Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:35:55, on 4.1.2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18999)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\Explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
C:\Windows\system32\DllHost.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\DEATHBLACK\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (file missing)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll (file missing)
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [BisonHK] C:\Windows\BisonCam\BisonHK.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [lxdqmon.exe] "C:\Program Files\Lexmark Z2400 Series\lxdqmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark Z2400 Series\ezprint.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{87C61876-3A42-43D6-9A1A-4674965F6703}: NameServer = 192.168.0.11
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: lxdq_device - - C:\Windows\system32\lxdqcoms.exe
O23 - Service: QipGuard - QIP.ru - C:\Program Files\QipGuard\QipGuard.exe
O23 - Service: Vodafone Mobile Connect Service (VMCService) - Vodafone - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
--
End of file - 4241 bytes
ComboFix 11-01-03.01 - DEATHBLACK 04.01.2011 16:59:34.3.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.1916.1072 [GMT 1:00]
Spuštěný z: c:\users\DEATHBLACK\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\DEATHBLACK\Desktop\CFScript.txt
AV: avast! Antivirus *Enabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Enabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
file zipped: c:\programdata\SPLDB0B.tmp
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\programdata\SPLDB0B.tmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\DTToolbarFF.dll
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\DTToolbarFF.xpt
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\about.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\AboutWindow.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\accept.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\AddRadioStation.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\as.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\as.png
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_buy.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_download.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_feedback.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_forum.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_home.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_lite.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astroburn_site.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astroLite_16.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\az.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\b1.png
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\burn_files.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\burn_image.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\burn_imgs.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\BurnImage.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\buy.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Config.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\d.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\d2.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\daemon.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\daemon_search.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\daemon_search_site.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dot_disabled.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dot_enabled.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dot_on_over.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\download.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ds.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dsearch.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt-home.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_about.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_buy.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_download.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_faq.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_feedback.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_forum.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_line.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_lite.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_manual.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_pro.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\DTPro.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dtt16.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dtt32.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Dwnl.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\emulation.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\faq.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\favicon.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\features.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\feedback.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\forum.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrix.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrixCristals.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrixDownload.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrixPlayOnline.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrixTop.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameS.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\games_search.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\games_search_SA.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameSA.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\gct16.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\gd.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\genre.xml
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\globe.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GrabImage.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\hb.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\hb.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\help.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\hide.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\home.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\image_search.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\image_search_SA.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ImageS.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ImageSA.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ip.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\lang.xml
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\lingvo.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\m.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail_disable.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail_down.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail_under.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc_disable.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc_down.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc_under.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\manual.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\map.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\MenuRadioConfig.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\MenuRadioStation.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\MenuRSCur.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\MenuTr.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mount.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mount_n_drive.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\next.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\next_down.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\next_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\next_under.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\none.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\none_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\op.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play_down.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play_under.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\pragma.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prev.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prev_down.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prev_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prev_under.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prod.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Radio.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioBg.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioBg.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioBgMask.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDisp.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDisp_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown_down.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown_under.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioE.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioG.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioL.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioLDotMask.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioLeft.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioLeftMask.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioLM.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioM.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioN.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioR.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioR.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioRM.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioRU.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioVolume.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioVolume_down.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioVolume_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioVolume_under.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioW.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rbcheck.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rbtxt.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\refresh.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\refresh_down.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\refresh_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\refresh_under.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Rss.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Rss1.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RssA.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RssA1.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rssClose.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rssL.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rssOpen.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RssRefresh.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\s2.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\show.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\size.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\size_lr.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\size_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\size_rl.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\skins.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\soft24.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\soft24_SA.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\spt.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop_down.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop_under.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\style.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\SupportRequest.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\timer.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\TitleIcon.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\toolbar.xml
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\trans.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash_disable.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash_down.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash_under.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\u.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\unmount-all.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_back.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_dott.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_dott_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_down.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_mute.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_mute_check.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_under.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtClose.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtClose_down.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtClose_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtClose_under.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtText.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtText_down.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtText_m.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtText_under.bmp
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\web_resources.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\web_search.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\web_search_SA.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\WebS.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\WebSa.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi0.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi1.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi10.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi11.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi12.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi13.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi14.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi2.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi3.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi4.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi5.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi6.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi7.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi8.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi9.ico
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\chrome.manifest
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\chrome\dttoolbar.jar
c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\extensions\DTToolbar@toolbarnet.com\install.rdf
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-12-04 do 2011-01-04 )))))))))))))))))))))))))))))))
.
2011-01-04 16:14 . 2011-01-04 16:18 -------- d-----w- c:\users\DEATHBLACK\AppData\Local\temp
2011-01-04 16:14 . 2011-01-04 16:14 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-04 14:26 . 2010-11-10 04:33 6273872 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{CAE8B667-9AFE-4387-A1C5-0E33663D75BE}\mpengine.dll
2011-01-03 18:31 . 2011-01-03 18:31 -------- d-----w- c:\users\DEATHBLACK\AppData\Roaming\Malwarebytes
2011-01-03 18:30 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-03 18:30 . 2011-01-03 18:30 -------- d-----w- c:\programdata\Malwarebytes
2011-01-03 18:30 . 2011-01-03 18:30 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-01-03 18:30 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-01-01 21:20 . 2011-01-01 21:25 -------- d-----w- c:\program files\BitLord
2011-01-01 20:23 . 2011-01-01 20:26 -------- d-----w- c:\program files\Passcape
2011-01-01 15:41 . 2008-03-12 04:01 5632 ----a-w- c:\windows\system32\SiSKrl.dll
2011-01-01 15:41 . 2008-03-12 04:01 212992 ----a-w- c:\windows\system32\SiSFunc.dll
2011-01-01 15:41 . 2008-03-12 04:00 6656 ----a-w- c:\windows\system32\SiSCo.dll
2011-01-01 15:41 . 2008-03-12 04:00 655360 ----a-w- c:\windows\system32\SiSClone.dll
2011-01-01 15:41 . 2008-03-12 03:55 3646464 ----a-w- c:\windows\system32\SISGRUMD.dll
2011-01-01 15:41 . 2008-03-12 03:54 454656 ----a-w- c:\windows\system32\drivers\SISGRKMD.sys
2011-01-01 05:56 . 2011-01-01 06:21 -------- d-----w- c:\users\DEATHBLACK\AppData\Roaming\DAEMON Tools Lite
2011-01-01 05:55 . 2011-01-01 05:56 -------- d-----w- c:\programdata\DAEMON Tools Lite
2011-01-01 05:31 . 2011-01-01 05:31 98304 ----a-w- c:\windows\W2BNEUnin.exe
2011-01-01 05:31 . 2011-01-01 05:31 2829 ----a-w- c:\windows\W2BNEUnin.pif
2011-01-01 05:30 . 2011-01-01 06:40 -------- d-----w- C:\Warcraft II BNE
2011-01-01 04:23 . 2011-01-01 06:07 420920 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-12-30 00:28 . 2010-12-30 00:29 -------- d-----w- c:\users\DEATHBLACK\AppData\Roaming\Hamachi
2010-12-30 00:27 . 2010-12-30 00:27 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2010-12-29 17:29 . 2010-12-29 17:30 -------- d-----w- c:\program files\Passware
2010-12-28 22:13 . 2010-12-28 22:13 -------- d-----w- c:\program files\IPX-SPX Protocol
2010-12-15 07:16 . 2010-11-04 18:55 601600 ----a-w- c:\windows\system32\schedsvc.dll
2010-12-15 07:16 . 2010-11-04 18:56 345600 ----a-w- c:\windows\system32\wmicmiplugin.dll
2010-12-15 07:16 . 2010-11-04 18:55 352768 ----a-w- c:\windows\system32\taskschd.dll
2010-12-15 07:16 . 2010-11-04 18:55 270336 ----a-w- c:\windows\system32\taskcomp.dll
2010-12-15 07:16 . 2010-11-04 16:34 171520 ----a-w- c:\windows\system32\taskeng.exe
2010-12-15 07:14 . 2010-10-28 13:20 2048 ----a-w- c:\windows\system32\tzres.dll
2010-12-15 07:14 . 2010-11-03 10:51 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-22 11:43 . 2010-10-22 11:43 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-10-22 11:43 . 2010-10-22 11:43 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-10-19 09:41 . 2010-05-16 16:44 222080 ------w- c:\windows\system32\MpSigStub.exe
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-09-07 2838912]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"RtHDVCpl"="RtHDVCpl.exe" [2008-02-26 4939776]
"Skytel"="Skytel.exe" [2007-11-20 1826816]
"BisonHK"="c:\windows\BisonCam\BisonHK.exe" [2008-03-25 77824]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2007-01-17 634880]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-08-17 102400]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2010-05-16 1794320]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"lxdqmon.exe"="c:\program files\Lexmark Z2400 Series\lxdqmon.exe" [2007-12-17 656040]
"EzPrint"="c:\program files\Lexmark Z2400 Series\ezprint.exe" [2007-12-17 107176]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 CFcatchme;CFcatchme;c:\users\DEATHB~1\AppData\Local\Temp\CFcatchme.sys [x]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys [2009-06-29 112128]
R3 hwusbfake;Huawei DataCard USB Fake;c:\windows\system32\DRIVERS\ewusbfake.sys [2009-06-29 102912]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2011-01-01 420920]
S1 aswSP;aswSP; [x]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2010-05-16 130080]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2010-05-16 28704]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
S2 lxdq_device;lxdq_device;c:\windows\system32\lxdqcoms.exe [2007-12-04 594600]
S2 QipGuard;QipGuard;c:\program files\QipGuard\QipGuard.exe [2010-11-13 194512]
S2 VMCService;Vodafone Mobile Connect Service;c:\program files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [2009-07-03 9216]
S3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8187B.sys [2010-03-31 350720]
S3 SiS6350;SiS6350;c:\windows\system32\DRIVERS\SISGRKMD.sys [2008-03-12 454656]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSGB6.sys [2008-03-03 48128]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: {87C61876-3A42-43D6-9A1A-4674965F6703} = 192.168.0.11
FF - ProfilePath - c:\users\DEATHBLACK\AppData\Roaming\Mozilla\Firefox\Profiles\mzphqvvh.default\
FF - prefs.js: browser.startup.homepage - seznam.cz
FF - prefs.js: network.proxy.ftp - proxy.vsps-su.cz
FF - prefs.js: network.proxy.ftp_port - 3128
FF - prefs.js: network.proxy.gopher - proxy.vsps-su.cz
FF - prefs.js: network.proxy.gopher_port - 3128
FF - prefs.js: network.proxy.http - proxy.vsps-su.cz
FF - prefs.js: network.proxy.http_port - 3128
FF - prefs.js: network.proxy.socks - proxy.vsps-su.cz
FF - prefs.js: network.proxy.socks_port - 3128
FF - prefs.js: network.proxy.ssl - proxy.vsps-su.cz
FF - prefs.js: network.proxy.ssl_port - 3128
FF - prefs.js: network.proxy.type - 0
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: QipAuthorizer: {32a1fd71-835e-4b11-8e54-886fda0b4c89} - %profile%\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2011-01-04 17:18
Windows 6.0.6002 Service Pack 2 NTFS
detected NTDLL code modification:
ZwClose, ZwOpenFile
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'lsass.exe'(732)
c:\windows\system32\guard32.dll
- - - - - - - > 'Explorer.exe'(1116)
c:\windows\system32\guard32.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Hotkey_Driver\HotkeyDriver.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\Mozilla Firefox\firefox.exe
c:\program files\Mozilla Firefox\plugin-container.exe
.
**************************************************************************
.
Celkový čas: 2011-01-04 17:34:25 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-01-04 16:33
ComboFix2.txt 2011-01-04 00:57
ComboFix3.txt 2011-01-03 19:46
Před spuštěním: Volných bajtů: 44 942 680 064
Po spuštění: Volných bajtů: 44 887 187 456
Current=11 Default=11 Failed=1 LastKnownGood=10 Sets=1,2,3,4,5,6,7,8,9,10,11
- - End Of File - - 5B70E31973F2608D42CE95117FD3CC20
