Prosim o radu a kontrolu logu

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

TSvoboda
nováček
Příspěvky: 6
Registrován: prosinec 07
Pohlaví: Nespecifikováno
Stav:
Offline

Prosim o radu a kontrolu logu

Příspěvekod TSvoboda » 12 pro 2007 17:30

Ahoj, Stale se mi objevuji hlasky jako : Trojan-Spy.Win32, Trojan.Downloader.Zlob, NetWorm-i.Virus@fp. - porad pise hlasky pocitact ohrozeny a nabizi download softu pro odstraneni ..

Provedl jsem instalaci ComboFix a zde posilam log... (p.s. nejak dal nevim co s tim tak prosim o radu)
uffffffffffffff...

Diky predem

T

ComboFix 07-12-12.3 - user 2007-12-12 15:49:53.3 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.148 [GMT 0:00]
Running from: C:\Documents and Settings\user\Desktop\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\Autorun.inf
C:\Documents and Settings\user\Application Data\FunWebProducts
C:\Program Files\internet explorer\msimg32.dll
C:\setup.exe
C:\WINDOWS\system32\f3PSSavr.scr

.
((((((((((((((((((((((((( Files Created from 2007-11-12 to 2007-12-12 )))))))))))))))))))))))))))))))
.

2007-12-12 14:58 . 2007-12-04 13:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe
2007-12-12 14:58 . 2004-01-09 09:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx
2007-12-12 14:58 . 2007-12-04 12:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr
2007-12-12 14:58 . 2007-12-04 14:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2007-12-12 14:58 . 2007-12-04 14:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2007-12-12 14:58 . 2007-12-04 14:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2007-12-12 14:58 . 2007-12-04 14:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2007-12-12 14:58 . 2007-12-04 14:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2007-12-12 14:57 . 2007-12-12 14:57 <DIR> d-------- C:\Program Files\Alwil Software
2007-12-12 10:40 . 2007-12-12 15:37 <DIR> d-------- C:\Program Files\Trojan Remover
2007-12-12 10:40 . 2007-12-12 10:40 <DIR> d-------- C:\Documents and Settings\user\Application Data\Simply Super Software
2007-12-12 10:40 . 2007-12-12 10:40 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Simply Super Software
2007-12-12 10:40 . 2006-05-25 15:52 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll
2007-12-12 10:40 . 2003-02-02 20:06 153,088 --a------ C:\WINDOWS\system32\UNRAR3.dll
2007-12-12 10:40 . 2005-08-26 01:50 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll
2007-12-12 10:40 . 2002-03-06 01:00 75,264 --a------ C:\WINDOWS\system32\unacev2.dll
2007-12-12 10:40 . 2006-06-19 13:01 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll
2007-12-12 01:48 . 2007-12-12 01:48 1,158 --a------ C:\WINDOWS\mozver.dat
2007-12-11 21:11 . 2007-12-11 21:11 <DIR> d-------- C:\Program Files\SymNetDrv
2007-12-11 20:26 . 2007-12-12 15:33 <DIR> d-------- C:\Program Files\Norton AntiVirus
2007-12-11 20:26 . 2007-12-11 20:50 <DIR> d-------- C:\Documents and Settings\user\Application Data\Symantec
2007-12-11 20:25 . 2007-12-12 15:44 <DIR> d-------- C:\Program Files\Symantec
2007-12-11 20:25 . 2007-12-12 15:45 <DIR> d-------- C:\Program Files\Common Files\Symantec Shared
2007-12-11 20:25 . 2007-12-12 14:42 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Symantec
2007-12-11 19:47 . 2007-12-11 19:47 0 --a------ C:\WINDOWS\nsreg.dat
2007-12-11 19:12 . 2007-12-11 19:22 <DIR> d-------- C:\Program Files\EMCO Malware Destroyer
2007-12-11 17:26 . 2007-12-11 17:26 138,624 --a------ C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2007-12-11 17:22 . 2007-12-12 00:15 <DIR> d-------- C:\Documents and Settings\user\Application Data\Spyware Terminator
2007-12-11 17:22 . 2007-12-12 01:29 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2007-12-11 17:21 . 2007-12-12 01:27 <DIR> d-------- C:\Program Files\Spyware Terminator
2007-12-11 17:10 . 2007-12-11 17:16 <DIR> d-------- C:\Program Files\MalwareBurn 7.2
2007-12-11 16:56 . 2007-12-11 17:15 <DIR> d-------- C:\Program Files\AntiSpyGolden 5.1
2007-12-11 16:56 . 2007-12-12 11:08 <DIR> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2007-12-11 16:24 . 2007-12-12 15:37 <DIR> d-------- C:\Program Files\Video Add-on
2007-12-11 16:24 . 2007-12-11 16:24 <DIR> d-------- C:\Program Files\Helper
2007-12-02 20:22 . 2007-12-02 20:23 <DIR> d-------- C:\Program Files\Mv2Player
2007-12-02 12:31 . 2007-12-02 12:31 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2007-12-02 12:28 . 2007-12-02 12:28 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2007-12-02 12:28 . 2007-12-02 12:30 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2007-11-23 21:11 . 2007-11-23 21:11 <DIR> d-------- C:\Program Files\BTBusinessHub

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-12 15:48 --------- d-----w C:\Documents and Settings\user\Application Data\Skype
2007-12-12 14:49 --------- d-----w C:\Program Files\ICQToolbar
2007-12-12 10:23 --------- d-----w C:\Program Files\Common Files\Ulead Systems
2007-12-12 10:23 --------- d-----w C:\Documents and Settings\All Users\Application Data\Ulead Systems
2007-12-02 20:18 --------- d-----w C:\Program Files\Webteh
2007-12-02 20:18 --------- d-----w C:\Documents and Settings\user\Application Data\BSplayer
2007-11-28 10:41 --------- d-----w C:\Program Files\Common Files\Adobe
2007-11-26 10:23 --------- d-----w C:\Program Files\ICQLite
2007-10-31 10:24 --------- d-----w C:\Documents and Settings\user\Application Data\uTorrent
2007-10-31 09:28 --------- d-----w C:\Documents and Settings\user\Application Data\Zango
2007-06-11 13:31 23,814,184 ----a-w C:\Program Files\SkypeSetup.exe
2007-05-21 11:24 5,184,550 ----a-w C:\Program Files\kodek016cz.exe
2007-05-17 08:23 697,492 ----a-w C:\Program Files\uTorrent-1.6.1-install.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E8249E69-A809-4544-832F-64EB65747A92}]
2007-12-12 15:37 12800 --a------ C:\Program Files\Video Add-on\isfmdl.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F10587E9-0E47-4CBE-84AE-7DD20B8684BB}]
2007-12-11 16:24 13824 --a------ C:\Program Files\Helper\yourprosearch.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-02-28 12:00]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-20 09:42]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-05-28 13:52]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 16:24]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.exe" [2004-09-22 20:00]
"McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [2004-08-06 03:50]
"Network Associates Error Reporting Service"="C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe" [2003-10-07 09:48]
"SSBkgdUpdate"="C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 09:22]
"PaperPort PTD"="C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe" [2005-03-17 13:25]
"IndexSearch"="C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe" [2005-03-17 13:45]
"BrMfcWnd"="C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe" [2006-03-28 14:48]
"SetDefPrt"="C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe" [2005-01-26 17:02]
"ControlCenter3"="C:\Program Files\Brother\ControlCenter3\brctrcen.exe" [2006-04-10 13:58]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06]
"SpywareTerminator"="C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe" [2007-12-11 17:24]
"TrojanScanner"="C:\Program Files\Trojan Remover\Trjscan.exe" [2007-08-29 20:30]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 13:00]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Fantastic Flame Agent.lnk - C:\Program Files\Fantastic Flame Screensaver\FantasticFlameAgent.exe [2007-04-24 20:33:26]
QuickBooks Update Agent.lnk - C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe [2007-02-08 11:16:25]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{d8b937a4-cdad-497b-a872-8da7c4c3ef6f}"= C:\WINDOWS\system32\tvtpwp.dll [ ]

R1 NaiAvTdi1;NaiAvTdi1;C:\WINDOWS\system32\drivers\mvstdi5x.sys
R1 sp_rsdrv2;Spyware Terminator Driver 2;\??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
R3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM);C:\WINDOWS\system32\DRIVERS\ss_bus.sys
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter;C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers;C:\WINDOWS\system32\DRIVERS\ss_mdm.sys

*Newly Created Service* - AAVMKER4
*Newly Created Service* - ASWMON2
*Newly Created Service* - ASWRDR
*Newly Created Service* - ASWTDI
*Newly Created Service* - ASWUPDSV
*Newly Created Service* - AVAST!_ANTIVIRUS
*Newly Created Service* - AVAST!_MAIL_SCANNER
*Newly Created Service* - AVAST!_WEB_SCANNER
*Newly Created Service* - ENTDRV51
.
**************************************************************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-12 15:53:33
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-12-12 15:55:16
.
2007-12-04 03:02:31 --- E O F ---


NO A TOTO JE JESTE LOGFILE Z HIJACK :javascript:emoticon(':evil:')
Evil or Very Mad


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:31:37, on 12/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\PROGRA~1\SPYWAR~1\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Video Add-on\isfmntr.exe
C:\Program Files\Video Add-on\isfmm.exe
C:\Program Files\Video Add-on\icthis.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Video Add-on\icmntr.exe
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Fantastic Flame Screensaver\FantasticFlameAgent.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\Symantec\LiveUpdate\AUpdate.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\user\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Program Files\ICQToolbar\toolbaru.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: (no name) - {E8249E69-A809-4544-832F-64EB65747A92} - C:\Program Files\Video Add-on\isfmdl.dll
O2 - BHO: e404 helper - {F10587E9-0E47-4CBE-84AE-7DD20B8684BB} - C:\Program Files\Helper\yourprosearch.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\Video Add-on\icthis.exe
O4 - HKLM\..\Policies\Explorer\Run: [start] C:\Program Files\Video Add-on\isfmntr.exe
O4 - Global Startup: Fantastic Flame Agent.lnk = C:\Program Files\Fantastic Flame Screensaver\FantasticFlameAgent.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredi ... xdm099YYGB
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.topsoftwarefeed.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.topsoftwarefeed.com/redirect.php (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocach ... 0.15-3.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: eaton - {d8b937a4-cdad-497b-a872-8da7c4c3ef6f} - C:\WINDOWS\system32\tvtpwp.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\PROGRA~1\SPYWAR~1\sp_rsser.exe

--
End of file - 8973 bytes

:evil:

Reklama
TSvoboda
nováček
Příspěvky: 6
Registrován: prosinec 07
Pohlaví: Nespecifikováno
Stav:
Offline

Haloo? Muze prosim nekdopomoct??? ...fakt diky moc

Příspěvekod TSvoboda » 12 pro 2007 20:23

viz predchozi ...

Uživatelský avatar
fredik
člen Security týmu
Master Level 7
Master Level 7
Příspěvky: 4680
Registrován: červenec 06
Pohlaví: Muž
Stav:
Offline

Příspěvekod fredik » 12 pro 2007 21:57

Odinstaluj přes Přidat nebo odebrat programy:
MalwareBurn
AntiSpyGolden

případně i EMCO Malware Destroyer

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok)
Zkopíruj do něj následující text označený zeleně:

Kód: Vybrat vše

Folder::
C:\Program Files\Helper
C:\Program Files\Video Add-on

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E8249E69-A809-4544-832F-64EB65747A92}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F10587E9-0E47-4CBE-84AE-7DD20B8684BB}]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{d8b937a4-cdad-497b-a872-8da7c4c3ef6f}"=-

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť
Obrázek
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

Stáhni si SUPERAntiSpyware
Nainstaluj a spusť ho a klikni na tlačítko Check for Updates...
Po provedení Update klikni na tlačítko: Scan your computer
Zvol možnost: Perform Complete Scan a klikni na tlačítko Další >

Proběhne kontrola, po skončení vypíše vše co našel.
Ujisti se že všechny položko jsou zaškrtnuty a pak zvol tlačítko Další
Pak klikni na tlačítko Finish a měl by ses dostat na úvodní obrazovku.
Tam klikni na tlačítko: Preferences... a tam zvol záložku Statistics/Logs
Tam klikni na log s dnešním datem který tam bude a dej tlačítko: View Log...
Otevře se ti Okno s logem tak jeho obsah sem zkopíruj.

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

V následujícím příspěvku sem vlož tyto logy/výsledky:
- log z ComboFix po použití skriptu
- log z SUPERAntiSpyware
- nový log z HJT.

TSvoboda
nováček
Příspěvky: 6
Registrován: prosinec 07
Pohlaví: Nespecifikováno
Stav:
Offline

Provedeno - diky ...

Příspěvekod TSvoboda » 13 pro 2007 00:33

Diky moc za odpoved :o)

Nize jsou pozadovane logy: (co mam udelat dal?)



ComboFix 07-12-12.3 - user 2007-12-12 21:38:11.4 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.165 [GMT 0:00]
Running from: C:\Documents and Settings\user\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\user\Desktop\CFScript.txt
* Created a new restore point
.
The following files were disabled during the run:
C:\WINDOWS\system32\vorbis.dll
C:\WINDOWS\system32\ogg.dll


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\Helper
C:\Program Files\Helper\yourprosearch.dll
C:\Program Files\Video Add-on
C:\Program Files\Video Add-on\icmntr.exe
C:\Program Files\Video Add-on\icthis.exe
C:\Program Files\Video Add-on\icun.exe
C:\Program Files\Video Add-on\isfmdl.dll
C:\Program Files\Video Add-on\isfmm.exe
C:\Program Files\Video Add-on\isfmm.exe.ren
C:\Program Files\Video Add-on\isfmntr.exe
C:\Program Files\Video Add-on\isfun.exe
C:\Program Files\Video Add-on\uninst.exe

.
((((((((((((((((((((((((( Files Created from 2007-11-12 to 2007-12-12 )))))))))))))))))))))))))))))))
.

2007-12-12 20:26 . 2007-12-12 21:24 <DIR> d-------- C:\Program Files\PC Registry Cleaner
2007-12-12 14:58 . 2007-12-04 13:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe
2007-12-12 14:58 . 2004-01-09 09:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx
2007-12-12 14:58 . 2007-12-04 12:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr
2007-12-12 14:58 . 2007-12-04 14:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2007-12-12 14:58 . 2007-12-04 14:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2007-12-12 14:58 . 2007-12-04 14:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2007-12-12 14:58 . 2007-12-04 14:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2007-12-12 14:58 . 2007-12-04 14:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2007-12-12 14:57 . 2007-12-12 14:57 <DIR> d-------- C:\Program Files\Alwil Software
2007-12-12 10:40 . 2007-12-12 15:37 <DIR> d-------- C:\Program Files\Trojan Remover
2007-12-12 10:40 . 2007-12-12 10:40 <DIR> d-------- C:\Documents and Settings\user\Application Data\Simply Super Software
2007-12-12 10:40 . 2007-12-12 10:40 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Simply Super Software
2007-12-12 10:40 . 2006-05-25 15:52 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll
2007-12-12 10:40 . 2003-02-02 20:06 153,088 --a------ C:\WINDOWS\system32\UNRAR3.dll
2007-12-12 10:40 . 2005-08-26 01:50 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll
2007-12-12 10:40 . 2002-03-06 01:00 75,264 --a------ C:\WINDOWS\system32\unacev2.dll
2007-12-12 10:40 . 2006-06-19 13:01 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll
2007-12-12 01:48 . 2007-12-12 01:48 1,158 --a------ C:\WINDOWS\mozver.dat
2007-12-11 21:11 . 2007-12-11 21:11 <DIR> d-------- C:\Program Files\SymNetDrv
2007-12-11 20:26 . 2007-12-12 15:33 <DIR> d-------- C:\Program Files\Norton AntiVirus
2007-12-11 20:26 . 2007-12-11 20:50 <DIR> d-------- C:\Documents and Settings\user\Application Data\Symantec
2007-12-11 20:25 . 2007-12-12 15:44 <DIR> d-------- C:\Program Files\Symantec
2007-12-11 20:25 . 2007-12-12 15:45 <DIR> d-------- C:\Program Files\Common Files\Symantec Shared
2007-12-11 20:25 . 2007-12-12 14:42 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Symantec
2007-12-11 19:47 . 2007-12-11 19:47 0 --a------ C:\WINDOWS\nsreg.dat
2007-12-11 17:26 . 2007-12-11 17:26 138,624 --a------ C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2007-12-11 17:22 . 2007-12-12 00:15 <DIR> d-------- C:\Documents and Settings\user\Application Data\Spyware Terminator
2007-12-11 17:22 . 2007-12-12 01:29 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2007-12-11 17:21 . 2007-12-12 01:27 <DIR> d-------- C:\Program Files\Spyware Terminator
2007-12-11 16:56 . 2007-12-12 11:08 <DIR> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2007-12-02 20:22 . 2007-12-02 20:23 <DIR> d-------- C:\Program Files\Mv2Player
2007-12-02 12:31 . 2007-12-02 12:31 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2007-12-02 12:28 . 2007-12-02 12:28 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2007-12-02 12:28 . 2007-12-02 12:30 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2007-11-23 21:11 . 2007-11-23 21:11 <DIR> d-------- C:\Program Files\BTBusinessHub

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-12 20:04 --------- d-----w C:\Program Files\ICQToolbar
2007-12-12 15:48 --------- d-----w C:\Documents and Settings\user\Application Data\Skype
2007-12-12 10:23 --------- d-----w C:\Program Files\Common Files\Ulead Systems
2007-12-12 10:23 --------- d-----w C:\Documents and Settings\All Users\Application Data\Ulead Systems
2007-12-02 20:18 --------- d-----w C:\Program Files\Webteh
2007-12-02 20:18 --------- d-----w C:\Documents and Settings\user\Application Data\BSplayer
2007-11-28 10:41 --------- d-----w C:\Program Files\Common Files\Adobe
2007-11-26 10:23 --------- d-----w C:\Program Files\ICQLite
2007-10-31 10:24 --------- d-----w C:\Documents and Settings\user\Application Data\uTorrent
2007-10-31 09:28 --------- d-----w C:\Documents and Settings\user\Application Data\Zango
2007-06-11 13:31 23,814,184 ----a-w C:\Program Files\SkypeSetup.exe
2007-05-21 11:24 5,184,550 ----a-w C:\Program Files\kodek016cz.exe
2007-05-17 08:23 697,492 ----a-w C:\Program Files\uTorrent-1.6.1-install.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-02-28 12:00]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-20 09:42]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-05-28 13:52]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 16:24]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.exe" [2004-09-22 20:00]
"McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [2004-08-06 03:50]
"Network Associates Error Reporting Service"="C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe" [2003-10-07 09:48]
"SSBkgdUpdate"="C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 09:22]
"PaperPort PTD"="C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe" [2005-03-17 13:25]
"IndexSearch"="C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe" [2005-03-17 13:45]
"BrMfcWnd"="C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe" [2006-03-28 14:48]
"SetDefPrt"="C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe" [2005-01-26 17:02]
"ControlCenter3"="C:\Program Files\Brother\ControlCenter3\brctrcen.exe" [2006-04-10 13:58]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06]
"SpywareTerminator"="C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe" [2007-12-11 17:24]
"TrojanScanner"="C:\Program Files\Trojan Remover\Trjscan.exe" [2007-08-29 20:30]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 13:00]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Fantastic Flame Agent.lnk - C:\Program Files\Fantastic Flame Screensaver\FantasticFlameAgent.exe [2007-04-24 20:33:26]
QuickBooks Update Agent.lnk - C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe [2007-02-08 11:16:25]

R1 NaiAvTdi1;NaiAvTdi1;C:\WINDOWS\system32\drivers\mvstdi5x.sys
R1 sp_rsdrv2;Spyware Terminator Driver 2;\??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
R3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM);C:\WINDOWS\system32\DRIVERS\ss_bus.sys
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter;C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers;C:\WINDOWS\system32\DRIVERS\ss_mdm.sys

*Newly Created Service* - AAVMKER4
*Newly Created Service* - ASWMON2
*Newly Created Service* - ASWRDR
*Newly Created Service* - ASWTDI
*Newly Created Service* - ASWUPDSV
*Newly Created Service* - AVAST!_ANTIVIRUS
*Newly Created Service* - AVAST!_MAIL_SCANNER
*Newly Created Service* - AVAST!_WEB_SCANNER
*Newly Created Service* - ENTDRV51
.
**************************************************************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-12 21:41:25
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-12-12 21:42:35
C:\ComboFix2.txt ... 2007-12-12 15:55
.
2007-12-04 03:02:31 --- E O F ---










SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 12/12/2007 at 11:08 PM

Application Version : 3.9.1008

Core Rules Database Version : 3359
Trace Rules Database Version: 1358

Scan type : Complete Scan
Total Scan Time : 01:17:41

Memory items scanned : 495
Memory threats detected : 0
Registry items scanned : 5163
Registry threats detected : 477
File items scanned : 29408
File threats detected : 3228

Adware.MyWebSearch
HKLM\Software\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}
HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}
HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}
HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}\InprocServer32
HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}\InprocServer32#ThreadingModel
HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}\Programmable
C:\PROGRAM FILES\MYWEBSEARCH\SRCHASTT\1.BIN\MWSSRCAS.DLL

Trojan.Smitfraud Variant
HKLM\Software\Classes\CLSID\{d8b937a4-cdad-497b-a872-8da7c4c3ef6f}
HKCR\CLSID\{D8B937A4-CDAD-497B-A872-8DA7C4C3EF6F}
HKCR\CLSID\{D8B937A4-CDAD-497B-A872-8DA7C4C3EF6F}\InProcServer32
HKCR\CLSID\{D8B937A4-CDAD-497B-A872-8DA7C4C3EF6F}\InProcServer32#ThreadingModel
C:\WINDOWS\SYSTEM32\TVTPWP.DLL

Adware.Tracking Cookie
C:\Documents and Settings\user\Cookies\user@winsecureav[1].txt
C:\Documents and Settings\user\Cookies\user@k.iinfo[2].txt
C:\Documents and Settings\user\Cookies\user@www.ppctracking[1].txt
C:\Documents and Settings\user\Cookies\user@serving-sys[1].txt
C:\Documents and Settings\user\Cookies\user@sale.winspycontrol[2].txt
C:\Documents and Settings\user\Cookies\user@www.antispyshield[1].txt
C:\Documents and Settings\user\Cookies\user@www.malwareburn[2].txt
C:\Documents and Settings\user\Cookies\user@rdr.hitmngr[2].txt
C:\Documents and Settings\user\Cookies\user@advancedcleaner[2].txt
C:\Documents and Settings\user\Cookies\user@richmedia.yahoo[1].txt
C:\Documents and Settings\user\Cookies\user@www.viruslocker[1].txt
C:\Documents and Settings\user\Cookies\user@winspycontrol[1].txt
C:\Documents and Settings\user\Cookies\user@adinterax[2].txt
C:\Documents and Settings\user\Cookies\user@protect.winspycontrol[2].txt
C:\Documents and Settings\user\Cookies\user@atdmt[2].txt
C:\Documents and Settings\user\Cookies\user@overture[1].txt
C:\Documents and Settings\user\Cookies\user@shop.winanonymous[2].txt
C:\Documents and Settings\user\Cookies\user@azjmp[2].txt
C:\Documents and Settings\user\Cookies\user@media.adrevolver[1].txt
C:\Documents and Settings\user\Cookies\user@winanonymous[1].txt
C:\Documents and Settings\user\Cookies\user@ad2.bbmedia[1].txt
C:\Documents and Settings\user\Cookies\user@bs.serving-sys[2].txt
C:\Documents and Settings\user\Cookies\user@doubleclick[1].txt
C:\Documents and Settings\user\Cookies\user@winpcdoctor[1].txt
C:\Documents and Settings\user\Cookies\user@toplist[1].txt
C:\Documents and Settings\user\Cookies\user@protect.winsecureav[2].txt
C:\Documents and Settings\user\Cookies\user@statse.webtrendslive[2].txt

Adware.180solutions/ZangoSearch
C:\Documents and Settings\All Users\Start Menu\Programs\Zango\Reset Cursor.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Zango\Zango Customer Support Center.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Zango\Zango Games!.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Zango\Zango Library.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Zango\Zango Screensavers!.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Zango\Zango Uninstall Instructions.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Zango\Zango Videos!.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Zango
HKU\S-1-5-21-854245398-764733703-725345543-1003\Software\Zango
HKLM\Software\Zango
HKLM\Software\Zango\HostOI
HKLM\Software\Zango\HostOI\Mail
HKLM\Software\Zango\HostOI\Mail#business_card_promo
HKLM\Software\Zango\HostOI\Mail#promo_file
HKLM\Software\Zango\HostOI\Updates
HKLM\Software\Zango\HostOI\Updates#InstallDate
HKLM\Software\Zango\HostOL
HKLM\Software\Zango\HostOL\Mail
HKLM\Software\Zango\HostOL\Mail#business_card_promo
HKLM\Software\Zango\HostOL\Mail#promo_file
HKLM\Software\Zango\HostOL\Updates
HKLM\Software\Zango\HostOL\Updates#InstallDate
HKLM\Software\Zango\HostWD
HKLM\Software\Zango\HostWD\Mail
HKLM\Software\Zango\HostWD\Mail#business_card_promo
HKLM\Software\Zango\HostWD\Mail#promo_file
HKLM\Software\Zango\HostWD\Updates
HKLM\Software\Zango\HostWD\Updates#InstallDate
HKLM\Software\Zango\Install
HKLM\Software\Zango\Install#Install_Dir
HKLM\Software\Zango\Install#Installed_From
HKLM\Software\Zango\Install#IE
HKLM\Software\Zango\Install#OL
HKLM\Software\Zango\Install#OI
HKLM\Software\Zango\Install#WP
HKLM\Software\Zango\Install#SA
HKLM\Software\Zango\Install\CmpMap
HKLM\Software\Zango\Install\CmpMap#IE
HKLM\Software\Zango\Install\CmpMap#OL
HKLM\Software\Zango\Install\CmpMap#OI
HKLM\Software\Zango\Install\CmpMap#WP
HKLM\Software\Zango\Install\CmpMap#SA
HKLM\Software\Zango\Zango
HKLM\Software\Zango\Zango\Install
HKLM\Software\Zango\Zango\Install#StartInstall
HKLM\Software\Zango\Zango\Install#cookies_flag
HKLM\Software\Zango\Zango\Install#IID
HKLM\Software\Zango\Zango\Install#IID_prv
HKLM\Software\Zango\Zango\Install#PrevVer
HKLM\Software\Zango\Zango\Install#CurrentVer
HKLM\Software\Zango\Zango\Install#HbHostOEPath
HKLM\Software\Zango\Zango\Install#CreateDate
HKLM\Software\Zango\Zango\Install#CreateDateDW
HKLM\Software\Zango\Zango\MachineInfo
HKLM\Software\Zango\Zango\MachineInfo#CID
HKLM\Software\Zango\Zango\MachineInfo#CID_prv
HKLM\Software\Zango\Zango\PI
HKLM\Software\Zango\Zango\PI\3.2
HKLM\Software\Zango\Zango\PI\3.2#PID00
HKLM\Software\Zango\Zango\Updates
HKLM\Software\Zango\Zango\Updates#InstallDate
C:\DOCUMENTS AND SETTINGS\USER\DESKTOP\SETUP.EXE
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B3AF80D4-B209-4EBF-BCF2-405697144C0D}\RP255\A0030762.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B3AF80D4-B209-4EBF-BCF2-405697144C0D}\RP255\A0030764.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B3AF80D4-B209-4EBF-BCF2-405697144C0D}\RP255\A0030765.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B3AF80D4-B209-4EBF-BCF2-405697144C0D}\RP255\A0030766.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B3AF80D4-B209-4EBF-BCF2-405697144C0D}\RP255\A0030767.EXE
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B3AF80D4-B209-4EBF-BCF2-405697144C0D}\RP255\A0030770.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B3AF80D4-B209-4EBF-BCF2-405697144C0D}\RP255\A0030771.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B3AF80D4-B209-4EBF-BCF2-405697144C0D}\RP255\A0030773.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B3AF80D4-B209-4EBF-BCF2-405697144C0D}\RP255\A0030774.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B3AF80D4-B209-4EBF-BCF2-405697144C0D}\RP255\A0030775.DLL

Adware.Zango Toolbar/Hb
HKCR\CoreSrv.CoreServices
HKCR\CoreSrv.CoreServices\CLSID
HKCR\CoreSrv.CoreServices\CurVer
HKCR\CoreSrv.CoreServices.1
HKCR\CoreSrv.CoreServices.1\CLSID
HKCR\CoreSrv.LfgAx
HKCR\CoreSrv.LfgAx\CLSID
HKCR\CoreSrv.LfgAx\CurVer
HKCR\CoreSrv.LfgAx.1
HKCR\CoreSrv.LfgAx.1\CLSID
HKCR\HBMain.CommBand
HKCR\HBMain.CommBand\CLSID
HKCR\HBMain.CommBand\CurVer
HKCR\HBMain.CommBand.1
HKCR\HBMain.CommBand.1\CLSID
HKCR\hbr.HbMain
HKCR\hbr.HbMain\CLSID
HKCR\hbr.HbMain\CurVer
HKCR\hbr.HbMain.1
HKCR\hbr.HbMain.1\CLSID
HKCR\HostOL.MailAnim
HKCR\HostOL.MailAnim\CLSID
HKCR\HostOL.MailAnim\CurVer
HKCR\HostOL.MailAnim.1
HKCR\HostOL.MailAnim.1\CLSID
HKCR\HostOL.WebmailSend
HKCR\HostOL.WebmailSend\CLSID
HKCR\HostOL.WebmailSend\CurVer
HKCR\HostOL.WebmailSend.1
HKCR\HostOL.WebmailSend.1\CLSID
HKCR\InstIE.HbInstObj
HKCR\InstIE.HbInstObj\CLSID
HKCR\InstIE.HbInstObj\CurVer
HKCR\InstIE.HbInstObj.1
HKCR\InstIE.HbInstObj.1\CLSID
HKCR\Srv.CoreServices
HKCR\Srv.CoreServices\CLSID
HKCR\Srv.CoreServices\CurVer
HKCR\Srv.CoreServices.1
HKCR\Srv.CoreServices.1\CLSID
HKCR\Toolbar.HtmlMenuUI
HKCR\Toolbar.HtmlMenuUI\CLSID
HKCR\Toolbar.HtmlMenuUI\CurVer
HKCR\Toolbar.HtmlMenuUI.1
HKCR\Toolbar.HtmlMenuUI.1\CLSID
HKCR\Toolbar.ToolbarCtl
HKCR\Toolbar.ToolbarCtl\CLSID
HKCR\Toolbar.ToolbarCtl\CurVer
HKCR\Toolbar.ToolbarCtl.1
HKCR\Toolbar.ToolbarCtl.1\CLSID
HKCR\Zango.DesktopFlash
HKCR\Zango.DesktopFlash\CLSID
HKCR\Zango.DesktopFlash\CurVer
HKCR\Zango.DesktopFlash.1
HKCR\Zango.DesktopFlash.1\CLSID
HKCR\ZangoAX.ClientDetector
HKCR\ZangoAX.ClientDetector\CLSID
HKCR\ZangoAX.ClientDetector\CurVer
HKCR\ZangoAX.ClientDetector.1
HKCR\ZangoAX.ClientDetector.1\CLSID
HKCR\ZangoAX.UserProfiles
HKCR\ZangoAX.UserProfiles\CLSID
HKCR\ZangoAX.UserProfiles\CurVer
HKCR\ZangoAX.UserProfiles.1
HKCR\ZangoAX.UserProfiles.1\CLSID
HKCR\CLSID\{1E5B2693-D348-4ca7-8364-4F5E51BF9C6D}
HKCR\CLSID\{1E5B2693-D348-4ca7-8364-4F5E51BF9C6D}\Control
HKCR\CLSID\{1E5B2693-D348-4ca7-8364-4F5E51BF9C6D}\InprocServer32
HKCR\CLSID\{1E5B2693-D348-4ca7-8364-4F5E51BF9C6D}\InprocServer32#ThreadingModel
HKCR\CLSID\{1E5B2693-D348-4ca7-8364-4F5E51BF9C6D}\MiscStatus
HKCR\CLSID\{1E5B2693-D348-4ca7-8364-4F5E51BF9C6D}\MiscStatus\1
HKCR\CLSID\{1E5B2693-D348-4ca7-8364-4F5E51BF9C6D}\ProgID
HKCR\CLSID\{1E5B2693-D348-4ca7-8364-4F5E51BF9C6D}\Programmable
HKCR\CLSID\{1E5B2693-D348-4ca7-8364-4F5E51BF9C6D}\ToolboxBitmap32
HKCR\CLSID\{1E5B2693-D348-4ca7-8364-4F5E51BF9C6D}\TypeLib
HKCR\CLSID\{1E5B2693-D348-4ca7-8364-4F5E51BF9C6D}\Version
HKCR\CLSID\{1E5B2693-D348-4ca7-8364-4F5E51BF9C6D}\VersionIndependentProgID
HKCR\CLSID\{2E54AC53-EFA4-4831-A3F6-B47B1A1937CF}
HKCR\CLSID\{2E54AC53-EFA4-4831-A3F6-B47B1A1937CF}\InprocServer32
HKCR\CLSID\{2E54AC53-EFA4-4831-A3F6-B47B1A1937CF}\InprocServer32#ThreadingModel
HKCR\CLSID\{2E54AC53-EFA4-4831-A3F6-B47B1A1937CF}\ProgID
HKCR\CLSID\{2E54AC53-EFA4-4831-A3F6-B47B1A1937CF}\Programmable
HKCR\CLSID\{2E54AC53-EFA4-4831-A3F6-B47B1A1937CF}\TypeLib
HKCR\CLSID\{2E54AC53-EFA4-4831-A3F6-B47B1A1937CF}\VersionIndependentProgID
HKCR\CLSID\{54A3F8B7-228E-4ED8-895B-DE832B2C3959}
HKCR\CLSID\{54A3F8B7-228E-4ED8-895B-DE832B2C3959}\InprocServer32
HKCR\CLSID\{54A3F8B7-228E-4ED8-895B-DE832B2C3959}\InprocServer32#ThreadingModel
HKCR\CLSID\{54A3F8B7-228E-4ED8-895B-DE832B2C3959}\ProgID
HKCR\CLSID\{54A3F8B7-228E-4ED8-895B-DE832B2C3959}\Programmable
HKCR\CLSID\{54A3F8B7-228E-4ED8-895B-DE832B2C3959}\TypeLib
HKCR\CLSID\{54A3F8B7-228E-4ED8-895B-DE832B2C3959}\VersionIndependentProgID
HKCR\CLSID\{5B2E150D-4C8A-40E4-8C36-DD9C02771C67}
HKCR\CLSID\{5B2E150D-4C8A-40E4-8C36-DD9C02771C67}\InprocServer32
HKCR\CLSID\{5B2E150D-4C8A-40E4-8C36-DD9C02771C67}\InprocServer32#ThreadingModel
HKCR\CLSID\{5B2E150D-4C8A-40E4-8C36-DD9C02771C67}\ProgID
HKCR\CLSID\{5B2E150D-4C8A-40E4-8C36-DD9C02771C67}\Programmable
HKCR\CLSID\{5B2E150D-4C8A-40E4-8C36-DD9C02771C67}\TypeLib
HKCR\CLSID\{5B2E150D-4C8A-40E4-8C36-DD9C02771C67}\VersionIndependentProgID
HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}
HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\Control
HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\InprocServer32
HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\InprocServer32#ThreadingModel
HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\MiscStatus
HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\MiscStatus\1
HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\ProgID
HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\Programmable
HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\ToolboxBitmap32
HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\TypeLib
HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\Version
HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\VersionIndependentProgID
HKCR\CLSID\{7138F250-5B72-48DD-ADFB-9A83B429DD9E}
HKCR\CLSID\{7138F250-5B72-48DD-ADFB-9A83B429DD9E}\LocalServer32
HKCR\CLSID\{7138F250-5B72-48DD-ADFB-9A83B429DD9E}\ProgID
HKCR\CLSID\{7138F250-5B72-48DD-ADFB-9A83B429DD9E}\Programmable
HKCR\CLSID\{7138F250-5B72-48DD-ADFB-9A83B429DD9E}\TypeLib
HKCR\CLSID\{7138F250-5B72-48DD-ADFB-9A83B429DD9E}\VersionIndependentProgID
HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}
HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}\Control
HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}\InprocServer32
HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}\InprocServer32#ThreadingModel
HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}\ProgID
HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}\Programmable
HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}\ToolboxBitmap32
HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}\TypeLib
HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}\VersionIndependentProgID
HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}
HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}#AppID
HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\Control
HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\Implemented Categories
HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}
HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\InprocServer32
HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\InprocServer32#ThreadingModel
HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\MiscStatus
HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\MiscStatus\1
HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\ProgID
HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\Programmable
HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\ToolboxBitmap32
HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\TypeLib
HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\Version
HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\VersionIndependentProgID
HKCR\CLSID\{B88E4484-3FF6-4EA9-815B-A54FE20D4387}
HKCR\CLSID\{B88E4484-3FF6-4EA9-815B-A54FE20D4387}\InprocServer32
HKCR\CLSID\{B88E4484-3FF6-4EA9-815B-A54FE20D4387}\InprocServer32#ThreadingModel
HKCR\CLSID\{B88E4484-3FF6-4EA9-815B-A54FE20D4387}\ProgID
HKCR\CLSID\{B88E4484-3FF6-4EA9-815B-A54FE20D4387}\Programmable
HKCR\CLSID\{B88E4484-3FF6-4EA9-815B-A54FE20D4387}\TypeLib
HKCR\CLSID\{B88E4484-3FF6-4EA9-815B-A54FE20D4387}\VersionIndependentProgID
HKCR\CLSID\{BD937FFE-0352-4FDE-88F2-C30D1A9B25CF}
HKCR\CLSID\{BD937FFE-0352-4FDE-88F2-C30D1A9B25CF}#AppID
HKCR\CLSID\{BD937FFE-0352-4FDE-88F2-C30D1A9B25CF}\LocalServer32
HKCR\CLSID\{BD937FFE-0352-4FDE-88F2-C30D1A9B25CF}\ProgID
HKCR\CLSID\{BD937FFE-0352-4FDE-88F2-C30D1A9B25CF}\Programmable
HKCR\CLSID\{BD937FFE-0352-4FDE-88F2-C30D1A9B25CF}\TypeLib
HKCR\CLSID\{BD937FFE-0352-4FDE-88F2-C30D1A9B25CF}\VersionIndependentProgID
HKCR\CLSID\{BF1BF02C-5A86-4ECF-ADAC-472C54C4D21E}
HKCR\CLSID\{BF1BF02C-5A86-4ECF-ADAC-472C54C4D21E}\Implemented Categories
HKCR\CLSID\{BF1BF02C-5A86-4ECF-ADAC-472C54C4D21E}\Implemented Categories\{26F71C5A-C33F-4863-BFDD-9FD55EB42C4A}
HKCR\CLSID\{BFC08CFF-C737-4433-BD5A-0EE7EFCFEE54}
HKCR\CLSID\{BFC08CFF-C737-4433-BD5A-0EE7EFCFEE54}\InprocServer32
HKCR\CLSID\{BFC08CFF-C737-4433-BD5A-0EE7EFCFEE54}\InprocServer32#ThreadingModel
HKCR\CLSID\{BFC08CFF-C737-4433-BD5A-0EE7EFCFEE54}\ProgID
HKCR\CLSID\{BFC08CFF-C737-4433-BD5A-0EE7EFCFEE54}\Programmable
HKCR\CLSID\{BFC08CFF-C737-4433-BD5A-0EE7EFCFEE54}\TypeLib
HKCR\CLSID\{BFC08CFF-C737-4433-BD5A-0EE7EFCFEE54}\VersionIndependentProgID
HKCR\CLSID\{D2221CCB-F2BB-4858-AAD4-57C754153603}
HKCR\CLSID\{D2221CCB-F2BB-4858-AAD4-57C754153603}\InprocServer32
HKCR\CLSID\{D2221CCB-F2BB-4858-AAD4-57C754153603}\InprocServer32#ThreadingModel
HKCR\CLSID\{D2221CCB-F2BB-4858-AAD4-57C754153603}\ProgID
HKCR\CLSID\{D2221CCB-F2BB-4858-AAD4-57C754153603}\TypeLib
HKCR\CLSID\{D2221CCB-F2BB-4858-AAD4-57C754153603}\VersionIndependentProgID
HKCR\CLSID\{EA0B6A1A-6A59-4A58-9C41-9966504898A5}
HKCR\CLSID\{EA0B6A1A-6A59-4A58-9C41-9966504898A5}\InprocServer32
HKCR\CLSID\{EA0B6A1A-6A59-4A58-9C41-9966504898A5}\InprocServer32#ThreadingModel
HKCR\CLSID\{EA0B6A1A-6A59-4A58-9C41-9966504898A5}\ProgID
HKCR\CLSID\{EA0B6A1A-6A59-4A58-9C41-9966504898A5}\Programmable
HKCR\CLSID\{EA0B6A1A-6A59-4A58-9C41-9966504898A5}\TypeLib
HKCR\CLSID\{EA0B6A1A-6A59-4A58-9C41-9966504898A5}\VersionIndependentProgID
HKCR\TypeLib\{08755390-F46D-4D09-968C-3430166B3189}
HKCR\TypeLib\{08755390-F46D-4D09-968C-3430166B3189}\1.0
HKCR\TypeLib\{08755390-F46D-4D09-968C-3430166B3189}\1.0\0
HKCR\TypeLib\{08755390-F46D-4D09-968C-3430166B3189}\1.0\0\win32
HKCR\TypeLib\{08755390-F46D-4D09-968C-3430166B3189}\1.0\FLAGS
HKCR\TypeLib\{08755390-F46D-4D09-968C-3430166B3189}\1.0\HELPDIR
HKCR\TypeLib\{0923208C-E259-4ED5-A778-CB607DA350AD}
HKCR\TypeLib\{0923208C-E259-4ED5-A778-CB607DA350AD}\1.0
HKCR\TypeLib\{0923208C-E259-4ED5-A778-CB607DA350AD}\1.0\0
HKCR\TypeLib\{0923208C-E259-4ED5-A778-CB607DA350AD}\1.0\0\win32
HKCR\TypeLib\{0923208C-E259-4ED5-A778-CB607DA350AD}\1.0\FLAGS
HKCR\TypeLib\{0923208C-E259-4ED5-A778-CB607DA350AD}\1.0\HELPDIR
HKCR\TypeLib\{229D2451-A617-4B30-B5E8-8138694240CB}
HKCR\TypeLib\{229D2451-A617-4B30-B5E8-8138694240CB}\1.0
HKCR\TypeLib\{229D2451-A617-4B30-B5E8-8138694240CB}\1.0\0
HKCR\TypeLib\{229D2451-A617-4B30-B5E8-8138694240CB}\1.0\0\win32
HKCR\TypeLib\{229D2451-A617-4B30-B5E8-8138694240CB}\1.0\FLAGS
HKCR\TypeLib\{229D2451-A617-4B30-B5E8-8138694240CB}\1.0\HELPDIR
HKCR\TypeLib\{9720DE03-5820-4059-B4A4-639D5E52BD09}
HKCR\TypeLib\{9720DE03-5820-4059-B4A4-639D5E52BD09}\1.0
HKCR\TypeLib\{9720DE03-5820-4059-B4A4-639D5E52BD09}\1.0\0
HKCR\TypeLib\{9720DE03-5820-4059-B4A4-639D5E52BD09}\1.0\0\win32
HKCR\TypeLib\{9720DE03-5820-4059-B4A4-639D5E52BD09}\1.0\FLAGS
HKCR\TypeLib\{9720DE03-5820-4059-B4A4-639D5E52BD09}\1.0\HELPDIR
HKCR\TypeLib\{AD71E48F-6F47-4B63-9312-FAE879541C4D}
HKCR\TypeLib\{AD71E48F-6F47-4B63-9312-FAE879541C4D}\1.0
HKCR\TypeLib\{AD71E48F-6F47-4B63-9312-FAE879541C4D}\1.0\0
HKCR\TypeLib\{AD71E48F-6F47-4B63-9312-FAE879541C4D}\1.0\0\win32
HKCR\TypeLib\{AD71E48F-6F47-4B63-9312-FAE879541C4D}\1.0\FLAGS
HKCR\TypeLib\{AD71E48F-6F47-4B63-9312-FAE879541C4D}\1.0\HELPDIR
HKCR\TypeLib\{C23FA5A4-1FEA-419F-8B14-F7465DF062BC}
HKCR\TypeLib\{C23FA5A4-1FEA-419F-8B14-F7465DF062BC}\1.0
HKCR\TypeLib\{C23FA5A4-1FEA-419F-8B14-F7465DF062BC}\1.0\0
HKCR\TypeLib\{C23FA5A4-1FEA-419F-8B14-F7465DF062BC}\1.0\0\win32
HKCR\TypeLib\{C23FA5A4-1FEA-419F-8B14-F7465DF062BC}\1.0\FLAGS
HKCR\TypeLib\{C23FA5A4-1FEA-419F-8B14-F7465DF062BC}\1.0\HELPDIR
HKCR\TypeLib\{CCC6E232-AA4C-4813-A019-9C14B27776B6}
HKCR\TypeLib\{CCC6E232-AA4C-4813-A019-9C14B27776B6}\1.0
HKCR\TypeLib\{CCC6E232-AA4C-4813-A019-9C14B27776B6}\1.0\0
HKCR\TypeLib\{CCC6E232-AA4C-4813-A019-9C14B27776B6}\1.0\0\win32
HKCR\TypeLib\{CCC6E232-AA4C-4813-A019-9C14B27776B6}\1.0\FLAGS
HKCR\TypeLib\{CCC6E232-AA4C-4813-A019-9C14B27776B6}\1.0\HELPDIR
HKCR\TypeLib\{DD1CB2D7-161D-4B84-AE5C-08D3FAED894F}
HKCR\TypeLib\{DD1CB2D7-161D-4B84-AE5C-08D3FAED894F}\1.0
HKCR\TypeLib\{DD1CB2D7-161D-4B84-AE5C-08D3FAED894F}\1.0\0
HKCR\TypeLib\{DD1CB2D7-161D-4B84-AE5C-08D3FAED894F}\1.0\0\win32
HKCR\TypeLib\{DD1CB2D7-161D-4B84-AE5C-08D3FAED894F}\1.0\FLAGS
HKCR\TypeLib\{DD1CB2D7-161D-4B84-AE5C-08D3FAED894F}\1.0\HELPDIR
HKCR\Interface\{00B77587-BE1B-4201-B8E9-09FCF50AB771}
HKCR\Interface\{00B77587-BE1B-4201-B8E9-09FCF50AB771}\ProxyStubClsid
HKCR\Interface\{00B77587-BE1B-4201-B8E9-09FCF50AB771}\ProxyStubClsid32
HKCR\Interface\{00B77587-BE1B-4201-B8E9-09FCF50AB771}\TypeLib
HKCR\Interface\{00B77587-BE1B-4201-B8E9-09FCF50AB771}\TypeLib#Version
HKCR\Interface\{067C6A37-72EA-4437-863A-5BE20C246F3C}
HKCR\Interface\{067C6A37-72EA-4437-863A-5BE20C246F3C}\ProxyStubClsid
HKCR\Interface\{067C6A37-72EA-4437-863A-5BE20C246F3C}\ProxyStubClsid32
HKCR\Interface\{067C6A37-72EA-4437-863A-5BE20C246F3C}\TypeLib
HKCR\Interface\{067C6A37-72EA-4437-863A-5BE20C246F3C}\TypeLib#Version
HKCR\Interface\{1230CF51-6BC4-4A23-B3F1-C7CF0AFED619}
HKCR\Interface\{1230CF51-6BC4-4A23-B3F1-C7CF0AFED619}\ProxyStubClsid
HKCR\Interface\{1230CF51-6BC4-4A23-B3F1-C7CF0AFED619}\ProxyStubClsid32
HKCR\Interface\{1230CF51-6BC4-4A23-B3F1-C7CF0AFED619}\TypeLib
HKCR\Interface\{1230CF51-6BC4-4A23-B3F1-C7CF0AFED619}\TypeLib#Version
HKCR\Interface\{1985FCE1-4043-4346-AE70-D0A0CD90BDD3}
HKCR\Interface\{1985FCE1-4043-4346-AE70-D0A0CD90BDD3}\ProxyStubClsid
HKCR\Interface\{1985FCE1-4043-4346-AE70-D0A0CD90BDD3}\ProxyStubClsid32
HKCR\Interface\{1985FCE1-4043-4346-AE70-D0A0CD90BDD3}\TypeLib
HKCR\Interface\{1985FCE1-4043-4346-AE70-D0A0CD90BDD3}\TypeLib#Version
HKCR\Interface\{1A2AF056-1FE1-47CA-993D-5D09D18E674E}
HKCR\Interface\{1A2AF056-1FE1-47CA-993D-5D09D18E674E}\ProxyStubClsid
HKCR\Interface\{1A2AF056-1FE1-47CA-993D-5D09D18E674E}\ProxyStubClsid32
HKCR\Interface\{1A2AF056-1FE1-47CA-993D-5D09D18E674E}\TypeLib
HKCR\Interface\{1A2AF056-1FE1-47CA-993D-5D09D18E674E}\TypeLib#Version
HKCR\Interface\{2B81F920-6660-4F76-93BF-B1C67BF5D1A0}
HKCR\Interface\{2B81F920-6660-4F76-93BF-B1C67BF5D1A0}\ProxyStubClsid
HKCR\Interface\{2B81F920-6660-4F76-93BF-B1C67BF5D1A0}\ProxyStubClsid32
HKCR\Interface\{2B81F920-6660-4F76-93BF-B1C67BF5D1A0}\TypeLib
HKCR\Interface\{2B81F920-6660-4F76-93BF-B1C67BF5D1A0}\TypeLib#Version
HKCR\Interface\{2E623B96-B166-4C70-8169-820761794299}
HKCR\Interface\{2E623B96-B166-4C70-8169-820761794299}\ProxyStubClsid
HKCR\Interface\{2E623B96-B166-4C70-8169-820761794299}\ProxyStubClsid32
HKCR\Interface\{2E623B96-B166-4C70-8169-820761794299}\TypeLib
HKCR\Interface\{2E623B96-B166-4C70-8169-820761794299}\TypeLib#Version
HKCR\Interface\{34E29700-0D13-46AA-B9A5-ACE68E21A091}
HKCR\Interface\{34E29700-0D13-46AA-B9A5-ACE68E21A091}\ProxyStubClsid
HKCR\Interface\{34E29700-0D13-46AA-B9A5-ACE68E21A091}\ProxyStubClsid32
HKCR\Interface\{34E29700-0D13-46AA-B9A5-ACE68E21A091}\TypeLib
HKCR\Interface\{34E29700-0D13-46AA-B9A5-ACE68E21A091}\TypeLib#Version
HKCR\Interface\{3661AF2D-C27B-499C-9BCF-66C8502A3806}
HKCR\Interface\{3661AF2D-C27B-499C-9BCF-66C8502A3806}\ProxyStubClsid
HKCR\Interface\{3661AF2D-C27B-499C-9BCF-66C8502A3806}\ProxyStubClsid32
HKCR\Interface\{3661AF2D-C27B-499C-9BCF-66C8502A3806}\TypeLib
HKCR\Interface\{3661AF2D-C27B-499C-9BCF-66C8502A3806}\TypeLib#Version
HKCR\Interface\{3F0915B8-B238-4C2D-AD1E-60DB1E14D27A}
HKCR\Interface\{3F0915B8-B238-4C2D-AD1E-60DB1E14D27A}\ProxyStubClsid
HKCR\Interface\{3F0915B8-B238-4C2D-AD1E-60DB1E14D27A}\ProxyStubClsid32
HKCR\Interface\{3F0915B8-B238-4C2D-AD1E-60DB1E14D27A}\TypeLib
HKCR\Interface\{3F0915B8-B238-4C2D-AD1E-60DB1E14D27A}\TypeLib#Version
HKCR\Interface\{49155DAE-C471-40FA-98EE-B2B3CAD115CE}
HKCR\Interface\{49155DAE-C471-40FA-98EE-B2B3CAD115CE}\ProxyStubClsid
HKCR\Interface\{49155DAE-C471-40FA-98EE-B2B3CAD115CE}\ProxyStubClsid32
HKCR\Interface\{49155DAE-C471-40FA-98EE-B2B3CAD115CE}\TypeLib
HKCR\Interface\{49155DAE-C471-40FA-98EE-B2B3CAD115CE}\TypeLib#Version
HKCR\Interface\{4D783385-0DDA-4188-A529-C97DC3D67CBD}
HKCR\Interface\{4D783385-0DDA-4188-A529-C97DC3D67CBD}\ProxyStubClsid
HKCR\Interface\{4D783385-0DDA-4188-A529-C97DC3D67CBD}\ProxyStubClsid32
HKCR\Interface\{4D783385-0DDA-4188-A529-C97DC3D67CBD}\TypeLib
HKCR\Interface\{4D783385-0DDA-4188-A529-C97DC3D67CBD}\TypeLib#Version
HKCR\Interface\{4E8B851B-05B0-4BAF-B24D-D0DFE88DDED3}
HKCR\Interface\{4E8B851B-05B0-4BAF-B24D-D0DFE88DDED3}\ProxyStubClsid
HKCR\Interface\{4E8B851B-05B0-4BAF-B24D-D0DFE88DDED3}\ProxyStubClsid32
HKCR\Interface\{4E8B851B-05B0-4BAF-B24D-D0DFE88DDED3}\TypeLib
HKCR\Interface\{4E8B851B-05B0-4BAF-B24D-D0DFE88DDED3}\TypeLib#Version
HKCR\Interface\{50C3E2B3-4FD7-4CB9-91F9-641A6E6B3689}
HKCR\Interface\{50C3E2B3-4FD7-4CB9-91F9-641A6E6B3689}\ProxyStubClsid
HKCR\Interface\{50C3E2B3-4FD7-4CB9-91F9-641A6E6B3689}\ProxyStubClsid32
HKCR\Interface\{50C3E2B3-4FD7-4CB9-91F9-641A6E6B3689}\TypeLib
HKCR\Interface\{50C3E2B3-4FD7-4CB9-91F9-641A6E6B3689}\TypeLib#Version
HKCR\Interface\{5A4737A8-B92A-4E54-970E-C2891D98CE3F}
HKCR\Interface\{5A4737A8-B92A-4E54-970E-C2891D98CE3F}\ProxyStubClsid
HKCR\Interface\{5A4737A8-B92A-4E54-970E-C2891D98CE3F}\ProxyStubClsid32
HKCR\Interface\{5A4737A8-B92A-4E54-970E-C2891D98CE3F}\TypeLib
HKCR\Interface\{5A4737A8-B92A-4E54-970E-C2891D98CE3F}\TypeLib#Version
HKCR\Interface\{62B0B239-F9AC-4A5B-BFAE-62C7A23F7627}
HKCR\Interface\{62B0B239-F9AC-4A5B-BFAE-62C7A23F7627}\ProxyStubClsid
HKCR\Interface\{62B0B239-F9AC-4A5B-BFAE-62C7A23F7627}\ProxyStubClsid32
HKCR\Interface\{62B0B239-F9AC-4A5B-BFAE-62C7A23F7627}\TypeLib
HKCR\Interface\{62B0B239-F9AC-4A5B-BFAE-62C7A23F7627}\TypeLib#Version
HKCR\Interface\{6E10479B-31E8-4A3B-81B1-DDAF39097F19}
HKCR\Interface\{6E10479B-31E8-4A3B-81B1-DDAF39097F19}\ProxyStubClsid
HKCR\Interface\{6E10479B-31E8-4A3B-81B1-DDAF39097F19}\ProxyStubClsid32
HKCR\Interface\{6E10479B-31E8-4A3B-81B1-DDAF39097F19}\TypeLib
HKCR\Interface\{6E10479B-31E8-4A3B-81B1-DDAF39097F19}\TypeLib#Version
HKCR\Interface\{726F0AB9-B842-4AE4-90C7-230E233E6A99}
HKCR\Interface\{726F0AB9-B842-4AE4-90C7-230E233E6A99}\ProxyStubClsid
HKCR\Interface\{726F0AB9-B842-4AE4-90C7-230E233E6A99}\ProxyStubClsid32
HKCR\Interface\{726F0AB9-B842-4AE4-90C7-230E233E6A99}\TypeLib
HKCR\Interface\{726F0AB9-B842-4AE4-90C7-230E233E6A99}\TypeLib#Version
HKCR\Interface\{99123AC9-7DDA-4C82-B252-44C2804BF392}
HKCR\Interface\{99123AC9-7DDA-4C82-B252-44C2804BF392}\ProxyStubClsid
HKCR\Interface\{99123AC9-7DDA-4C82-B252-44C2804BF392}\ProxyStubClsid32
HKCR\Interface\{99123AC9-7DDA-4C82-B252-44C2804BF392}\TypeLib
HKCR\Interface\{99123AC9-7DDA-4C82-B252-44C2804BF392}\TypeLib#Version
HKCR\Interface\{ACE99E77-AA2A-43C2-8C9D-CAF2020FDF2B}
HKCR\Interface\{ACE99E77-AA2A-43C2-8C9D-CAF2020FDF2B}\ProxyStubClsid
HKCR\Interface\{ACE99E77-AA2A-43C2-8C9D-CAF2020FDF2B}\ProxyStubClsid32
HKCR\Interface\{ACE99E77-AA2A-43C2-8C9D-CAF2020FDF2B}\TypeLib
HKCR\Interface\{ACE99E77-AA2A-43C2-8C9D-CAF2020FDF2B}\TypeLib#Version
HKCR\Interface\{B247F5BF-BD9D-4ECD-8FC1-365F36A1FDA1}
HKCR\Interface\{B247F5BF-BD9D-4ECD-8FC1-365F36A1FDA1}\ProxyStubClsid
HKCR\Interface\{B247F5BF-BD9D-4ECD-8FC1-365F36A1FDA1}\ProxyStubClsid32
HKCR\Interface\{B247F5BF-BD9D-4ECD-8FC1-365F36A1FDA1}\TypeLib
HKCR\Interface\{B247F5BF-BD9D-4ECD-8FC1-365F36A1FDA1}\TypeLib#Version
HKCR\Interface\{B9CC2B92-5611-453F-8381-8B6F72D9C0B8}
HKCR\Interface\{B9CC2B92-5611-453F-8381-8B6F72D9C0B8}\ProxyStubClsid
HKCR\Interface\{B9CC2B92-5611-453F-8381-8B6F72D9C0B8}\ProxyStubClsid32
HKCR\Interface\{B9CC2B92-5611-453F-8381-8B6F72D9C0B8}\TypeLib
HKCR\Interface\{B9CC2B92-5611-453F-8381-8B6F72D9C0B8}\TypeLib#Version
HKCR\Interface\{BBBFB891-98AE-4678-86F3-BD5A2EED86C9}
HKCR\Interface\{BBBFB891-98AE-4678-86F3-BD5A2EED86C9}\ProxyStubClsid
HKCR\Interface\{BBBFB891-98AE-4678-86F3-BD5A2EED86C9}\ProxyStubClsid32
HKCR\Interface\{BBBFB891-98AE-4678-86F3-BD5A2EED86C9}\TypeLib
HKCR\Interface\{BBBFB891-98AE-4678-86F3-BD5A2EED86C9}\TypeLib#Version
HKCR\Interface\{C4543E64-1498-410D-8E72-4744EEA99AB9}
HKCR\Interface\{C4543E64-1498-410D-8E72-4744EEA99AB9}\ProxyStubClsid
HKCR\Interface\{C4543E64-1498-410D-8E72-4744EEA99AB9}\ProxyStubClsid32
HKCR\Interface\{C4543E64-1498-410D-8E72-4744EEA99AB9}\TypeLib
HKCR\Interface\{C4543E64-1498-410D-8E72-4744EEA99AB9}\TypeLib#Version
HKCR\Interface\{E0FB1610-B25B-49F6-BE20-751B2F230E6F}
HKCR\Interface\{E0FB1610-B25B-49F6-BE20-751B2F230E6F}\ProxyStubClsid
HKCR\Interface\{E0FB1610-B25B-49F6-BE20-751B2F230E6F}\ProxyStubClsid32
HKCR\Interface\{E0FB1610-B25B-49F6-BE20-751B2F230E6F}\TypeLib
HKCR\Interface\{E0FB1610-B25B-49F6-BE20-751B2F230E6F}\TypeLib#Version
HKCR\Interface\{E420A65F-9984-4B8C-9FA9-1ED69D3B0A13}
HKCR\Interface\{E420A65F-9984-4B8C-9FA9-1ED69D3B0A13}\ProxyStubClsid
HKCR\Interface\{E420A65F-9984-4B8C-9FA9-1ED69D3B0A13}\ProxyStubClsid32
HKCR\Interface\{E420A65F-9984-4B8C-9FA9-1ED69D3B0A13}\TypeLib
HKCR\Interface\{E420A65F-9984-4B8C-9FA9-1ED69D3B0A13}\TypeLib#Version
HKCR\Interface\{EA58C2EA-BE26-49DD-9B9A-C8E4E5CA7791}
HKCR\Interface\{EA58C2EA-BE26-49DD-9B9A-C8E4E5CA7791}\ProxyStubClsid
HKCR\Interface\{EA58C2EA-BE26-49DD-9B9A-C8E4E5CA7791}\ProxyStubClsid32
HKCR\Interface\{EA58C2EA-BE26-49DD-9B9A-C8E4E5CA7791}\TypeLib
HKCR\Interface\{EA58C2EA-BE26-49DD-9B9A-C8E4E5CA7791}\TypeLib#Version
HKCR\Interface\{FCA28AC5-C1E1-4D67-A5AE-C44D6C374D9F}
HKCR\Interface\{FCA28AC5-C1E1-4D67-A5AE-C44D6C374D9F}\ProxyStubClsid
HKCR\Interface\{FCA28AC5-C1E1-4D67-A5AE-C44D6C374D9F}\ProxyStubClsid32
HKCR\Interface\{FCA28AC5-C1E1-4D67-A5AE-C44D6C374D9F}\TypeLib
HKCR\Interface\{FCA28AC5-C1E1-4D67-A5AE-C44D6C374D9F}\TypeLib#Version
HKCR\AppId\ZangoSA_df.exe
HKCR\AppId\ZangoSA_df.exe#AppID
HKCR\AppId\{DBF00E12-281C-4dc8-A7EC-1FF45182439B}
C:\Documents and Settings\user\Application Data\Zango\eskin\empty_bg_st.htm
C:\Documents and Settings\user\Application Data\Zango\eskin\FileManager.txt
C:\Documents and Settings\user\Application Data\Zango\eskin
C:\Documents and Settings\user\Application Data\Zango\IESkins
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\dynamic
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\030104_emte10_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\030104_emte11_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\030104_emte12_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\030104_emte13_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\030104_emte14_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\030104_emte19_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\030104_emte20_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\030104_emte21_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\030104_emte9_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\030203lib_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\033102angel_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\033102bigluf_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\033102bigsmile_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\033102birthday_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\033102cheers_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\033102flo_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\033102good_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\033102jump_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\033102king_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\033102lough_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\033102luf_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\033102smiled_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\033102smile_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\033102sor_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\033102thanx_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\033102uhu_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\040103ahh_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\040103wow_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\040104_emi2_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\042102_1134_112_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\050103big_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\050103gig_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\050103hm_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\050103nomail_emoti_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\050103norm_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\060104_ema15_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\060104_ema16_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\060104_ema17_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\060104_ema18_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\060104_ema19_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\060104_ema20_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\060104_ema21_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\060104_ema24_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\060104_ema25_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\060104_ema26_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\060104_ema30_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\060104_ema33_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\060104_ema34_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\062802hippi_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\062802jumpie_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\080402argh_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\080402oops_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\080402ouch_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\082502no_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\082502yes_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\110103_boring1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\110103_confused_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\110103_crying_ugly_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\110103_fantastic_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\110103_feel_better_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\110103_gimme_break_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\110103_heehee_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\110103_hlopaet_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\110103_ign_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\110103_lol_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\110103_no_comment_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\110103_peace_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\110103_smashing_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\110103_talk2thehand_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\blocked.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\blocked2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\block_sm.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\block_sm2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\block_smli.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\block_smli2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\btn_add-but.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\btn_back-but.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\btn_left_cut_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\btn_left_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\btn_left_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\btn_middle_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\btn_middle_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\btn_right_cut_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\btn_right_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\btn_right_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\business_promo.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\buttondir.txt
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\components.cdf
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\css2_main.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\css2_pagingmodule.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\css2_topbuttons.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\css_cattree.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\css_flashpreview.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\cursors.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\delete.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\edit_clear_sound.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\edit_fs.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\edit_select.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-511724-543450.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-511724-548964.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-511724-589306.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-511724-591943.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-511724-592579.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-511724-598579.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-511724-603763.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-511724-9595.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-511724-9696.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-511745-514279.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-backgrounds.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-bcards.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-ecards.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-emoticons.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-estationery.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-funny.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-help.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-images.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-info.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-more.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-my.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-new.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-new2.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-options.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-people.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-photo.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-tell.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-temp.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-text.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def-email-voice.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-def.cdf
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-premium-email-premium.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-t1-bg.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\email-temp-bg.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\estatationery.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\flashpatch.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\flashpreview.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\fs3.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\hotbar_promo.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\icon_checked_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\icon_close_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\icon_close_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\icon_edit_preview.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\icon_edit_send.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\icon_flash_preview.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\icon_recently_used.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\icon_remove_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\icon_remove_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\icon_sand-clock2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\icon_tell_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\icon_tell_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\icon_tree_null.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\icon_unchecked_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\icon_unchecked_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\img_barlayout.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\img_barlayout2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\img_barlayout4.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\img_corner_left.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\img_local_logo.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\js2_basetemplate.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\js2_hbgroups.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\js2_hbobject3.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\js2_hbobjectset3.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\js2_hotbarwrapper.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\js2_iteratorsandreaders3nf.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\js2_pagingmoduleobj3.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\js2_texts3.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\js2_xmltree3nf.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\layout.cdf
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\linkpathlegal.txt
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\n.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\nav_bb_2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\nav_b_2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\nav_ff_2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\nav_f_2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\progress.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\sales_buttons.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\searchbtn.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\submit.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\tab_bg.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\tab_bga.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\tab_bgia.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\tab_l.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\tab_la.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\tab_lia.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\tab_r.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\tab_ra.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\tab_ria.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\treedata_animations.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\treedata_backgrounds.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\treedata_ecards.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\treedata_emoticons.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\treedata_notifiers.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\treedata_text.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\tree_dots.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\tree_minus.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\tree_plus.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1\zango_btn.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\1
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\030104_emte10_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\030104_emte11_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\030104_emte12_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\030104_emte13_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\030104_emte14_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\030104_emte19_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\030104_emte20_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\030104_emte21_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\030104_emte9_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\030203lib_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\033102angel_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\033102bigluf_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\033102bigsmile_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\033102birthday_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\033102cheers_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\033102flo_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\033102good_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\033102jump_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\033102king_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\033102lough_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\033102luf_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\033102smiled_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\033102smile_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\033102sor_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\033102thanx_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\033102uhu_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\040103ahh_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\040103wow_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\040104_emi2_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\042102_1134_112_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\050103big_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\050103gig_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\050103hm_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\050103nomail_emoti_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\050103norm_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\060104_ema15_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\060104_ema16_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\060104_ema17_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\060104_ema18_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\060104_ema19_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\060104_ema20_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\060104_ema21_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\060104_ema24_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\060104_ema25_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\060104_ema26_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\060104_ema30_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\060104_ema33_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\060104_ema34_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\062802hippi_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\062802jumpie_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\080402argh_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\080402oops_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\080402ouch_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\082502no_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\082502yes_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\110103_boring1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\110103_confused_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\110103_crying_ugly_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\110103_fantastic_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\110103_feel_better_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\110103_gimme_break_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\110103_heehee_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\110103_hlopaet_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\110103_ign_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\110103_lol_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\110103_no_comment_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\110103_peace_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\110103_smashing_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\110103_talk2thehand_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\blocked.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\blocked2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\block_sm.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\block_sm2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\block_smli.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI

TSvoboda
nováček
Příspěvky: 6
Registrován: prosinec 07
Pohlaví: Nespecifikováno
Stav:
Offline

Nevim jestli se do predchozi zpravy veslo vsechno ..

Příspěvekod TSvoboda » 13 pro 2007 00:48

tak radsi jeste prikladam zbytek ze SuperAntiSpyware logu:

C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\blocked2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\block_sm.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\block_sm2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\block_smli.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\block_smli2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\btn_add-but.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\btn_back-but.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\btn_left_cut_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\btn_left_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\btn_left_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\btn_middle_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\btn_middle_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\btn_right_cut_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\btn_right_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\btn_right_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\business_promo.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\buttondir.txt
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\components.cdf
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\css2_main.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\css2_pagingmodule.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\css2_topbuttons.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\css_cattree.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\css_flashpreview.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\cursors.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\delete.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\edit_clear_sound.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\edit_fs.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\edit_select.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-511724-543450.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-511724-548964.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-511724-589306.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-511724-591943.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-511724-592579.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-511724-598579.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-511724-603763.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-511724-9595.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-511724-9696.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-511745-514279.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-backgrounds.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-bcards.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-ecards.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-emoticons.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-estationery.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-funny.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-help.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-images.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-info.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-more.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-my.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-new.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-new2.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-options.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-people.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-photo.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-tell.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-temp.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-text.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def-email-voice.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-def.cdf
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-premium-email-premium.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-t1-bg.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\email-temp-bg.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\estatationery.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\flashpatch.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\flashpreview.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\fs3.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\hotbar_promo.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\icon_checked_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\icon_close_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\icon_close_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\icon_edit_preview.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\icon_edit_send.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\icon_flash_preview.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\icon_recently_used.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\icon_remove_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\icon_remove_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\icon_sand-clock2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\icon_tell_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\icon_tell_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\icon_tree_null.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\icon_unchecked_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\icon_unchecked_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\img_barlayout.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\img_barlayout2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\img_barlayout4.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\img_corner_left.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\img_local_logo.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\js2_basetemplate.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\js2_hbgroups.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\js2_hbobject3.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\js2_hbobjectset3.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\js2_hotbarwrapper.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\js2_iteratorsandreaders3nf.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\js2_pagingmoduleobj3.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\js2_texts3.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\js2_xmltree3nf.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\layout.cdf
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\linkpathlegal.txt
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\n.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\nav_bb_2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\nav_b_2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\nav_ff_2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\nav_f_2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\progress.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\sales_buttons.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\searchbtn.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\submit.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\tab_bg.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\tab_bga.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\tab_bgia.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\tab_l.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\tab_la.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\tab_lia.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\tab_r.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\tab_ra.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\tab_ria.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\treedata_animations.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\treedata_backgrounds.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\treedata_ecards.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\treedata_emoticons.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\treedata_notifiers.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\treedata_text.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\tree_dots.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\tree_minus.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\tree_plus.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2\zango_btn.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\2
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad\business_promo.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad\buttondir.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad\code.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad\cursors.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad\email-def.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad\email-t1-bg.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad\email-temp-bg.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad\hotbar_promo.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad\images.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad\layout.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad\linkpathlegal.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad\localcontent.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad\progress.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad\sales_buttons.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad\treexml.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad\zango_btn.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static\DownLoad
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI\static
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOI
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\dynamic
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\030104_emte10_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\030104_emte11_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\030104_emte12_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\030104_emte13_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\030104_emte14_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\030104_emte19_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\030104_emte20_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\030104_emte21_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\030104_emte9_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\030203lib_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\033102angel_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\033102bigluf_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\033102bigsmile_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\033102birthday_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\033102cheers_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\033102flo_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\033102good_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\033102jump_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\033102king_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\033102lough_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\033102luf_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\033102smiled_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\033102smile_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\033102sor_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\033102thanx_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\033102uhu_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\040103ahh_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\040103wow_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\040104_emi2_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\042102_1134_112_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\050103big_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\050103gig_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\050103hm_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\050103nomail_emoti_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\050103norm_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\060104_ema15_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\060104_ema16_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\060104_ema17_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\060104_ema18_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\060104_ema19_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\060104_ema20_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\060104_ema21_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\060104_ema24_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\060104_ema25_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\060104_ema26_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\060104_ema30_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\060104_ema33_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\060104_ema34_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\062802hippi_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\062802jumpie_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\080402argh_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\080402oops_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\080402ouch_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\082502no_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\082502yes_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\110103_boring1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\110103_confused_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\110103_crying_ugly_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\110103_fantastic_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\110103_feel_better_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\110103_gimme_break_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\110103_heehee_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\110103_hlopaet_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\110103_ign_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\110103_lol_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\110103_no_comment_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\110103_peace_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\110103_smashing_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\110103_talk2thehand_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\blocked.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\blocked2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\block_sm.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\block_sm2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\block_smli.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\block_smli2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\btn_add-but.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\btn_back-but.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\btn_left_cut_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\btn_left_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\btn_left_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\btn_middle_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\btn_middle_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\btn_right_cut_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\btn_right_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\btn_right_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\business_promo.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\buttondir.txt
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\components.cdf
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\css2_main.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\css2_pagingmodule.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\css2_topbuttons.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\css_cattree.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\css_flashpreview.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\cursors.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\delete.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\edit_clear_sound.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\edit_fs.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\edit_select.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-511724-543450.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-511724-548964.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-511724-589306.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-511724-591943.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-511724-592579.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-511724-598579.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-511724-603763.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-511724-9595.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-511724-9696.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-511745-514279.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-backgrounds.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-bcards.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-ecards.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-emoticons.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-estationery.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-funny.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-help.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-images.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-info.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-more.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-my.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-new.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-new2.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-options.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-people.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-photo.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-tell.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-temp.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-text.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def-email-voice.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-def.cdf
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-premium-email-premium.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-t1-bg.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\email-temp-bg.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\estatationery.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\flashpatch.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\flashpreview.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\fs3.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\hotbar_promo.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\icon_checked_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\icon_close_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\icon_close_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\icon_edit_preview.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\icon_edit_send.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\icon_flash_preview.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\icon_recently_used.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\icon_remove_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\icon_remove_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\icon_sand-clock2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\icon_tell_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\icon_tell_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\icon_tree_null.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\icon_unchecked_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\icon_unchecked_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\img_barlayout.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\img_barlayout2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\img_barlayout4.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\img_corner_left.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\img_local_logo.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\js2_basetemplate.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\js2_hbgroups.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\js2_hbobject3.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\js2_hbobjectset3.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\js2_hotbarwrapper.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\js2_iteratorsandreaders3nf.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\js2_pagingmoduleobj3.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\js2_texts3.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\js2_xmltree3nf.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\layout.cdf
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\linkpathlegal.txt
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\n.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\nav_bb_2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\nav_b_2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\nav_ff_2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\nav_f_2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\progress.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\pro_hb_fo_word.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\sales_buttons.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\searchbtn.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\submit.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\tab_bg.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\tab_bga.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\tab_bgia.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\tab_l.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\tab_la.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\tab_lia.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\tab_r.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\tab_ra.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\tab_ria.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\treedata_animations.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\treedata_backgrounds.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\treedata_ecards.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\treedata_emoticons.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\treedata_notifiers.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\treedata_text.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\tree_dots.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\tree_minus.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\tree_plus.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1\zango_btn.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\1
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\030104_emte10_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\030104_emte11_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\030104_emte12_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\030104_emte13_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\030104_emte14_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\030104_emte19_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\030104_emte20_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\030104_emte21_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\030104_emte9_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\030203lib_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\033102angel_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\033102bigluf_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\033102bigsmile_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\033102birthday_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\033102cheers_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\033102flo_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\033102good_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\033102jump_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\033102king_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\033102lough_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\033102luf_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\033102smiled_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\033102smile_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\033102sor_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\033102thanx_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\033102uhu_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\040103ahh_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\040103wow_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\040104_emi2_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\042102_1134_112_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\050103big_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\050103gig_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\050103hm_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\050103nomail_emoti_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\050103norm_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\060104_ema15_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\060104_ema16_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\060104_ema17_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\060104_ema18_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\060104_ema19_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\060104_ema20_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\060104_ema21_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\060104_ema24_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\060104_ema25_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\060104_ema26_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\060104_ema30_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\060104_ema33_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\060104_ema34_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\062802hippi_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\062802jumpie_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\080402argh_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\080402oops_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\080402ouch_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\082502no_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\082502yes_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\110103_boring1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\110103_confused_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\110103_crying_ugly_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\110103_fantastic_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\110103_feel_better_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\110103_gimme_break_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\110103_heehee_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\110103_hlopaet_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\110103_ign_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\110103_lol_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\110103_no_comment_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\110103_peace_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\110103_smashing_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\110103_talk2thehand_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\blocked.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\blocked2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\block_sm.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\block_sm2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\block_smli.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\block_smli2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\btn_add-but.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\btn_back-but.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\btn_left_cut_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\btn_left_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\btn_left_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\btn_middle_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\btn_middle_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\btn_right_cut_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\btn_right_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\btn_right_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\business_promo.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\buttondir.txt
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\components.cdf
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\css2_main.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\css2_pagingmodule.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\css2_topbuttons.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\css_cattree.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\css_flashpreview.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\cursors.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\delete.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\edit_clear_sound.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\edit_fs.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\edit_select.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-511724-543450.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-511724-548964.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-511724-589306.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-511724-591943.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-511724-592579.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-511724-598579.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-511724-603763.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-511724-9595.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-511724-9696.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-511745-514279.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-backgrounds.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-bcards.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-ecards.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-emoticons.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-estationery.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-funny.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-help.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-images.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-info.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-more.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-my.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-new.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-new2.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-options.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-people.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-photo.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-tell.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-temp.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-text.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def-email-voice.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-def.cdf
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-premium-email-premium.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-t1-bg.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\email-temp-bg.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\estatationery.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\flashpatch.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\flashpreview.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\fs3.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\hotbar_promo.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\icon_checked_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\icon_close_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\icon_close_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\icon_edit_preview.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\icon_edit_send.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\icon_flash_preview.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\icon_recently_used.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\icon_remove_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\icon_remove_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\icon_sand-clock2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\icon_tell_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\icon_tell_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\icon_tree_null.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\icon_unchecked_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\icon_unchecked_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\img_barlayout.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\img_barlayout2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\img_barlayout4.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\img_corner_left.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\img_local_logo.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\js2_basetemplate.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\js2_hbgroups.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\js2_hbobject3.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\js2_hbobjectset3.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\js2_hotbarwrapper.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\js2_iteratorsandreaders3nf.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\js2_pagingmoduleobj3.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\js2_texts3.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\js2_xmltree3nf.js
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\layout.cdf
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\linkpathlegal.txt
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\n.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\nav_bb_2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\nav_b_2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\nav_ff_2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\nav_f_2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\progress.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\pro_hb_fo_word.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\sales_buttons.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\searchbtn.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\submit.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\tab_bg.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\tab_bga.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\tab_bgia.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\tab_l.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\tab_la.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\tab_lia.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\tab_r.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\tab_ra.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\tab_ria.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\treedata_animations.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\treedata_backgrounds.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\treedata_ecards.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\treedata_emoticons.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\treedata_notifiers.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\treedata_text.xml
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\tree_dots.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\tree_minus.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\tree_plus.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2\zango_btn.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\2
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\business_promo.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\buttondir.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\code.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\cursors.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\email-def.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\email-t1-bg.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\email-temp-bg.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\hotbar_promo.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\images.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\layout.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\linkpathlegal.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\localcontent.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\progress.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\pro_hb_fo_word.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\sales_buttons.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\treexml.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad\zango_btn.xip
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static\DownLoad
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL\static
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostOL
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\030104_emte10_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\030104_emte11_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\030104_emte12_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\030104_emte13_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\030104_emte14_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\030104_emte19_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\030104_emte20_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\030104_emte21_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\030104_emte9_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\030203lib_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\033102angel_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\033102bigluf_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\033102bigsmile_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\033102birthday_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\033102cheers_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\033102flo_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\033102good_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\033102jump_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\033102king_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\033102lough_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\033102luf_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\033102smiled_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\033102smile_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\033102sor_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\033102thanx_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\033102uhu_1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\040103ahh_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\040103wow_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\040104_emi2_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\042102_1134_112_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\050103big_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\050103gig_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\050103hm_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\050103nomail_emoti_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\050103norm_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\060104_ema15_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\060104_ema16_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\060104_ema17_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\060104_ema18_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\060104_ema19_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\060104_ema20_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\060104_ema21_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\060104_ema24_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\060104_ema25_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\060104_ema26_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\060104_ema30_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\060104_ema33_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\060104_ema34_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\062802hippi_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\062802jumpie_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\080402argh_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\080402oops_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\080402ouch_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\082502no_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\082502yes_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\110103_boring1_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\110103_confused_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\110103_crying_ugly_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\110103_fantastic_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\110103_feel_better_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\110103_gimme_break_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\110103_heehee_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\110103_hlopaet_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\110103_ign_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\110103_lol_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\110103_no_comment_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\110103_peace_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\110103_smashing_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\110103_talk2thehand_prv.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\blocked.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\blocked2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\block_sm.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\block_sm2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\block_smli.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\block_smli2.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\btn_add-but.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\btn_back-but.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\btn_left_cut_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\btn_left_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\btn_left_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\btn_middle_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\btn_middle_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\btn_right_cut_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\btn_right_enabled_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\btn_right_pressed_1.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\business_promo.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\buttondir.txt
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\components.cdf
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\css2_main.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\css2_pagingmodule.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\css2_topbuttons.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\css_cattree.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\css_flashpreview.css
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\cursors.res
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\delete.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\edit_clear_sound.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\edit_fs.htm
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\edit_select.gif
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-543450.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-548964.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-589306.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-591943.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-592579.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-598579.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-603763.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-9595.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\email-def-511724-9696.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\email-def-511745-514279.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-backgrounds.mnu
C:\Documents and Settings\user\Application Data\Zango\v3.0\HostWD\static\1\email-def-email-bcards.mnu
C:\Documents and Settings\user\Application Data

Uživatelský avatar
fredik
člen Security týmu
Master Level 7
Master Level 7
Příspěvky: 4680
Registrován: červenec 06
Pohlaví: Muž
Stav:
Offline

Příspěvekod fredik » 13 pro 2007 05:06

Dej sem ještě nový log z HJT.

TSvoboda
nováček
Příspěvky: 6
Registrován: prosinec 07
Pohlaví: Nespecifikováno
Stav:
Offline

Tak novy log z HJT - diky

Příspěvekod TSvoboda » 13 pro 2007 10:33

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:31:26, on 13/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\PROGRA~1\SPYWAR~1\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\user\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.co.uk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Program Files\ICQToolbar\toolbaru.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredi ... xdm099YYGB
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.topsoftwarefeed.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.topsoftwarefeed.com/redirect.php (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocach ... 0.15-3.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\PROGRA~1\SPYWAR~1\sp_rsser.exe

--
End of file - 8238 bytes

Uživatelský avatar
fredik
člen Security týmu
Master Level 7
Master Level 7
Příspěvky: 4680
Registrován: červenec 06
Pohlaví: Muž
Stav:
Offline

Příspěvekod fredik » 13 pro 2007 21:02

Jdi přes Start -> Spustit... a napiš do okna tento příkaz označený modře ComboFix /u (mezi comobofix a /u musí být mezera) a dej Ok.

Nech si tam jen jeden antivir a ten druhý odinstaluj.

Spusť znovu HijackThis a zaškrtni v něm okénka před řádky:
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/t.....xdm099YYGB
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.topsoftwarefeed.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.topsoftwarefeed.com/redirect.php (file missing)
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/imag.....0.15-3.cab
po zaškrtnutí klikni na tlačítko Fix Checked

Logy vypadají dobře, máš ještě problémy?

TSvoboda
nováček
Příspěvky: 6
Registrován: prosinec 07
Pohlaví: Nespecifikováno
Stav:
Offline

KLOBOUK DOLU

Příspěvekod TSvoboda » 13 pro 2007 22:44

Provedeno. Diky moc .. je to vsechno uz v poradku!!!

Musim rict, jsem fakt hodne prekvapenej ... hodne hodne hodne ... bez Tvoji pomoci bych to nezvladnul ...

Nemam slov ani jak podekovat ... proste je uzasny to co delas pro druhy.... klobouk dolu ....s nikym takovym jsem se nesetkal!

Tak snad uz jenom jeste jedno velky ..........DIKY........... A MOC USPECHU A VSEHO NEJ DO BUDOUCNA


... a snad zase nekdy priste u reseny meho viru :o)))



Take care



Tony

Uživatelský avatar
fredik
člen Security týmu
Master Level 7
Master Level 7
Příspěvky: 4680
Registrován: červenec 06
Pohlaví: Muž
Stav:
Offline

Příspěvekod fredik » 14 pro 2007 19:47

Tobě taky a nemáš za co Obrázek


Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 59 hostů