VIRY.CZ

Dobrý den, prosil bych o pomoc. Pc je pomalé a nejdou otvírat složky normálním poklepáním na složku (píše to něco ve smyslu že není přidružen program k této akci).

Logfile of random's system information tool 1.08 (written by random/random)
Run by Sabi at 2011-05-03 10:41:08
Microsoft Windows 7 Starter
System drive C: has 76 GB (60%) free of 127 GB
Total RAM: 1014 MB (23% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:41:59, on 3.5.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16766)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Sabi\AppData\Local\Temp\vcheck.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Users\Sabi\Desktop\viry.cz\RSIT.exe
C:\Program Files\trend micro\Sabi.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.mywebsearch.com/index.jhtml ... 03yDu7Rjaw
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5w5862392o
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACA ... 5w5862392o
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Sabi\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: FCTBPos00Pos - {1B169632-4FA6-4BE0-B980-460B5BF7FD08} - C:\Program Files\Pazera Toolbar\Toolbar.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Sabi\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Sabi\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: DCA - {B49699FC-1665-4414-A1CB-C4A2A4A13EEC} - C:\Program Files\Common Files\FreeCause\DCA\dca-bho.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo Layers\YontooIEClient.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: Pazera Toolbar - {093B3D46-0F87-44CF-B44B-79537F1597E5} - C:\Program Files\Pazera Toolbar\Toolbar.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [vcheck] C:\Users\Sabi\AppData\Local\Temp\vcheck.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} (WRC Class) - http://trial.trymicrosoftoffice.com/tri ... /wrc32.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{E1D1366E-035D-4E53-81A1-B77285C9AC87}: NameServer = 10.10.10.1,10.10.10.2
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files\Acer\Registration\GregHSRW.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files\EgisTec\MyWinLocker 3\x86\\MWLService.exe
O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files\Acer\Acer VCM\RS_Service.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: Updater Service - Acer - C:\Program Files\Acer\Acer Updater\UpdaterService.exe

--
End of file - 11110 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1B169632-4FA6-4BE0-B980-460B5BF7FD08}]
Pazera Toolbar BHO - C:\Program Files\Pazera Toolbar\Toolbar.dll [2011-04-11 1515008]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-13 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2011-04-18 818280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class - C:\Users\Sabi\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll [2009-02-10 119808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2010-11-10 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - C:\Users\Sabi\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll [2009-02-10 119808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B49699FC-1665-4414-A1CB-C4A2A4A13EEC}]
DCA BHO - C:\Program Files\Common Files\FreeCause\DCA\dca-bho.dll [2010-01-28 214920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-02-28 1089288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
Yontoo Layers - C:\Program Files\Yontoo Layers\YontooIEClient.dll [2011-03-01 191488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-02-28 1089288]
{093B3D46-0F87-44CF-B44B-79537F1597E5} - Pazera Toolbar - C:\Program Files\Pazera Toolbar\Toolbar.dll [2011-04-11 1515008]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2011-04-18 818280]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files\Launch Manager\LManager.exe [2009-06-02 1130504]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-07-06 7600672]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-06-18 1537320]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-23 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-23 173592]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-23 150552]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2011-04-18 3460784]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-05-07 26211624]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2010-11-10 4240760]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"vcheck"=C:\Users\Sabi\AppData\Local\Temp\vcheck.exe [2011-03-01 389120]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-23 218112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-13 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.reg - open - "regedit.exe" "%1"

======List of files/folders created in the last 1 months======

2011-05-03 10:41:10 ----D---- C:\Program Files\trend micro
2011-05-03 10:41:08 ----D---- C:\rsit
2011-05-02 21:10:56 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2011-04-29 16:05:29 ----A---- C:\Windows\system32\FCM.exe
2011-04-26 20:24:02 ----A---- C:\Windows\system32\prevhost.exe
2011-04-26 20:23:47 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-04-26 20:23:45 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-04-26 20:23:45 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-04-26 20:23:44 ----A---- C:\Windows\system32\esent.dll
2011-04-26 20:23:44 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-04-26 20:23:43 ----A---- C:\Windows\system32\drivers\storport.sys
2011-04-26 20:23:43 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-04-26 20:23:42 ----A---- C:\Windows\system32\drivers\amdxata.sys
2011-04-26 20:23:41 ----A---- C:\Windows\system32\fsutil.exe
2011-04-26 20:23:41 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-04-26 20:22:27 ----A---- C:\Windows\explorer.exe
2011-04-26 20:22:24 ----A---- C:\Windows\system32\XpsPrint.dll
2011-04-23 11:16:31 ----D---- C:\Program Files\SignSIS-GUI
2011-04-15 13:23:00 ----A---- C:\Windows\system32\CTn.exe
2011-04-14 18:09:43 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-04-14 18:09:42 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-04-14 18:09:42 ----A---- C:\Windows\system32\drivers\srv.sys
2011-04-14 18:09:39 ----A---- C:\Windows\system32\jscript.dll
2011-04-14 18:09:38 ----A---- C:\Windows\system32\vbscript.dll
2011-04-14 18:09:35 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-04-14 18:09:35 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-04-14 18:09:35 ----A---- C:\Windows\system32\dnsapi.dll
2011-04-14 18:09:32 ----A---- C:\Windows\system32\atmlib.dll
2011-04-14 18:09:32 ----A---- C:\Windows\system32\atmfd.dll
2011-04-14 18:09:25 ----A---- C:\Windows\system32\mshtml.dll
2011-04-14 18:09:24 ----A---- C:\Windows\system32\ieframe.dll
2011-04-14 18:09:21 ----A---- C:\Windows\system32\urlmon.dll
2011-04-14 18:09:16 ----A---- C:\Windows\system32\wininet.dll
2011-04-14 18:09:15 ----A---- C:\Windows\system32\msfeeds.dll
2011-04-14 18:09:15 ----A---- C:\Windows\system32\iedkcs32.dll
2011-04-14 18:09:14 ----A---- C:\Windows\system32\mstime.dll
2011-04-14 18:09:14 ----A---- C:\Windows\system32\ieui.dll
2011-04-14 18:09:14 ----A---- C:\Windows\system32\iertutil.dll
2011-04-14 18:09:14 ----A---- C:\Windows\system32\iepeers.dll
2011-04-14 18:09:13 ----A---- C:\Windows\system32\mshtmled.dll
2011-04-14 18:09:13 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-04-14 18:09:13 ----A---- C:\Windows\system32\licmgr10.dll
2011-04-14 18:09:12 ----A---- C:\Windows\system32\msfeedssync.exe
2011-04-14 18:09:12 ----A---- C:\Windows\system32\jsproxy.dll
2011-04-14 18:08:44 ----A---- C:\Windows\system32\win32k.sys
2011-04-14 18:08:42 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-04-14 18:08:40 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-04-14 18:08:38 ----A---- C:\Windows\system32\inetcomm.dll
2011-04-14 18:08:35 ----A---- C:\Windows\system32\mfc42.dll
2011-04-14 18:08:34 ----A---- C:\Windows\system32\mfc42u.dll
2011-04-14 18:08:32 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-04-14 18:08:31 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-04-14 18:08:31 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-04-14 18:08:31 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-04-14 09:30:20 ----A---- C:\Windows\system32\IMInstaller.exe
2011-04-13 11:00:08 ----A---- C:\Windows\system32\FFInstaller.exe
2011-04-13 01:11:04 ----D---- C:\Users\Sabi\AppData\Roaming\Xilisoft
2011-04-13 01:09:11 ----D---- C:\Program Files\Xilisoft
2011-04-13 00:47:33 ----D---- C:\Users\Sabi\AppData\Roaming\AnvSoft
2011-04-13 00:47:24 ----D---- C:\Program Files\AnvSoft
2011-04-12 12:15:26 ----A---- C:\Windows\system32\FAn.exe
2011-04-11 13:45:21 ----A---- C:\Windows\system32\log.txt
2011-04-11 13:45:20 ----A---- C:\Windows\system32\WFInstaller.exe
2011-04-11 10:38:24 ----D---- C:\Program Files\Yontoo Layers
2011-04-11 10:38:23 ----D---- C:\ProgramData\Tarma Installer
2011-04-11 10:30:26 ----D---- C:\Program Files\MyWebSearch
2011-04-11 10:29:41 ----D---- C:\Program Files\FunWebProducts
2011-04-11 10:19:32 ----D---- C:\Program Files\WAV To MP3 Plus
2011-04-11 00:49:28 ----D---- C:\Program Files\Common Files\FreeCause
2011-04-11 00:49:21 ----D---- C:\Program Files\Pazera Toolbar
2011-04-11 00:49:20 ----D---- C:\Program Files\Free WAV To MP3 Converter
2011-04-11 00:44:14 ----D---- C:\Users\Sabi\AppData\Roaming\klonsoft
2011-04-11 00:44:14 ----D---- C:\Temp

======List of files/folders modified in the last 1 months======

2011-05-03 10:41:57 ----D---- C:\Windows\Temp
2011-05-03 10:41:23 ----D---- C:\Windows\Prefetch
2011-05-03 10:41:10 ----RD---- C:\Program Files
2011-05-03 10:35:21 ----D---- C:\Windows\system32\Tasks
2011-05-03 10:30:31 ----D---- C:\Users\Sabi\AppData\Roaming\Skype
2011-05-03 10:02:20 ----SHD---- C:\System Volume Information
2011-05-03 10:00:45 ----D---- C:\Windows\system32\config
2011-05-03 09:50:16 ----D---- C:\Users\Sabi\AppData\Roaming\skypePM
2011-05-02 21:15:09 ----D---- C:\Windows\winsxs
2011-05-02 21:13:59 ----D---- C:\Program Files\Microsoft Silverlight
2011-05-02 21:13:05 ----D---- C:\Windows\system32\drivers
2011-05-02 21:13:05 ----D---- C:\Windows\system32\cs-CZ
2011-05-02 21:13:05 ----D---- C:\Windows\System32
2011-05-02 21:13:05 ----D---- C:\Windows\AppPatch
2011-05-02 21:13:04 ----D---- C:\Windows\system32\DriverStore
2011-05-02 21:13:04 ----D---- C:\Windows
2011-05-02 20:10:25 ----SHD---- C:\Windows\Installer
2011-05-01 19:01:23 ----D---- C:\Windows\system32\catroot2
2011-05-01 18:01:50 ----AD---- C:\ProgramData\TEMP
2011-04-26 20:21:41 ----D---- C:\Windows\system32\catroot
2011-04-20 09:33:44 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-04-20 09:33:43 ----D---- C:\Windows\inf
2011-04-19 23:24:02 ----D---- C:\Windows\Microsoft.NET
2011-04-19 23:23:58 ----RSD---- C:\Windows\assembly
2011-04-18 20:46:37 ----D---- C:\Windows\system32\migration
2011-04-18 20:46:37 ----D---- C:\Program Files\Internet Explorer
2011-04-18 20:29:49 ----D---- C:\ProgramData\Microsoft Help
2011-04-18 19:25:10 ----A---- C:\Windows\system32\aswBoot.exe
2011-04-18 15:46:44 ----A---- C:\Windows\system32\MRT.exe
2011-04-11 10:38:23 ----HD---- C:\ProgramData
2011-04-11 00:49:28 ----D---- C:\Program Files\Common Files
2011-04-05 20:45:57 ----RD---- C:\Program Files\Skype
2011-04-05 20:42:24 ----D---- C:\Program Files\Common Files\Adobe
2011-04-05 20:41:42 ----D---- C:\Program Files\Adobe
2011-04-05 20:38:19 ----D---- C:\ProgramData\Adobe
2011-04-05 20:33:43 ----D---- C:\Program Files\Common Files\PX Storage Engine
2011-04-05 20:30:33 ----D---- C:\Program Files\Image-Line
2011-04-05 20:29:27 ----D---- C:\Program Files\PicaLoader
2011-04-05 10:13:55 ----D---- C:\Windows\system32\drivers\UMDF
2011-04-05 07:03:04 ----D---- C:\Program Files\Windows Live

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-05 330264]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2009-02-10 43872]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-10-13 691696]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-04-18 25432]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-04-18 441176]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-04-18 307288]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-04-18 49240]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-02 18992]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-02 16432]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-02 60976]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-04-18 19544]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-04-18 53592]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-10-05 1221632]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\Windows\system32\DRIVERS\DKbFltr.sys [2009-03-26 21000]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-23 4808192]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-07-06 2657120]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x86.sys [2009-11-13 58368]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-06-18 212400]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 av1jtaqb;av1jtaqb; C:\Windows\system32\drivers\av1jtaqb.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-07-01 86056]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-07-01 108072]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-07-01 18344]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 39272]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-06-24 167424]
S3 RtsUIR;Realtek IR Driver; C:\Windows\system32\DRIVERS\Rts516xIR.sys []
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2011-02-18 41984]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys []
S3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2009-08-09 29696]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-04-18 42184]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-18 582944]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2009-08-06 727584]
R2 Greg_Service;GRegService; C:\Program Files\Acer\Registration\GregHSRW.exe [2009-06-04 1150496]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-05 354840]
R2 MWLService;MyWinLocker Service; C:\Program Files\EgisTec\MyWinLocker 3\x86\\MWLService.exe [2009-08-06 311592]
R2 RS_Service;Raw Socket Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [2009-07-10 253952]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-22 135664]
S3 BBSvc;Bing Bar Update Service; C:\Program Files\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-22 135664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]

-----------------EOF-----------------

Zdravim a pekny den preji

Spustte HJT a provedeme fixnuti polozek

• HJT najdete zde C:\Program Files\trend micro\Sabi.exe
• Otevre se Vam okno, kliknete na Do a system scan only
• V dalsim okne najdete radky které jsem Vam vypsal nize, vedle nich je ctverecek, do ktereho udelate zatrzitko
• R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.mywebsearch.com/index.jhtml ... 03yDu7Rjaw
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACA ... 5w5862392o
  R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Sabi\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
  R3 - URLSearchHook: (no name) - - (no file)
• Kliknete na Fix checked (vlevo dole)
• HJT se Vas zepta zda opravdu ANO, s tim souhlasite a je hotovo

Stahnete a spustte exeHelper http://www.raktor.net/exeHelper/exeHelper.com utilita probehne a vyplivne log, ten sem pak vlozte

nevím jestli je to ten správný log, ale nic jinho mi to nevyplivlo:

exeHelper by Raktor
Build 20100414
Run at 11:13:49 on 05/03/11
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
Checking for bad processes...
Checking for bad files...
Checking for bad registry entries...
Resetting filetype association for .exe
Resetting filetype association for .com
Resetting userinit and shell values...
Resetting policies...
--Finished--

Ano, tohle jsem chtel

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

ComboFix 11-05-02.04 - Sabi 03.05.2011 11:28:57.1.2 - x86
Microsoft Windows 7 Starter 6.1.7600.0.1250.420.1029.18.1014.293 [GMT 2:00]
Spuštěný z: c:\users\Sabi\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\FunWebProducts
c:\program files\MyWebSearch
c:\program files\MyWebSearch\bar\Settings\s_pid.dat
c:\programdata\Tarma Installer
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setup.dll
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.dat
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.exe
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.ico
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-04-03 do 2011-05-03 )))))))))))))))))))))))))))))))
.
.
2011-05-03 09:49 . 2011-05-03 09:49 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-05-03 08:41 . 2011-05-03 08:41 -------- d-----w- c:\program files\trend micro
2011-05-03 08:41 . 2011-05-03 08:42 -------- d-----w- C:\rsit
2011-05-03 08:02 . 2011-04-11 07:04 7071056 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{9C7A927E-C62D-496D-A935-7937038467FE}\mpengine.dll
2011-05-02 20:31 . 2011-05-03 08:32 -------- d-----w- c:\users\Sabi\AppData\Local\{3E8F404E-3BAE-4CC8-85FF-EBD72C367BCD}
2011-05-02 19:10 . 2011-04-18 17:17 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-05-02 19:10 . 2011-04-18 17:25 40112 ----a-w- c:\windows\avastSS.scr
2011-05-02 08:30 . 2011-05-02 08:31 -------- d-----w- c:\users\Sabi\AppData\Local\{418BC7E0-1089-450C-B2D0-FE62DC7CB7E5}
2011-05-01 07:00 . 2011-05-01 07:01 -------- d-----w- c:\users\Sabi\AppData\Local\{E8853985-D540-4365-B8D4-991526C3259A}
2011-04-29 14:05 . 2011-04-29 14:05 2896263 ----a-w- c:\windows\system32\FCM.exe
2011-04-29 13:36 . 2011-04-30 09:07 -------- d-----w- c:\users\Sabi\AppData\Local\{D5749AC2-E2C4-4E01-B22B-0C3A99262645}
2011-04-26 18:24 . 2011-02-18 05:33 31232 ----a-w- c:\windows\system32\prevhost.exe
2011-04-26 18:23 . 2011-03-11 05:44 143744 ----a-w- c:\windows\system32\drivers\nvstor.sys
2011-04-26 18:23 . 2011-03-11 05:44 1210240 ----a-w- c:\windows\system32\drivers\ntfs.sys
2011-04-26 18:23 . 2011-03-11 05:44 117120 ----a-w- c:\windows\system32\drivers\nvraid.sys
2011-04-26 18:23 . 2011-03-11 05:43 80256 ----a-w- c:\windows\system32\drivers\amdsata.sys
2011-04-26 18:23 . 2011-03-11 05:39 1686016 ----a-w- c:\windows\system32\esent.dll
2011-04-26 18:23 . 2011-03-11 05:44 146304 ----a-w- c:\windows\system32\drivers\storport.sys
2011-04-26 18:23 . 2011-03-11 05:43 332160 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2011-04-26 18:23 . 2011-03-11 05:43 22400 ----a-w- c:\windows\system32\drivers\amdxata.sys
2011-04-26 18:23 . 2011-03-11 05:37 74240 ----a-w- c:\windows\system32\fsutil.exe
2011-04-26 18:22 . 2011-02-26 05:33 2614784 ----a-w- c:\windows\explorer.exe
2011-04-26 18:22 . 2011-03-12 11:31 442880 ----a-w- c:\windows\system32\XpsPrint.dll
2011-04-23 09:16 . 2011-04-23 12:07 -------- d-----w- c:\program files\SignSIS-GUI
2011-04-18 18:51 . 2011-04-22 08:47 -------- d-----w- c:\users\Sabi\AppData\Local\{FB4A81DA-0F6E-4BD0-BBA8-D4BD7693C471}
2011-04-15 11:23 . 2011-04-15 11:23 493686 ----a-w- c:\windows\system32\CTn.exe
2011-04-14 16:08 . 2011-03-03 03:31 2331136 ----a-w- c:\windows\system32\win32k.sys
2011-04-14 16:08 . 2011-02-12 05:30 191488 ----a-w- c:\windows\system32\FXSCOVER.exe
2011-04-14 16:08 . 2011-02-24 05:32 288256 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-04-14 16:08 . 2011-03-08 05:38 740864 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-14 16:08 . 2011-03-11 05:40 1137664 ----a-w- c:\windows\system32\mfc42.dll
2011-04-14 16:08 . 2011-03-11 05:40 1164288 ----a-w- c:\windows\system32\mfc42u.dll
2011-04-14 16:08 . 2011-02-23 05:05 221696 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-04-14 16:08 . 2011-02-23 05:05 95744 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-04-14 16:08 . 2011-02-23 05:05 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-14 16:08 . 2011-02-23 05:05 69632 ----a-w- c:\windows\system32\drivers\bowser.sys
2011-04-14 07:30 . 2011-04-14 07:30 899491 ----a-w- c:\windows\system32\IMInstaller.exe
2011-04-13 09:00 . 2011-04-13 09:00 788694 ----a-w- c:\windows\system32\FFInstaller.exe
2011-04-12 23:11 . 2011-04-12 23:11 -------- d-----w- c:\users\Sabi\AppData\Roaming\Xilisoft
2011-04-12 23:09 . 2011-04-12 23:09 -------- d-----w- c:\program files\Xilisoft
2011-04-12 22:47 . 2011-04-12 22:47 -------- d-----w- c:\users\Sabi\AppData\Roaming\AnvSoft
2011-04-12 22:47 . 2011-04-12 22:47 -------- d-----w- c:\program files\AnvSoft
2011-04-12 10:15 . 2011-04-12 10:15 392951 ----a-w- c:\windows\system32\FAn.exe
2011-04-11 11:45 . 2011-04-11 11:45 1510378 ----a-w- c:\windows\system32\WFInstaller.exe
2011-04-11 10:57 . 2011-04-11 10:57 -------- d-----w- c:\users\Sabi\AppData\Local\{E82F946D-0202-40C7-A54A-586919E93F0A}
2011-04-11 08:38 . 2011-04-11 08:38 -------- d-----w- c:\program files\Yontoo Layers
2011-04-11 08:37 . 2011-04-11 08:37 -------- d-----w- c:\users\Sabi\AppData\Local\TempRp
2011-04-11 08:29 . 2011-04-11 08:29 -------- d-----w- c:\users\Sabi\AppData\Local\TempInstall
2011-04-11 08:19 . 2011-05-03 08:35 -------- d-----w- c:\program files\WAV To MP3 Plus
2011-04-10 22:49 . 2011-04-10 22:49 -------- d-----w- c:\program files\Common Files\FreeCause
2011-04-10 22:49 . 2011-04-11 08:29 -------- d-----w- c:\users\Sabi\AppData\Local\TempImg
2011-04-10 22:49 . 2011-04-10 22:49 -------- d-----w- c:\program files\Pazera Toolbar
2011-04-10 22:49 . 2011-04-11 08:13 -------- d-----w- c:\program files\Free WAV To MP3 Converter
2011-04-10 22:48 . 2011-04-10 22:48 -------- d-----w- c:\users\Sabi\AppData\Local\TempImages
2011-04-10 22:44 . 2011-04-10 22:45 -------- d-----w- C:\Temp
2011-04-10 22:44 . 2011-04-10 22:44 -------- d-----w- c:\users\Sabi\AppData\Roaming\klonsoft
2011-04-05 07:06 . 2011-04-05 19:07 -------- d-----w- c:\users\Sabi\AppData\Local\{5BC23605-8C6B-46C0-A235-688621D3B9C8}
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-18 17:25 . 2010-04-23 09:02 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-04-18 17:17 . 2010-04-23 09:03 307288 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-04-18 17:16 . 2010-04-23 09:03 49240 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-04-18 17:13 . 2010-04-23 09:03 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-04-18 17:13 . 2010-04-23 09:03 53592 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-04-18 17:12 . 2010-04-23 09:03 19544 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-03-10 10:30 . 2010-06-24 10:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-02-19 05:33 . 2011-03-09 15:35 802304 ----a-w- c:\windows\system32\FntCache.dll
2011-02-19 05:32 . 2011-03-09 15:35 1074176 ----a-w- c:\windows\system32\DWrite.dll
2011-02-19 05:32 . 2011-03-09 15:35 739840 ----a-w- c:\windows\system32\d2d1.dll
2011-02-18 15:36 . 2011-02-18 15:36 41984 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2011-02-18 15:36 . 2011-02-18 15:36 4184352 ----a-w- c:\windows\system32\usbaaplrc.dll
2011-02-03 05:45 . 2011-02-09 08:27 219008 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2011-02-02 20:40 . 2010-11-10 10:58 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-02-02 16:11 . 2010-04-22 20:28 222080 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1B169632-4FA6-4BE0-B980-460B5BF7FD08}]
2011-04-10 22:49 1515008 ----a-w- c:\program files\Pazera Toolbar\Toolbar.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
2011-02-28 22:11 191488 ------w- c:\program files\Yontoo Layers\YontooIEClient.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{093B3D46-0F87-44CF-B44B-79537F1597E5}"= "c:\program files\Pazera Toolbar\Toolbar.dll" [2011-04-10 1515008]
.
[HKEY_CLASSES_ROOT\clsid\{093b3d46-0f87-44cf-b44b-79537f1597e5}]
[HKEY_CLASSES_ROOT\FCTB000063263.IEToolbar.3]
[HKEY_CLASSES_ROOT\TypeLib\{4A839EF3-D283-48A0-B24C-FF0911ED6A86}]
[HKEY_CLASSES_ROOT\FCTB000063263.IEToolbar]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-04-18 17:25 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-08-06 17:18 120104 ----a-w- c:\program files\EgisTec\MyWinLocker 3\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-05-07 26211624]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LManager"="c:\program files\Launch Manager\LManager.exe" [2009-06-02 1130504]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-07-06 7600672]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-23 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-23 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-23 150552]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-18 795936]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-04-22 135664]
R3 BBSvc;Bing Bar Update Service;c:\program files\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-04-22 135664]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-06-24 167424]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-10-13 691696]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-02 18992]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-02 16432]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-02 60976]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-04-18 53592]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2009-08-06 727584]
S2 Greg_Service;GRegService;c:\program files\Acer\Registration\GregHSRW.exe [2009-06-04 1150496]
S2 MWLService;MyWinLocker Service;c:\program files\EgisTec\MyWinLocker 3\x86\\MWLService.exe [2009-08-06 311592]
S2 RS_Service;Raw Socket Service;c:\program files\Acer\Acer VCM\RS_Service.exe [2009-07-10 253952]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2009-11-13 58368]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - ASWSNX
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc
.
Obsah adresáře 'Naplánované úlohy'
.
2011-05-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-22 15:12]
.
2011-05-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-22 15:12]
.
.
------- Doplňkový sken -------
.
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0405&m=aspire_one&r=27b504103015l03d4wwj5w5862392o
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
TCP: {E1D1366E-035D-4E53-81A1-B77285C9AC87} = 10.10.10.1,10.10.10.2
FF - ProfilePath - c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&type=616163&p=
FF - prefs.js: network.proxy.type - 0
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Yontoo Layers: plugin@yontoo.com - %profile%\extensions\plugin@yontoo.com
FF - Ext: QipAuthorizer: {32a1fd71-835e-4b11-8e54-886fda0b4c89} - %profile%\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: avast! WebRep: wrc@avast.com - c:\program files\Alwil Software\Avast5\WebRep\FF
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
SafeBoot-mcmscsvc
SafeBoot-MCODS
AddRemove-{889DF117-14D1-44EE-9F31-C5FB5D47F68B} - c:\progra~2\TARMAI~1\{889DF~1\Setup.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2011-05-03 11:55:15
ComboFix-quarantined-files.txt 2011-05-03 09:55
.
Před spuštěním: Volných bajtů: 79 344 148 480
Po spuštění: Volných bajtů: 78 923 747 328
.
- - End Of File - - 5B873ED2CCD8057C9B6CD18EB0DE8E8D

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  KillAll::
  
  Folder::
  c:\program files\Pazera Toolbar
  
  Registry::
  [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1B169632-4FA6-4BE0-B980-460B5BF7FD08}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
  "{093B3D46-0F87-44CF-B44B-79537F1597E5}"=-
  [-HKEY_CLASSES_ROOT\clsid\{093b3d46-0f87-44cf-b44b-79537f1597e5}]
  [-HKEY_CLASSES_ROOT\FCTB000063263.IEToolbar.3]
  [-HKEY_CLASSES_ROOT\TypeLib\{4A839EF3-D283-48A0-B24C-FF0911ED6A86}]
  [-HKEY_CLASSES_ROOT\FCTB000063263.IEToolbar]
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "Skype"=-
  "DAEMON Tools Lite"=-
  "msnmsgr"=-
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "AdobeAAMUpdater-1.0"=-
  "SunJavaUpdateSched"=-
  "SwitchBoard"=-
  "AdobeCS5ServiceManager"=-
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
  
  Driver::
  gupdate
  BBSvc
  gupdatem
  
  DDs::
  mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACA ... 5w5862392o
  
  Firefox::
  FF - ProfilePath - c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\
  FF - prefs.js: browser.search.selectedEngine - Yahoo
  FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=utf-8 ... =616163&p=
  FF - Ext: QipAuthorizer: {32a1fd71-835e-4b11-8e54-886fda0b4c89} - %profile%\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}
  FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
  
  RegLock::
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  
  File::
  C:\Users\Sabi\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll 
  C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  
  Reboot::

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

tak tady to je:

ComboFix 11-05-02.04 - Sabi 03.05.2011 12:27:45.2.2 - x86
Microsoft Windows 7 Starter 6.1.7600.0.1250.420.1029.18.1014.452 [GMT 2:00]
Spuštěný z: c:\users\Sabi\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Sabi\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\users\Sabi\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll"
"c:\windows\tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Pazera Toolbar
c:\program files\Pazera Toolbar\aboutTabs.7.js
c:\program files\Pazera Toolbar\aboutTabs.8.js
c:\program files\Pazera Toolbar\audio.bmp
c:\program files\Pazera Toolbar\banner_container.html
c:\program files\Pazera Toolbar\blockcursor.cur
c:\program files\Pazera Toolbar\blocksound.wav
c:\program files\Pazera Toolbar\bookmark_off.bmp
c:\program files\Pazera Toolbar\bookmark_on.bmp
c:\program files\Pazera Toolbar\bookmarksplugin.dll
c:\program files\Pazera Toolbar\bubble_permissions.html
c:\program files\Pazera Toolbar\build
c:\program files\Pazera Toolbar\caching_banner.html
c:\program files\Pazera Toolbar\component.xsl
c:\program files\Pazera Toolbar\default.xml
c:\program files\Pazera Toolbar\efolder.bmp
c:\program files\Pazera Toolbar\email.bmp
c:\program files\Pazera Toolbar\email2.bmp
c:\program files\Pazera Toolbar\emailchecker_plugin.dll
c:\program files\Pazera Toolbar\facebook.feature
c:\program files\Pazera Toolbar\fbrss.xsl
c:\program files\Pazera Toolbar\ff.xsl
c:\program files\Pazera Toolbar\folder.bmp
c:\program files\Pazera Toolbar\Helper.dll
c:\program files\Pazera Toolbar\chevron.bmp
c:\program files\Pazera Toolbar\icons.bmp
c:\program files\Pazera Toolbar\iefavelem.bmp
c:\program files\Pazera Toolbar\ImageConversion.dll
c:\program files\Pazera Toolbar\images\amazon.bmp
c:\program files\Pazera Toolbar\images\ebay.bmp
c:\program files\Pazera Toolbar\images\email.bmp
c:\program files\Pazera Toolbar\images\email2.bmp
c:\program files\Pazera Toolbar\images\msgbox\down.gif
c:\program files\Pazera Toolbar\images\msgbox\hr.bmp
c:\program files\Pazera Toolbar\images\msgbox\mark.png
c:\program files\Pazera Toolbar\images\msgbox\mark_do.png
c:\program files\Pazera Toolbar\images\msgbox\mark_na.png
c:\program files\Pazera Toolbar\images\msgbox\navbg.bmp
c:\program files\Pazera Toolbar\images\msgbox\refresh.png
c:\program files\Pazera Toolbar\images\msgbox\refresh_do.png
c:\program files\Pazera Toolbar\images\msgbox\refresh_na.png
c:\program files\Pazera Toolbar\images\msgbox\trash.png
c:\program files\Pazera Toolbar\images\msgbox\trash_do.png
c:\program files\Pazera Toolbar\images\msgbox\trash_na.png
c:\program files\Pazera Toolbar\images\msgbox\unmark.png
c:\program files\Pazera Toolbar\images\msgbox\unmark_do.png
c:\program files\Pazera Toolbar\images\msgbox\unmark_na.png
c:\program files\Pazera Toolbar\images\msgbox\up.gif
c:\program files\Pazera Toolbar\images\ticker\left.gif
c:\program files\Pazera Toolbar\images\ticker\right.gif
c:\program files\Pazera Toolbar\images\weather\0.bmp
c:\program files\Pazera Toolbar\images\weather\1.bmp
c:\program files\Pazera Toolbar\images\weather\10.bmp
c:\program files\Pazera Toolbar\images\weather\11.bmp
c:\program files\Pazera Toolbar\images\weather\12.bmp
c:\program files\Pazera Toolbar\images\weather\13.bmp
c:\program files\Pazera Toolbar\images\weather\14.bmp
c:\program files\Pazera Toolbar\images\weather\15.bmp
c:\program files\Pazera Toolbar\images\weather\16.bmp
c:\program files\Pazera Toolbar\images\weather\17.bmp
c:\program files\Pazera Toolbar\images\weather\18.bmp
c:\program files\Pazera Toolbar\images\weather\19.bmp
c:\program files\Pazera Toolbar\images\weather\2.bmp
c:\program files\Pazera Toolbar\images\weather\20.bmp
c:\program files\Pazera Toolbar\images\weather\21.bmp
c:\program files\Pazera Toolbar\images\weather\22.bmp
c:\program files\Pazera Toolbar\images\weather\23.bmp
c:\program files\Pazera Toolbar\images\weather\24.bmp
c:\program files\Pazera Toolbar\images\weather\25.bmp
c:\program files\Pazera Toolbar\images\weather\26.bmp
c:\program files\Pazera Toolbar\images\weather\27.bmp
c:\program files\Pazera Toolbar\images\weather\28.bmp
c:\program files\Pazera Toolbar\images\weather\29.bmp
c:\program files\Pazera Toolbar\images\weather\3.bmp
c:\program files\Pazera Toolbar\images\weather\30.bmp
c:\program files\Pazera Toolbar\images\weather\31.bmp
c:\program files\Pazera Toolbar\images\weather\32.bmp
c:\program files\Pazera Toolbar\images\weather\33.bmp
c:\program files\Pazera Toolbar\images\weather\34.bmp
c:\program files\Pazera Toolbar\images\weather\35.bmp
c:\program files\Pazera Toolbar\images\weather\36.bmp
c:\program files\Pazera Toolbar\images\weather\37.bmp
c:\program files\Pazera Toolbar\images\weather\38.bmp
c:\program files\Pazera Toolbar\images\weather\39.bmp
c:\program files\Pazera Toolbar\images\weather\4.bmp
c:\program files\Pazera Toolbar\images\weather\40.bmp
c:\program files\Pazera Toolbar\images\weather\41.bmp
c:\program files\Pazera Toolbar\images\weather\42.bmp
c:\program files\Pazera Toolbar\images\weather\43.bmp
c:\program files\Pazera Toolbar\images\weather\44.bmp
c:\program files\Pazera Toolbar\images\weather\45.bmp
c:\program files\Pazera Toolbar\images\weather\46.bmp
c:\program files\Pazera Toolbar\images\weather\47.bmp
c:\program files\Pazera Toolbar\images\weather\5.bmp
c:\program files\Pazera Toolbar\images\weather\6.bmp
c:\program files\Pazera Toolbar\images\weather\7.bmp
c:\program files\Pazera Toolbar\images\weather\8.bmp
c:\program files\Pazera Toolbar\images\weather\9.bmp
c:\program files\Pazera Toolbar\images\weather\hr.bmp
c:\program files\Pazera Toolbar\images\weather\na.bmp
c:\program files\Pazera Toolbar\images\weather\png\0.png
c:\program files\Pazera Toolbar\images\weather\png\1.png
c:\program files\Pazera Toolbar\images\weather\png\10.png
c:\program files\Pazera Toolbar\images\weather\png\11.png
c:\program files\Pazera Toolbar\images\weather\png\12.png
c:\program files\Pazera Toolbar\images\weather\png\13.png
c:\program files\Pazera Toolbar\images\weather\png\14.png
c:\program files\Pazera Toolbar\images\weather\png\15.png
c:\program files\Pazera Toolbar\images\weather\png\16.png
c:\program files\Pazera Toolbar\images\weather\png\17.png
c:\program files\Pazera Toolbar\images\weather\png\18.png
c:\program files\Pazera Toolbar\images\weather\png\19.png
c:\program files\Pazera Toolbar\images\weather\png\2.png
c:\program files\Pazera Toolbar\images\weather\png\20.png
c:\program files\Pazera Toolbar\images\weather\png\21.png
c:\program files\Pazera Toolbar\images\weather\png\22.png
c:\program files\Pazera Toolbar\images\weather\png\23.png
c:\program files\Pazera Toolbar\images\weather\png\24.png
c:\program files\Pazera Toolbar\images\weather\png\25.png
c:\program files\Pazera Toolbar\images\weather\png\26.png
c:\program files\Pazera Toolbar\images\weather\png\27.png
c:\program files\Pazera Toolbar\images\weather\png\28.png
c:\program files\Pazera Toolbar\images\weather\png\29.png
c:\program files\Pazera Toolbar\images\weather\png\3.png
c:\program files\Pazera Toolbar\images\weather\png\30.png
c:\program files\Pazera Toolbar\images\weather\png\31.png
c:\program files\Pazera Toolbar\images\weather\png\32.png
c:\program files\Pazera Toolbar\images\weather\png\33.png
c:\program files\Pazera Toolbar\images\weather\png\34.png
c:\program files\Pazera Toolbar\images\weather\png\35.png
c:\program files\Pazera Toolbar\images\weather\png\36.png
c:\program files\Pazera Toolbar\images\weather\png\37.png
c:\program files\Pazera Toolbar\images\weather\png\38.png
c:\program files\Pazera Toolbar\images\weather\png\39.png
c:\program files\Pazera Toolbar\images\weather\png\4.png
c:\program files\Pazera Toolbar\images\weather\png\40.png
c:\program files\Pazera Toolbar\images\weather\png\41.png
c:\program files\Pazera Toolbar\images\weather\png\42.png
c:\program files\Pazera Toolbar\images\weather\png\43.png
c:\program files\Pazera Toolbar\images\weather\png\44.png
c:\program files\Pazera Toolbar\images\weather\png\45.png
c:\program files\Pazera Toolbar\images\weather\png\46.png
c:\program files\Pazera Toolbar\images\weather\png\47.png
c:\program files\Pazera Toolbar\images\weather\png\5.png
c:\program files\Pazera Toolbar\images\weather\png\6.png
c:\program files\Pazera Toolbar\images\weather\png\7.png
c:\program files\Pazera Toolbar\images\weather\png\8.png
c:\program files\Pazera Toolbar\images\weather\png\9.png
c:\program files\Pazera Toolbar\images\weather\png\na.png
c:\program files\Pazera Toolbar\images\wikipedia.bmp
c:\program files\Pazera Toolbar\images\yahoo.bmp
c:\program files\Pazera Toolbar\localization.xml
c:\program files\Pazera Toolbar\location.xsl
c:\program files\Pazera Toolbar\magglass.ico
c:\program files\Pazera Toolbar\manage_bookmarks.html
c:\program files\Pazera Toolbar\marquee.html
c:\program files\Pazera Toolbar\marquee_permissions.html
c:\program files\Pazera Toolbar\messaging.bmp
c:\program files\Pazera Toolbar\minus.bmp
c:\program files\Pazera Toolbar\msgbox_bubble.tmpl
c:\program files\Pazera Toolbar\msgbox_openmsg.tmpl
c:\program files\Pazera Toolbar\msgboxplugin.dll
c:\program files\Pazera Toolbar\offline.html
c:\program files\Pazera Toolbar\patch.bat
c:\program files\Pazera Toolbar\plus.bmp
c:\program files\Pazera Toolbar\podcast.bmp
c:\program files\Pazera Toolbar\podcast.xsl
c:\program files\Pazera Toolbar\radio.bmp
c:\program files\Pazera Toolbar\RadioPlugin.dll
c:\program files\Pazera Toolbar\resize.bmp
c:\program files\Pazera Toolbar\rssfeed.bmp
c:\program files\Pazera Toolbar\RSSReader_plugin.dll
c:\program files\Pazera Toolbar\search.xsl
c:\program files\Pazera Toolbar\SearchComponent.dll
c:\program files\Pazera Toolbar\settings
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_dropdwn_down.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_dropdwn_over.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_dropdwn_up.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_max_down.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_max_over.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_max_up.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_min_down.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_min_over.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_min_up.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_pause_down.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_pause_over.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_pause_up.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_play_down.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_play_over.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_play_up.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_playcntrl_over.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_playcntrl_up.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_stop_down.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_stop_over.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_stop_up.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_volcntrl_over.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\btn_volcntrl_up.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\Equalizer1.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\Equalizer2.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\Equalizer3.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\Equalizer4.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\Equalizer5.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\Equalizer6.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\playcntrl_bg.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\radio.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\radio_mask.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\radio_minimalized.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\radio_minimalized_mask.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\station.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\vol_01.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\vol_02.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\vol_03.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\volslide_bg.bmp
c:\program files\Pazera Toolbar\skins\radio\gray03\volslide_track.bmp
c:\program files\Pazera Toolbar\star_on.gif
c:\program files\Pazera Toolbar\ticker.html
c:\program files\Pazera Toolbar\Toolbar.dll
c:\program files\Pazera Toolbar\ToolbarUpdate.exe
c:\program files\Pazera Toolbar\TroubleShooter.exe
c:\program files\Pazera Toolbar\Uninst.exe
c:\program files\Pazera Toolbar\update_progress.html
c:\program files\Pazera Toolbar\version.txt
c:\program files\Pazera Toolbar\version.xsl
c:\program files\Pazera Toolbar\weather_bubble.tmpl
c:\program files\Pazera Toolbar\weatherplugin.dll
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\components\qippipe.dll
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\components\qippipe.xpt
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\defaults\preferences\prefs.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\chrome.manifest
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\chrome\content\ff-overlay.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\chrome\content\ff-overlay.xul
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\chrome\content\overlay.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\chrome\locale\en-US\overlay.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\chrome\locale\en-US\overlay.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\chrome\skin\overlay.css
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\install.rdf
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components\ITB_History.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\prefs.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\user.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome.manifest
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\about.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\about.xul
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\autocomplete.xml
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\exitobserver.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\globals.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\highlight.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtabs.css
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtabs.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtoolbar.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtoolbar.xul
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\bgLarge.gif
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\bgSmall.gif
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\buttonBlue.gif
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\buttonGreen.gif
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\searchLogo.gif
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\localfileupdate.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\menu-button.xml
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab.html
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_bg.html
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_cz.html
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_de.html
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_en.html
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_es.html
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_fr.html
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_he.html
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_it.html
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_ru.html
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_sk.html
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_tr.html
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab_uk.html
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\options.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\options.xul
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\parsegamesxml.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\parsemenuxml.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\peoplesearch.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\peoplesearch.xul
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\prefutils.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\search.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\sitespanel.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\splitter.xml
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\statistics.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\tabcontext.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\utilities.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\voucher.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\zoom.js
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\icq_locale.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\itb.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\itb_options.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\options.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\icq_locale.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\itb.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\itb_options.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\options.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\icq_locale.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\itb.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\itb_options.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\options.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\icq_locale.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\itb.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\itb_options.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\options.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\icq_locale.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\itb.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\itb_options.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\options.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\icq_locale.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\itb.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\itb_options.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\options.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\icq_locale.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\itb.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\itb_options.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\options.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\icq_locale.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\itb.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\itb_options.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\options.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\icq_locale.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\itb.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\itb_options.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\options.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\icq_locale.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\itb.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\itb_options.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\options.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\icq_locale.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\itb.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\itb_options.dtd
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\options.properties
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\about.css
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\abt.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\ain.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\ang.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\arrow_eng.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\arrow_heb.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\btn_bg.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\btn_bg_lite.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\default.css
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\dis.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\dropmarker.css
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\20minutos.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\about.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\abv.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aktuality.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aktualne.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\alljobs.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\allocine.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\altervista.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\amazon.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\answers.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aol.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aolradio.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\apple.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ard.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\as.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\atlas.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\atlassk.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\aufeminin.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\autobazar.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\autobazar1.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\autocz.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\azet.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bazos.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bbc.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bbc.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bigmir.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\billiger.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bing.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\blesk.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\bleskove.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\btv.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\calcalist.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\cas.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\cdiscount.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\centrum.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ciao.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\cnet.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\cnn.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\commentcamarche.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\corriere.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\csfd.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\d.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\dailymotion.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\data.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\deezer.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\default.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\delicious.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\depositfiles.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\deviantart.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\diary.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\digg.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\dir.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\disney.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\diva.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\dnevnik.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\doctissimo.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\donanimhaber.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ebay.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ebayanuncios.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ekolay.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\elmundo.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\elpais.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\eurosport.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\expats.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\facebook.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\finance.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\firmy.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\flickr.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\flix.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\fotolog.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\fox.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\france2.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\free.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\garanti.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gazeta.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gazetevatan.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gazzetta.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gbg.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gepime.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gismeteo.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gittigidiyor.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\globes.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gmail.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\gmx.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\google.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\googleearth.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\googletranslate.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\haaretz.gif
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\haaretz.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\haber7.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\haberturk.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\hepsiburada.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\horadot.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\horoskopy.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\hurriyet.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\championat.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\chip.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\icq.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\idnes.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ilike.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ilmeteo.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\imageshack.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\imdb.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\impulse.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\infojobs.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\interfacelift.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\internethaber.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\iserialy.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\iua.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\izlesene.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\jappy.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\jeux.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\jeuxvideo.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\jing.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\joj.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\kijiji.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\kinopoisk.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\korrespondent.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lastfm.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\leboncoin.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lemonde.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lenta.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\leonardo.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lequipe.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\libero.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\libimseti.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\lide.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\linternaute.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\livejournal.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mailru.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mako.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mappy.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mapy.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\marca.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\marketgid.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\markiza.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\megavideo.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\meinvz.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mekusharim.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\meta.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\milanobakeca.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\milliyet.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mimibazar.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\minibazar.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mobilen.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\morfix.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mouse.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\mymovies.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\myspace.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\najisto.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\nana.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\nana10.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\netgames.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\netlog.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\novinky.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\novoteka.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\nrg.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ntvmsnbc.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\nytimes.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\odnoklassniki.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\one.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\orange.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\otto.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\pagesjaunes.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\peliculasyonkis.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\photobucket.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\picnik.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\pravda.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\profesia.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\prosieben.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\r10.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rapidshare.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rbc.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\repubblica.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rian.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rozetka.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\rtl.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sabah.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sahibinden.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sat1.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\segundamano.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\seriesyonkis.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\seznam.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\seznamemail.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sfr.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\shmu.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\schuelervz.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\skyrock.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\slsp.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sme.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\snimka.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\softonic.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\spiegel.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\splinder.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sport-express.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sport5.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sportal.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sportcz.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sportes.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\sporx.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\stahuj.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\stream.bmp
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\stream.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\studivz.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\subito.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\supercz.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\superhry.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\svejo.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\t-online.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\tapuz.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\taringa.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\telecinco.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\terra.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\tf1.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\themarker.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\tiscali.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\topky.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\torrents.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\travian.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\tv.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\twitter.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ucoz.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ukr.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vbox7.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vesti.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vimeo.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\virgilio.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vkontakte.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\vodafone.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\walla.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wallmart.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\walmart.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wamba.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wat.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\weather.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\web.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wer-kennt-wen.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wetter.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wikipedia.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\wolframalpha.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\yad2.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\yahoo.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\ynet.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\youtube.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\zamunda.bmp
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\zap.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\favicon\zena.ico
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\hide.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\icons.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\logo_small.gif
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\menu.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\more_vouchers_r.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\more_vouchers_y.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\options.css
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\peoplesearch.css
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\pin.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\pinc.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\powerd1.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\remove.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\reset.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\search_arrow.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\search_bg.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\unpin.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\voucher_bg.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\voucher_bg_y.png
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\install.rdf
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\manifest.mf
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.rsa
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.sf
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.gif
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.src
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.xml
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\blacklist.xml
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites.xml
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_33.xml
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_34.xml
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_359.xml
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_380.xml
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_39.xml
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_42.xml
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_4201.xml
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_49.xml
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_7.xml

c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_90.xml
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\local_sites_972.xml
c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\sites\voucher_list.xml
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_BBSvc
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-04-03 do 2011-05-03 )))))))))))))))))))))))))))))))
.
.
2011-05-03 10:58 . 2011-05-03 10:58 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-05-03 08:41 . 2011-05-03 08:41 -------- d-----w- c:\program files\trend micro
2011-05-03 08:41 . 2011-05-03 08:42 -------- d-----w- C:\rsit
2011-05-03 08:02 . 2011-04-11 07:04 7071056 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{9C7A927E-C62D-496D-A935-7937038467FE}\mpengine.dll
2011-05-02 20:31 . 2011-05-03 08:32 -------- d-----w- c:\users\Sabi\AppData\Local\{3E8F404E-3BAE-4CC8-85FF-EBD72C367BCD}
2011-05-02 19:10 . 2011-04-18 17:17 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-05-02 19:10 . 2011-04-18 17:25 40112 ----a-w- c:\windows\avastSS.scr
2011-05-02 08:30 . 2011-05-02 08:31 -------- d-----w- c:\users\Sabi\AppData\Local\{418BC7E0-1089-450C-B2D0-FE62DC7CB7E5}
2011-05-01 07:00 . 2011-05-01 07:01 -------- d-----w- c:\users\Sabi\AppData\Local\{E8853985-D540-4365-B8D4-991526C3259A}
2011-04-29 14:05 . 2011-04-29 14:05 2896263 ----a-w- c:\windows\system32\FCM.exe
2011-04-29 13:36 . 2011-04-30 09:07 -------- d-----w- c:\users\Sabi\AppData\Local\{D5749AC2-E2C4-4E01-B22B-0C3A99262645}
2011-04-26 18:24 . 2011-02-18 05:33 31232 ----a-w- c:\windows\system32\prevhost.exe
2011-04-26 18:23 . 2011-03-11 05:44 143744 ----a-w- c:\windows\system32\drivers\nvstor.sys
2011-04-26 18:23 . 2011-03-11 05:44 1210240 ----a-w- c:\windows\system32\drivers\ntfs.sys
2011-04-26 18:23 . 2011-03-11 05:44 117120 ----a-w- c:\windows\system32\drivers\nvraid.sys
2011-04-26 18:23 . 2011-03-11 05:43 80256 ----a-w- c:\windows\system32\drivers\amdsata.sys
2011-04-26 18:23 . 2011-03-11 05:39 1686016 ----a-w- c:\windows\system32\esent.dll
2011-04-26 18:23 . 2011-03-11 05:44 146304 ----a-w- c:\windows\system32\drivers\storport.sys
2011-04-26 18:23 . 2011-03-11 05:43 332160 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2011-04-26 18:23 . 2011-03-11 05:43 22400 ----a-w- c:\windows\system32\drivers\amdxata.sys
2011-04-26 18:23 . 2011-03-11 05:37 74240 ----a-w- c:\windows\system32\fsutil.exe
2011-04-26 18:22 . 2011-02-26 05:33 2614784 ----a-w- c:\windows\explorer.exe
2011-04-26 18:22 . 2011-03-12 11:31 442880 ----a-w- c:\windows\system32\XpsPrint.dll
2011-04-23 09:16 . 2011-04-23 12:07 -------- d-----w- c:\program files\SignSIS-GUI
2011-04-18 18:51 . 2011-04-22 08:47 -------- d-----w- c:\users\Sabi\AppData\Local\{FB4A81DA-0F6E-4BD0-BBA8-D4BD7693C471}
2011-04-15 11:23 . 2011-04-15 11:23 493686 ----a-w- c:\windows\system32\CTn.exe
2011-04-14 16:08 . 2011-03-03 03:31 2331136 ----a-w- c:\windows\system32\win32k.sys
2011-04-14 16:08 . 2011-02-12 05:30 191488 ----a-w- c:\windows\system32\FXSCOVER.exe
2011-04-14 16:08 . 2011-02-24 05:32 288256 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-04-14 16:08 . 2011-03-08 05:38 740864 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-14 16:08 . 2011-03-11 05:40 1137664 ----a-w- c:\windows\system32\mfc42.dll
2011-04-14 16:08 . 2011-03-11 05:40 1164288 ----a-w- c:\windows\system32\mfc42u.dll
2011-04-14 16:08 . 2011-02-23 05:05 221696 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-04-14 16:08 . 2011-02-23 05:05 95744 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-04-14 16:08 . 2011-02-23 05:05 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-14 16:08 . 2011-02-23 05:05 69632 ----a-w- c:\windows\system32\drivers\bowser.sys
2011-04-14 07:30 . 2011-04-14 07:30 899491 ----a-w- c:\windows\system32\IMInstaller.exe
2011-04-13 09:00 . 2011-04-13 09:00 788694 ----a-w- c:\windows\system32\FFInstaller.exe
2011-04-12 23:11 . 2011-04-12 23:11 -------- d-----w- c:\users\Sabi\AppData\Roaming\Xilisoft
2011-04-12 23:09 . 2011-04-12 23:09 -------- d-----w- c:\program files\Xilisoft
2011-04-12 22:47 . 2011-04-12 22:47 -------- d-----w- c:\users\Sabi\AppData\Roaming\AnvSoft
2011-04-12 22:47 . 2011-04-12 22:47 -------- d-----w- c:\program files\AnvSoft
2011-04-12 10:15 . 2011-04-12 10:15 392951 ----a-w- c:\windows\system32\FAn.exe
2011-04-11 11:45 . 2011-04-11 11:45 1510378 ----a-w- c:\windows\system32\WFInstaller.exe
2011-04-11 10:57 . 2011-04-11 10:57 -------- d-----w- c:\users\Sabi\AppData\Local\{E82F946D-0202-40C7-A54A-586919E93F0A}
2011-04-11 08:38 . 2011-04-11 08:38 -------- d-----w- c:\program files\Yontoo Layers
2011-04-11 08:37 . 2011-04-11 08:37 -------- d-----w- c:\users\Sabi\AppData\Local\TempRp
2011-04-11 08:29 . 2011-04-11 08:29 -------- d-----w- c:\users\Sabi\AppData\Local\TempInstall
2011-04-11 08:19 . 2011-05-03 08:35 -------- d-----w- c:\program files\WAV To MP3 Plus
2011-04-10 22:49 . 2011-04-10 22:49 -------- d-----w- c:\program files\Common Files\FreeCause
2011-04-10 22:49 . 2011-04-11 08:29 -------- d-----w- c:\users\Sabi\AppData\Local\TempImg
2011-04-10 22:49 . 2011-04-11 08:13 -------- d-----w- c:\program files\Free WAV To MP3 Converter
2011-04-10 22:48 . 2011-04-10 22:48 -------- d-----w- c:\users\Sabi\AppData\Local\TempImages
2011-04-10 22:44 . 2011-04-10 22:45 -------- d-----w- C:\Temp
2011-04-10 22:44 . 2011-04-10 22:44 -------- d-----w- c:\users\Sabi\AppData\Roaming\klonsoft
2011-04-05 07:06 . 2011-04-05 19:07 -------- d-----w- c:\users\Sabi\AppData\Local\{5BC23605-8C6B-46C0-A235-688621D3B9C8}
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-18 17:25 . 2010-04-23 09:02 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-04-18 17:17 . 2010-04-23 09:03 307288 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-04-18 17:16 . 2010-04-23 09:03 49240 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-04-18 17:13 . 2010-04-23 09:03 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-04-18 17:13 . 2010-04-23 09:03 53592 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-04-18 17:12 . 2010-04-23 09:03 19544 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-03-10 10:30 . 2010-06-24 10:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-02-19 05:33 . 2011-03-09 15:35 802304 ----a-w- c:\windows\system32\FntCache.dll
2011-02-19 05:32 . 2011-03-09 15:35 1074176 ----a-w- c:\windows\system32\DWrite.dll
2011-02-19 05:32 . 2011-03-09 15:35 739840 ----a-w- c:\windows\system32\d2d1.dll
2011-02-18 15:36 . 2011-02-18 15:36 41984 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2011-02-18 15:36 . 2011-02-18 15:36 4184352 ----a-w- c:\windows\system32\usbaaplrc.dll
2011-02-03 05:45 . 2011-02-09 08:27 219008 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2011-02-02 20:40 . 2010-11-10 10:58 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-02-02 16:11 . 2010-04-22 20:28 222080 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
2011-02-28 22:11 191488 ------w- c:\program files\Yontoo Layers\YontooIEClient.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-04-18 17:25 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-08-06 17:18 120104 ----a-w- c:\program files\EgisTec\MyWinLocker 3\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LManager"="c:\program files\Launch Manager\LManager.exe" [2009-06-02 1130504]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-07-06 7600672]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-23 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-23 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-23 150552]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-18 795936]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-06-24 167424]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-10-13 691696]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-02 18992]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-02 16432]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-02 60976]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-04-18 53592]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2009-08-06 727584]
S2 Greg_Service;GRegService;c:\program files\Acer\Registration\GregHSRW.exe [2009-06-04 1150496]
S2 MWLService;MyWinLocker Service;c:\program files\EgisTec\MyWinLocker 3\x86\\MWLService.exe [2009-08-06 311592]
S2 RS_Service;Raw Socket Service;c:\program files\Acer\Acer VCM\RS_Service.exe [2009-07-10 253952]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2009-11-13 58368]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc
.
Obsah adresáře 'Naplánované úlohy'
.
2011-05-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-22 15:12]
.
2011-05-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-22 15:12]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
TCP: {E1D1366E-035D-4E53-81A1-B77285C9AC87} = 10.10.10.1,10.10.10.2
FF - ProfilePath - c:\users\Sabi\AppData\Roaming\Mozilla\Firefox\Profiles\mpwl3igz.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: network.proxy.type - 0
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Yontoo Layers: plugin@yontoo.com - %profile%\extensions\plugin@yontoo.com
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: avast! WebRep: wrc@avast.com - c:\program files\Alwil Software\Avast5\WebRep\FF
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-Pazera Toolbar - c:\program files\Pazera Toolbar\Uninst.exe
.
.
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(3648)
c:\program files\EgisTec\MyWinLocker 3\x86\psdprotect.dll
c:\program files\EgisTec\MyWinLocker 3\x86\sysenv.dll
c:\program files\WIDCOMM\Bluetooth Software\btncopy.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\WIDCOMM\Bluetooth Software\btwdins.exe
c:\program files\EgisTec\MyWinLocker 3\x86\MWLService.exe
c:\program files\Microsoft\BingBar\SeaPort.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\conhost.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Celkový čas: 2011-05-03 13:18:37 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-05-03 11:18
ComboFix2.txt 2011-05-03 09:55
.
Před spuštěním: Volných bajtů: 79 014 502 400
Po spuštění: Volných bajtů: 78 886 981 632
.
- - End Of File - - 65AA9F2900FC6632C4C5B0899AF2D414

Jak se chova PC

zatím nevidím nějakou extra změnu, s rychlostí to zjistím během zítřka, ale složky pořád nejdou otevírat dvojklikem. Cituji varování: K souboru není přidružen program, který by mohl tuto akci provést.Nainstalujte potřebný program;pokud je již nainstalovaný, vytvořte přidružení pomocí ovládacího panelu Výchozí programy.

Podotýkám že do ovládacích panelů jsem se již díval, ale bohužel jsem s tím nic neudělal a než abych něco zkonil, tak se raději poradím. Děkuji

Zkuste aplikovat Daft dle navodu kolegy http://www.diallix.net/index.php?option ... &Itemid=65

a má cenu to zkoušet když mám windows 7 a v podporovaných OS daftu sedmička není?

Zkusit jej muzete, akorat jej spustte jako spravce (klik na utilitu pravym mysidlem a dat Spustit jako spravce)

No vypsalo mi to 4 chyby, podle návodu jsem je zaškrtnul a kliknul na fix. Složky ale pořád nelze otevírat normálně

Složky už dvojklikem otevřít můžu, nakonec jsem to vyřešil přes stránku jednu. Jestli to k něčemu bude, můžu vám ji tady napsat, pro případ, že by někdo měl podobný problém. Stránka se nevztahuje pouze na otevírání složek, ale jakýchkoliv souborů, navíc je to i pro "kopyta". Já i tak děkuji za odbornou pomoc při vyčištění pc