92 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\scrollbar-track.png.vir
2009-10-01 21:41:10 . 2009-10-01 21:41:10 3,820 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\modules\datastore.jsm.vir
2009-10-01 21:41:10 . 2009-10-01 21:41:10 3,820 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\modules\datastore.jsm.vir
2009-09-30 20:43:52 . 2009-09-30 20:43:52 691 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-bg.png.vir
2009-09-30 20:43:52 . 2009-09-30 20:43:52 691 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-bg.png.vir
2009-09-30 20:43:50 . 2009-09-30 20:43:50 788 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-mute.png.vir
2009-09-30 20:43:50 . 2009-09-30 20:43:50 788 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-mute.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 1,480 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause-on.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 1,419 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 1,560 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play-on.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 1,515 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 1,000 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-on.gif.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 969 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-warning.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 614 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-0.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 668 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-1.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 721 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-2.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 793 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-3.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 1,480 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-btn-pause-on.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 1,419 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-btn-pause.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 1,560 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-btn-play-on.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 1,515 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-btn-play.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 1,000 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-on.gif.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 969 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-warning.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 614 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-0.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 668 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-1.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 721 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-2.png.vir
2009-09-29 12:27:00 . 2009-09-29 12:27:00 793 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-3.png.vir
2009-09-23 21:29:34 . 2009-09-23 21:29:34 2,907 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-Add.png.vir
2009-09-23 21:29:34 . 2009-09-23 21:29:34 2,907 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-Add.png.vir
2009-09-18 18:27:38 . 2009-09-18 18:27:38 1,087 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\wmpstreamer.html.vir
2009-09-18 18:27:38 . 2009-09-18 18:27:38 1,087 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\wmpstreamer.html.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 4,366 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\volumeslider.html.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 540 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\css\slider.css.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 263 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\btn-close-grey.png.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 444 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\btn-close-greyover.png.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 1,378 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-down.png.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 1,339 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-over.png.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 1,335 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-playstation.png.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 879 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-radio.png.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 329 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\slider.png.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 386 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\slideron.png.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 1,056 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\track.png.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 4,366 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\volumeslider.html.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 540 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\css\slider.css.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 263 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\btn-close-grey.png.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 444 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\btn-close-greyover.png.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 1,378 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\ico-playstation-down.png.vir

2009-09-17 19:12:32 . 2009-09-17 19:12:32 1,339 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\ico-playstation-over.png.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 1,335 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\ico-playstation.png.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 879 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\ico-radio.png.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 329 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\slider.png.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 386 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\slideron.png.vir
2009-09-17 19:12:32 . 2009-09-17 19:12:32 1,056 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\track.png.vir
2009-09-16 17:47:36 . 2009-09-16 17:47:36 3,259 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-calendar.png.vir
2009-09-16 17:47:36 . 2009-09-16 17:47:36 733 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-download.png.vir
2009-09-16 17:47:36 . 2009-09-16 17:47:36 2,875 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-tags.png.vir
2009-09-16 17:47:36 . 2009-09-16 17:47:36 3,259 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-calendar.png.vir
2009-09-16 17:47:36 . 2009-09-16 17:47:36 733 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-download.png.vir
2009-09-16 17:47:36 . 2009-09-16 17:47:36 2,875 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-tags.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 1,348 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\footer.htm.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 700 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gamecategory.xsl.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 681 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gametype.xsl.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 172 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\arrow-sml-drop.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 195 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\arrow-sml.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 2,930 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-download.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 2,890 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-Info.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 2,967 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-play.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 2,905 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-shop.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 455 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\panel-botm-noscroll.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 3,326 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scroll-bg-206.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 6,090 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\TRUSTe_about.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 7,583 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 3,954 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 3,481 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 1,348 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\footer.htm.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 700 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\gamecategory.xsl.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 681 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\gametype.xsl.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 172 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\arrow-sml-drop.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 195 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\arrow-sml.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 2,930 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-download.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 2,890 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-Info.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 2,967 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-play.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 2,905 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-shop.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 455 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\panel-botm-noscroll.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 3,326 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scroll-bg-206.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 6,090 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\TRUSTe_about.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 7,583 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 3,954 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png.vir
2009-09-16 15:19:00 . 2009-09-16 15:19:00 3,481 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png.vir
2009-09-09 19:29:48 . 2009-09-09 19:29:48 2,533 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\gamethumb-on.png.vir
2009-09-09 19:29:48 . 2009-09-09 19:29:48 312 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\star_x_grey.png.vir
2009-09-09 19:29:48 . 2009-09-09 19:29:48 351 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\star_x_orange.png.vir
2009-09-09 19:29:48 . 2009-09-09 19:29:48 480 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-detailed-on.png.vir
2009-09-09 19:29:48 . 2009-09-09 19:29:48 441 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-detailed-over.png.vir
2009-09-09 19:29:48 . 2009-09-09 19:29:48 388 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-thumb-on.png.vir
2009-09-09 19:29:48 . 2009-09-09 19:29:48 369 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-thumb-over.png.vir
2009-09-09 19:29:48 . 2009-09-09 19:29:48 2,533 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\gamethumb-on.png.vir
2009-09-09 19:29:48 . 2009-09-09 19:29:48 312 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\star_x_grey.png.vir
2009-09-09 19:29:48 . 2009-09-09 19:29:48 351 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\star_x_orange.png.vir
2009-09-09 19:29:48 . 2009-09-09 19:29:48 480 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\view-detailed-on.png.vir
2009-09-09 19:29:48 . 2009-09-09 19:29:48 441 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\view-detailed-over.png.vir
2009-09-09 19:29:48 . 2009-09-09 19:29:48 388 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\view-thumb-on.png.vir
2009-09-09 19:29:48 . 2009-09-09 19:29:48 369 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\view-thumb-over.png.vir
2009-09-08 18:21:56 . 2009-09-08 18:21:56 470 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-drag.png.vir
2009-09-08 18:21:56 . 2009-09-08 18:21:56 470 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-drag.png.vir
2009-08-25 15:13:30 . 2009-08-25 15:13:30 4,680 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\bg-aboutbox.png.vir
2009-08-25 15:13:30 . 2009-08-25 15:13:30 4,680 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\bg-aboutbox.png.vir
2009-08-07 14:58:36 . 2009-08-07 14:58:36 5,206 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\options-weather.png.vir
2009-08-07 14:58:36 . 2009-08-07 14:58:36 5,206 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\options-weather.png.vir
2009-07-30 16:20:14 . 2009-07-30 16:20:14 1,639 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\emailnotifierproviders.xml.vir
2009-07-30 16:20:14 . 2009-07-30 16:20:14 1,639 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\emailnotifierproviders.xml.vir
2009-06-26 18:09:24 . 2009-06-26 18:09:24 2,844 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\menul-bgover.png.vir
2009-06-26 18:09:24 . 2009-06-26 18:09:24 2,844 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\menul-bgover.png.vir
2009-06-25 20:40:58 . 2009-06-25 20:40:58 2,862 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\menul-bgon.png.vir
2009-06-25 20:40:58 . 2009-06-25 20:40:58 2,862 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\menul-bgon.png.vir
2009-06-18 13:33:54 . 2009-06-18 13:33:54 407 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\dtxpanelwin.xul.vir
2009-06-18 13:33:54 . 2009-06-18 13:33:54 407 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\dtxpanelwin.xul.vir
2009-06-17 13:58:16 . 2009-06-17 13:58:16 810 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\template.xml.vir
2009-06-17 13:58:16 . 2009-06-17 13:58:16 810 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\template.xml.vir
2009-06-11 16:14:04 . 2009-06-11 16:14:04 1,047 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb-disable.png.vir
2009-06-11 16:14:04 . 2009-06-11 16:14:04 1,070 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb-down.png.vir
2009-06-11 16:14:04 . 2009-06-11 16:14:04 1,086 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb-over.png.vir
2009-06-11 16:14:04 . 2009-06-11 16:14:04 1,102 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb.png.vir
2009-06-11 16:14:04 . 2009-06-11 16:14:04 816 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt-disable.png.vir
2009-06-11 16:14:04 . 2009-06-11 16:14:04 848 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt-down.png.vir
2009-06-11 16:14:04 . 2009-06-11 16:14:04 876 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt-over.png.vir
2009-06-11 16:14:04 . 2009-06-11 16:14:04 877 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt.png.vir
2009-06-11 16:14:04 . 2009-06-11 16:14:04 1,047 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollb-disable.png.vir
2009-06-11 16:14:04 . 2009-06-11 16:14:04 1,070 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollb-down.png.vir
2009-06-11 16:14:04 . 2009-06-11 16:14:04 1,086 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollb-over.png.vir
2009-06-11 16:14:04 . 2009-06-11 16:14:04 1,102 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollb.png.vir
2009-06-11 16:14:04 . 2009-06-11 16:14:04 816 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollt-disable.png.vir
2009-06-11 16:14:04 . 2009-06-11 16:14:04 848 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollt-down.png.vir
2009-06-11 16:14:04 . 2009-06-11 16:14:04 876 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollt-over.png.vir
2009-06-11 16:14:04 . 2009-06-11 16:14:04 877 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollt.png.vir
2009-05-29 21:39:54 . 2009-05-29 21:39:54 189 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\arrowr-bluew5.png.vir
2009-05-29 21:39:54 . 2009-05-29 21:39:54 189 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\arrowr-bluew5.png.vir
2009-05-01 18:21:46 . 2009-05-01 18:21:46 637 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\add.png.vir
2009-05-01 18:21:46 . 2009-05-01 18:21:46 180 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png.vir
2009-05-01 18:21:46 . 2009-05-01 18:21:46 637 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\add.png.vir
2009-05-01 18:21:46 . 2009-05-01 18:21:46 180 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png.vir
2009-04-30 19:37:46 . 2009-04-30 19:37:46 263 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\btn-close-grey.png.vir
2009-04-30 19:37:46 . 2009-04-30 19:37:46 444 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\btn-close-greyover.png.vir
2009-04-30 19:37:46 . 2009-04-30 19:37:46 263 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\btn-close-grey.png.vir
2009-04-30 19:37:46 . 2009-04-30 19:37:46 444 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\btn-close-greyover.png.vir
2009-04-24 14:28:20 . 2009-04-24 14:28:20 3,435 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\weather.png.vir
2009-04-24 14:28:20 . 2009-04-24 14:28:20 3,435 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\weather.png.vir
2009-04-24 14:28:02 . 2009-04-24 14:28:02 4,454 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\na-s.png.vir
2009-04-24 14:28:02 . 2009-04-24 14:28:02 19,254 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\na.png.vir
2009-04-24 14:28:02 . 2009-04-24 14:28:02 4,454 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\na-s.png.vir
2009-04-24 14:28:02 . 2009-04-24 14:28:02 19,254 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\na.png.vir
2009-04-24 14:22:00 . 2009-04-24 14:22:00 3,257 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\cond999.png.vir
2009-04-24 14:22:00 . 2009-04-24 14:22:00 3,257 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\cond999.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 189 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 7,349 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 3,113 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 158 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-check.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 144 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 263 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 444 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 1,599 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 591 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 627 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 633 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 667 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 2,923 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-check.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 4,702 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 23,817 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 183 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-blue.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 153 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-orange.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 320 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 297 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 516 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 3,091 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 189 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 7,349 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 3,113 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 158 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\box-check.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 144 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 263 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 444 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 1,599 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 591 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 627 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 633 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 667 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 2,923 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\ico-check.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 4,702 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 23,817 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 183 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\over-blue.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 153 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\over-orange.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 320 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 297 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 516 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png.vir
2009-04-24 14:14:26 . 2009-04-24 14:14:26 3,091 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png.vir
2009-04-22 20:11:26 . 2009-04-22 20:11:26 232 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-play.png.vir
2009-04-22 20:11:26 . 2009-04-22 20:11:26 232 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-play.png.vir
2009-04-22 19:48:42 . 2009-04-22 19:48:42 2,862 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\bg-btnover.png.vir
2009-04-22 19:48:42 . 2009-04-22 19:48:42 558 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\gamethumb2-over.png.vir
2009-04-22 19:48:42 . 2009-04-22 19:48:42 1,060 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-joystick24.png.vir
2009-04-22 19:48:42 . 2009-04-22 19:48:42 2,862 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\bg-btnover.png.vir
2009-04-22 19:48:42 . 2009-04-22 19:48:42 558 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\gamethumb2-over.png.vir
2009-04-22 19:48:42 . 2009-04-22 19:48:42 1,060 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-joystick24.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 3,319 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\bg-pnl520x390.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 263 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-close-grey.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 444 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-close-greyover.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 426 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-next-over.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 456 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-next.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 424 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-previous-over.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 460 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-previous.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 4,082 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 1,599 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 3,360 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scroll-bg.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 935 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scroll-topwin.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 516 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\searchbox-pnlbtm.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 3,319 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\bg-pnl520x390.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 263 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-close-grey.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 444 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-close-greyover.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 426 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-next-over.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 456 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-next.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 424 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-previous-over.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 460 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-previous.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 4,082 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 1,599 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-search-pnlbtm.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 3,360 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scroll-bg.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 935 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scroll-topwin.png.vir
2009-04-22 18:47:44 . 2009-04-22 18:47:44 516 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\searchbox-pnlbtm.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 248 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_02.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 218 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_03.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 293 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_04.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 316 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_06.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 254 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_07.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 328 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_08.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 288 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_09.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 250 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_10.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 284 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_11.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 173 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_12.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 277 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_13.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 270 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_14.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 344 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_15.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 278 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_16.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 312 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_18.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 299 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_19.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 287 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_20.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 300 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_21.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 579 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\close-hot.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 585 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\close-normal.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 7,823 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\loadingMid.gif.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 354 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\proxy.html.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 825 ----a-w- D:\Qoobox\Quarantine\D\Program Files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\throbber.gif.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 248 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_02.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 218 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_03.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 293 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_04.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 316 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_06.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 254 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_07.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 328 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_08.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 288 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_09.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 250 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_10.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 284 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_11.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 173 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_12.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 277 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_13.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 270 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_14.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 344 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_15.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 278 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_16.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 312 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_18.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 299 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_19.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 287 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_20.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 300 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_21.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 579 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\close-hot.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 585 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\close-normal.png.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 7,823 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\loadingMid.gif.vir
2009-03-31 15:16:44 . 2009-03-31 15:16:44 354 ----a-w- D:\Qoobox\Quarantine\D\Users\RUTH 33\AppData\Roaming\Mozilla\Firefox\Profiles\smt2dtb9.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\proxy.html.vir

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

Collect::
d:\windows\system32\cmd.execf

Folder::
d:\program files\Ask.com

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
[-HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkaźy ze skriptu.



Zamknuté klíče registry jsou takové klíče, které systém zamkl. Jde o normální stav za předpokladu, že se nejedná o klíč nějakého infektoru. Toto není váš případ. Složku C:\Quoobox vytvořil ComboFix pro uložení mazaných položek do zálohy. Po ukončení léčení ji lze smazat.

ComboFix 11-03-15.01 - Martinka 15.03.2011 23:54:00.6.1 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.2038.1322 [GMT 1:00]
Spuštěný z: d:\users\Martinka\Desktop\123.exe.exe
Použité ovládací přepínače :: d:\users\Martinka\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
file zipped: d:\windows\system32\cmd.execf
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
d:\program files\Ask.com
d:\program files\Ask.com\cobrand.ico
d:\program files\Ask.com\config.xml
d:\program files\Ask.com\favicon.ico
d:\program files\Ask.com\fv_d406.ico
d:\program files\Ask.com\GenericAskToolbar.dll
d:\program files\Ask.com\mupcfg.xml
d:\program files\Ask.com\SaUpdate.exe
d:\program files\Ask.com\UpdateTask.exe
d:\windows\system32\cmd.execf
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-02-15 do 2011-03-15 )))))))))))))))))))))))))))))))
.
.
2011-03-15 23:24 . 2011-03-15 23:24 -------- d-----w- d:\users\Public\AppData\Local\temp
2011-03-15 23:24 . 2011-03-15 23:24 -------- d-----w- d:\users\Default\AppData\Local\temp
2011-03-15 23:24 . 2011-03-15 23:24 -------- d-----w- d:\users\Administrator\AppData\Local\temp
2011-03-15 21:19 . 2011-02-11 06:54 5943120 ----a-w- d:\programdata\Microsoft\Windows Defender\Definition Updates\{A94BEE30-234D-44D4-9E56-7FB442467511}\mpengine.dll
2011-03-13 20:10 . 2011-03-13 20:16 -------- d-----w- d:\program files\Driver Robot
2011-03-13 15:56 . 2011-03-13 15:57 -------- d-----w- d:\users\Martinka
2011-03-13 15:45 . 2011-03-13 15:46 -------- dc----w- d:\users\Administrator\AppData\Local\MigWiz
2011-03-12 16:37 . 2011-03-12 16:38 -------- d-----w- d:\users\Administrator\AppData\Local\Adobe
2011-03-12 15:44 . 2011-03-12 15:44 -------- d-----w- d:\windows\Internet Logs
2011-03-12 15:25 . 2010-07-13 03:15 636008 ----a-r- d:\windows\system32\drivers\rtl8192cu.sys
2011-03-12 15:25 . 2009-03-31 13:31 380928 ----a-w- d:\windows\RtlUI2.exe
2011-03-12 15:25 . 2008-07-01 11:31 614400 ----a-w- d:\windows\system32\Rtlihvs.dll
2011-03-12 15:25 . 2009-04-02 09:27 188416 ----a-w- d:\windows\system32\RTLExtUI.dll
2011-03-11 20:33 . 2011-02-23 14:56 371544 ----a-w- d:\windows\system32\drivers\aswSnx.sys
2011-03-10 22:57 . 2011-02-19 05:56 805376 ----a-w- d:\windows\system32\FntCache.dll
2011-03-10 22:57 . 2011-02-19 05:56 1076736 ----a-w- d:\windows\system32\DWrite.dll
2011-03-10 22:57 . 2011-02-19 05:56 739840 ----a-w- d:\windows\system32\d2d1.dll
2011-03-10 22:57 . 2010-12-23 05:28 642048 ----a-w- d:\windows\system32\CPFilters.dll
2011-03-10 22:57 . 2010-12-23 05:28 850432 ----a-w- d:\windows\system32\sbe.dll
2011-03-10 22:57 . 2010-12-23 05:28 534528 ----a-w- d:\windows\system32\EncDec.dll
2011-03-10 22:57 . 2010-12-23 05:24 199680 ----a-w- d:\windows\system32\mpg2splt.ax
2011-03-10 22:57 . 2010-12-18 05:30 2690560 ----a-w- d:\windows\system32\mstscax.dll
2011-03-10 22:57 . 2010-12-18 05:26 1034240 ----a-w- d:\windows\system32\mstsc.exe
2011-03-10 22:48 . 2011-03-10 22:48 -------- d-----w- d:\program files\X-Setup Pro
2011-03-10 22:48 . 2011-03-10 22:48 -------- d-----w- d:\users\Administrator\AppData\Roaming\X-Setup Pro
2011-03-10 22:48 . 2011-03-10 22:48 -------- d-----w- d:\programdata\X-Setup Pro
2011-03-10 22:46 . 2011-03-10 22:46 -------- d-----w- d:\users\Administrator\AppData\Local\Google
2011-03-10 22:12 . 2011-03-10 22:12 -------- d-----w- d:\users\Administrator\AppData\Roaming\Malwarebytes
2011-03-10 22:12 . 2010-12-20 17:09 38224 ----a-w- d:\windows\system32\drivers\mbamswissarmy.sys
2011-03-10 22:12 . 2011-03-10 22:12 -------- d-----w- d:\programdata\Malwarebytes
2011-03-10 22:12 . 2010-12-20 17:08 20952 ----a-w- d:\windows\system32\drivers\mbam.sys
2011-03-10 22:12 . 2011-03-10 22:12 -------- d-----w- d:\program files\Malwarebytes' Anti-Malware
2011-03-08 23:18 . 2011-03-08 23:18 98304 ----a-w- d:\windows\system32\CmdLineExt.dll
2011-03-08 22:57 . 2011-03-08 22:57 -------- d-----w- d:\program files\Ubisoft
2011-03-06 21:25 . 2011-03-06 21:25 -------- d-----w- d:\users\Administrator\AppData\Local\Nokia
2011-03-06 21:09 . 2011-03-06 21:09 -------- d-----w- d:\programdata\GroupPolicy
2011-03-06 19:52 . 2011-03-06 19:52 -------- d-----w- d:\program files\Yamicsoft
2011-03-06 18:15 . 2011-03-06 18:15 -------- d-----w- d:\users\Administrator\AppData\Roaming\FLEXnet
2011-03-06 18:05 . 2011-03-06 18:05 -------- d-----w- d:\users\Administrator\AppData\Roaming\Vodafone
2011-03-06 15:57 . 2011-03-06 15:57 -------- d-----w- d:\users\Administrator\AppData\Local\Apple
2011-03-06 15:55 . 2011-03-06 15:55 -------- d-----w- d:\users\Administrator\AppData\Roaming\Bytemobile
2011-03-04 19:15 . 2009-06-30 16:46 9216 ----a-r- d:\windows\system32\drivers\massfilter.sys
2011-03-04 19:14 . 2011-03-04 19:14 8464 ----a-w- d:\windows\system32\SpOrder.dll
2011-03-03 19:40 . 2010-07-01 02:32 67312 ----a-w- d:\windows\UnDeployV.exe
2011-03-02 18:34 . 2011-03-02 18:34 -------- d-----w- d:\program files\Common Files\Java
2011-03-02 18:33 . 2011-03-02 18:33 -------- d-----w- d:\programdata\McAfee
2011-03-01 23:40 . 2011-03-01 23:40 -------- d-----w- d:\program files\ZyXEL
2011-02-24 09:48 . 2011-02-24 09:48 -------- d-----w- d:\users\Administrator\AppData\Local\K-Meleon
2011-02-24 09:48 . 2011-03-10 21:43 -------- d-----w- d:\users\Administrator\AppData\Roaming\K-Meleon
2011-02-24 00:16 . 2010-09-14 06:07 276992 ----a-w- d:\windows\system32\wcncsvc.dll
2011-02-24 00:11 . 2011-02-24 00:11 -------- d-----w- d:\programdata\Nokia
2011-02-23 21:59 . 2011-02-24 16:20 -------- d-----w- d:\programdata\Norton
2011-02-23 21:59 . 2011-02-23 21:59 -------- d-----w- d:\programdata\Symantec
2011-02-23 19:19 . 2009-05-27 16:32 516608 ----a-w- d:\windows\system32\drivers\RTL8192su.sys
2011-02-23 19:13 . 2011-01-07 07:31 442880 ----a-w- d:\windows\system32\XpsPrint.dll
2011-02-23 19:13 . 2011-01-07 07:31 288256 ----a-w- d:\windows\system32\XpsGdiConverter.dll
2011-02-22 21:20 . 2011-02-22 21:20 -------- d-----w- d:\program files\Mozilla Thunderbird
2011-02-22 14:12 . 2011-02-22 14:12 94208 ----a-w- d:\program files\Internet Explorer\cs\iediag.resources.dll
2011-02-22 14:11 . 2011-02-22 14:11 -------- d-----w- d:\program files\Feedback Tool
2011-02-22 13:39 . 2009-02-05 01:49 451072 ----a-w- d:\windows\system32\ISSRemoveSP.exe
2011-02-20 16:09 . 2011-02-20 16:09 -------- d-----w- d:\program files\MSXML 4.0
2011-02-20 15:49 . 2011-02-20 15:49 -------- d-----w- d:\program files\K-Meleon
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2011-02-18 17:51 . 2011-02-18 17:51 159744 ----a-w- d:\program files\Internet Explorer\Plugins\npqtplugin.dll
2011-02-18 17:49 . 2011-02-18 17:51 -------- d-----w- d:\program files\QuickTime
2011-02-18 17:49 . 2011-02-18 17:49 -------- d-----w- d:\programdata\Apple Computer
2011-02-18 17:48 . 2011-02-18 17:48 -------- d-----w- d:\program files\Common Files\Apple
2011-02-18 17:48 . 2011-02-18 17:48 -------- d-----w- d:\program files\Apple Software Update
2011-02-18 17:48 . 2011-02-18 17:48 -------- d-----w- d:\programdata\Apple
2011-02-17 21:03 . 2011-03-12 15:36 -------- d-----w- d:\users\Administrator\AppData\Local\ElevatedDiagnostics
2011-02-17 19:27 . 2011-02-18 16:57 -------- d-----w- d:\programdata\TP-LINK Driver
2011-02-17 17:24 . 2011-02-17 17:24 -------- d-----w- d:\program files\FreshDevices
2011-02-16 18:45 . 2011-02-16 19:54 -------- d-----w- d:\program files\Unreal Commander
2011-02-15 13:20 . 2011-02-17 20:57 -------- d-----w- d:\users\Administrator\AppData\Roaming\Spyware Terminator
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-15 01:38 . 2011-01-11 16:33 48648 ----a-w- d:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2011-03-15 01:38 . 2010-12-27 21:54 484160 ----a-w- d:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-03-11 17:18 . 2010-12-27 21:54 48648 ----a-w- d:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2011-03-11 17:18 . 2011-01-11 16:33 484160 ----a-w- d:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2011-02-23 15:04 . 2011-01-23 18:02 40648 ----a-w- d:\windows\avastSS.scr
2011-02-23 15:04 . 2011-01-23 18:02 190016 ----a-w- d:\windows\system32\aswBoot.exe
2011-02-23 14:56 . 2011-01-23 18:02 301528 ----a-w- d:\windows\system32\drivers\aswSP.sys
2011-02-23 14:55 . 2011-01-23 18:02 49240 ----a-w- d:\windows\system32\drivers\aswTdi.sys
2011-02-23 14:55 . 2011-01-23 18:02 25432 ----a-w- d:\windows\system32\drivers\aswRdr.sys
2011-02-23 14:55 . 2011-01-23 18:02 53592 ----a-w- d:\windows\system32\drivers\aswMonFlt.sys
2011-02-23 14:54 . 2011-01-23 18:02 19544 ----a-w- d:\windows\system32\drivers\aswFsBlk.sys
2011-02-05 18:57 . 2011-02-05 18:57 2560 ----a-w- d:\windows\_MSRSTRT.EXE
2011-02-03 05:45 . 2011-02-08 19:02 219008 ----a-w- d:\windows\system32\drivers\dxgmms1.sys
2011-02-02 20:40 . 2011-01-19 23:35 472808 ----a-w- d:\windows\system32\deployJava1.dll
2011-02-02 16:11 . 2010-12-15 18:09 222080 ------w- d:\windows\system32\MpSigStub.exe
2011-01-23 22:41 . 2011-01-23 22:42 29480 ----a-w- d:\windows\system32\msxml3a.dll
2011-01-23 22:41 . 2005-11-11 19:40 505128 ----a-w- d:\windows\system32\msvcp71.dll
2011-01-23 22:41 . 2005-11-11 19:40 353576 ----a-w- d:\windows\system32\msvcr71.dll
2011-01-23 21:24 . 2011-01-23 21:23 124 ----a-w- d:\programdata\xlink.sys
2011-01-20 18:38 . 2011-01-20 18:37 319456 ----a-w- d:\windows\DIFxAPI.dll
2011-01-13 08:00 . 2010-12-15 17:31 80896 ----a-w- d:\windows\system32\ff_vfw.dll
2011-01-07 07:27 . 2011-02-08 19:03 34304 ----a-w- d:\windows\system32\atmlib.dll
2011-01-07 05:33 . 2011-02-08 19:03 294400 ----a-w- d:\windows\system32\atmfd.dll
2011-01-05 03:37 . 2011-02-08 19:02 2329088 ----a-w- d:\windows\system32\win32k.sys
2011-01-03 09:59 . 2009-03-26 10:14 21000 ----a-w- d:\windows\system32\drivers\DKbFltr.sys
2011-01-03 09:58 . 2009-09-09 13:41 348680 ----a-w- d:\windows\UNINST32.EXE
2010-12-21 05:38 . 2011-02-08 19:02 51200 ----a-w- d:\windows\system32\wscapi.dll
2010-12-21 05:38 . 2011-02-08 19:02 73728 ----a-w- d:\windows\system32\wscsvc.dll
2010-12-21 05:38 . 2011-02-08 19:02 350720 ----a-w- d:\windows\system32\winhttp.dll
2010-12-21 05:38 . 2011-02-08 19:02 204800 ----a-w- d:\windows\system32\WebClnt.dll
2010-12-21 05:38 . 2011-02-08 19:03 204288 ----a-w- d:\windows\system32\upnp.dll
2010-12-21 05:38 . 2011-02-08 19:02 14336 ----a-w- d:\windows\system32\slwga.dll
2010-12-21 05:36 . 2011-02-08 19:03 1389568 ----a-w- d:\windows\system32\msxml6.dll
2010-12-21 05:36 . 2011-02-08 19:03 1236992 ----a-w- d:\windows\system32\msxml3.dll
2010-12-21 05:34 . 2011-02-08 19:02 80384 ----a-w- d:\windows\system32\davclnt.dll
2010-12-18 05:29 . 2011-02-08 19:03 541184 ----a-w- d:\windows\system32\kerberos.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-02-23 15:04 122512 ----a-w- d:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"="d:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2010-12-21 1483264]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="d:\windows\system32\igfxtray.exe" [2009-09-23 141848]
"HotKeysCmds"="d:\windows\system32\hkcmd.exe" [2009-09-23 173592]
"Persistence"="d:\windows\system32\igfxpers.exe" [2009-09-23 150552]
"RtHDVCpl"="RtHDVCpl.exe" [2008-01-07 4853760]
"SunJavaUpdateSched"="d:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"Adobe Reader Speed Launcher"="d:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="d:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
.
d:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Empowering Technology Launcher.lnk - d:\acer\Empowering Technology\eAPLauncher.exe [2010-12-19 535336]
Wireless N USB Utility.lnk - d:\program files\ZyXEL\NWD2205\NWD2205.exe [2011-3-12 1867776]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLUA"= 2 (0x2)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKLM\~\startupfolder\D:^Users^Administrator^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Registration Ghost Recon Advanced Warfighter.LNK]
path=d:\users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Registration Ghost Recon Advanced Warfighter.LNK
backup=d:\windows\pss\Registration Ghost Recon Advanced Warfighter.LNK.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
d:\program files\Common Files\Nokia\MPlatform\NokiaMServer [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-20 22:07 932288 ----a-r- d:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2011-01-31 08:44 35760 ----a-w- d:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivX Download Manager]
2011-02-08 00:17 63360 ----a-w- d:\program files\DivX\DivX Plus Web Player\DDMService.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2011-01-10 23:25 1230704 ----a-w- d:\program files\DivX\DivX Update\DivXUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2010-12-21 10:53 1483264 ----a-w- d:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 16:38 421888 ----a-w- d:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2011-01-03 14:44 15028104 ----a-r- d:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snpstd3]
2005-09-05 21:55 339968 ----a-w- d:\windows\vsnpstd3.exe
.
R2 Belkin Wifi Service;Belkin Wifi Service;d:\program files\Belkin\F5D8053\v6\WifiSvc.exe [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;d:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 eamonm;eamonm;d:\windows\system32\DRIVERS\eamonm.sys [x]
R2 gupdate;Google Update Service (gupdate);d:\program files\Google\Update\GoogleUpdate.exe [2011-02-05 136176]
R3 hwusbfake;Huawei DataCard USB Fake;d:\windows\system32\DRIVERS\ewusbfake.sys [2009-07-23 100736]
R3 netr28u;TP-LINK 150Mbps Wireless Lite N Adapter;d:\windows\system32\DRIVERS\netr28u.sys [x]
R3 netr73;RT73 USB Extensible Wireless LAN Card Driver;d:\windows\system32\DRIVERS\netr73.sys [x]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;d:\windows\system32\drivers\nmwcdnsu.sys [2010-07-26 137600]
R3 nmwcdnsuc;Nokia USB Flashing Generic;d:\windows\system32\drivers\nmwcdnsuc.sys [2010-07-26 8576]
R3 RTL8192cu;Wireless N USB Utility;d:\windows\system32\DRIVERS\RTL8192cu.sys [2010-07-13 636008]
R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;d:\windows\system32\DRIVERS\RTL8192su.sys [2009-05-27 516608]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;d:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
R3 WatAdminSvc;Služba Technologie aktivace Windows;d:\windows\system32\Wat\WatAdminSvc.exe [2010-12-18 1343400]
R4 VMCService;Vodafone Mobile Connect Service;d:\program files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [2009-09-18 9216]
R4 wlcrasvc;Windows Live Mesh remote connections service;d:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 vwififlt;Virtual WiFi Filter Driver;d:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;d:\windows\system32\drivers\aswMonFlt.sys [2011-02-23 53592]
S2 Realtek11nCU;Realtek11nCU;d:\program files\ZyXEL\NWD2205\RtlService.exe [2010-04-16 36864]
S3 ewusbnet;HUAWEI USB-NDIS miniport;d:\windows\system32\DRIVERS\ewusbnet.sys [2009-07-23 112128]
S3 SrvHsfHDA;SrvHsfHDA;d:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
S3 SrvHsfV92;SrvHsfV92;d:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
S3 SrvHsfWinac;SrvHsfWinac;d:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - CFCATCHME
*Deregistered* - BMLoad
*Deregistered* - CFcatchme
.
Obsah adresáře 'Naplánované úlohy'
.
2011-03-15 d:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- d:\program files\Google\Update\GoogleUpdate.exe [2011-02-05 22:22]
.
2011-03-15 d:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- d:\program files\Google\Update\GoogleUpdate.exe [2011-02-05 22:22]
.
2011-03-15 d:\windows\Tasks\RtlVistaStart.job
- d:\progra~1\ZyXEL\NWD2205\NWD2205.exe [2011-03-12 16:32]
.
.
------- Doplňkový sken -------
.
IE: {{54C2BD1F-F268-4E95-A03A-C67AAD326E6F} - d:\program files\FreshDevices\FreshDownload\fd.exe
LSP: bmnet.dll
Name-Space Handler: ftp\FD - {3BF4771A-18F5-4EAB-80B7-AC254D3C7503} -
Name-Space Handler: http\FD - {3BF4771A-18F5-4EAB-80B7-AC254D3C7503} -
FF - ProfilePath - d:\users\Martinka\AppData\Roaming\Mozilla\Firefox\Profiles\v6rfgg7y.default\
FF - prefs.js: network.proxy.type - 4
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - d:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - d:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{EBFCD017-BCAD-42C3-9ED5-89DBDFC59171}"=hex:51,66,7a,6c,4c,1d,38,12,79,d3,ef,
ef,9f,f2,ad,07,e1,c3,ca,9b,da,9b,d5,65
"{425E30F0-CCC6-4E24-BBEB-BCBD31720B37}"=hex:51,66,7a,6c,4c,1d,38,12,9e,33,4d,
46,f4,82,4a,0b,c4,fd,ff,fd,34,2c,4f,23
"{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc,
1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7
"{326E768D-4182-46FD-9C16-1449A49795F4}"=hex:51,66,7a,6c,4c,1d,38,12,e3,75,7d,
36,b0,0f,93,03,e3,00,57,09,a1,c9,d1,e0
"{593DDEC6-7468-4CDD-90E1-42DADAA222E9}"=hex:51,66,7a,6c,4c,1d,38,12,a8,dd,2e,
5d,5a,3a,b3,09,ef,f7,01,9a,df,fc,66,fd
"{389943B0-C3A2-4E69-82CB-8596A84CB3DC}"=hex:51,66,7a,6c,4c,1d,38,12,de,40,8a,
3c,90,8d,07,0b,fd,dd,c6,d6,ad,12,f7,c8
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{9FDDE16B-836F-4806-AB1F-1455CBEFF289}"=hex:51,66,7a,6c,4c,1d,38,12,05,e2,ce,
9b,5d,cd,68,0d,d4,09,57,15,ce,b1,b6,9d
"{D6451DB9-67E1-4CA3-BFBA-4D77FFACE17F}"=hex:51,66,7a,6c,4c,1d,38,12,d7,1e,56,
d2,d3,29,cd,09,c0,ac,0e,37,fa,f2,a5,6b
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
"{FF6C3CF0-4B15-11D1-ABED-709549C10000}"=hex:51,66,7a,6c,4c,1d,38,12,9e,3f,7f,
fb,27,05,bf,54,d4,fb,33,d5,4c,9f,44,14
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,86,dc,a2,16,ef,24,26,4d,a9,35,4f,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,86,dc,a2,16,ef,24,26,4d,a9,35,4f,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0009\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0010\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'lsass.exe'(580)
d:\windows\system32\bmnet.dll
.
Celkový čas: 2011-03-16 00:39:36
ComboFix-quarantined-files.txt 2011-03-15 23:39
ComboFix2.txt 2011-03-13 23:23
ComboFix3.txt 2011-03-06 17:37
ComboFix4.txt 2011-03-02 13:47
ComboFix5.txt 2011-03-15 22:51
.
Před spuštěním: 4 225 150 976
Po spuštění: 4 188 405 760
.
- - End Of File - - 8BAD643E28A83919D4C734BB03F9428D
Nahr nˇ probŘhlo ŁspŘçnŘ

Log již vypadá čistý. Nastala nějaká změna teď?

uz je to docela v pohode.Stary profil jsem smazala,vse jde spustit akorat se mi vubec na liste vpravo dole nezobrazuje ikona avastu a nevim proc .vzdy tam byla

Zkuste Avast reinstalovat.

Tak moc diky za vse uz je to v pohode vse.