Pogledajte mi log

2

Pogledajte mi log

offline
  • Pridružio: 09 Avg 2012
  • Poruke: 70

Napisano: 12 Avg 2012 2:40

ComboFix 12-08-10.02 - ich 11.08.2012 23:43:43.1.1 - x86
Running from: c:\dokumente und einstellungen\ich\Desktop\ComboFix.exe
Command switches used :: /killall
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\dokumente und einstellungen\All Users\Anwendungsdaten\TEMP
c:\programme\MyWebSearch
c:\programme\MyWebSearch\bar\1.bin\chrome\M3FFXTBR.JAR
c:\programme\MyWebSearch\bar\1.bin\MWSBAR.DLL
c:\programme\MyWebSearch\bar\1.bin\MWSOEMON.EXE
c:\programme\MyWebSearch\bar\1.bin\MWSOESTB.DLL
c:\programme\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
c:\programme\MyWebSearch\bar\2.bin\CHROME.MANIFEST
c:\programme\MyWebSearch\bar\2.bin\chrome\M3FFXTBR.JAR
c:\programme\MyWebSearch\bar\2.bin\F3BKGERR.JPG
c:\programme\MyWebSearch\bar\2.bin\F3CJPEG.DLL
c:\programme\MyWebSearch\bar\2.bin\F3DTACTL.DLL
c:\programme\MyWebSearch\bar\2.bin\F3HISTSW.DLL
c:\programme\MyWebSearch\bar\2.bin\F3HKSTUB.DLL
c:\programme\MyWebSearch\bar\2.bin\F3HTMLMU.DLL
c:\programme\MyWebSearch\bar\2.bin\F3HTTPCT.DLL
c:\programme\MyWebSearch\bar\2.bin\F3IMSTUB.DLL
c:\programme\MyWebSearch\bar\2.bin\F3POPSWT.DLL
c:\programme\MyWebSearch\bar\2.bin\F3PSSAVR.SCR
c:\programme\MyWebSearch\bar\2.bin\F3REGHK.DLL
c:\programme\MyWebSearch\bar\2.bin\F3REPROX.DLL
c:\programme\MyWebSearch\bar\2.bin\F3RESTUB.DLL
c:\programme\MyWebSearch\bar\2.bin\F3SCHMON.EXE
c:\programme\MyWebSearch\bar\2.bin\F3SCRCTR.DLL
c:\programme\MyWebSearch\bar\2.bin\F3SPACER.WMV
c:\programme\MyWebSearch\bar\2.bin\F3WALLPP.DAT
c:\programme\MyWebSearch\bar\2.bin\F3WPHOOK.DLL
c:\programme\MyWebSearch\bar\2.bin\FWPBUDDY.PNG
c:\programme\MyWebSearch\bar\2.bin\INSTALL.RDF
c:\programme\MyWebSearch\bar\2.bin\M3AUXSTB.DLL
c:\programme\MyWebSearch\bar\2.bin\M3DLGHK.DLL
c:\programme\MyWebSearch\bar\2.bin\M3HIGHIN.EXE
c:\programme\MyWebSearch\bar\2.bin\M3HTML.DLL
c:\programme\MyWebSearch\bar\2.bin\M3IDLE.DLL
c:\programme\MyWebSearch\bar\2.bin\M3IEOVR.DLL
c:\programme\MyWebSearch\bar\2.bin\M3IMPIPE.EXE
c:\programme\MyWebSearch\bar\2.bin\M3MEDINT.EXE
c:\programme\MyWebSearch\bar\2.bin\M3MSG.DLL
c:\programme\MyWebSearch\bar\2.bin\M3OUTLCN.DLL
c:\programme\MyWebSearch\bar\2.bin\M3PLUGIN.DLL
c:\programme\MyWebSearch\bar\2.bin\M3SKIN.DLL
c:\programme\MyWebSearch\bar\2.bin\M3SKPLAY.EXE
c:\programme\MyWebSearch\bar\2.bin\M3SLSRCH.EXE
c:\programme\MyWebSearch\bar\2.bin\M3SRCHMN.EXE
c:\programme\MyWebSearch\bar\2.bin\M3TPINST.DLL
c:\programme\MyWebSearch\bar\2.bin\MWSBAR.DLL
c:\programme\MyWebSearch\bar\2.bin\MWSMLBTN.DLL
c:\programme\MyWebSearch\bar\2.bin\MWSOEMON.EXE
c:\programme\MyWebSearch\bar\2.bin\MWSOEPLG.DLL
c:\programme\MyWebSearch\bar\2.bin\MWSOESTB.DLL
c:\programme\MyWebSearch\bar\2.bin\MWSSRCAS.DLL
c:\programme\MyWebSearch\bar\2.bin\MWSSVC.EXE
c:\programme\MyWebSearch\bar\2.bin\MWSUABTN.DLL
c:\programme\MyWebSearch\bar\2.bin\NPMYWEBS.DLL
c:\programme\MyWebSearch\bar\Avatar\COMMON.F3S
c:\programme\MyWebSearch\bar\Cache\00A30110.bin
c:\programme\MyWebSearch\bar\Cache\00A3202A.bin
c:\programme\MyWebSearch\bar\Cache\01D232A6
c:\programme\MyWebSearch\bar\Cache\01D26A79.bin
c:\programme\MyWebSearch\bar\Cache\01D2724B.bmp
c:\programme\MyWebSearch\bar\Cache\01D27F66.bin
c:\programme\MyWebSearch\bar\Cache\01D28B19.bin
c:\programme\MyWebSearch\bar\Cache\01D295B2.bin
c:\programme\MyWebSearch\bar\Cache\01D2A255.bin
c:\programme\MyWebSearch\bar\Cache\files.ini
c:\programme\MyWebSearch\bar\Game\CHECKERS.F3S
c:\programme\MyWebSearch\bar\Game\CHESS.F3S
c:\programme\MyWebSearch\bar\Game\REVERSI.F3S
c:\programme\MyWebSearch\bar\History\search3
c:\programme\MyWebSearch\bar\icons\CM.ICO
c:\programme\MyWebSearch\bar\icons\MFC.ICO
c:\programme\MyWebSearch\bar\icons\PSS.ICO
c:\programme\MyWebSearch\bar\icons\SMILEY.ICO
c:\programme\MyWebSearch\bar\icons\WB.ICO
c:\programme\MyWebSearch\bar\icons\ZWINKY.ICO
c:\programme\MyWebSearch\bar\IE9Mesg\COMMON.F3S
c:\programme\MyWebSearch\bar\Message\COMMON.F3S
c:\programme\MyWebSearch\bar\Message\COMMON\8_step1.gif
c:\programme\MyWebSearch\bar\Message\COMMON\autoup.gif
c:\programme\MyWebSearch\bar\Message\COMMON\autoup.htm
c:\programme\MyWebSearch\bar\Message\COMMON\bkez.jpg
c:\programme\MyWebSearch\bar\Message\COMMON\bkgr.jpg
c:\programme\MyWebSearch\bar\Message\COMMON\bkgs.jpg
c:\programme\MyWebSearch\bar\Message\COMMON\bklf.jpg
c:\programme\MyWebSearch\bar\Message\COMMON\bkrg.jpg
c:\programme\MyWebSearch\bar\Message\COMMON\bkwebfet.jpg
c:\programme\MyWebSearch\bar\Message\COMMON\bkzc.jpg
c:\programme\MyWebSearch\bar\Message\COMMON\bkzl.jpg
c:\programme\MyWebSearch\bar\Message\COMMON\bkzn.jpg
c:\programme\MyWebSearch\bar\Message\COMMON\bkzq.jpg
c:\programme\MyWebSearch\bar\Message\COMMON\bkzr.jpg
c:\programme\MyWebSearch\bar\Message\COMMON\bkzu.jpg
c:\programme\MyWebSearch\bar\Message\COMMON\bkzv.jpg
c:\programme\MyWebSearch\bar\Message\COMMON\bkzw.jpg
c:\programme\MyWebSearch\bar\Message\COMMON\bkzwinky.jpg
c:\programme\MyWebSearch\bar\Message\COMMON\blubtn2d.png
c:\programme\MyWebSearch\bar\Message\COMMON\blubtn2r.png
c:\programme\MyWebSearch\bar\Message\COMMON\blubtn3d.png
c:\programme\MyWebSearch\bar\Message\COMMON\blubtn3r.png
c:\programme\MyWebSearch\bar\Message\COMMON\center.htm
c:\programme\MyWebSearch\bar\Message\COMMON\index.htm
c:\programme\MyWebSearch\bar\Message\COMMON\mid_dots.gif
c:\programme\MyWebSearch\bar\Message\COMMON\protect.htm
c:\programme\MyWebSearch\bar\Message\COMMON\rebut4.htm
c:\programme\MyWebSearch\bar\Message\COMMON\rebut4b.htm
c:\programme\MyWebSearch\bar\Message\COMMON\rebut4c.htm
c:\programme\MyWebSearch\bar\Message\COMMON\shield.png
c:\programme\MyWebSearch\bar\Message\COMMON\shocked.gif
c:\programme\MyWebSearch\bar\Message\COMMON\stop.gif
c:\programme\MyWebSearch\bar\Message\COMMON\systray.htm
c:\programme\MyWebSearch\bar\Message\COMMON\systrayp.htm
c:\programme\MyWebSearch\bar\Message\COMMON\tp_grad.gif
c:\programme\MyWebSearch\bar\Message\COMMON\warn.gif
c:\programme\MyWebSearch\bar\Notifier\COMMON.F3S
c:\programme\MyWebSearch\bar\Notifier\DOG.F3S
c:\programme\MyWebSearch\bar\Notifier\FISH.F3S
c:\programme\MyWebSearch\bar\Notifier\KUNGFU.F3S
c:\programme\MyWebSearch\bar\Notifier\LIFEGARD.F3S
c:\programme\MyWebSearch\bar\Notifier\MAID.F3S
c:\programme\MyWebSearch\bar\Notifier\MAILBOX.F3S
c:\programme\MyWebSearch\bar\Notifier\OPERA.F3S
c:\programme\MyWebSearch\bar\Notifier\ROBOT.F3S
c:\programme\MyWebSearch\bar\Notifier\SEDUCT.F3S
c:\programme\MyWebSearch\bar\Notifier\SURFER.F3S
c:\programme\MyWebSearch\bar\Overlay\COMMON.F3S
c:\programme\MyWebSearch\bar\Settings\prevcfg2.htm
c:\programme\MyWebSearch\bar\Settings\s_FeatCk.dat
c:\programme\MyWebSearch\bar\Settings\s_FeatCk.dat.bak
c:\programme\MyWebSearch\bar\Settings\s_pid.dat
c:\programme\StartNow Toolbar
c:\programme\StartNow Toolbar\ReactivateIE.exe
c:\programme\StartNow Toolbar\Resources\images\engine_images.png
c:\programme\StartNow Toolbar\Resources\images\engine_maps.png
c:\programme\StartNow Toolbar\Resources\images\engine_news.png
c:\programme\StartNow Toolbar\Resources\images\engine_videos.png
c:\programme\StartNow Toolbar\Resources\images\engine_web.png
c:\programme\StartNow Toolbar\Resources\images\icon_amazon.png
c:\programme\StartNow Toolbar\Resources\images\icon_ebay.png
c:\programme\StartNow Toolbar\Resources\images\icon_facebook.png
c:\programme\StartNow Toolbar\Resources\images\icon_games.png
c:\programme\StartNow Toolbar\Resources\images\icon_msn.png
c:\programme\StartNow Toolbar\Resources\images\icon_shopping.png
c:\programme\StartNow Toolbar\Resources\images\icon_travel.png
c:\programme\StartNow Toolbar\Resources\images\icon_twitter.png
c:\programme\StartNow Toolbar\Resources\images\startnow_logo.png
c:\programme\StartNow Toolbar\Resources\installer.xml
c:\programme\StartNow Toolbar\Resources\skin\chevron_button.png
c:\programme\StartNow Toolbar\Resources\skin\searchbox_button_hover.png
c:\programme\StartNow Toolbar\Resources\skin\searchbox_button_normal.png
c:\programme\StartNow Toolbar\Resources\skin\searchbox_dropdown_button_normal.png
c:\programme\StartNow Toolbar\Resources\skin\searchbox_input_background.png
c:\programme\StartNow Toolbar\Resources\skin\searchbox_input_left.png
c:\programme\StartNow Toolbar\Resources\skin\searchbox_input_middle.png
c:\programme\StartNow Toolbar\Resources\skin\separator.png
c:\programme\StartNow Toolbar\Resources\skin\splitter.png
c:\programme\StartNow Toolbar\Resources\skin\toolbarbutton_ff_hover_c.png
c:\programme\StartNow Toolbar\Resources\skin\toolbarbutton_ie_hover_c.png
c:\programme\StartNow Toolbar\Resources\skin\toolbarbutton_ie_hover_l.png
c:\programme\StartNow Toolbar\Resources\skin\toolbarbutton_ie_hover_r.png
c:\programme\StartNow Toolbar\Resources\skin\toolbarbutton_ie_normal_c.png
c:\programme\StartNow Toolbar\Resources\skin\toolbarbutton_ie_normal_l.png
c:\programme\StartNow Toolbar\Resources\skin\toolbarbutton_ie_normal_r.png
c:\programme\StartNow Toolbar\Resources\toolbar.xml
c:\programme\StartNow Toolbar\Resources\update.xml
c:\programme\StartNow Toolbar\StartNowToolbarUninstall.exe
c:\programme\StartNow Toolbar\Toolbar32.dll
c:\programme\StartNow Toolbar\ToolbarBroker.exe
c:\programme\StartNow Toolbar\ToolbarUpdaterService.exe
c:\programme\StartNow Toolbar\uninstall.dat
c:\programme\Windows Searchqu Toolbar
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\as_guid.dat
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\bandoocode.js
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\data\search\engines.xml
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\data\search\search.xsl
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\lib\about.xml
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\lib\bandoocode.js
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\lib\dtxpanel.xul
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\lib\dtxpaneltransparent.xul
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\lib\dtxpanelwin.xul
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\lib\dtxprefwin.xul
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\lib\dtxtransparentwin.xul
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\lib\dtxwin.xul
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\lib\emailnotifierproviders.xml
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\lib\external.js
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\lib\imeshcode.js
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\lib\neterror.xhtml
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\lib\vmncode.js
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\lib\wmpstreamer.html
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\modules\datastore.jsm
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\modules\nsDragAndDrop.js
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\neterror.xhtml
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\partner.coupons.xml
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\preferences.xml
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\radiobeta.js
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\template.xml
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\toolbar.htm
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\toolbar.xul
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\vmncode.js
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\vmnrsswin.xml
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\widgets\net.vmn.www.PPCBully\tb_icon.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\widgets\net.vmn.www.PPCBully\widget.js
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\widgets\net.vmn.www.PPCBully\widget.xml
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\content\widgets\net.vmn.www.PPCBully\widget_version
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\babylon_logo.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\bandoo.css
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\bluelite.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\bluesky.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\btn-search-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\btn-search.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\btn-settings-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\btn-settings.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\btn-widgets-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\btn-widgets.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\btn_settings.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\ca.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\dictionary.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\divider.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\downloadcom.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\dtxlogo.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\ebay.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\email.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\email_on.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\facebook.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\games.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\graphred0.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\graphred0_5.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\graphred1.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\graphred1_5.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\graphred2.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\graphred2_5.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\graphred3.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\graphred3_5.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\graphred4.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\graphred4_5.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\graphred5.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\graphredna.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\grey.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\ico-shield.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\icon_radio_png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\icon_seperator_png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\icon_twitter.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\icon_youtube.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\images.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\imesh.css
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\add.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\aol.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\arrow-dn.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\arrow-right-disabled.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\arrow-right.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\arrow-up.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\bg-btn-divider.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\bg-btn-end.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\bg-btn-mdl.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\bg-btn-mdl_ff.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\bg-btn-start.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\bg-btnover-divider.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\bg-btnover-end.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\bg-btnover-mdl.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\bg-btnover-mdl_ff.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\bg-btnover-start.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\blank.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\btn-widgets-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\btn-widgets.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\btn_slider.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\btnback-down-vista.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\btnback-vista.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\btnleft-down-vista.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\btnleft-vista.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\btnright-down-vista.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\btnright-vista.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\button-splitter-down-vista.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\button-splitter-vista.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\checkmark.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\chevron.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\collapse.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\comcast.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\dtx.css
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\edit-back-hot.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\edit-back.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\expand.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\found.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\gmail.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\highlight.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\highlight_blue.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\highlight_cyan.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\highlight_lime.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\highlight_magenta.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\highlight_yellow.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\hotmail.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\ico-check.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\imap.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\lastsearch-thumb-back.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\loadingMid.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\lock.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\logo-separator.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\mailcom.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\menu_bg-basic.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\menu_separator_bar.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\menu_separator_white.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\menuitem-splitter.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\menuitemback-down-vista.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\menuitemback-vista.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\menuitemleft-down-vista.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\menuitemleft-vista.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\menuitemright-down-vista.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\menuitemright-vista.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\modify.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\move.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\movetarget.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\css\panels.css
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\css\popupAbout.css
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\css\popupGames.css
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\css\popupRSS.css
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\css\popupWidgets.css
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\css\dialog.css
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\bg.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\btn-search.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\btn-wide-close-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\btn-wide-close.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\default.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\tab-off-l.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\tab-off-r.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\tab-on-l.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\tab-on-r.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\transparent.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\ttlbar-left.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\ttlbar-mdl.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\ttlbar-right.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\win-btm-left.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\win-btm-mdl.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\win-btm-right-resize.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\win-btm-right.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\win-left.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\images\win-right.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\main.html
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\default\scripts\defscript.js
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\footer.htm
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\gamecategory.xsl
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\gameData.js
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\gameList.xsl
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\games.xsl
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\gametype.xsl
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\arrow-dn.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\arrow-sml-drop.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\arrow-sml.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\arrow-up.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\arrowr-bluew5.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\bg-aboutbox.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\bg-btnover.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\bg-pnl520x390.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-addtoolbar-left.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-addtoolbar-right.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-back.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-close-grey.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-close-greyover.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-drag.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-mdl-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-mdl.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-moredetails.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-next-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-next.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-play-left-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-play-left.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-previous-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-previous.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-right-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-try-left-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\btn-try-left.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\bullet-orange.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\gamethumb-on.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\gamethumb2-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\ico-calendar.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\ico-dollar.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\ico-download.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\ico-joystick24.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\ico-news24.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\ico-play.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\ico-tags.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\icon-Add.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\icon-download.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\icon-Info.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\icon-play.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\icon-shop.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\menul-bgon.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\menul-bgover.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\panel-botm-noscroll.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\scroll-bg-206.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\scroll-bg.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\scroll-topwin.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\scrollb-disable.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\scrollb-down.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\scrollb-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\scrollb.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\scrollt-disable.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\scrollt-down.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\scrollt-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\scrollt.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\searchbox-pnlbtm.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\star_x_grey.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\star_x_orange.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\TRUSTe_about.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\view-detailed-on.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\view-detailed-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\view-thumb-on.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\view-thumb-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\widgets-square-16px.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\widgets-square-24px.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\images\widgets.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\initHTML.html
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\popupGames.html
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\popupHTML.html
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\popupRSS.html
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\popupWidgets.html
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\panels\scroll.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\pop.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\css\manager.css
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\css\slider.css
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\bg-pnl.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\btn-close-grey.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\btn-close-greyover.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\collapsed_button.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\expanded_button.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\ico-playstation-down.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\ico-playstation-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\ico-playstation.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\ico-radio.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\music-note.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause-on.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-btn-play-on.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-btn-play.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-eq-bg.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-eq-buffer.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-eq-busy.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-eq-off.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-eq-on.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-eq-warning.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-options-design-on.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-options-design.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-options-on.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-options.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-volume-0.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-volume-1.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-volume-2.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-volume-3.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\radio-volume-mute.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\scrollbar-handle.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\scrollbar-track.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\slider.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\slideron.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\images\track.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\managerpanel.html
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radio\volumeslider.html
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radiobeta-buffering.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radiobeta-connecting.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radiobeta-playing.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radiobeta-stopped.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\radiobeta.ico
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\reload.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\remove.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\rename.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\resize-box.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\rss.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\rsschannelback.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\RSSLogo.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\rsstabdivider.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\scroll-left.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\scroll-right.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\search-go.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\search.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\text-ellipsis.xml
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\throbber.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\toolbarsplitter.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\transparent_1px.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_02.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_03.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_04.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_06.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_07.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_08.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_09.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_10.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_11.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_12.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_13.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_14.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_15.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_16.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_18.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_19.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_20.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\border_21.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\btn-close-grey.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\btn-close-greyover.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\close-hot.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\close-normal.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\loadingMid.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\proxy.html
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\template.html
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\template.xml
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\templateFF.html
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\uwa\throbber.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\icons\cond999.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\icons\icons.xml
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\icons\na-s.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\icons\na-t.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\icons\na.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\add.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-check.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-check.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\options-weather.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-blue.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-orange.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.css
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.html
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lib\yahoo.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\lichen.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\logo-about.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\logo-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\logo-separator.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\logo.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\mail.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\maps.bmp
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\menuseparatorback.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\modify-save.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\modify.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\modifyhot.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\music.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\news.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\options\options-main.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\options\options-search.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\options\options-weather.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\options\options-weather.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\options\options-widgets.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\orange.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\pixsy.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\protect-id.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\radiobeta-buffering.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\radiobeta-connecting.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\radiobeta-playing.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\radiobeta-stopped.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\radiobeta.ico
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\relatedlinks.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\rss-collapse.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\rss-delete.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\rss-expand.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\rss-feed.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\rss-folder-remove.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\rss-folder-rename.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\rss-folder.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\rss-found.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\rss-reload.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\rss-subscribe.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\rss.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\rssback.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\rsstopback.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\search-over.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\search.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\search_button_over_png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\search_button_png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\searchbar\searchbar-background-left.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\searchbar\searchbar-background-middle.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\searchbar\searchbar-background-right.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\settings.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\shopping.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\siteinfo.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\skin-bluelite.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\skin-bluesky.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\skin-grey.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\skin-lichen.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\skin-orange.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\skin-yellow.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\skin.xml
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\technorati.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\throbber.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\toolbarsplitter.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\translate.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\video.bmp
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\vmn.css
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\vmn.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\weather.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\web.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\widgets-square-16px.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\wikipedia.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\yahoosearch.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\yellow.gif
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\youtube.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\chrome\skin\zoom.png
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\components\windowmediator.js
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\manifest.xml
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\searchquband.dll
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll
c:\programme\Windows Searchqu Toolbar\Datamngr\ToolBar\uninstall.exe
c:\programme\Windows Searchqu Toolbar\sysid.ini
c:\programme\Windows Searchqu Toolbar\uninstall.exe
c:\windows\system32\AF15BDAEX.dll
c:\windows\system32\Cache
c:\windows\system32\Cache\272512937d9e61a4.fb
c:\windows\system32\Cache\287204568329e189.fb
c:\windows\system32\Cache\28bc8f716fd76a47.fb
c:\windows\system32\Cache\2c53092c95605355.fb
c:\windows\system32\Cache\31a0997e9a5b5eb3.fb
c:\windows\system32\Cache\32c84fe32bb74d60.fb
c:\windows\system32\Cache\3917078cb68ec657.fb
c:\windows\system32\Cache\44aab61841e7aad8.fb
c:\windows\system32\Cache\5108da9fa4aed435.fb
c:\windows\system32\Cache\590ba23ce359fd0c.fb
c:\windows\system32\Cache\610289e025a3ee9a.fb
c:\windows\system32\Cache\651c5d3cdbfb8bd1.fb
c:\windows\system32\Cache\6c59ac5e7e7a3ad0.fb
c:\windows\system32\Cache\6d03dad1035885d3.fb
c:\windows\system32\Cache\8ea259c008f8e53f.fb
c:\windows\system32\Cache\a8556537add6dfc5.fb
c:\windows\system32\Cache\ad10a52aff5e038d.fb
c:\windows\system32\Cache\b6e9f577a2f1a5e2.fb
c:\windows\system32\Cache\c1fa887b03019701.fb
c:\windows\system32\Cache\c2d65562f02ff208.fb
c:\windows\system32\Cache\c3dbafc21b496e0f.fb
c:\windows\system32\Cache\c4d28dca2e7648be.fb
c:\windows\system32\Cache\d201ef9910cd39de.fb
c:\windows\system32\Cache\d2e94710a5708128.fb
c:\windows\system32\Cache\d79b9dfe81484ec4.fb
c:\windows\system32\Cache\e0de16f883bea794.fb
c:\windows\system32\Cache\f1623f7dd1032a78.fb
c:\windows\system32\Cache\f998975c9cc711ee.fb
c:\windows\system32\f3PSSavr.scr
c:\windows\system32\SET55.tmp
c:\windows\system32\SET57.tmp
c:\windows\system32\SET5B.tmp
c:\windows\system32\SET5C.tmp
c:\windows\system32\SET63.tmp
c:\windows\system32\SET9C.tmp
c:\windows\system32\SET9F.tmp
c:\windows\system32\SETA1.tmp
.
c:\windows\system32\drivers\usbehci.sys . . . is missing!!
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_MYWEBSEARCHSERVICE
-------\Service_MyWebSearchService
-------\Legacy_Updater_Service_for_StartNow_Toolbar
-------\Legacy_Updater_Service_for_StartNow_Toolbar
-------\Service_Updater Service for StartNow Toolbar
-------\Service_Updater Service for StartNow Toolbar
.
.
((((((((((((((((((((((((( Files Created from 2012-07-12 to 2012-08-12 )))))))))))))))))))))))))))))))
.
.
2012-08-09 20:10 . 2012-08-10 17:00 -------- d-----w- c:\dokumente und einstellungen\ich\Anwendungsdaten\YTD
2012-08-09 18:43 . 2012-08-09 18:43 -------- d-----w- c:\dokumente und einstellungen\ich\Anwendungsdaten\Search Settings
2012-08-09 18:41 . 2012-08-09 18:42 -------- d-----w- c:\programme\Application Updater
2012-08-09 18:41 . 2012-08-09 18:41 -------- d-----w- c:\programme\YTD Toolbar
2012-08-09 18:41 . 2012-08-09 18:41 -------- d-----w- c:\programme\Gemeinsame Dateien\Spigot
2012-08-07 16:40 . 2005-03-10 07:08 8704 ----a-w- c:\windows\system32\kbdjpn.dll
2012-08-07 16:40 . 2005-03-10 07:08 8192 ----a-w- c:\windows\system32\kbdkor.dll
2012-08-07 16:40 . 2005-03-10 07:08 6144 ----a-w- c:\windows\system32\kbd106.dll
2012-08-07 16:40 . 2005-03-10 07:08 6144 ----a-w- c:\windows\system32\kbd101c.dll
2012-08-07 16:40 . 2005-03-10 07:08 5632 ----a-w- c:\windows\system32\kbd103.dll
2012-08-07 16:40 . 2005-03-10 07:08 6144 ----a-w- c:\windows\system32\kbd101b.dll
2012-08-06 16:45 . 2012-08-06 17:39 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-08-06 16:45 . 2012-08-06 17:39 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-31 11:32 . 2012-08-11 18:33 -------- d-----w- c:\dokumente und einstellungen\ich\Anwendungsdaten\Skype
2012-07-31 11:31 . 2012-07-31 11:31 -------- d-----w- c:\programme\Gemeinsame Dateien\Skype
2012-07-31 11:30 . 2012-07-31 11:31 -------- d-----r- c:\programme\Skype
2012-07-31 11:30 . 2012-07-31 11:31 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Skype
2012-07-23 22:41 . 2012-07-23 22:42 -------- d-----w- c:\programme\Imikimi
2012-07-22 09:00 . 2012-07-22 09:00 -------- d-----w- c:\dokumente und einstellungen\ich\Anwendungsdaten\YouTube Downloader
2012-07-16 11:33 . 2012-08-05 16:01 -------- d-----w- c:\dokumente und einstellungen\ich\Anwendungsdaten\vlc
2012-07-15 21:54 . 2012-07-15 21:54 -------- d-----w- C:\PFiles
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-08 17:50 . 2011-11-25 15:56 348160 ----a-w- c:\windows\system32\msvcr71.dll
2012-06-08 17:50 . 2011-11-25 15:56 499712 ----a-w- c:\windows\system32\msvcp71.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2008-04-14 . 5251425B86EA4A3532B8BB8D14044E61 . 1571840 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\sfcfiles.dll
[-] 2004-11-28 13:36 . AB3D62010AF342203FFA60C2D94DBC68 . 8704 . . [1] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\programme\Ask.com\GenericAskToolbar.dll" [2012-01-03 1514152]
.
[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2012-01-03 14:31 1514152 ----a-w- c:\programme\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\programme\Ask.com\GenericAskToolbar.dll" [2012-01-03 1514152]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\programme\Ask.com\GenericAskToolbar.dll" [2012-01-03 1514152]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-02-07 39408]
"Skype"="c:\programme\Skype\Phone\Skype.exe" [2012-07-13 17418928]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="nwiz.exe" [2002-06-09 372736]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-03 110592]
"ApnUpdater"="c:\programme\Ask.com\Updater\Updater.exe" [2012-01-03 1391272]
"WinampAgent"="c:\programme\Winamp\winampa.exe" [2011-10-26 74752]
"DivXUpdate"="c:\programme\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
"SunJavaUpdateSched"="c:\programme\Gemeinsame Dateien\Java\Java Update\jusched.exe" [2011-06-09 254696]
"TkBellExe"="c:\programme\real\realplayer\update\realsched.exe" [2012-06-08 296056]
"Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [2012-04-04 843712]
"SearchSettings"="c:\programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe" [2012-07-26 1095560]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]
.
c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\
IRMonitor.exe [2011-2-18 106496]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"NvCplDaemon"=RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\Opera\\opera.exe"=
"c:\\Programme\\Messenger\\msmsgs.exe"=
"c:\\Programme\\TVUPlayer\\TVUPlayer.exe"=
"c:\\Programme\\Windows iLivid Toolbar\\Datamngr\\ToolBar\\dtUser.exe"=
"c:\\Programme\\YourFileDownloader\\Downloader.exe"=
"c:\\Programme\\YourFileDownloader\\YourFile.exe"=
"c:\\Programme\\Opera\\pluginwrapper\\opera_plugin_wrapper.exe"=
"c:\\Programme\\Skype\\Phone\\Skype.exe"=
.
R2 Application Updater;Application Updater;c:\programme\Application Updater\ApplicationUpdater.exe [26.7.2012 19:40 794560]
S2 gupdate;Google Update Service (gupdate);c:\programme\Google\Update\GoogleUpdate.exe [7.2.2011 12:17 136176]
S2 SkypeUpdate;Skype Updater;c:\programme\Skype\Updater\Updater.exe [13.7.2012 13:28 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [6.8.2012 18:45 250056]
S3 gupdatem;Google Update-Dienst (gupdatem);c:\programme\Google\Update\GoogleUpdate.exe [7.2.2011 12:17 136176]
S3 TNET1130;IEEE 802.11g Wireless Cardbus/PCI Adapter;c:\windows\system32\drivers\TNET1130.sys [24.11.2009 14:51 386688]
S3 wlags48b;Wireless LAN PCCard Driver;c:\windows\system32\drivers\wlags48b.sys [16.2.2011 12:48 156160]
S3 XDva391;XDva391;c:\windows\system32\XDva391.sys [3.12.2011 21:19 0]
.
Contents of the 'Scheduled Tasks' folder
.
2012-08-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-06 17:40]
.
2012-08-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programme\Google\Update\GoogleUpdate.exe [2011-02-07 10:17]
.
2012-08-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programme\Google\Update\GoogleUpdate.exe [2011-02-07 10:17]
.
2012-08-12 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-1343024091-854245398-1003.job
- c:\programme\Real\RealUpgrade\realupgrade.exe [2012-04-30 16:21]
.
2012-08-10 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-1343024091-854245398-1003.job
- c:\programme\Real\RealUpgrade\realupgrade.exe [2012-04-30 16:21]
.
2012-08-12 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\programme\Ask.com\UpdateTask.exe [2012-01-03 14:31]
.
2012-08-12 c:\windows\Tasks\User_Feed_Synchronization-{13A2CB95-713E-4428-9358-0C93577F1FF0}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
.
.
------- Supplementary Scan -------
.
uStart Page = [Link mogu videti samo ulogovani korisnici]
mStart Page = [Link mogu videti samo ulogovani korisnici]
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = 127.0.0.1:9421
uSearchAssistant = [Link mogu videti samo ulogovani korisnici]
uSearchURL,(Default) = [Link mogu videti samo ulogovani korisnici]
IE: Download with &Media Finder - c:\programme\Media Finder\hook.html
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - [Link mogu videti samo ulogovani korisnici]
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{F3FEE66E-E034-436a-86E4-9690573BEE8A} - (no file)
Toolbar-10 - (no file)
WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)
HKCU-Run-AROReminder - c:\programme\ARO 2011\ARO.exe
AddRemove-StartNow Toolbar - c:\programme\StartNow Toolbar\StartNowToolbarUninstall.exe
AddRemove-Windows Searchqu Toolbar - c:\programme\Windows Searchqu Toolbar\uninstall.exe
AddRemove-Winamp Detect - c:\programme\Winamp Detect\UninstWaDetect.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [Link mogu videti samo ulogovani korisnici]
Rootkit scan 2012-08-12 02:12
Windows 5.1.2600 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{3fa04b5a-c17d-484f-aa4d-4aff1639441f}]
@Denied: (Full) (Everyone)
"Model"=dword:00000042
"Therad"=dword:0000001e
"MData"=hex(0):2b,8f,78,29,5a,0c,ce,ec,48,d4,68,e5,9f,6a,96,3e,ab,de,c5,81,26,
38,95,44,7c,a3,58,23,ec,af,2d,15,15,ef,a1,46,54,19,6c,0d,35,95,e0,f3,7c,6d,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):b7,5a,b7,c0,69,65,12,da,cb,ae,1a,f0,48,4f,7f,f0,4a,06,cf,a6,18,
cf,3e,4d,b2,1f,89,a7,45,ae,fe,49,5d,11,d4,13,db,94,e1,f6,00,00,00,00,00,00,\
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(3984)
c:\programme\Gemeinsame Dateien\Spigot\Search Settings\wth.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\msi.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------

Dopuna: 12 Avg 2012 2:43

------------------------ Other Running Processes ------------------------
.
c:\programme\Google\Update\1.3.21.115\GoogleCrashHandler.exe
c:\programme\Java\jre6\bin\jqs.exe
c:\programme\CDBurnerXP\NMSAccessU.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\rundll32.exe
.
**************************************************************************
.
Completion time: 2012-08-12 02:23:03 - machine was rebooted
ComboFix-quarantined-files.txt 2012-08-12 00:22
.
Pre-Run: 16 Verzeichnis(se), 23.605.080.064 Bytes frei
Post-Run: 18 Verzeichnis(se), 24.220.708.864 Bytes frei
.
- - End Of File - - D39DFD02ECACAC359CE707152727DDA1



offline
  • Pridružio: 04 Jul 2011
  • Poruke: 5424

Arrow Preuzmi "Xplode"-ov AdwCleaner i sacuvaj ga na Desktop Dvoklikom pokreni program i klikni na dugme [Search] . Kada program zavrsi analizu otvorice notepad (AdwCleaner[R1].txt) sa izvestajem. Sacuvaj taj notepad na Desktop i okaci ga uz poruku koristeci opciju "Prikaci fajl" Napomena: Izvestaj ce takodje biti sacuvan na C:\AdwCleaner[R1].txt




Ivance95 (AMF Tim)



offline
  • Pridružio: 09 Avg 2012
  • Poruke: 70

[Link mogu videti samo ulogovani korisnici]
I samo da vam napisem da kada sam ukljucila racunar pojavila mi se ova slika...

offline
  • Pridružio: 04 Jul 2011
  • Poruke: 5424

Korak 1

Arrow
Ponovo pokreni AdwCleaner
Klikni na dugme [Delete] i pricekaj da program zavrsi.
Program ce zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni Ok kao potvrdu.
Na sledeca dva prozora koja se otvore (Informations i Restart required ) klikni Ok

Racunar ce se restartovati a potom otvoriti notepad (C:\AdwCleaner[S1].txt) sa izvestajem.
Sacuvaj taj notepad na Desktop i okaci ga uz poruku koristeci opciju "Prikaci fajl"

Napomena: Izvestaj ce takodje biti sacuvan na C:\AdwCleaner[S1].txt




Korak 2

Arrow Otvoriti Notepad i iskopirati sledeci tekst:

ClearJavaCache::

RegLockDel::
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{3fa04b5a-c17d-484f-aa4d-4aff1639441f}]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]


Snimiti na Desktop fajl iz Notepada kao "CFScript"




Prevuci snimljeni skript/tekst na ComboFix ikonicu kao na slici.
Postaviti u sledecoj poruci log koji bude bio napravljen na kraju ciscenja/skeniranja.




Ivance95 (AMF Tim)

offline
  • Pridružio: 09 Avg 2012
  • Poruke: 70

Napisano: 14 Avg 2012 5:01

pozdrav ,
da napomenem samo da u toku rada ComboFix-a, na samom pocetku, pojavilo mi se ponovo upozorenje
kako nemam dovoljno virtuelne memorije... eto, cisto da znate...
[Link mogu videti samo ulogovani korisnici]


ComboFix 12-08-13.01 - ich 14.08.2012 1:09.2.1 - x86
Microsoft Windows XP Professional 5.1.2600.2.1250.381.1031.18.255.114 [GMT 2:00]
Running from: c:\dokumente und einstellungen\ich\Desktop\ComboFix.exe
Command switches used :: c:\dokumente und einstellungen\ich\Desktop\CFScript.txt
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\drivers\usbehci.sys . . . is missing!!
.
.
((((((((((((((((((((((((( Files Created from 2012-07-13 to 2012-08-13 )))))))))))))))))))))))))))))))
.
.
2012-08-09 20:10 . 2012-08-10 17:00 -------- d-----w- c:\dokumente und einstellungen\ich\Anwendungsdaten\YTD
2012-08-09 18:41 . 2012-08-09 18:41 -------- d-----w- c:\programme\YTD Toolbar
2012-08-07 16:40 . 2005-03-10 07:08 8704 ----a-w- c:\windows\system32\kbdjpn.dll
2012-08-07 16:40 . 2005-03-10 07:08 8192 ----a-w- c:\windows\system32\kbdkor.dll
2012-08-07 16:40 . 2005-03-10 07:08 6144 ----a-w- c:\windows\system32\kbd106.dll
2012-08-07 16:40 . 2005-03-10 07:08 6144 ----a-w- c:\windows\system32\kbd101c.dll
2012-08-07 16:40 . 2005-03-10 07:08 5632 ----a-w- c:\windows\system32\kbd103.dll
2012-08-07 16:40 . 2005-03-10 07:08 6144 ----a-w- c:\windows\system32\kbd101b.dll
2012-08-06 16:45 . 2012-08-06 17:39 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-08-06 16:45 . 2012-08-06 17:39 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-31 11:32 . 2012-08-13 23:43 -------- d-----w- c:\dokumente und einstellungen\ich\Anwendungsdaten\Skype
2012-07-31 11:31 . 2012-07-31 11:31 -------- d-----w- c:\programme\Gemeinsame Dateien\Skype
2012-07-31 11:30 . 2012-07-31 11:31 -------- d-----r- c:\programme\Skype
2012-07-31 11:30 . 2012-07-31 11:31 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Skype
2012-07-23 22:41 . 2012-07-23 22:42 -------- d-----w- c:\programme\Imikimi
2012-07-22 09:00 . 2012-07-22 09:00 -------- d-----w- c:\dokumente und einstellungen\ich\Anwendungsdaten\YouTube Downloader
2012-07-16 11:33 . 2012-08-05 16:01 -------- d-----w- c:\dokumente und einstellungen\ich\Anwendungsdaten\vlc
2012-07-15 21:54 . 2012-07-15 21:54 -------- d-----w- C:\PFiles
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-08 17:50 . 2011-11-25 15:56 348160 ----a-w- c:\windows\system32\msvcr71.dll
2012-06-08 17:50 . 2011-11-25 15:56 499712 ----a-w- c:\windows\system32\msvcp71.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2008-04-14 . 5251425B86EA4A3532B8BB8D14044E61 . 1571840 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\sfcfiles.dll
[-] 2004-11-28 13:36 . AB3D62010AF342203FFA60C2D94DBC68 . 8704 . . [1] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((( [Link mogu videti samo ulogovani korisnici] )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-08-13 15:55 . 2012-08-13 15:55 16384 c:\windows\temp\Perflib_Perfdata_790.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-02-07 39408]
"Skype"="c:\programme\Skype\Phone\Skype.exe" [2012-07-13 17418928]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="nwiz.exe" [2002-06-09 372736]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-03 110592]
"WinampAgent"="c:\programme\Winamp\winampa.exe" [2011-10-26 74752]
"DivXUpdate"="c:\programme\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
"SunJavaUpdateSched"="c:\programme\Gemeinsame Dateien\Java\Java Update\jusched.exe" [2011-06-09 254696]
"TkBellExe"="c:\programme\real\realplayer\update\realsched.exe" [2012-06-08 296056]
"Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [2012-04-04 843712]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]
.
c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\
IRMonitor.exe [2011-2-18 106496]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"NvCplDaemon"=RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\Opera\\opera.exe"=
"c:\\Programme\\Messenger\\msmsgs.exe"=
"c:\\Programme\\TVUPlayer\\TVUPlayer.exe"=
"c:\\Programme\\YourFileDownloader\\Downloader.exe"=
"c:\\Programme\\YourFileDownloader\\YourFile.exe"=
"c:\\Programme\\Opera\\pluginwrapper\\opera_plugin_wrapper.exe"=
"c:\\Programme\\Skype\\Phone\\Skype.exe"=
.
S3 TNET1130;IEEE 802.11g Wireless Cardbus/PCI Adapter;c:\windows\system32\drivers\TNET1130.sys [24.11.2009 14:51 386688]
.
Contents of the 'Scheduled Tasks' folder
.
2012-08-13 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-06 17:40]
.
2012-08-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programme\Google\Update\GoogleUpdate.exe [2011-02-07 10:17]
.
2012-08-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programme\Google\Update\GoogleUpdate.exe [2011-02-07 10:17]
.
2012-08-13 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-1343024091-854245398-1003.job
- c:\programme\Real\RealUpgrade\realupgrade.exe [2012-04-30 16:21]
.
2012-08-10 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-1343024091-854245398-1003.job
- c:\programme\Real\RealUpgrade\realupgrade.exe [2012-04-30 16:21]
.
2012-08-13 c:\windows\Tasks\User_Feed_Synchronization-{13A2CB95-713E-4428-9358-0C93577F1FF0}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
.
.
------- Supplementary Scan -------
.
uStart Page = [Link mogu videti samo ulogovani korisnici]
mStart Page = [Link mogu videti samo ulogovani korisnici]
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = 127.0.0.1:9421
uSearchAssistant = [Link mogu videti samo ulogovani korisnici]
uSearchURL,(Default) = [Link mogu videti samo ulogovani korisnici]
TCP: DhcpNameServer = 192.168.1.1
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - [Link mogu videti samo ulogovani korisnici]
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [Link mogu videti samo ulogovani korisnici]
Rootkit scan 2012-08-14 01:42
Windows 5.1.2600 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(3056)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\msi.dll
.
Completion time: 2012-08-14 01:49:45
ComboFix-quarantined-files.txt 2012-08-13 23:49
ComboFix2.txt 2012-08-12 00:23
.
Pre-Run: 17 Verzeichnis(se), 24.193.548.288 Bytes frei
Post-Run: 18 Verzeichnis(se), 24.040.214.528 Bytes frei
.
- - End Of File - - 5BD6A0908C5F8C8B1D38436B42EDBF8E


[Link mogu videti samo ulogovani korisnici]

Dopuna: 14 Avg 2012 22:16

Da li je ovo kraj? Ako jeste mogu li znati sta je u pitanju?

offline
  • Pridružio: 04 Jul 2011
  • Poruke: 5424

Arrow Tvoj kompjuter je čist što se malware-a tiče, rešavanje problema možeš nastaviti u svojoj temi u Windows potforumu.



Arrow Potrebno je deinstalirati ComboFix:
klikni start (ili ), a zatim RUN.

Na Visti koristiti Start Search polje ukoliko Run nije dostupan.

U liniju za unos teksta ukucaj (iskopiraj) sledeće:

ComboFix /Uninstall

Primeti da postoji razmak između "ComboFix" i "/Uninstall".



a zatim klikni OK (ili pritisni Enter).


Sačekaj da se proces deinstalacije završi.



Arrow Preporucujem da za zastitu USB memorijskih uredjaja koristis MCShield v2. Nema nikakve veze sa AntiVirus-om tj. nece ometati njegov rad a pokazao se kao jedan od najboljih vida zastite od malware-a koji se prenosi putem USB mem. uredjaja. Skines, instaliras, ubodes USB mem. uredjaj, izvrsi se skeniranje nakon cega dobijes obavestenje da je uredjaj cist (ukoliko je stvarno tako); ili dobijes log u kome vidis informacije o malware-u koji je nadjen i obrisan.


Home Page MCShield-a ::Anti-Malware Tool:: v2: [Link mogu videti samo ulogovani korisnici]

Vise o MCShield-u mozes saznati u ovim temama:
v1: [Link mogu videti samo ulogovani korisnici]
v2: [Link mogu videti samo ulogovani korisnici]




Arrow Obavezno poseti temu "Testirajte da li vam je pretrazivac ranjiv", procitaj i isprati link koji stoji u njoj.
Link do teme je: [Link mogu videti samo ulogovani korisnici]



Ivance95 (AMF Tim)

offline
  • Pridružio: 09 Avg 2012
  • Poruke: 70

Napisano: 15 Avg 2012 11:08

Hvala punooooo... ,najbolji ste Smile ako moze samo predlog koji antivirus da instaliram...pozz

Dopuna: 15 Avg 2012 11:24

i da li mi on uopste treba sada?

offline
  • Pridružio: 04 Jul 2011
  • Poruke: 5424

Naravno da ti treba. Instaliraj bilo koji od besplatnih rešenja kao što su: Avira, Avast, AVG, Panda,MSE...



Ivance95 (AMF Tim)

offline
  • Pridružio: 09 Avg 2012
  • Poruke: 70

Ja se izvinjavam ali opet je nesto krenulo naopako ako moze pomoc? Kada pokusam da instaliram neki od Antivirusa kao npr. Avast izadje mi sledeca slika

valjda treba nesto da se obrise a ja ne znam engleski ako moze na nemackom ( usla sam na "start" - "kontrolni panel" pa u "internet opcije" ali ne znam dalje ako moze slika ili na nemackom za "internet file", delete temporary" jer ne znam gde se to nalazi ?)

offline
  • Pridružio: 04 Jul 2011
  • Poruke: 5424

Arrow Preuzmi i instaliraj Service Pack 3.
Link za download.


Nakon toga restartuj računar i preuzmi novi Avast setup.




Ivance95 (AMF Tim)

Ko je trenutno na forumu
 

Ukupno su 916 korisnika na forumu :: 66 registrovanih, 6 sakrivenih i 844 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 20624 - dana 04 Apr 2026 04:18

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 4thFlavian, A.R.Chafee.Jr., Ailton, Baždaranac, Boban0312, bobrothers, boro975, bufanje, Bumbo, C-Gun, Cicumile, Comyymoc, CrveniSolaris, d.arsenal321, Denaya, Dogma21, DrNeoCortex, drpera, elenemste, gajasvi, galico, gripen, gusi, HrcAk47, icemilos, igorkozar83, Jozo74, Kajzer Soze, Kalu128338, Kruger, lakson001, Makarid, MB120mm, mercedesamg, Mi lao shu, MikeHammer, Milan A. Nikolic, MILO-VAN, MiroslavD, Mrav Obrad, nenad81, Nepopravljivi, nevjerna beba, nikoladim, Obrenovic, opt1, Orijen, pein, peradetlić, Prečanin30, raf87, rodoljub, shaja1, stegonosa, Tetejac82, tomo2, tritonus, vaci, vazduh, vespa nikola, VJ, Vlado82, Vojkan Petrovic, W123, Zjmc, zmajbre