preventivni kontrola logu

[ToxicCc]

Dobry den mam takovy problem obvykle hraju na PC CS 1.6 a CPU se mi pohybuje kolem 50%. Dival jsem se na procesy, ktery to zpusobuje a nejvic meli necinne procesy. Tak vas prosim jestli by jste se mi na to nemohli podivat... Diky



Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
D:\Program Files\Avira\AntiVir Desktop\avgnt.exe
D:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Vtune ATI\TBPANEL.exe
C:\Program Files\Skype\Phone\Skype.exe
D:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
D:\OpenOffice.org1.1.1\program\soffice.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
D:\Program Files\ICQ7.2\ICQ.exe
D:\Program Files\uTorrent\utorrent.exe
D:\Program Files\Valve\hl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.icq.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT2342185
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\Windows\System32\dvmurl.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfre1.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
R3 - URLSearchHook: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyP1.dll
R3 - URLSearchHook: Hero Fighter Toolbar - {b12785f5-d8d0-4530-a3ea-5c4263b85bef} - C:\Program Files\Hero_Fighter\tbHero.dll
O1 - Hosts: ::1 localhost
O1 - Hosts: http://legendmt2.info/ l2testauthd.lineage2.com
O1 - Hosts: http://legendmt2.info/ l2authd.lineage2.com
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: GigagetIEHelper - {111CAA23-6F4F-42AC-8555-B48C1D87BBAB} - C:\Windows\system32\gigagetbho_v10.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyP1.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Hero Fighter Toolbar - {b12785f5-d8d0-4530-a3ea-5c4263b85bef} - C:\Program Files\Hero_Fighter\tbHero.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfre1.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfre1.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Foxit Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyP1.dll
O3 - Toolbar: Hero Fighter Toolbar - {b12785f5-d8d0-4530-a3ea-5c4263b85bef} - C:\Program Files\Hero_Fighter\tbHero.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [avgnt] "D:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "D:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "D:\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [AROReminder] C:\Program Files\Advanced Registry Optimizer\ARO.exe -rem
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [TBPanel] C:\Program Files\Vtune ATI\TBPanel.exe /A
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ICQ] ~"D:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - Startup: OpenOffice.org 1.1.1.lnk = D:\OpenOffice.org1.1.1\program\quickstart.exe
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Download All by Gigaget - D:\Program Files\Giganology\Gigaget\getallurl.htm
O8 - Extra context menu item: &Download by Gigaget - D:\Program Files\Giganology\Gigaget\geturl.htm
O9 - Extra button: Kniha klipů HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: HP Chytrý výběr - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - D:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - D:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files\PokerStars.NET\PokerStarsUpdate.exe (file missing)
O16 - DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} (CeWe Color AG & Co. OHG Control) - https://as.photoprintit.de/ips-opdata/a ... oader6.cab
O16 - DPF: {CAC677B6-4963-4305-9066-0BD135CD9233} (IPSUploader4 Control) - https://as.photoprintit.de/ips-opdata/l ... oader4.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - D:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - D:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Služba Google Update (gupdate1ca59619c3773a0) (gupdate1ca59619c3773a0) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - D:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe

--
End of file - 12678 bytes

[Reklama]

[memphisto]

Tak to je mazec....

Odinstaluj:
ICQ Toolbar
free-downloads.net Toolbar
MyPlayCity Toolbar
SWEET IM Toolbar
Hero Fighter Toolbar
AskBar
Daemon Tools Toolbar
Foxit Toolbar

v logu fixni:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT2342185
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\Windows\System32\dvmurl.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfre1.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
R3 - URLSearchHook: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyP1.dll
R3 - URLSearchHook: Hero Fighter Toolbar - {b12785f5-d8d0-4530-a3ea-5c4263b85bef} - C:\Program Files\Hero_Fighter\tbHero.dll
O1 - Hosts: ::1 localhost
O1 - Hosts: http://legendmt2.info/ l2testauthd.lineage2.com
O1 - Hosts: http://legendmt2.info/ l2authd.lineage2.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyP1.dll
O2 - BHO: Hero Fighter Toolbar - {b12785f5-d8d0-4530-a3ea-5c4263b85bef} - C:\Program Files\Hero_Fighter\tbHero.dll
O2 - BHO: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfre1.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfre1.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Foxit Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyP1.dll
O3 - Toolbar: Hero Fighter Toolbar - {b12785f5-d8d0-4530-a3ea-5c4263b85bef} - C:\Program Files\Hero_Fighter\tbHero.dll
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files\PokerStars.NET\PokerStarsUpdate.exe (file missing)
O16 - DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} (CeWe Color AG & Co. OHG Control) - https://as.photoprintit.de/ips-opdata/a ... oader6.cab
O16 - DPF: {CAC677B6-4963-4305-9066-0BD135CD9233} (IPSUploader4 Control) - https://as.photoprintit.de/ips-opdata/l ... oader4.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

[ToxicCc]

OK ale uz ted normal muzu fixnout ty veci co jsi mi napsal??

[memphisto]

Odinstaluj, fixni. Některé po odinstalaci možná už v logu vidět nebudou. Pak ten Malwarebytes

[ToxicCc]

tady je to logo z programu Malwarebytes


Verze databáze: 5457

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18999

4.1.2011 14:48:49
mbam-log-2011-01-04 (14-48-45).txt

Typ kontroly: Rychlý test
Testované objekty: 153363
Uplynulý čas: 6 minut, 31 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 1
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> No action taken.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\Users\Uživatel\downloads\multihack 3.0.exe (Trojan.Fakealert) -> No action taken.
c:\Users\Uživatel\downloads\exp-yang-hack.exe (Trojan.Downloader) -> No action taken.

[memphisto]

- Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

[ToxicCc]

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18999

4.1.2011 15:40:23
mbam-log-2011-01-04 (15-40-23).txt

Typ kontroly: Rychlý test
Testované objekty: 153363
Uplynulý čas: 6 minut, 31 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 1
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Quarantined and deleted successfully.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\Users\Uživatel\downloads\multihack 3.0.exe (Trojan.Fakealert) -> Quarantined and deleted successfully.
c:\Users\Uživatel\downloads\exp-yang-hack.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

[ToxicCc]

tady je log z programu ComboFix


ComboFix 11-01-03.04 - Uživatel 04.01.2011 15:45:17.1.4 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3070.1680 [GMT 1:00]
Spuštěný z: c:\users\Uživatel\Downloads\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\AutoRun.inf
c:\windows\system32\drivers\tlytcjjb.sys
D:\install.exe

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_prkqb


((((((((((((((((((((((((( Soubory vytvořené od 2010-12-04 do 2011-01-04 )))))))))))))))))))))))))))))))
.

2011-01-04 13:44 . 2011-01-04 13:44 -------- d-----w- c:\program files\CCleaner
2011-01-04 13:40 . 2011-01-04 13:40 -------- d-----w- c:\users\Uživatel\AppData\Roaming\Malwarebytes
2011-01-04 13:40 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-04 13:40 . 2011-01-04 13:40 -------- d-----w- c:\programdata\Malwarebytes
2011-01-04 13:40 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-01-04 13:32 . 2010-11-10 04:33 6273872 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{0E10E7BE-324F-4E86-AE6C-548D3A6A41A7}\mpengine.dll
2011-01-03 16:27 . 2011-01-03 16:27 2560 ----a-w- c:\windows\_MSRSTRT.EXE
2011-01-03 15:54 . 2011-01-03 15:54 388096 ----a-r- c:\users\Uživatel\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-12-30 15:20 . 2010-12-30 15:20 -------- d-----w- c:\program files\Microsoft Silverlight
2010-12-27 12:55 . 2003-09-03 01:28 724992 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iKernel.dll
2010-12-27 12:55 . 2003-09-03 01:27 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\ctor.dll
2010-12-27 12:55 . 2003-09-03 01:26 266240 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iscript.dll
2010-12-27 12:55 . 2003-09-03 01:26 192512 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iuser.dll
2010-12-27 12:55 . 2003-09-03 01:25 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\DotNetInstaller.exe
2010-12-27 12:55 . 2010-12-27 12:55 311428 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\Setup.dll
2010-12-27 12:55 . 2010-12-27 12:55 184452 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iGdi.dll
2010-12-26 15:20 . 2010-12-26 15:20 -------- d-sh--w- c:\programdata\DSS
2010-12-18 13:14 . 2010-12-18 13:14 -------- d-----w- c:\users\Uživatel\AppData\Local\AliensVsPredator
2010-12-17 18:09 . 2010-12-17 18:09 -------- d-----w- c:\program files\Microsoft.NET
2010-12-15 12:49 . 2010-11-03 10:51 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2010-12-12 17:06 . 2003-11-14 15:12 518416 ----a-r- c:\windows\system32\MSXML.DLL
2010-12-10 11:09 . 2010-12-10 11:42 -------- d-----w- c:\users\Uživatel\AppData\Roaming\HLSW
2010-12-09 18:45 . 2009-08-02 20:09 1554944 ----a-w- c:\windows\system32\vorbis.acm
2010-12-09 18:45 . 2010-12-09 18:45 -------- d-----w- c:\program files\Image-Line
2010-12-09 18:45 . 2010-12-09 18:45 -------- d-----w- c:\program files\Outsim
2010-12-09 15:30 . 2009-03-18 15:35 26176 ---ha-w- c:\windows\system32\hamachi.sys
2010-12-06 14:12 . 2010-12-06 14:12 -------- d-----w- c:\program files\Ubisoft
2010-12-06 14:12 . 2010-06-02 03:55 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2010-12-06 14:12 . 2010-06-02 03:55 527192 ----a-w- c:\windows\system32\XAudio2_7.dll
2010-12-06 14:12 . 2010-06-02 03:55 239960 ----a-w- c:\windows\system32\xactengine3_7.dll
2010-12-06 14:12 . 2010-05-26 10:41 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2010-12-06 14:12 . 2010-05-26 10:41 248672 ----a-w- c:\windows\system32\d3dx11_43.dll
2010-12-06 14:12 . 2010-05-26 10:41 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2010-12-06 14:12 . 2010-05-26 10:41 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll
2010-12-06 14:12 . 2010-05-26 10:41 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-03 15:54 . 2011-01-03 15:54 388096 ----a-r- c:\users\Uživatel\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-01-03 15:54 . 2011-01-03 15:54 388096 ----a-r- c:\users\Uživatel\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-10-24 11:59 . 2010-10-24 11:59 281760 ----a-w- c:\windows\system32\drivers\atksgt.sys
2010-10-24 11:59 . 2010-10-24 11:59 25888 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2010-10-19 09:41 . 2009-10-03 09:14 222080 ------w- c:\windows\system32\MpSigStub.exe
2010-10-14 00:36 . 2010-10-14 00:36 15451288 ----a-w- c:\windows\system32\xlive.dll
2010-10-14 00:36 . 2010-10-14 00:36 13642904 ----a-w- c:\windows\system32\xlivefnt.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
2008-11-18 10:58 333192 ----a-w- c:\program files\AskBarDis\bar\bin\askBar.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2008-10-08 11:22 1172792 ----a-w- c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2008-10-08 1172792]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-11-18 333192]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.SWEETIE.3]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.SWEETIE]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2008-10-08 1172792]
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-11-18 333192]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.SWEETIE.3]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.SWEETIE]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"AlcoholAutomount"="d:\alcohol 120\axcmd.exe" [2008-11-23 203720]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-02-10 39408]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"TBPanel"="c:\program files\Vtune ATI\TBPanel.exe" [2008-08-06 2281472]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-04-06 26102056]
"DAEMON Tools Lite"="d:\program files\DAEMON Tools Lite\daemon.exe" [2008-07-24 490952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2008-07-03 6266880]
"Skytel"="Skytel.exe" [2008-06-25 1826816]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"CloneCDElbyCDFL"="c:\program files\Elaborate Bytes\CloneCD\ElbyCheck.exe" [2002-11-02 45056]
"CloneCDTray"="c:\program files\Elaborate Bytes\CloneCD\CloneCDTray.exe" [2002-12-02 73728]
"SweetIM"="c:\program files\SweetIM\Messenger\SweetIM.exe" [2008-12-02 111928]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-03-11 49152]
"QuickTime Task"="d:\program files\QuickTime\QTTask.exe" [2009-01-05 413696]
"avgnt"="d:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"LogMeIn Hamachi Ui"="d:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2010-12-06 1910152]
"Malwarebytes' Anti-Malware (reboot)"="d:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]

c:\users\U§ivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 1.1.1.lnk - d:\openoffice.org1.1.1\program\quickstart.exe [2004-3-27 61533]
OpenOffice.org 2.2.lnk - c:\program files\OpenOffice.org 2.2\program\quickstart.exe [2007-6-8 393216]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - d:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-24 29696]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-3-11 210520]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate1ca59619c3773a0;Služba Google Update (gupdate1ca59619c3773a0);c:\program files\Google\Update\GoogleUpdate.exe [2009-10-30 133104]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S0 ElbyVCD;ElbyVCD;c:\windows\system32\DRIVERS\ElbyVCD.sys [2002-11-28 22016]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2008-11-16 717296]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2009-02-06 106208]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;d:\program files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2009-02-06 92800]
S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;d:\program files\LogMeIn Hamachi\hamachi-2.exe [2010-12-06 1238408]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [2010-06-02 246520]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'

2011-01-04 c:\windows\Tasks\1-Klick-Wartung.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-11-18 12:57]

2011-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-30 13:04]

2011-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-30 13:04]

2011-01-02 c:\windows\Tasks\Norton Security Scan for Uživatel.job
- c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\Nss.exe [2009-12-11 10:54]

2011-01-04 c:\windows\Tasks\User_Feed_Synchronization-{A04F5AE8-65AF-4F7A-A301-B3B6E5950BBF}.job
- c:\windows\system32\msfeedssync.exe [2010-12-15 04:25]
.
.
------- Doplňkový sken -------
.
mStart Page = hxxp://home.sweetim.com
IE: &Download All by Gigaget - d:\program files\Giganology\Gigaget\getallurl.htm
IE: &Download by Gigaget - d:\program files\Giganology\Gigaget\geturl.htm
IE: {{FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - c:\program files\PokerStars.NET\PokerStarsUpdate.exe
DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} - hxxps://as.photoprintit.de/ips-opdata/a ... oader6.cab
FF - ProfilePath - c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.as ... ource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Hero Fighter Customized Web Search
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: SweetIM Toolbar for Firefox: {EEE6C361-6118-11DC-9C72-001320C79847} - %profile%\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
FF - Ext: free-downloads.net Toolbar: {ecdee021-0d17-467f-a1ff-c7a115230949} - %profile%\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}
FF - Ext: Ask Toolbar for Firefox: {E9A1DEE0-C623-4439-8932-001E7D17607D} - %profile%\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
FF - Ext: MyPlayCity Toolbar: {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - %profile%\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: GameBox: gb@toolbar - %profile%\extensions\gb@toolbar
FF - Ext: Hero Fighter Toolbar: {b12785f5-d8d0-4530-a3ea-5c4263b85bef} - %profile%\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}
FF - Ext: DAEMON Tools Toolbar: DTToolbar@toolbarnet.com - %profile%\extensions\DTToolbar@toolbarnet.com
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

BHO-{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - c:\program files\MyPlayCity\tbMyP1.dll
BHO-{ecdee021-0d17-467f-a1ff-c7a115230949} - c:\program files\free-downloads.net\tbfre1.dll
Toolbar-{ecdee021-0d17-467f-a1ff-c7a115230949} - c:\program files\free-downloads.net\tbfre1.dll
Toolbar-{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - c:\program files\MyPlayCity\tbMyP1.dll
WebBrowser-{ECDEE021-0D17-467F-A1FF-C7A115230949} - c:\program files\free-downloads.net\tbfre1.dll
WebBrowser-{4724C5D8-DFA7-417A-A2F5-1EABFEE9B4AC} - c:\program files\MyPlayCity\tbMyP1.dll
HKCU-Run-AROReminder - c:\program files\Advanced Registry Optimizer\ARO.exe
HKCU-Run-ICQ - ~d:\program files\ICQ6.5\ICQ.exe
AddRemove-Advanced Registry Optimizer_is1 - c:\program files\Advanced Registry Optimizer\unins000.exe
AddRemove-eDgMt2 Client v1 - d:\program files\eDgMt2\uninstall.exe
AddRemove-free-downloads.net Toolbar - c:\progra~1\FREE-D~1.NET\UNWISE.EXE
AddRemove-Little Fighter 2 version 2.0a - d:\program files\LittleFighter2\LF2_v2.0a\Uninstal.exe
AddRemove-Luxor 2 - d:\program files\MumboJumbo\Luxor 2\Uninstall.exe
AddRemove-Metin2 Factory - d:\program files\Metin2 Factory\Uninstal.exe
AddRemove-Metin2_is1 - d:\program files\Metin2\unins000.exe
AddRemove-mod_sobit - d:\program files\Rockstar Games\GTA San Andreas\Uninstall s0beit 3.4 mod
AddRemove-MotoGP2_is1 - d:\program files\MotoGP2\unins000.exe
AddRemove-MyPlayCity Toolbar - c:\progra~1\MYPLAY~1\UNWISE.EXE
AddRemove-PokerStars.net - c:\program files\PokerStars.NET\PokerStarsUninstall.exe
AddRemove-R.Y.L FactorY_is1 - d:\program files\R.Y.L FactorY\unins000.exe
AddRemove-Reason Demo_is1 - d:\program files\Propellerhead\Reason Demo\Uninstall Reason Demo\unins000.exe
AddRemove-Speed Gear_is1 - c:\program files\Speed Gear 5\unins000.exe
AddRemove-Virtual DJ - Atomix Productions - d:\progra~1\VIRTUA~1\UNWISE.EXE
AddRemove-{0524D62A-72D6-4D01-B4E8-546BA5B0B9EC}_is1 - d:\program files\eDgMt2\unins000.exe
AddRemove-{4817189D-1785-4627-A33C-39FD90919300} - c:\program files\EA GAMES\The Sims 2 Mazlíčci\EAUninstall.exe
AddRemove-{5C648FDB-0138-4619-B66E-230EF53E8E2C} - c:\program files\EA GAMES\The Sims 2 Pro Teenagery Kolekce\EAUninstall.exe
AddRemove-{6889EE56-1816-4E89-94DF-9F56E7804039}_is1 - d:\program files\Valve\unins000.exe
AddRemove-{7B3577F5-1D82-4C9B-008B-69D026FD8BCA} - c:\program files\EA GAMES\The Sims 2 Ve světě podnikání\EAUninstall.exe
AddRemove-{8FD3F4BA-A4A6-4380-00A6-CC6853AB2DC2} - c:\program files\EA GAMES\The Sims 2 University\EAUninstall.exe
AddRemove-{9CDBC303-3EED-40b0-8E41-A7C65AA96C26} - d:\program files\EA GAMES\The Sims 2 Pro luxusní život - Kolekce\EAUninstall.exe
AddRemove-{B6F5B704-06D3-4687-90F3-6195304AD755} - c:\program files\EA GAMES\The Sims 2 Život v bytě\EAUninstall.exe
AddRemove-{C3159144-B4F4-420F-9266-9CAF4498D88A}_is1 - d:\program files\Wildlife Park Gold Edition\unins000.exe
AddRemove-{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06} - c:\program files\EA GAMES\The Sims 2 Roční období\EAUninstall.exe
AddRemove-{F248ADFA-64E0-4b03-8A83-059078BED6A0} - c:\program files\EA GAMES\The Sims 2 Šťastnou cestu\EAUninstall.exe
AddRemove-{F7529650-B9DB-481B-0089-A2AC3C2821C1} - c:\program files\EA GAMES\The Sims 2 Noční život\EAUninstall.exe
AddRemove-{F9C411D2-E1DD-4DC2-86B4-1140731F690B}_is1 - d:\program files\Gabitasoft\Santa in panic\unins000.exe



**************************************************************************
skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory:

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-2918345318-439307543-3607528225-1000\Software\SecuROM\License information*]
"datasecu"=hex:53,91,00,dd,dd,6b,66,8f,d4,1f,00,e3,31,ad,11,e3,ae,cb,d7,7f,79,
02,c7,3d,82,1e,30,8b,d2,12,87,e1,a6,59,17,7f,a6,29,ba,24,cc,9a,62,a9,fb,1b,\
"rkeysecu"=hex:ac,0a,73,21,0a,66,3c,6a,81,48,02,15,c9,d7,5e,26

[HKEY_USERS\S-1-5-21-2918345318-439307543-3607528225-1000\¬ î**]
@Allowed: (Read) (RestrictedCode)
"MachineID"=hex:af,ba,6d,46,b0,8f,07,00
DUMPHIVE0.003 (REGF)

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
d:\program files\Avira\AntiVir Desktop\avguard.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\program files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
c:\windows\System32\TUProgSt.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\conime.exe
c:\windows\RtHDVCpl.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\windows\ehome\ehmsas.exe
c:\program files\Windows Media Player\wmpnetwk.exe
d:\openoffice.org1.1.1\program\soffice.exe
c:\program files\OpenOffice.org 2.2\program\soffice.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\OpenOffice.org 2.2\program\soffice.BIN
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe
c:\program files\Skype\Plugin Manager\skypePM.exe
c:\windows\system32\rundll32.exe
.
**************************************************************************
.
Celkový čas: 2011-01-04 15:58:15 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-01-04 14:57

Před spuštěním: 6 270 672 896
Po spuštění: 5 277 290 496

- - End Of File - - EB3A938F4C271EC843DAA1137DE41321

[memphisto]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

KillAll::
Folder::
c:\program files\AskBarDis
c:\program files\SweetIM
c:\program files\ICQ6Toolbar
c:\program files\Norton Security Scan

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"=-
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"=-
[-HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[-HKEY_CLASSES_ROOT\SWEETIE.SWEETIE.3]
[-HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[-HKEY_CLASSES_ROOT\SWEETIE.SWEETIE]
[-HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[-HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"=-
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"=-
[-HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[-HKEY_CLASSES_ROOT\SWEETIE.SWEETIE.3]
[-HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[-HKEY_CLASSES_ROOT\SWEETIE.SWEETIE]
[-HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[-HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"=-

Driver::
ehdrv
epfwwfpr
ICQ Service

File::
c:\windows\system32\DRIVERS\ehdrv.sys
c:\windows\system32\DRIVERS\epfwwfpr.sys
c:\windows\Tasks\Norton Security Scan for Uživatel.job

DDS::
mStart Page = hxxp://home.sweetim.com
DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} - hxxps://as.photoprintit.de/ips-opdata/a ... oader6.cab

Firefox::
FF - ProfilePath - c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.as ... ource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Hero Fighter Customized Web Search
FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: SweetIM Toolbar for Firefox: {EEE6C361-6118-11DC-9C72-001320C79847} - %profile%\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
FF - Ext: free-downloads.net Toolbar: {ecdee021-0d17-467f-a1ff-c7a115230949} - %profile%\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}
FF - Ext: Ask Toolbar for Firefox: {E9A1DEE0-C623-4439-8932-001E7D17607D} - %profile%\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
FF - Ext: MyPlayCity Toolbar: {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - %profile%\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: GameBox: gb@toolbar - %profile%\extensions\gb@toolbar
FF - Ext: Hero Fighter Toolbar: {b12785f5-d8d0-4530-a3ea-5c4263b85bef} - %profile%\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}
FF - Ext: DAEMON Tools Toolbar: DTToolbar@toolbarnet.com - %profile%\extensions\DTToolbar@toolbarnet.com

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

RegNull::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu

[ToxicCc]

udelal jsem to co jsi mi napsal vloz soubor .txt to ComboFixu vsechno probehlo uspesne, restartoval se pocitac, ale pozdeji mi Avira nasla nevim co (asi vir) ve win32 dal jsem to do karanteny a doufam ze to nic neposkodilo... tady je to logu po smazan a jeste neco zprava obsahuje moc znaku tak jsem ti to rozdelil...

Použité ovládací přepínače :: c:\users\Uživatel\Desktop\CFScript.txt
AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení

FILE ::
"c:\windows\system32\DRIVERS\ehdrv.sys"
"c:\windows\system32\DRIVERS\epfwwfpr.sys"
"c:\windows\Tasks\Norton Security Scan for Uživatel.job"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\program files\AskBarDis
c:\program files\AskBarDis\bar\bin\askBar.dll
c:\program files\AskBarDis\bar\bin\askPopStp.dll
c:\program files\AskBarDis\bar\bin\psvince.dll
c:\program files\AskBarDis\bar\Settings\config.dat
c:\program files\AskBarDis\bar\Settings\config.dat.bak
c:\program files\AskBarDis\unins000.dat
c:\program files\AskBarDis\unins000.exe
c:\program files\ICQ6Toolbar
c:\program files\ICQ6Toolbar\config.xml
c:\program files\ICQ6Toolbar\Icons.bmp
c:\program files\ICQ6Toolbar\ICQ Service.exe
c:\program files\ICQ6Toolbar\icq6Toolbar.ico
c:\program files\ICQ6Toolbar\ICQToolBar.dll
c:\program files\ICQ6Toolbar\ICQUnToolbar.exe
c:\program files\ICQ6Toolbar\logo_small.gif
c:\program files\ICQ6Toolbar\ServiceStarter.exe
c:\program files\ICQ6Toolbar\short.wav
c:\program files\ICQ6Toolbar\Version.txt
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components\ITB_History.js
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\prefs.js
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\user.js
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome.manifest
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\icqtoolbar.jar
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\install.rdf
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\manifest.mf
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.rsa
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.sf
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.gif
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.src
c:\program files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.xml
c:\program files\Norton Security Scan
c:\program files\Norton Security Scan\BilBDRes.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\{2A85E335-7417-424d-AD89-31DED1689794}.dat
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\{407D1C08-B366-4aca-92FB-E04E97F6681D}.dat
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\BilBDRes.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\ccL80U.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\ccScanw.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\ccVrTrst.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\dec_abi.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\DefUtDCD.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\diLueCbk.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\ecmldr32.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\HeartBt.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\help.htm
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\Microsoft.VC80.CRT.manifest
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\msl.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\msvcp80.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\msvcr80.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\Nss.exe
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\patch25d.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\PrdDtRes.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\ReputationCacheDB.db
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\RptCdRes.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\SAUpdt.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\ScanCore.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\ScanRes.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\ScanText.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\SKUCfg.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\SKURes.dll
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\symbos.exe
c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\SymHTML.dll
c:\program files\Norton Security Scan\Norton Security Scan\isolate.ini
c:\program files\Norton Security Scan\symbos.exe
c:\program files\SweetIM
c:\program files\SweetIM\Messenger\default.xml
c:\program files\SweetIM\Messenger\mgAdaptersProxy.dll
c:\program files\SweetIM\Messenger\mgAIMAuto.dll
c:\program files\SweetIM\Messenger\mgAIMMessengerAdapter.dll
c:\program files\SweetIM\Messenger\mgArchive.dll
c:\program files\SweetIM\Messenger\mgcommon.dll
c:\program files\SweetIM\Messenger\mgcommunication.dll
c:\program files\SweetIM\Messenger\mgconfig.dll
c:\program files\SweetIM\Messenger\mgFlashPlayer.dll
c:\program files\SweetIM\Messenger\mghooking.dll
c:\program files\SweetIM\Messenger\mgICQAuto.dll
c:\program files\SweetIM\Messenger\mgICQMessengerAdapter.dll
c:\program files\SweetIM\Messenger\mgIEPlayer.dll
c:\program files\SweetIM\Messenger\mglogger.dll
c:\program files\SweetIM\Messenger\mgMediaPlayer.dll
c:\program files\SweetIM\Messenger\mgMsnAuto.dll
c:\program files\SweetIM\Messenger\mgMsnMessengerAdapter.dll
c:\program files\SweetIM\Messenger\mgsimcommon.dll
c:\program files\SweetIM\Messenger\mgSweetIM.dll
c:\program files\SweetIM\Messenger\mgUpdateSupport.dll
c:\program files\SweetIM\Messenger\mgxml_wrapper.dll
c:\program files\SweetIM\Messenger\mgYahooAuto.dll
c:\program files\SweetIM\Messenger\mgYahooMessengerAdapter.dll
c:\program files\SweetIM\Messenger\msvcp71.dll
c:\program files\SweetIM\Messenger\msvcr71.dll
c:\program files\SweetIM\Messenger\resources\images\AudibleButton.png
c:\program files\SweetIM\Messenger\resources\images\DisplayPicturesButton.png
c:\program files\SweetIM\Messenger\resources\images\EmoticonButton.png
c:\program files\SweetIM\Messenger\resources\images\NudgeButton.png
c:\program files\SweetIM\Messenger\resources\images\SoundFxButton.png
c:\program files\SweetIM\Messenger\resources\images\WinksButton.png
c:\program files\SweetIM\Messenger\SweetIM.exe
c:\program files\SweetIM\Toolbars\Internet Explorer\ClearHist.exe
c:\program files\SweetIM\Toolbars\Internet Explorer\conf\logger.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\default.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\mgcommon.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgconfig.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mglogger.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgsimcommon.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\mgxml_wrapper.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\msvcp71.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\msvcr71.dll
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\affid.dat
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\basis.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\Bookmarks_23x18.bmp
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\Email_23x18.bmp
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\Games_23x18.bmp
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\Greetingcards_23x18.bmp
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\Logo.bmp
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\Mobile_23x18.bmp
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\Music_23x18.bmp
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\News_23x18.bmp
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\Shoping_23x18.bmp
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\SmileySmile.bmp
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\SmileyWink.bmp
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\sweetimicons.bmp
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\toolbar.xml
c:\program files\SweetIM\Toolbars\Internet Explorer\resources\version.txt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\components\Conduit.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\components\Conduit.xpt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\components\ConduitAutoCompleteSearch.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\components\ConduitAutoCompleteSearch.xpt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\components\ConduitToolbar.idl
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\components\ConduitToolbar.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\components\ConduitToolbar.xpt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\components\FFAlert.dll
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\components\FFalert.xpt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\components\npmozax.dll
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\components\nsAxSecurityPolicy.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\components\nsIMozAxPlugin.xpt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\defaults\default_radio_skin.xml
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\chrome.manifest
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\chrome\myplaycity.jar
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\install.rdf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\lib\xpcom.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\META-INF\manifest.mf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\META-INF\zigbert.rsa
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\META-INF\zigbert.sf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\searchplugin\conduit.gif
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\searchplugin\conduit.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\searchplugin\conduit.PNG
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\searchplugin\conduit.src
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\searchplugin\conduit.xml
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\version.txt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components\ITB_History.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\prefs.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\user.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome.manifest
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\icqtoolbar.jar
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\install.rdf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\manifest.mf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.rsa
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.sf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.gif
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.src
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.xml
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\components\ConduitAutoCompleteSearch.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\components\ConduitAutoCompleteSearch.xpt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\components\ConduitToolbar.idl
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\components\ConduitToolbar.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\components\ConduitToolbar.xpt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\components\FFExternalAlert.dll
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\components\FFExternalAlert.xpt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\components\RadioWMPCore.dll
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\components\RadioWMPCore.xpt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\defaults\default_radio_skin.xml
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\defaults\fbAlert.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\chrome.manifest
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\chrome\hero_fighter.jar
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\install.rdf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\lib\xpcom.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\META-INF\manifest.mf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\META-INF\zigbert.rsa
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\META-INF\zigbert.sf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\searchplugin\conduit.gif
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\searchplugin\conduit.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\searchplugin\conduit.PNG
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\searchplugin\conduit.src
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\searchplugin\conduit.xml
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{b12785f5-d8d0-4530-a3ea-5c4263b85bef}\version.txt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\ask.gif
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\ask.src
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\config.dat
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\config.dat.bak
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\contents.rdf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\snipit.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome.manifest
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome.manifest.dev
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome\ajtoolbar.jar
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\install.rdf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\install.rdf.bak
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF\manifest.mf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF\zigbert.rsa
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF\zigbert.sf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\components\ConduitAutoCompleteSearch.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\components\ConduitAutoCompleteSearch.xpt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\components\ConduitToolbar.idl
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\components\ConduitToolbar.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\components\ConduitToolbar.xpt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\components\FFExternalAlert.dll
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\components\FFExternalAlert.xpt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\components\RadioWMPCore.dll
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\components\RadioWMPCore.xpt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\defaults\default_radio_skin.xml
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\defaults\fbAlert.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\chrome.manifest
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\chrome\free-downloads.net.jar
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\install.rdf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\lib\xpcom.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\META-INF\manifest.mf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\META-INF\zigbert.rsa
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\META-INF\zigbert.sf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\searchplugin\conduit.gif
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\searchplugin\conduit.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\searchplugin\conduit.PNG
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\searchplugin\conduit.src
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\searchplugin\conduit.xml
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}\version.txt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\components\SIMAutoCompleteSearch.js
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome.manifest
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\sweetim-toolbar.jar
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\install.rdf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF\manifest.mf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF\zigbert.rsa
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF\zigbert.sf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\DTToolbarFF.dll
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\DTToolbarFF.xpt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\about.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\AboutWindow.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\accept.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\AddRadioStation.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\as.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\as.png
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_buy.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_download.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_feedback.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_forum.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_home.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astro_lite.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astroburn_site.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\astroLite_16.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\az.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\b1.png
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\burn_files.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\burn_image.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\burn_imgs.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\BurnImage.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\buy.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Config.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\d.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\d2.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\daemon.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\daemon_search.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\daemon_search_site.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dot_disabled.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dot_enabled.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dot_on_over.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\download.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ds.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dsearch.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt-home.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_about.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_buy.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_download.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_faq.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_feedback.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_forum.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_line.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_lite.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_manual.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dt_pro.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\DTPro.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dtt16.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\dtt32.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Dwnl.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\emulation.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\faq.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\favicon.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\features.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\feedback.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\forum.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrix.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrixCristals.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrixDownload.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrixPlayOnline.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameCentrixTop.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameS.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\games_search.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\games_search_SA.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GameSA.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\gct16.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\gd.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\genre.xml
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\globe.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\GrabImage.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\hb.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\hb.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\help.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\hide.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\home.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\image_search.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\image_search_SA.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ImageS.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ImageSA.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\ip.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\lang.xml
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\lingvo.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\m.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail_disable.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail_down.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mail_under.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc_disable.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc_down.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mailc_under.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\manual.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\map.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\MenuRadioConfig.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\MenuRadioStation.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\MenuRSCur.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\MenuTr.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mount.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\mount_n_drive.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\next.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\next_down.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\next_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\next_under.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\none.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\none_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\op.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play_down.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\play_under.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\pragma.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prev.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prev_down.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prev_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prev_under.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\prod.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Radio.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioBg.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioBg.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioBgMask.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDisp.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDisp_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown_down.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioDown_under.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioE.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioG.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioL.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioLDotMask.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioLeft.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioLeftMask.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioLM.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioM.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioN.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioR.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioR.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioRM.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioRU.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioVolume.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioVolume_down.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioVolume_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioVolume_under.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RadioW.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rbcheck.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rbtxt.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\refresh.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\refresh_down.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\refresh_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\refresh_under.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Rss.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Rss1.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RssA.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RssA1.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rssClose.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rssL.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\rssOpen.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\RssRefresh.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\s2.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\show.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\size.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\size_lr.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\size_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\size_rl.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\skins.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\soft24.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\soft24_SA.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\spt.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop.ico

[ToxicCc]

c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop_down.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\stop_under.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\style.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\SupportRequest.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\timer.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\TitleIcon.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\toolbar.xml
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\trans.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash_disable.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash_down.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\Trash_under.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\u.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\unmount-all.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_back.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_dott.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_dott_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_down.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_mute.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_mute_check.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\vol_under.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtClose.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtClose_down.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtClose_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtClose_under.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtText.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtText_down.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtText_m.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wBtText_under.bmp
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\web_resources.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\web_search.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\web_search_SA.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\WebS.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\WebSa.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi0.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi1.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi10.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi11.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi12.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi13.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi14.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi2.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi3.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi4.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi5.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi6.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi7.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi8.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\components\Resources\wi9.ico
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\chrome.manifest
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\chrome\dttoolbar.jar
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\DTToolbar@toolbarnet.com\install.rdf
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\gb@toolbar
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\gb@toolbar\components\IToolbarhomewmp.xpt
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\gb@toolbar\components\toolbarhomewmp.dll
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\gb@toolbar\chrome.manifest
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\gb@toolbar\chrome\gb.jar
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\gb@toolbar\icon.png
c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\extensions\gb@toolbar\install.rdf
c:\windows\system32\DRIVERS\ehdrv.sys . . . . nemohl být smazán
c:\windows\system32\DRIVERS\epfwwfpr.sys . . . . nemohl být smazán

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_EHDRV
-------\Legacy_EPFWWFPR
-------\Service_ehdrv
-------\Service_epfwwfpr
-------\Service_ICQ Service


((((((((((((((((((((((((( Soubory vytvořené od 2010-12-05 do 2011-01-05 )))))))))))))))))))))))))))))))
.

2011-01-05 15:22 . 2011-01-05 15:25 -------- d-----w- c:\users\Uživatel\AppData\Local\temp
2011-01-05 15:22 . 2011-01-05 15:22 -------- d-----w- c:\users\U×ivatel\AppData\Local\temp
2011-01-04 13:44 . 2011-01-04 13:44 -------- d-----w- c:\program files\CCleaner
2011-01-04 13:40 . 2011-01-04 13:40 -------- d-----w- c:\users\Uživatel\AppData\Roaming\Malwarebytes
2011-01-04 13:40 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-04 13:40 . 2011-01-04 13:40 -------- d-----w- c:\programdata\Malwarebytes
2011-01-04 13:40 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-01-04 13:32 . 2010-11-10 04:33 6273872 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{0E10E7BE-324F-4E86-AE6C-548D3A6A41A7}\mpengine.dll
2011-01-03 16:27 . 2011-01-03 16:27 2560 ----a-w- c:\windows\_MSRSTRT.EXE
2011-01-03 15:54 . 2011-01-03 15:54 388096 ----a-r- c:\users\Uživatel\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-12-30 15:20 . 2010-12-30 15:20 -------- d-----w- c:\program files\Microsoft Silverlight
2010-12-27 12:55 . 2003-09-03 01:28 724992 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iKernel.dll
2010-12-27 12:55 . 2003-09-03 01:27 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\ctor.dll
2010-12-27 12:55 . 2003-09-03 01:26 266240 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iscript.dll
2010-12-27 12:55 . 2003-09-03 01:26 192512 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iuser.dll
2010-12-27 12:55 . 2003-09-03 01:25 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\DotNetInstaller.exe
2010-12-27 12:55 . 2010-12-27 12:55 311428 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\Setup.dll
2010-12-27 12:55 . 2010-12-27 12:55 184452 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iGdi.dll
2010-12-26 15:20 . 2010-12-26 15:20 -------- d-sh--w- c:\programdata\DSS
2010-12-18 13:14 . 2010-12-18 13:14 -------- d-----w- c:\users\Uživatel\AppData\Local\AliensVsPredator
2010-12-17 18:09 . 2010-12-17 18:09 -------- d-----w- c:\program files\Microsoft.NET
2010-12-15 12:49 . 2010-11-03 10:51 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2010-12-12 17:06 . 2003-11-14 15:12 518416 ----a-r- c:\windows\system32\MSXML.DLL
2010-12-10 11:09 . 2010-12-10 11:42 -------- d-----w- c:\users\Uživatel\AppData\Roaming\HLSW
2010-12-09 18:45 . 2009-08-02 20:09 1554944 ----a-w- c:\windows\system32\vorbis.acm
2010-12-09 18:45 . 2010-12-09 18:45 -------- d-----w- c:\program files\Image-Line
2010-12-09 18:45 . 2010-12-09 18:45 -------- d-----w- c:\program files\Outsim
2010-12-09 15:30 . 2009-03-18 15:35 26176 ---ha-w- c:\windows\system32\hamachi.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-05 15:22 . 2009-02-06 12:24 92800 ----a-w- c:\windows\system32\drivers\epfwwfpr.sys
2011-01-05 15:22 . 2009-02-06 12:23 106208 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2011-01-03 15:54 . 2011-01-03 15:54 388096 ----a-r- c:\users\Uživatel\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-01-03 15:54 . 2011-01-03 15:54 388096 ----a-r- c:\users\Uživatel\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-10-24 11:59 . 2010-10-24 11:59 281760 ----a-w- c:\windows\system32\drivers\atksgt.sys
2010-10-24 11:59 . 2010-10-24 11:59 25888 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2010-10-19 09:41 . 2009-10-03 09:14 222080 ------w- c:\windows\system32\MpSigStub.exe
2010-10-14 00:36 . 2010-10-14 00:36 15451288 ----a-w- c:\windows\system32\xlive.dll
2010-10-14 00:36 . 2010-10-14 00:36 13642904 ----a-w- c:\windows\system32\xlivefnt.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"AlcoholAutomount"="d:\alcohol 120\axcmd.exe" [2008-11-23 203720]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-02-10 39408]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"TBPanel"="c:\program files\Vtune ATI\TBPanel.exe" [2008-08-06 2281472]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-04-06 26102056]
"DAEMON Tools Lite"="d:\program files\DAEMON Tools Lite\daemon.exe" [2008-07-24 490952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2008-07-03 6266880]
"Skytel"="Skytel.exe" [2008-06-25 1826816]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"CloneCDElbyCDFL"="c:\program files\Elaborate Bytes\CloneCD\ElbyCheck.exe" [2002-11-02 45056]
"CloneCDTray"="c:\program files\Elaborate Bytes\CloneCD\CloneCDTray.exe" [2002-12-02 73728]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-03-11 49152]
"QuickTime Task"="d:\program files\QuickTime\QTTask.exe" [2009-01-05 413696]
"avgnt"="d:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"LogMeIn Hamachi Ui"="d:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2010-12-06 1910152]

c:\users\U§ivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 1.1.1.lnk - d:\openoffice.org1.1.1\program\quickstart.exe [2004-3-27 61533]
OpenOffice.org 2.2.lnk - c:\program files\OpenOffice.org 2.2\program\quickstart.exe [2007-6-8 393216]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - d:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-24 29696]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-3-11 210520]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate1ca59619c3773a0;Služba Google Update (gupdate1ca59619c3773a0);c:\program files\Google\Update\GoogleUpdate.exe [2009-10-30 133104]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S0 ElbyVCD;ElbyVCD;c:\windows\system32\DRIVERS\ElbyVCD.sys [2002-11-28 22016]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2008-11-16 717296]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;d:\program files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;d:\program files\LogMeIn Hamachi\hamachi-2.exe [2010-12-06 1238408]
S3 CFcatchme;CFcatchme;c:\users\UIVATE~1\AppData\Local\Temp\CFcatchme.sys [x]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'

2011-01-05 c:\windows\Tasks\1-Klick-Wartung.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-11-18 12:57]

2011-01-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-30 13:04]

2011-01-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-30 13:04]

2011-01-05 c:\windows\Tasks\User_Feed_Synchronization-{A04F5AE8-65AF-4F7A-A301-B3B6E5950BBF}.job
- c:\windows\system32\msfeedssync.exe [2010-12-15 04:25]
.
.
------- Doplňkový sken -------
.
IE: &Download All by Gigaget - d:\program files\Giganology\Gigaget\getallurl.htm
IE: &Download by Gigaget - d:\program files\Giganology\Gigaget\geturl.htm
IE: {{FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - c:\program files\PokerStars.NET\PokerStarsUpdate.exe
FF - ProfilePath - c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\a3l60gxz.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKLM-Run-SweetIM - c:\program files\SweetIM\Messenger\SweetIM.exe
AddRemove-Ask Toolbar_is1 - c:\program files\AskBarDis\unins000.exe
AddRemove-DAEMON Tools Toolbar - c:\program files\DAEMON Tools Toolbar\uninst.exe
AddRemove-ICQToolbar - c:\program files\ICQ6Toolbar\ICQUnToolbar.exe

**************************************************************************
skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory:

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-2918345318-439307543-3607528225-1000\Software\SecuROM\License information*]
"datasecu"=hex:53,91,00,dd,dd,6b,66,8f,d4,1f,00,e3,31,ad,11,e3,ae,cb,d7,7f,79,
02,c7,3d,82,1e,30,8b,d2,12,87,e1,a6,59,17,7f,a6,29,ba,24,cc,9a,62,a9,fb,1b,\
"rkeysecu"=hex:ac,0a,73,21,0a,66,3c,6a,81,48,02,15,c9,d7,5e,26

[HKEY_USERS\S-1-5-21-2918345318-439307543-3607528225-1000\¬ î**]
@Allowed: (Read) (RestrictedCode)
"MachineID"=hex:af,ba,6d,46,b0,8f,07,00
DUMPHIVE0.003 (REGF)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
d:\program files\Avira\AntiVir Desktop\avguard.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\program files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
c:\windows\System32\TUProgSt.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\conime.exe
c:\windows\RtHDVCpl.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\windows\ehome\ehmsas.exe
d:\openoffice.org1.1.1\program\soffice.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\OpenOffice.org 2.2\program\soffice.exe
c:\program files\OpenOffice.org 2.2\program\soffice.BIN
c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
c:\program files\Skype\Plugin Manager\skypePM.exe
.
**************************************************************************
.
Celkový čas: 2011-01-05 16:30:04 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-01-05 15:30
ComboFix2.txt 2011-01-04 14:58

Před spuštěním: 7 189 127 168
Po spuštění: 6 982 180 864

- - End Of File - - CE6DBB713897E5AF1E9110312ACBA178

[ToxicCc]

a jeste neco... zapnu spravce uloh a zatrhnu zobrazit procesy vsech uzivatelu a nejvice CPU zaplnuji necinne procesy a to je 67CPU dalsi pak kolem 20-30 CPU je svchost.exe Sice se v tom nevyznam ale neslo by jen dat ukoncit proces?? jestli je to nepotrebne