Možda tražite i:
Facebook virus?
Facebook virus
Imam problem... virus na facebook-u !!! Help

MyCity » Ambulanta -> Arhiva Ambulante » Virus sa Facebook-a

Virus sa Facebook-a

Napisano na dan: 27.7.2011

Strana:
1
2

Virus sa Facebook-a

Sledeća strana

Pagination

Odgovori

Strana:
1
2

balthazare Poslao: 27 Jul 2011 18:39 Idi na vrh
offline balthazare Novi MyCity građanin Pridružio: 27 Jul 2011 Poruke: 15	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: Pre par dana sam preko one proklete poruke na cetu aktivirao virus, i sad mi pregledac uopste ne detektuje stranu facebook-a... Sad ulazim preko [Link mogu videti samo ulogovani korisnici] i sasvim oki radi... Skenirao sam sa Malwarebytom i obrisao mi je par stvari, ali nazalost nisam zapisao sta... Inace imam SBB kablovski net brzina 6 Mb/s... Windows xp SP 3 DDS: . DDS (Ver_2011-06-23.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_26 Run by Mario at 15:39:07 on 2011-07-27 AV: ESET NOD32 Antivirus 4.0 Enabled/Updated {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} . ============== Running Processes =============== . . ============== Pseudo HJT Report =============== . uStart Page = [Link mogu videti samo ulogovani korisnici] uSearch Page = uSearch Bar = mStart Page = [Link mogu videti samo ulogovani korisnici] mSearchAssistant = BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll BHO: FastestTubeBHO Class: {3e532ce8-c6d9-4a10-8ace-4348c96e8b6a} - c:\program files\fastesttube\1.3.7\WombatBHO.dll BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll BHO: Searchqu Toolbar: {7ff99715-3016-4381-84ce-e4e4c9673020} - Searchqu Toolbar BHO: Windows Live pomagač za prijavljivanje: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: VMN Toolbar Astro Gemini: {a057a204-bacc-4d26-8287-79a187e26987} - c:\progra~1\vmntoo~1\VMNTOO~1.DLL BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll BHO: FDMIECookiesBHO Class: {cc59e0f9-7e43-44fa-9faa-8377850bf205} - c:\program files\free download manager\iefdm2.dll BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - Windows Live Toolbar Helper BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll BHO: {f015f320-ab08-11db-abbd-0800200c9a66} - WeeklyExecuter Class TB: {8B79EE88-E62D-4AA8-B530-CC357BA112B7} - No File TB: Searchqu Toolbar: {7ff99715-3016-4381-84ce-e4e4c9673020} - TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - TB: VMN Toolbar Astro Gemini: {a057a204-bacc-4d26-8287-79a187e26987} - c:\progra~1\vmntoo~1\VMNTOO~1.DLL TB: {EEE6C35B-6118-11DC-9C72-001320C79847} - No File uRun: [myweather] "c:\program files\myfreeweather\myweather.exe" /autorun uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized mRun: [NVMixerTray] "c:\program files\nvidia corporation\nvmixer\NVMixerTray.exe" mRun: [ATIPTA] c:\program files\ati technologies\ati control panel\atiptaxx.exe mRun: [RAMfreer] c:\program files\ramfreer\RAMfreer.exe mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\CLIStart.exe" mRun: [Openwares LiveUpdate] c:\program files\liveupdate\LiveUpdate.exe mRun: [Aqua Dock] c:\program files\aqua dock\Aqua Dock.exe mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe mRun: [PAC207_Monitor] c:\windows\pixart\pac207\Monitor.exe mRun: [googletalk] c:\program files\google\google talk\googletalk.exe /autostart mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW mRun: [DataMngr] c:\progra~1\wi9130~1\datamngr\DataMngrUI.exe mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray mRun: [7732420.exe] "c:\windows\temp\7732420.exe" dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\tvremo~1.lnk - c:\program files\terminator\tv7131 utilities\P3XRCtl.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\watch.lnk - c:\program files\mustek 1248ub\driver\WATCH.exe uPolicies-explorer: NoSMHelp = 01000000 uPolicies-explorer: NoLogoff = 01000000 uPolicies-explorer: NoSMMyDocs = 01000000 uPolicies-explorer: NoSMMyPictures = 01000000 uPolicies-explorer: NoNetworkConnections = 01000000 uPolicies-explorer: NoActiveDesktop = 01000000 uPolicies-explorer: NoInstrumentation = 1 (0x1) mPolicies-system: EnableLUA = 0 (0x0) mPolicies-system: EnableSecureUIAPaths = 0 (0x0) IE: &IE Toolbar search - c:\program files\pctv toolbar\toolbar.dll/SEARCH.HTML IE: Download video with Free Download Manager - [Link mogu videti samo ulogovani korisnici]\program files\free download manager\dlfvideo.htm IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html IE: Preuzmi odabrano Free Download Manager-om - [Link mogu videti samo ulogovani korisnici]\program files\free download manager\dlselected.htm IE: Preuzmi sa Free Download Managerom - [Link mogu videti samo ulogovani korisnici]\program files\free download manager\dllink.htm IE: Preuzmi sve sa Free Download Manager-om - [Link mogu videti samo ulogovani korisnici]\program files\free download manager\dlall.htm IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL DPF: {233C1507-6A77-46A4-9443-F871F945D258} - [Link mogu videti samo ulogovani korisnici] DPF: {31435657-9980-0010-8000-00AA00389B71} - [Link mogu videti samo ulogovani korisnici] DPF: {41564D57-9980-0010-8000-00AA00389B71} - [Link mogu videti samo ulogovani korisnici] DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - [Link mogu videti samo ulogovani korisnici] DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - [Link mogu videti samo ulogovani korisnici] DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici] DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici] DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici] TCP: DhcpNameServer = 89.216.1.30 89.216.1.50 TCP: Interfaces\{95868B28-0BF9-433D-8741-EC3631BABFDA} : DhcpNameServer = 89.216.1.30 89.216.1.50 Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll Notify: AtiExtEvent - Ati2evxx.dll AppInit_DLLs: c:\progra~1\wi9130~1\datamngr\datamngr.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll . ============= SERVICES / DRIVERS =============== . . =============== Created Last 30 ================ . 2011-07-25 16:49:27 19968000 ----a-w- c:\windows\system32\Egyptian Pyramids 3D Screensaver.scr 2011-07-25 16:42:48 -------- d-----w- c:\program files\Voyage of Columbus 3D Screensaver 2011-07-25 16:32:08 -------- d-----w- c:\program files\Earth 3D Screensaver 2011-07-25 16:06:54 3694592 ----a-w- c:\windows\system32\Sun 3D Screensaver.scr 2011-07-25 16:00:19 10477568 ----a-w- c:\windows\system32\3D Titanic Screensaver.scr 2011-07-25 15:52:36 -------- d-----w- c:\documents and settings\all users\application data\3Planesoft 2011-07-25 15:52:32 650776 ----a-w- c:\windows\system32\The_One_Ring_3D_Screensaver.scr 2011-07-25 15:52:32 -------- d-----w- c:\program files\The One Ring 3D Screensaver 2011-07-25 15:47:50 -------- d-----w- c:\windows\system32\3Planesoft 2011-07-25 15:47:50 -------- d-----w- c:\program files\3Planesoft Screensaver Manager 2011-07-25 15:47:48 -------- d-----w- c:\program files\The Lost Watch 3D Screensaver 2011-07-25 15:41:33 557056 ----a-w- c:\windows\Mars Screensaver.scr 2011-07-25 15:41:32 -------- d-----w- c:\program files\Longgame 2011-07-24 23:31:34 -------- d-----w- c:\windows\ufa 2011-07-24 23:31:34 -------- d-----w- c:\windows\phoenix 2011-07-24 23:29:09 -------- d--h--w- c:\windows\update.5.0 2011-07-24 23:25:44 -------- d--h--w- c:\windows\update.3 2011-07-24 23:24:36 -------- d--h--w- c:\windows\update.2 2011-07-24 23:24:08 246272 ----a-w- c:\windows\unrar.exe 2011-07-24 23:20:34 -------- d--h--w- c:\windows\update.1 2011-07-24 21:00:10 -------- d-----w- c:\program files\Orban 2011-07-24 12:16:59 -------- d-----w- c:\program files\Conquiztador pitanja 2011-07-23 20:30:00 7680 -c----w- c:\windows\system32\dllcache\iecompat.dll 2011-07-23 20:27:22 -------- d-----w- c:\windows\system32\winrm 2011-07-23 20:26:51 -------- dc-h--w- c:\windows\$968930Uinstall_KB968930$ 2011-07-23 19:48:36 -------- d-----w- c:\documents and settings\mario\application data\SpeedItUp 2011-07-23 11:59:28 -------- d-sh--w- c:\windows\system32\AI_RecycleBin 2011-07-23 11:59:19 -------- d-----w- c:\documents and settings\mario\application data\W3i, LLC 2011-07-15 23:29:29 -------- d-----w- c:\documents and settings\mario\application data\MapSphere 2011-07-15 22:54:40 -------- d-----w- c:\program files\SpeedFan 2011-07-15 15:43:54 258048 ----a-w- c:\windows\system32\w32tmdt.cpl 2011-07-09 21:32:04 -------- d-sh--w- c:\documents and settings\mario\Phone Browser 2011-07-08 15:22:20 -------- d-----w- c:\documents and settings\all users\application data\NokiaAccount 2011-07-08 15:09:01 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys 2011-07-08 15:08:50 -------- d-----w- c:\program files\PC Connectivity Solution 2011-07-08 15:07:47 8576 ----a-w- c:\windows\system32\drivers\nmwcdnsuc.sys 2011-07-08 15:07:45 137600 ----a-w- c:\windows\system32\drivers\nmwcdnsu.sys 2011-07-08 15:07:43 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys 2011-07-08 15:07:42 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys 2011-07-08 15:07:39 23168 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys 2011-07-08 15:07:37 604672 ----a-w- c:\windows\system32\nmwcdcocls.dll 2011-07-08 15:07:37 18304 ----a-w- c:\windows\system32\drivers\ccdcmb.sys 2011-07-08 15:07:37 1461992 ----a-w- c:\windows\system32\wdfcoinstaller01009.dll 2011-07-08 15:07:37 113152 ----a-w- c:\windows\system32\ccdcmbwu.dll 2011-07-08 15:05:17 -------- d-----w- c:\documents and settings\all users\application data\NokiaInstallerCache 2011-07-07 12:56:56 -------- d-----w- c:\documents and settings\mario\local settings\application data\Burek Forum 2011-07-02 14:19:09 -------- d-----w- c:\documents and settings\mario\application data\TeamViewer 2011-07-02 14:18:51 -------- d-----w- c:\program files\TeamViewer . ==================== Find3M ==================== . 2011-07-06 17:52:42 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-07-06 17:52:42 22712 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-07-04 17:15:20 749088 ----a-w- c:\windows\system32\3Planesoft_Screensaver_Manager.scr 2011-06-18 10:24:33 348160 ----a-w- c:\windows\system32\msvcr71.dll 2011-06-02 14:02:05 1858944 ----a-w- c:\windows\system32\win32k.sys 2011-05-24 10:15:18 4496 -csha-w- c:\windows\system32\KGyGaAvL.sys 2011-05-04 02:52:22 472808 ----a-w- c:\windows\system32\deployJava1.dll 2011-05-04 00:25:49 73728 ----a-w- c:\windows\system32\javacpl.cpl 2011-05-02 15:31:52 692736 ----a-w- c:\windows\system32\inetcomm.dll 2011-04-29 17:25:27 151552 ----a-w- c:\windows\system32\schannel.dll 2011-04-29 16:19:43 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys . ============= FINISH: 15:39:56.70 =============== [Link mogu videti samo ulogovani korisnici] [Link mogu videti samo ulogovani korisnici] [Link mogu videti samo ulogovani korisnici] [Link mogu videti samo ulogovani korisnici] I imam jos jedan problem... Izbacuje mi gresku za Windows installer, da nije dobro instaliran... Instalirao sam najnoviji 4.5, ali o5 nista... Hvala puno

Profil

argus Poslao: 27 Jul 2011 19:48 Idi na vrh
rip argus Anti Malware Fighter Rank 2 Pridružio: 27 Apr 2008 Poruke: 9160 Gde živiš: Prokuplje	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Pozdrav i dobro dosao na forum. U toku resavanja slucaja, zamolio bih te da se pridrzavas sledeceg: Detaljno citati moja uputstva ( ili uputstva kolega koji ce me zamenjivati) i raditi iskljucivo po njima; Ne traziti istovremeno pomoc na drugom mestu; Nemoj koristiti druge programe za uklanjanje malware-a, osim onih za koje budes dobio uputstvo; U toku intervencije ne koristiti USB memorijske uredjaje, dok to ne budem zatrazio; Ukoliko ne odgovorim u roku od 48h, osvezi temu novim post-om; Ukoliko se ne javis u roku od 5 dana, zatvoricemo slucaj. Za vise informacija o pravilima Ambulante MyCity foruma: LINK --------------------------------- Preuzmi sUBs-ov ComboFix sa sledeće adrese na Desktop: Bleeping Computer Klikni desnim tasterom na link i odaberi opciju Save Target As... (Save Link As..., Save Linked Content As... ili sličnu); Kada se otvori dijalog za izbor lokacije na kojoj treba sačuvati file, odaberi Desktop i klikni Save. Kada preuzimanje programa bude završeno: deaktiviraj zaštitni softver (uputstvo); zatvori pokrenute programe; dvoklikom pokreni program ComboFix; u prozoru koji se otvori klikni "I Agree". U toku rada, ComboFix će:proveriti postoji li novija verzija programa: klikni Yes ako bude ponuđeno preuzimanje iste.ako Recovery Console nije instalirana, ponuditi instalaciju: obavezno prihvati klikom na Yes i isprati postupak.postaviti/dati određeni broj upita/obaveštenja: prihvati klikom na Yes ili OK.po potrebi, restartovati Windows (više puta); na kraju rada, otvoriti Notepad sa izveštajem o skeniranju. Iskopiraj izveštaj koji je ComboFix napravio u temu na forumu: klikni desnim tasterom miša u prozor Notepad-a i izaberi Select All; klikni desnim tasterom miša na obeleženi tekst i izaberi Copy; klikni desnim tasterom miša u polje za pisanje poruke i izaberi Paste. Napomena:Izveštaj će biti sačuvan pod nazivom ComboFix.txt na sistemskoj particiji (tipična lokacija: C:\ComboFix.txt); Ukoliko nakon slanja poruke primetiš da izveštaj nije kompletan, iskoristi opciju Prikači fajl za prilaganje file-a C:\ComboFix.txt uz poruku.

Profil

balthazare Poslao: 28 Jul 2011 02:00 Idi na vrh
offline balthazare Novi MyCity građanin Pridružio: 27 Jul 2011 Poruke: 15	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Imam problem sto me ComboFix obavestava da mi je aktivan NOD 32 Antivirus 4.0... Davno sam ga obrisao... Ne znam kako da ga obrisem pre nego sto nastavim dalje...

Profil

argus Poslao: 28 Jul 2011 07:57 Idi na vrh
rip argus Anti Malware Fighter Rank 2 Pridružio: 27 Apr 2008 Poruke: 9160 Gde živiš: Prokuplje	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Preuzmi sa ovog linka uninstaller za Eset Nod32 i ocisti ostatke iz Safe Mode [Link mogu videti samo ulogovani korisnici] Ukoliko i posle ciscenja Combofix prijavljuje Nod32, ignorisi upozorenje i nastavi dalje.

Profil

balthazare Poslao: 28 Jul 2011 14:26 Idi na vrh
offline balthazare Novi MyCity građanin Pridružio: 27 Jul 2011 Poruke: 15	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! ComboFix 11-07-28.01 - Mario 07/28/2011 14:09:43.1.1 - x86 Running from: c:\documents and settings\Mario\Desktop\ComboFix.exe * Created a new restore point . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\documents and settings\Mario\Application Data\Desktopicon c:\documents and settings\Mario\Application Data\Desktopicon\config.ini c:\documents and settings\Mario\Application Data\inst.exe c:\documents and settings\Mario\Application Data\searchqutb c:\documents and settings\Mario\Application Data\searchqutb\dtx.ini c:\documents and settings\Mario\Application Data\searchqutb\games\00d2dfc64c07a4f32824abac1d6f735b c:\documents and settings\Mario\Application Data\searchqutb\games\3e4265e00cbc4a9cf22a105046a46d8a c:\documents and settings\Mario\Application Data\searchqutb\games\44a5d79f5451d3036ba3986425e234c8 c:\documents and settings\Mario\Application Data\searchqutb\games\GameCategories.xml c:\documents and settings\Mario\Application Data\searchqutb\games\GameTypes.xml c:\documents and settings\Mario\Application Data\searchqutb\guid.dat c:\documents and settings\Mario\Application Data\searchqutb\preferences.dat c:\documents and settings\Mario\Application Data\searchqutb\stats.dat c:\documents and settings\Mario\Application Data\searchqutb\uninstallIE.dat c:\documents and settings\Mario\Application Data\searchqutb\widgets_cache\84b70525cff6359fdeca553342c23e4c c:\documents and settings\Mario\Application Data\searchqutb\widgets_cache\bf5b6317ae07da699882fc948f22eda4 c:\documents and settings\Mario\Application Data\searchqutb\widgets_cache\category_cache.xml c:\documents and settings\Mario\Application Data\searchqutb\widgets_cache\widget_cache.xml c:\documents and settings\Mario\WINDOWS c:\program files\Windows Searchqu Toolbar c:\program files\Windows Searchqu Toolbar\DataMngr\datamngr.dll c:\program files\Windows Searchqu Toolbar\DataMngr\DataMngrUI.exe c:\program files\Windows Searchqu Toolbar\main.ico c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\.#searchqutb.js.1.3 c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\data\search\engines.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\data\search\search.xsl c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\about.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\dtxpanelwin.xul c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\dtxprefwin.xul c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\dtxwin.xul c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\emailnotifierproviders.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\external.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\neterror.xhtml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\wmpstreamer.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\modules\datastore.jsm c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\preferences.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\searchqutb.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\toolbar.htm c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\toolbar.xul c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-mdl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tr.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-dragresize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\navico-home.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\panel.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\powered-mystart.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\tb_icon.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-mdl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-tl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-tr.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-dragresize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-next-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-previous-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\navico-home.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\panel.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\powered-mystart.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\tb_icon.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\widget.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\widget.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-mdl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-tl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-tr.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-dragresize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-next-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-previous-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\navico-home.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\panel.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\powered-mystart.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\tb_icon.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\widget.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\widget.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217.zip c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-mdl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tr.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-dragresize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\navico-home.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\panel.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\powered-mystart.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\tb_icon.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\bluelite.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\bluesky.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-search-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-search.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-settings-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-settings.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-widgets-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-widgets.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn_settings.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-back-ff.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-back.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-left.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-right.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-splitter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-drop-back.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-drop-left.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-drop-right.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-drop-splitter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-back-ff.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-back.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-left.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-right.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-splitter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\ca.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\dictionary.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\divider.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\downloadcom.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\email.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\email_on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\games.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\graphred0.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\graphred0_5.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\grey.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\headsup.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\ico-shield.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\images.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\add.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\aol.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\arrow-dn.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\arrow-right.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\arrow-up.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-end.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-mdl.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-mdl_ff.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-start.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-end.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-mdl.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-mdl_ff.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-start.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\blank.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnback-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnback-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnleft-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnleft-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnright-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnright-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\button-splitter-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\button-splitter-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\checkmark.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\chevron.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\collapse.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\comcast.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\dtx.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\edit-back-hot.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\edit-back.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\expand.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\found.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\gmail.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_blue.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_cyan.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_lime.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_magenta.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_yellow.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\hotmail.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\imap.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\lastsearch-thumb-back.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\loadingMid.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\lock.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\mailcom.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menu_bg-basic.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menu_separator_bar.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitem-splitter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemback-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemback-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemleft-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemleft-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemright-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemright-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\move.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\movetarget.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\css\popupAbout.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\css\popupGames.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\css\popupWidgets.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\footer.htm c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gamecategory.xsl c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gameData.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gameList.xsl c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gametype.xsl c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\arrow-sml-drop.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\arrow-sml.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\arrowr-bluew5.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\bg-aboutbox.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\bg-btnover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\bg-pnl520x390.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-close-grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-close-greyover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-drag.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-next-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-previous-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\gamethumb-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\gamethumb2-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-calendar.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-download.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-joystick24.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-play.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-tags.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-Add.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-download.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-Info.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-play.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-shop.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\menul-bgon.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\menul-bgover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\panel-botm-noscroll.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scroll-bg-206.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scroll-bg.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scroll-topwin.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb-disable.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt-disable.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\searchbox-pnlbtm.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\star_x_grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\star_x_orange.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\TRUSTe_about.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-detailed-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-detailed-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-thumb-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-thumb-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\widgets-square-16px.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\widgets-square-24px.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\popupGames.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\popupWidgets.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\pop.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\css\manager.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\css\slider.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\bg-pnl.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\btn-close-grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\btn-close-greyover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\collapsed_button.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\expanded_button.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-playstation.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-radio.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\music-note.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-bg.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-busy.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-on.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-warning.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options-design-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options-design.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-0.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-1.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-2.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-3.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-mute.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\scrollbar-handle.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\scrollbar-track.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\slider.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\slideron.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\track.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\managerpanel.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\volumeslider.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\remove.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rename.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\resize-box.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rss.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rsschannelback.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\RSSLogo.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rsstabdivider.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\scroll-left.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\scroll-right.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\search-go.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\search.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\text-ellipsis.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\throbber.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\toolbarsplitter.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\transparent_1px.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_02.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_03.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_04.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_06.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_07.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_08.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_09.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_10.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_11.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_12.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_13.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_14.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_15.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_16.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_18.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_19.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_20.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_21.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\btn-close-grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\btn-close-greyover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\close-hot.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\close-normal.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\loadingMid.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\proxy.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\template.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\template.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\templateFF.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\throbber.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\cond999.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\icons.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\na-s.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\na.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\weather.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\add.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-check.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-check.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\options-weather.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-blue.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-orange.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\yahoo.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lichen.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\logo-about.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\logo.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\maps.bmp c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\menuseparatorback.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\modify-save.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\modify.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\modifyhot.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\music.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\news.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\options\options-main.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\options\options-search.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\options\options-weather.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\options\options-widgets.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\orange.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\pixsy.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\relatedlinks.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-collapse.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-delete.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-expand.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-feed.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-folder-remove.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-folder-rename.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-folder.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-found.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-reload.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-subscribe.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rssback.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rsstopback.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\search-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\search.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchbar\searchbar-background-left.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchbar\searchbar-background-middle.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchbar\searchbar-background-right.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchqutb.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\settings.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\shopping.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\siteinfo.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-bluelite.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-bluesky.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-lichen.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-orange.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-yellow.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\technorati.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\throbber.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\toolbarsplitter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\video.bmp c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\weather.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\web.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_allocine.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_bliptv.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_calcal.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_calculator.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_gservices.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_sudoku.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_todo.jpg c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_todo.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_trio.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_uconverter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widgets-square-16px.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widgets.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\wikipedia.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\yahoosearch.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\yellow.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\youtube.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\zoom.png c:\program files\Windows Searchqu Toolbar\ToolBar\components\windowmediator.js c:\program files\Windows Searchqu Toolbar\ToolBar\manifest.xml c:\program files\Windows Searchqu Toolbar\ToolBar\SearchquTb.dll c:\program files\Windows Searchqu Toolbar\ToolBar\uninstall.exe c:\program files\Windows Searchqu Toolbar\UNWISE.EXE c:\program files\Windows Searchqu Toolbar\UnwiseLauncher.exe c:\windows\btc_client_iplist.txt c:\windows\ddh_iplist.txt c:\windows\front_ip_list.txt c:\windows\geoiplist c:\windows\geoiplist.rar c:\windows\iecheck_iplist.txt c:\windows\info1 c:\windows\iplist.txt c:\windows\iun6002.exe c:\windows\jestertb.dll c:\windows\loader2.exe_ok c:\windows\phoenix c:\windows\phoenix.rar c:\windows\phoenix\kernels\phatk\__init__.py c:\windows\phoenix\kernels\phatk\BFIPatcher.py c:\windows\phoenix\kernels\phatk\kernel.cl c:\windows\phoenix\kernels\poclbm\__init__.py c:\windows\phoenix\kernels\poclbm\BFIPatcher.py c:\windows\phoenix\kernels\poclbm\kernel.cl c:\windows\phoenix\phoenix.exe c:\windows\rpcminer.rar c:\windows\system32\drivers\etc\HSTS~1 c:\windows\system32\Ijl11.dll c:\windows\system32\Memman.vxd c:\windows\system32\searchindexer.exe c:\windows\system32\skinboxer43.dll c:\windows\system32\Thumbs.db c:\windows\ufa.rar c:\windows\update.1 c:\windows\update.2 c:\windows\update.3 c:\windows\update.5.0 . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Legacy_SRVBTCCLIENT -------\Legacy_SRVIECHECK -------\Legacy_WXPDRIVERS -------\Legacy_WSearch -------\Service_WSearch . . ((((((((((((((((((((((((( Files Created from 2011-06-28 to 2011-07-28 ))))))))))))))))))))))))))))))) . . 2011-07-25 16:49 . 2009-05-25 16:30 19968000 ----a-w- c:\windows\system32\Egyptian Pyramids 3D Screensaver.scr 2011-07-25 16:42 . 2011-07-25 16:42 -------- d-----w- c:\program files\Voyage of Columbus 3D Screensaver 2011-07-25 16:32 . 2011-07-25 16:32 -------- d-----w- c:\program files\Earth 3D Screensaver 2011-07-25 16:06 . 2009-05-26 09:41 3694592 ----a-w- c:\windows\system32\Sun 3D Screensaver.scr 2011-07-25 16:00 . 2009-05-26 10:42 10477568 ----a-w- c:\windows\system32\3D Titanic Screensaver.scr 2011-07-25 15:52 . 2011-07-25 15:52 -------- d-----w- c:\documents and settings\All Users\Application Data\3Planesoft 2011-07-25 15:52 . 2011-07-25 15:52 -------- d-----w- c:\program files\The One Ring 3D Screensaver 2011-07-25 15:52 . 2011-07-04 17:18 650776 ----a-w- c:\windows\system32\The_One_Ring_3D_Screensaver.scr 2011-07-25 15:47 . 2011-07-25 15:52 -------- d-----w- c:\program files\3Planesoft Screensaver Manager 2011-07-25 15:47 . 2011-07-25 15:47 -------- d-----w- c:\windows\system32\3Planesoft 2011-07-25 15:47 . 2011-07-25 15:47 -------- d-----w- c:\program files\The Lost Watch 3D Screensaver 2011-07-25 15:41 . 2011-07-25 15:41 557056 ----a-w- c:\windows\Mars Screensaver.scr 2011-07-25 15:41 . 2011-07-25 15:41 -------- d-----w- c:\program files\Longgame 2011-07-24 23:31 . 2011-07-24 23:31 -------- d-----w- c:\windows\ufa 2011-07-24 23:24 . 2011-07-24 23:31 246272 ----a-w- c:\windows\unrar.exe 2011-07-24 21:00 . 2011-07-24 21:00 -------- d-----w- c:\program files\Orban 2011-07-24 12:16 . 2011-07-24 12:17 -------- d-----w- c:\program files\Conquiztador pitanja 2011-07-23 20:30 . 2010-10-18 11:10 7680 -c----w- c:\windows\system32\dllcache\iecompat.dll 2011-07-23 20:27 . 2011-07-23 20:27 -------- d-----w- c:\windows\system32\winrm 2011-07-23 20:26 . 2011-07-23 20:27 -------- dc-h--w- c:\windows\$968930Uinstall_KB968930$ 2011-07-23 19:48 . 2011-07-23 19:54 -------- d-----w- c:\documents and settings\Mario\Application Data\SpeedItUp 2011-07-23 11:59 . 2011-07-23 11:59 -------- d-sh--w- c:\windows\system32\AI_RecycleBin 2011-07-23 11:59 . 2011-07-23 11:59 -------- d-----w- c:\documents and settings\Mario\Application Data\W3i, LLC 2011-07-15 23:29 . 2011-07-15 23:31 -------- d-----w- c:\documents and settings\Mario\Application Data\MapSphere 2011-07-15 22:54 . 2011-07-24 16:27 -------- d-----w- c:\program files\SpeedFan 2011-07-15 15:43 . 2009-12-14 23:01 258048 ----a-w- c:\windows\system32\w32tmdt.cpl 2011-07-09 21:32 . 2011-07-09 21:51 -------- d-sh--w- c:\documents and settings\Mario\Phone Browser 2011-07-08 15:22 . 2011-07-08 15:56 -------- d-----w- c:\documents and settings\All Users\Application Data\NokiaAccount 2011-07-08 15:09 . 2008-08-26 08:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys 2011-07-08 15:08 . 2011-07-08 15:08 -------- d-----w- c:\program files\PC Connectivity Solution 2011-07-08 15:07 . 2010-12-02 11:36 8576 ----a-w- c:\windows\system32\drivers\nmwcdnsuc.sys 2011-07-08 15:07 . 2010-12-02 11:36 137600 ----a-w- c:\windows\system32\drivers\nmwcdnsu.sys 2011-07-08 15:07 . 2010-12-02 13:13 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys 2011-07-08 15:07 . 2010-12-02 13:13 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys 2011-07-08 15:07 . 2010-12-02 13:13 23168 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys 2011-07-08 15:07 . 2010-12-02 13:14 113152 ----a-w- c:\windows\system32\ccdcmbwu.dll 2011-07-08 15:07 . 2010-12-02 13:14 604672 ----a-w- c:\windows\system32\nmwcdcocls.dll 2011-07-08 15:07 . 2010-12-02 13:13 18304 ----a-w- c:\windows\system32\drivers\ccdcmb.sys 2011-07-08 15:07 . 2010-12-02 11:36 1461992 ----a-w- c:\windows\system32\wdfcoinstaller01009.dll 2011-07-08 15:05 . 2011-07-08 15:05 -------- d-----w- c:\documents and settings\All Users\Application Data\NokiaInstallerCache 2011-07-07 12:56 . 2011-07-24 14:26 -------- d-----w- c:\documents and settings\Mario\Local Settings\Application Data\Burek Forum 2011-07-02 14:19 . 2011-07-02 14:19 -------- d-----w- c:\documents and settings\Mario\Application Data\TeamViewer 2011-07-02 14:18 . 2011-07-02 15:42 -------- d-----w- c:\program files\TeamViewer . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-07-06 17:52 . 2010-11-03 13:28 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-07-06 17:52 . 2010-11-03 13:28 22712 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-07-04 17:15 . 2004-11-17 09:10 749088 ----a-w- c:\windows\system32\3Planesoft_Screensaver_Manager.scr 2011-06-18 10:24 . 2006-09-25 15:39 348160 ----a-w- c:\windows\system32\msvcr71.dll 2011-06-02 14:02 . 2004-08-03 21:17 1858944 ----a-w- c:\windows\system32\win32k.sys 2011-05-04 02:52 . 2010-06-13 20:40 472808 ----a-w- c:\windows\system32\deployJava1.dll 2011-05-04 00:25 . 2009-10-16 16:32 73728 ----a-w- c:\windows\system32\javacpl.cpl 2011-05-02 15:31 . 2009-07-19 15:48 692736 ----a-w- c:\windows\system32\inetcomm.dll 2011-04-29 17:25 . 2004-08-03 22:56 151552 ----a-w- c:\windows\system32\schannel.dll 2011-04-29 16:19 . 2004-08-03 21:15 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . Note empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-8287-79A187E26987}] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "myweather"="c:\program files\MyFreeWeather\myweather.exe" [2011-07-22 1592416] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-06-15 15141768] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NVMixerTray"="c:\program files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-06-03 131072] "ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-09-29 344064] "RAMfreer"="c:\program files\RAMfreer\RAMfreer.exe" [2003-02-09 410112] "ATICCC"="c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-09-25 90112] "Openwares LiveUpdate"="c:\program files\LiveUpdate\LiveUpdate.exe" [2003-12-13 61440] "Aqua Dock"="c:\program files\Aqua Dock\Aqua Dock.exe" [2003-11-01 386560] "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648] "PAC207_Monitor"="c:\windows\PixArt\PAC207\Monitor.exe" [2006-11-03 319488] "googletalk"="c:\program files\Google\Google Talk\googletalk.exe" [2007-01-01 3739648] "DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-06-03 1144104] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920] "Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-07-06 449584] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] . c:\documents and settings\All Users\Start Menu\Programs\Startup\ TV Remote Control.lnk - c:\program files\Terminator\TV7131 Utilities\P3XRCtl.exe [2010-6-19 69632] Watch.lnk - c:\program files\MUSTEK 1248UB\Driver\WATCH.exe [2009-11-23 364544] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableSecureUIAPaths"= 0 (0x0) . [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 01000000 "NoLogoff"= 01000000 "NoSMMyDocs"= 01000000 "NoSMMyPictures"= 01000000 "NoNetworkConnections"= 01000000 . [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128] . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc] @="Service" . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "TkBellExe"="c:\program files\real\realplayer\update\realsched.exe" -osboot . [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 "DisableThumbnailCache"=dword:00000001 . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Free Download Manager\\fdm.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"= "c:\\Program Files\\Real\\RealPlayer\\realplay.exe"= "c:\\Program Files\\Java\\jre6\\bin\\java.exe"= "c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"= "c:\\Program Files\\Nokia\\Nokia Ovi Suite\\NokiaOviSuite.exe"= "c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"= "c:\\Program Files\\Google\\Google Talk\\googletalk.exe"= "c:\\Program Files\\Vuze\\Azureus.exe"= "c:\\Program Files\\Readon Technology\\Readon TV Movie Radio Player 7.3.0.0\\internettv.exe"= "c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\Program Files\\Opera\\opera.exe"= . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015 "1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016 "500:UDP"= 500:UDP:@xpsp2res.dll,-22017 "5985:TCP"= 5985:TCP::Disabled:Windows Remote Management . R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [x] R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-27 136176] R3 AC2003;AC2003;c:\windows\system32\Drivers\AC2003.sys [2004-07-12 4224] R3 gupdatem;Google ????????? ?????? (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-27 136176] R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2011-07-06 41272] R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2010-12-02 137600] R3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2010-12-02 8576] R3 PAC207;e-Messenger 112;c:\windows\system32\DRIVERS\PFC027.SYS [2007-10-25 616064] R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys [2009-12-30 27064] R3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe [2008-04-14 14336] R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [x] S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [2011-02-23 13496] S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2009-11-16 108792] S1 epfwtdir;epfwtdir;c:\windows\system32\DRIVERS\epfwtdir.sys [2009-11-16 96408] S2 AdvancedSystemCareService;Advanced SystemCare Service;c:\program files\IObit\Advanced SystemCare 4\ASCService.exe [2011-05-28 353168] S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-07-06 366640] S2 PfFilter;PfFilter;c:\program files\IObit\Protected Folder\pffilter.sys [2011-03-16 140848] S2 USBSafelyRemoveService;USB Safely Remove Assistant;c:\program files\USB Safely Remove\USBSRService.exe [2009-11-26 261456] S3 Cap713x;Philips Cap713x Video Capture;c:\windows\system32\DRIVERS\Cap713x.sys [2005-04-04 685824] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-07-06 22712] . . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] WINRM REG_MULTI_SZ WINRM . Contents of the 'Scheduled Tasks' folder . 2011-07-23 c:\windows\Tasks\ASC4_AutoCare.job - c:\program files\IObit\Advanced SystemCare 4\AutoCare.exe [2011-05-01 12:46] . 2011-07-28 c:\windows\Tasks\ASC4_AutoSweep.job - c:\program files\IObit\Advanced SystemCare 4\AutoSweep.exe [2011-05-01 12:46] . 2011-07-23 c:\windows\Tasks\ASC4_AutoUpdate.job - c:\program files\IObit\Advanced SystemCare 4\AutoUpdate.exe [2011-05-01 12:46] . 2011-07-28 c:\windows\Tasks\ASC4_PerformanceMonitor.job - c:\program files\IObit\Advanced SystemCare 4\PMonitor.exe [2011-05-01 12:46] . 2011-07-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-03-27 22:57] . 2011-07-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-03-27 22:57] . 2011-07-28 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1123561945-448539723-839522115-1003.job - c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 08:47] . 2011-07-28 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1123561945-448539723-839522115-1003.job - c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 08:47] . 2011-07-28 c:\windows\Tasks\SmartDefrag_Startup.job - c:\program files\IObit\Smart Defrag 2\SmartDefrag.exe [2011-03-22 15:29] . 2011-07-28 c:\windows\Tasks\Updater.job - c:\documents and settings\All Users\Application Data\WombatUpdater\WombatUpdater.exe [2010-12-30 09:26] . 2011-07-28 c:\windows\Tasks\User_Feed_Synchronization-{552A2BF5-FB39-416B-BEE6-137517FA2953}.job - c:\windows\system32\msfeedssync.exe [2009-03-08 02:31] . . ------- Supplementary Scan ------- . uStart Page = [Link mogu videti samo ulogovani korisnici]* mStart Page = [Link mogu videti samo ulogovani korisnici] IE: &IE Toolbar search - c:\program files\PCTV Toolbar\toolbar.dll/SEARCH.HTML IE: Download video with Free Download Manager - [Link mogu videti samo ulogovani korisnici]\program files\Free Download Manager\dlfvideo.htm IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html IE: Preuzmi odabrano Free Download Manager-om - [Link mogu videti samo ulogovani korisnici]\program files\Free Download Manager\dlselected.htm IE: Preuzmi sa Free Download Managerom - [Link mogu videti samo ulogovani korisnici]\program files\Free Download Manager\dllink.htm IE: Preuzmi sve sa Free Download Manager-om - [Link mogu videti samo ulogovani korisnici]\program files\Free Download Manager\dlall.htm TCP: DhcpNameServer = 89.216.1.30 89.216.1.50 . - - - - ORPHANS REMOVED - - - - . WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file) HKLM-Run-DataMngr - c:\progra~1\WI9130~1\DataMngr\DataMngrUI.exe SafeBoot-Wdf01000.sys SafeBoot-WudfPf SafeBoot-WudfRd . . . ************************************************************************ . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [Link mogu videti samo ulogovani korisnici] Rootkit scan 2011-07-28 14:21 Windows 5.1.2600 Service Pack 3 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ********************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'winlogon.exe'(768-) c:\windows\system32\Ati2evxx.dll . - - - - - - - > 'explorer.exe'(2208-) c:\windows\system32\WININET.dll c:\program files\Aqua Dock\Aqua Dock.dll c:\windows\system32\msi.dll c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\MSVCR80.dll c:\windows\system32\ieframe.dll c:\windows\system32\webcheck.dll c:\windows\system32\WPDShServiceObj.dll c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_eng.nlr c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . ------------------------ Other Running Processes ------------------------ . c:\windows\system32\Ati2evxx.exe c:\windows\system32\Ati2evxx.exe c:\windows\System32\wudfhost.exe c:\program files\Java\jre6\bin\jqs.exe c:\program files\ATI Technologies\ATI.ACE\CLI.EXE c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe . ************************************************************************ . Completion time: 2011-07-28 14:25:28 - machine was rebooted ComboFix-quarantined-files.txt 2011-07-28 12:25 . Pre-Run: 14,948,237,312 bytes free Post-Run: 15,024,685,056 bytes free . WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect . - - End Of File - - 20B4A5E429D8787053BBA0E245EDFAC4

Profil

argus Poslao: 28 Jul 2011 16:34 Idi na vrh
rip argus Anti Malware Fighter Rank 2 Pridružio: 27 Apr 2008 Poruke: 9160 Gde živiš: Prokuplje	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Otvoriti Notepad i iskopirati sledeci tekst: `Folder:: c:\windows\ufa File:: c:\windows\unrar.exe` Snimiti na Desktop fajl iz Notepada kao "CFScript" Prevuci snimljeni skript/tekst na ComboFix ikonicu kao na slici. Postaviti u sledecoj poruci log koji bude bio napravljen na kraju ciscenja/skeniranja.

Profil

balthazare Poslao: 28 Jul 2011 17:55 Idi na vrh
offline balthazare Novi MyCity građanin Pridružio: 27 Jul 2011 Poruke: 15	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! ComboFix 11-07-28.02 - Mario 07/28/2011 17:43:23.2.1 - x86 Running from: c:\documents and settings\Mario\Desktop\ComboFix.exe Command switches used :: c:\documents and settings\Mario\Desktop\CFScript.txt * Created a new restore point . FILE :: "c:\windows\unrar.exe" . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\ufa c:\windows\ufa\ufa.exe c:\windows\unrar.exe c:\windows\w_distrib_iplist.txt . . ((((((((((((((((((((((((( Files Created from 2011-06-28 to 2011-07-28 ))))))))))))))))))))))))))))))) . . 2011-07-28 12:37 . 2011-07-28 12:37 -------- d-----w- c:\documents and settings\Mario\Local Settings\Application Data\PackageAware 2011-07-28 12:36 . 2011-07-28 12:36 -------- d-----w- c:\windows\LastGood 2011-07-25 16:49 . 2009-05-25 16:30 19968000 ----a-w- c:\windows\system32\Egyptian Pyramids 3D Screensaver.scr 2011-07-25 16:42 . 2011-07-25 16:42 -------- d-----w- c:\program files\Voyage of Columbus 3D Screensaver 2011-07-25 16:32 . 2011-07-25 16:32 -------- d-----w- c:\program files\Earth 3D Screensaver 2011-07-25 16:06 . 2009-05-26 09:41 3694592 ----a-w- c:\windows\system32\Sun 3D Screensaver.scr 2011-07-25 16:00 . 2009-05-26 10:42 10477568 ----a-w- c:\windows\system32\3D Titanic Screensaver.scr 2011-07-25 15:52 . 2011-07-25 15:52 -------- d-----w- c:\documents and settings\All Users\Application Data\3Planesoft 2011-07-25 15:52 . 2011-07-25 15:52 -------- d-----w- c:\program files\The One Ring 3D Screensaver 2011-07-25 15:52 . 2011-07-04 17:18 650776 ----a-w- c:\windows\system32\The_One_Ring_3D_Screensaver.scr 2011-07-25 15:47 . 2011-07-25 15:52 -------- d-----w- c:\program files\3Planesoft Screensaver Manager 2011-07-25 15:47 . 2011-07-25 15:47 -------- d-----w- c:\windows\system32\3Planesoft 2011-07-25 15:47 . 2011-07-25 15:47 -------- d-----w- c:\program files\The Lost Watch 3D Screensaver 2011-07-25 15:41 . 2011-07-25 15:41 557056 ----a-w- c:\windows\Mars Screensaver.scr 2011-07-25 15:41 . 2011-07-25 15:41 -------- d-----w- c:\program files\Longgame 2011-07-24 21:00 . 2011-07-24 21:00 -------- d-----w- c:\program files\Orban 2011-07-24 12:16 . 2011-07-24 12:17 -------- d-----w- c:\program files\Conquiztador pitanja 2011-07-23 20:30 . 2010-10-18 11:10 7680 -c----w- c:\windows\system32\dllcache\iecompat.dll 2011-07-23 20:27 . 2011-07-23 20:27 -------- d-----w- c:\windows\system32\winrm 2011-07-23 20:26 . 2011-07-23 20:27 -------- dc-h--w- c:\windows\$968930Uinstall_KB968930$ 2011-07-23 19:48 . 2011-07-23 19:54 -------- d-----w- c:\documents and settings\Mario\Application Data\SpeedItUp 2011-07-23 11:59 . 2011-07-23 11:59 -------- d-sh--w- c:\windows\system32\AI_RecycleBin 2011-07-23 11:59 . 2011-07-23 11:59 -------- d-----w- c:\documents and settings\Mario\Application Data\W3i, LLC 2011-07-15 23:29 . 2011-07-15 23:31 -------- d-----w- c:\documents and settings\Mario\Application Data\MapSphere 2011-07-15 22:54 . 2011-07-24 16:27 -------- d-----w- c:\program files\SpeedFan 2011-07-15 15:43 . 2009-12-14 23:01 258048 ----a-w- c:\windows\system32\w32tmdt.cpl 2011-07-09 21:32 . 2011-07-09 21:51 -------- d-sh--w- c:\documents and settings\Mario\Phone Browser 2011-07-08 15:22 . 2011-07-08 15:56 -------- d-----w- c:\documents and settings\All Users\Application Data\NokiaAccount 2011-07-08 15:09 . 2008-08-26 08:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys 2011-07-08 15:08 . 2011-07-08 15:08 -------- d-----w- c:\program files\PC Connectivity Solution 2011-07-08 15:07 . 2010-12-02 11:36 8576 ----a-w- c:\windows\system32\drivers\nmwcdnsuc.sys 2011-07-08 15:07 . 2010-12-02 11:36 137600 ----a-w- c:\windows\system32\drivers\nmwcdnsu.sys 2011-07-08 15:07 . 2010-12-02 13:13 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys 2011-07-08 15:07 . 2010-12-02 13:13 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys 2011-07-08 15:07 . 2010-12-02 13:13 23168 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys 2011-07-08 15:07 . 2010-12-02 13:14 113152 ----a-w- c:\windows\system32\ccdcmbwu.dll 2011-07-08 15:07 . 2010-12-02 13:14 604672 ----a-w- c:\windows\system32\nmwcdcocls.dll 2011-07-08 15:07 . 2010-12-02 13:13 18304 ----a-w- c:\windows\system32\drivers\ccdcmb.sys 2011-07-08 15:07 . 2010-12-02 11:36 1461992 ----a-w- c:\windows\system32\wdfcoinstaller01009.dll 2011-07-08 15:05 . 2011-07-08 15:05 -------- d-----w- c:\documents and settings\All Users\Application Data\NokiaInstallerCache 2011-07-07 12:56 . 2011-07-24 14:26 -------- d-----w- c:\documents and settings\Mario\Local Settings\Application Data\Burek Forum 2011-07-02 14:19 . 2011-07-02 14:19 -------- d-----w- c:\documents and settings\Mario\Application Data\TeamViewer 2011-07-02 14:18 . 2011-07-02 15:42 -------- d-----w- c:\program files\TeamViewer . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-07-06 17:52 . 2010-11-03 13:28 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-07-06 17:52 . 2010-11-03 13:28 22712 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-07-04 17:15 . 2004-11-17 09:10 749088 ----a-w- c:\windows\system32\3Planesoft_Screensaver_Manager.scr 2011-06-18 10:24 . 2006-09-25 15:39 348160 ----a-w- c:\windows\system32\msvcr71.dll 2011-06-02 14:02 . 2004-08-03 21:17 1858944 ----a-w- c:\windows\system32\win32k.sys 2011-05-04 02:52 . 2010-06-13 20:40 472808 ----a-w- c:\windows\system32\deployJava1.dll 2011-05-04 00:25 . 2009-10-16 16:32 73728 ----a-w- c:\windows\system32\javacpl.cpl 2011-05-02 15:31 . 2009-07-19 15:48 692736 ----a-w- c:\windows\system32\inetcomm.dll 2011-04-29 17:25 . 2004-08-03 22:56 151552 ----a-w- c:\windows\system32\schannel.dll 2011-04-29 16:19 . 2004-08-03 21:15 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . Note empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-8287-79A187E26987}] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "myweather"="c:\program files\MyFreeWeather\myweather.exe" [2011-07-22 1592416] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-06-15 15141768] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NVMixerTray"="c:\program files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-06-03 131072] "ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-09-29 344064] "RAMfreer"="c:\program files\RAMfreer\RAMfreer.exe" [2003-02-09 410112] "ATICCC"="c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-09-25 90112] "Openwares LiveUpdate"="c:\program files\LiveUpdate\LiveUpdate.exe" [2003-12-13 61440] "Aqua Dock"="c:\program files\Aqua Dock\Aqua Dock.exe" [2003-11-01 386560] "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648] "PAC207_Monitor"="c:\windows\PixArt\PAC207\Monitor.exe" [2006-11-03 319488] "googletalk"="c:\program files\Google\Google Talk\googletalk.exe" [2007-01-01 3739648] "DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-06-03 1144104] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920] "Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-07-06 449584] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] . c:\documents and settings\All Users\Start Menu\Programs\Startup\ TV Remote Control.lnk - c:\program files\Terminator\TV7131 Utilities\P3XRCtl.exe [2010-6-19 69632] Watch.lnk - c:\program files\MUSTEK 1248UB\Driver\WATCH.exe [2009-11-23 364544] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableSecureUIAPaths"= 0 (0x0) . [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 01000000 "NoLogoff"= 01000000 "NoSMMyDocs"= 01000000 "NoSMMyPictures"= 01000000 "NoNetworkConnections"= 01000000 . [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128] . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc] @="Service" . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "TkBellExe"="c:\program files\real\realplayer\update\realsched.exe" -osboot . [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 "DisableThumbnailCache"=dword:00000001 . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Free Download Manager\\fdm.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"= "c:\\Program Files\\Real\\RealPlayer\\realplay.exe"= "c:\\Program Files\\Java\\jre6\\bin\\java.exe"= "c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"= "c:\\Program Files\\Nokia\\Nokia Ovi Suite\\NokiaOviSuite.exe"= "c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"= "c:\\Program Files\\Google\\Google Talk\\googletalk.exe"= "c:\\Program Files\\Vuze\\Azureus.exe"= "c:\\Program Files\\Readon Technology\\Readon TV Movie Radio Player 7.3.0.0\\internettv.exe"= "c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\Program Files\\Opera\\opera.exe"= . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015 "1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016 "500:UDP"= 500:UDP:@xpsp2res.dll,-22017 "5985:TCP"= 5985:TCP::Disabled:Windows Remote Management . R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [x] R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-27 136176] R3 AC2003;AC2003;c:\windows\system32\Drivers\AC2003.sys [2004-07-12 4224] R3 gupdatem;Google ????????? ?????? (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-27 136176] R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2011-07-06 41272] R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2010-12-02 137600] R3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2010-12-02 8576] R3 PAC207;e-Messenger 112;c:\windows\system32\DRIVERS\PFC027.SYS [2007-10-25 616064] R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys [2009-12-30 27064] R3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe [2008-04-14 14336] R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [x] S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [2011-02-23 13496] S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2009-11-16 108792] S1 epfwtdir;epfwtdir;c:\windows\system32\DRIVERS\epfwtdir.sys [2009-11-16 96408] S2 AdvancedSystemCareService;Advanced SystemCare Service;c:\program files\IObit\Advanced SystemCare 4\ASCService.exe [2011-05-28 353168] S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-07-06 366640] S2 PfFilter;PfFilter;c:\program files\IObit\Protected Folder\pffilter.sys [2011-03-16 140848] S2 USBSafelyRemoveService;USB Safely Remove Assistant;c:\program files\USB Safely Remove\USBSRService.exe [2009-11-26 261456] S3 Cap713x;Philips Cap713x Video Capture;c:\windows\system32\DRIVERS\Cap713x.sys [2005-04-04 685824] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-07-06 22712] . . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] WINRM REG_MULTI_SZ WINRM . Contents of the 'Scheduled Tasks' folder . 2011-07-23 c:\windows\Tasks\ASC4_AutoCare.job - c:\program files\IObit\Advanced SystemCare 4\AutoCare.exe [2011-05-01 12:46] . 2011-07-28 c:\windows\Tasks\ASC4_AutoSweep.job - c:\program files\IObit\Advanced SystemCare 4\AutoSweep.exe [2011-05-01 12:46] . 2011-07-28 c:\windows\Tasks\ASC4_AutoUpdate.job - c:\program files\IObit\Advanced SystemCare 4\AutoUpdate.exe [2011-05-01 12:46] . 2011-07-28 c:\windows\Tasks\ASC4_PerformanceMonitor.job - c:\program files\IObit\Advanced SystemCare 4\PMonitor.exe [2011-05-01 12:46] . 2011-07-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-03-27 22:57] . 2011-07-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-03-27 22:57] . 2011-07-28 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1123561945-448539723-839522115-1003.job - c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 08:47] . 2011-07-28 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1123561945-448539723-839522115-1003.job - c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 08:47] . 2011-07-28 c:\windows\Tasks\SmartDefrag_Startup.job - c:\program files\IObit\Smart Defrag 2\SmartDefrag.exe [2011-03-22 15:29] . 2011-07-28 c:\windows\Tasks\Updater.job - c:\documents and settings\All Users\Application Data\WombatUpdater\WombatUpdater.exe [2010-12-30 09:26] . 2011-07-28 c:\windows\Tasks\User_Feed_Synchronization-{552A2BF5-FB39-416B-BEE6-137517FA2953}.job - c:\windows\system32\msfeedssync.exe [2009-03-08 02:31] . . ------- Supplementary Scan ------- . uStart Page = [Link mogu videti samo ulogovani korisnici]* mStart Page = [Link mogu videti samo ulogovani korisnici] IE: &IE Toolbar search - c:\program files\PCTV Toolbar\toolbar.dll/SEARCH.HTML IE: Download video with Free Download Manager - [Link mogu videti samo ulogovani korisnici]\program files\Free Download Manager\dlfvideo.htm IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html IE: Preuzmi odabrano Free Download Manager-om - [Link mogu videti samo ulogovani korisnici]\program files\Free Download Manager\dlselected.htm IE: Preuzmi sa Free Download Managerom - [Link mogu videti samo ulogovani korisnici]\program files\Free Download Manager\dllink.htm IE: Preuzmi sve sa Free Download Manager-om - [Link mogu videti samo ulogovani korisnici]\program files\Free Download Manager\dlall.htm TCP: DhcpNameServer = 89.216.1.30 89.216.1.50 . . ************************************************************************ . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [Link mogu videti samo ulogovani korisnici] Rootkit scan 2011-07-28 17:50 Windows 5.1.2600 Service Pack 3 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************ . --------------------- DLLs Loaded Under Running Processes --------------------- . - - - - - - - > 'winlogon.exe'(768-) c:\windows\system32\Ati2evxx.dll . Completion time: 2011-07-28 17:53:16 ComboFix-quarantined-files.txt 2011-07-28 15:53 ComboFix2.txt 2011-07-28 12:25 . Pre-Run: 14,946,918,400 bytes free Post-Run: 14,957,830,144 bytes free . - - End Of File - - CDD123863EFA9E50CAC792192B09C10A

Profil

argus Poslao: 28 Jul 2011 20:45 Idi na vrh
rip argus Anti Malware Fighter Rank 2 Pridružio: 27 Apr 2008 Poruke: 9160 Gde živiš: Prokuplje	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Racunar je cist. Ja ti u drugom postu napisah da deinstaliras Eset Nod i dadoh ti alat (link). na linku imas i uputstvo kako to da odradis. Jos uvek je aktivan u sistemu. Potrebno je deinstalirati ComboFix: klikni start (ili ), a zatim RUN. Na Visti koristiti Start Search polje ukoliko Run nije dostupan. U liniju za unos teksta ukucaj (iskopiraj) sledeće: ComboFix /Uninstall Primeti da postoji razmak između "ComboFix" i "/Uninstall". a zatim klikni OK (ili pritisni Enter). Sačekaj da se proces deinstalacije završi. Kad sve ovo odradis, postavi mi svezi DDS log da proverim za Eset.

Profil

balthazare Poslao: 28 Jul 2011 22:16 Idi na vrh
offline balthazare Novi MyCity građanin Pridružio: 27 Jul 2011 Poruke: 15	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: Napisano: 28 Jul 2011 22:15 . DDS (Ver_2011-06-23.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_26 Run by Mario at 22:13:11 on 2011-07-28 . ============== Running Processes =============== . . ============== Pseudo HJT Report =============== . uStart Page = [Link mogu videti samo ulogovani korisnici] mStart Page = [Link mogu videti samo ulogovani korisnici] BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll BHO: FastestTubeBHO Class: {3e532ce8-c6d9-4a10-8ace-4348c96e8b6a} - c:\program files\fastesttube\1.3.7\WombatBHO.dll BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll BHO: Windows Live pomagač za prijavljivanje: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: VMN Toolbar Astro Gemini: {a057a204-bacc-4d26-8287-79a187e26987} - c:\progra~1\vmntoo~1\VMNTOO~1.DLL BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll BHO: FDMIECookiesBHO Class: {cc59e0f9-7e43-44fa-9faa-8377850bf205} - c:\program files\free download manager\iefdm2.dll BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - Windows Live Toolbar Helper BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: {8B79EE88-E62D-4AA8-B530-CC357BA112B7} - No File TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - TB: VMN Toolbar Astro Gemini: {a057a204-bacc-4d26-8287-79a187e26987} - c:\progra~1\vmntoo~1\VMNTOO~1.DLL uRun: [myweather] "c:\program files\myfreeweather\myweather.exe" /autorun uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized mRun: [NVMixerTray] "c:\program files\nvidia corporation\nvmixer\NVMixerTray.exe" mRun: [ATIPTA] c:\program files\ati technologies\ati control panel\atiptaxx.exe mRun: [RAMfreer] c:\program files\ramfreer\RAMfreer.exe mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\CLIStart.exe" mRun: [Openwares LiveUpdate] c:\program files\liveupdate\LiveUpdate.exe mRun: [Aqua Dock] c:\program files\aqua dock\Aqua Dock.exe mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe mRun: [PAC207_Monitor] c:\windows\pixart\pac207\Monitor.exe mRun: [googletalk] c:\program files\google\google talk\googletalk.exe /autostart mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\tvremo~1.lnk - c:\program files\terminator\tv7131 utilities\P3XRCtl.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\watch.lnk - c:\program files\mustek 1248ub\driver\WATCH.exe uPolicies-explorer: NoSMHelp = 01000000 uPolicies-explorer: NoLogoff = 01000000 uPolicies-explorer: NoSMMyDocs = 01000000 uPolicies-explorer: NoSMMyPictures = 01000000 uPolicies-explorer: NoNetworkConnections = 01000000 uPolicies-explorer: NoInstrumentation = 1 (0x1) mPolicies-system: EnableSecureUIAPaths = 0 (0x0) IE: &IE Toolbar search - c:\program files\pctv toolbar\toolbar.dll/SEARCH.HTML IE: Download video with Free Download Manager - [Link mogu videti samo ulogovani korisnici]\program files\free download manager\dlfvideo.htm IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html IE: Preuzmi odabrano Free Download Manager-om - [Link mogu videti samo ulogovani korisnici]\program files\free download manager\dlselected.htm IE: Preuzmi sa Free Download Managerom - [Link mogu videti samo ulogovani korisnici]\program files\free download manager\dllink.htm IE: Preuzmi sve sa Free Download Manager-om - [Link mogu videti samo ulogovani korisnici]\program files\free download manager\dlall.htm IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL DPF: {233C1507-6A77-46A4-9443-F871F945D258} - [Link mogu videti samo ulogovani korisnici] DPF: {31435657-9980-0010-8000-00AA00389B71} - [Link mogu videti samo ulogovani korisnici] DPF: {41564D57-9980-0010-8000-00AA00389B71} - [Link mogu videti samo ulogovani korisnici] DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - [Link mogu videti samo ulogovani korisnici] DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - [Link mogu videti samo ulogovani korisnici] DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici] DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici] DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici] TCP: DhcpNameServer = 89.216.1.30 89.216.1.50 TCP: Interfaces\{95868B28-0BF9-433D-8741-EC3631BABFDA} : DhcpNameServer = 89.216.1.30 89.216.1.50 Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll Notify: AtiExtEvent - Ati2evxx.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll . ============= SERVICES / DRIVERS =============== . . =============== Created Last 30 ================ . 2011-07-28 12:37:12 -------- d-----w- c:\documents and settings\mario\local settings\application data\PackageAware 2011-07-28 12:07:49 -------- d-sha-r- C:\cmdcons 2011-07-25 16:49:27 19968000 ----a-w- c:\windows\system32\Egyptian Pyramids 3D Screensaver.scr 2011-07-25 16:42:48 -------- d-----w- c:\program files\Voyage of Columbus 3D Screensaver 2011-07-25 16:32:08 -------- d-----w- c:\program files\Earth 3D Screensaver 2011-07-25 16:06:54 3694592 ----a-w- c:\windows\system32\Sun 3D Screensaver.scr 2011-07-25 16:00:19 10477568 ----a-w- c:\windows\system32\3D Titanic Screensaver.scr 2011-07-25 15:52:36 -------- d-----w- c:\documents and settings\all users\application data\3Planesoft 2011-07-25 15:52:32 650776 ----a-w- c:\windows\system32\The_One_Ring_3D_Screensaver.scr 2011-07-25 15:52:32 -------- d-----w- c:\program files\The One Ring 3D Screensaver 2011-07-25 15:47:50 -------- d-----w- c:\windows\system32\3Planesoft 2011-07-25 15:47:50 -------- d-----w- c:\program files\3Planesoft Screensaver Manager 2011-07-25 15:47:48 -------- d-----w- c:\program files\The Lost Watch 3D Screensaver 2011-07-25 15:41:33 557056 ----a-w- c:\windows\Mars Screensaver.scr 2011-07-25 15:41:32 -------- d-----w- c:\program files\Longgame 2011-07-24 21:00:10 -------- d-----w- c:\program files\Orban 2011-07-24 12:16:59 -------- d-----w- c:\program files\Conquiztador pitanja 2011-07-23 20:30:00 7680 -c----w- c:\windows\system32\dllcache\iecompat.dll 2011-07-23 20:27:22 -------- d-----w- c:\windows\system32\winrm 2011-07-23 20:26:51 -------- dc-h--w- c:\windows\$968930Uinstall_KB968930$ 2011-07-23 19:48:36 -------- d-----w- c:\documents and settings\mario\application data\SpeedItUp 2011-07-23 11:59:28 -------- d-sh--w- c:\windows\system32\AI_RecycleBin 2011-07-23 11:59:19 -------- d-----w- c:\documents and settings\mario\application data\W3i, LLC 2011-07-15 23:29:29 -------- d-----w- c:\documents and settings\mario\application data\MapSphere 2011-07-15 22:54:40 -------- d-----w- c:\program files\SpeedFan 2011-07-15 15:43:54 258048 ----a-w- c:\windows\system32\w32tmdt.cpl 2011-07-09 21:32:04 -------- d-sh--w- c:\documents and settings\mario\Phone Browser 2011-07-08 15:22:20 -------- d-----w- c:\documents and settings\all users\application data\NokiaAccount 2011-07-08 15:09:01 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys 2011-07-08 15:08:50 -------- d-----w- c:\program files\PC Connectivity Solution 2011-07-08 15:07:47 8576 ----a-w- c:\windows\system32\drivers\nmwcdnsuc.sys 2011-07-08 15:07:45 137600 ----a-w- c:\windows\system32\drivers\nmwcdnsu.sys 2011-07-08 15:07:43 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys 2011-07-08 15:07:42 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys 2011-07-08 15:07:39 23168 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys 2011-07-08 15:07:37 604672 ----a-w- c:\windows\system32\nmwcdcocls.dll 2011-07-08 15:07:37 18304 ----a-w- c:\windows\system32\drivers\ccdcmb.sys 2011-07-08 15:07:37 1461992 ----a-w- c:\windows\system32\wdfcoinstaller01009.dll 2011-07-08 15:07:37 113152 ----a-w- c:\windows\system32\ccdcmbwu.dll 2011-07-08 15:05:17 -------- d-----w- c:\documents and settings\all users\application data\NokiaInstallerCache 2011-07-07 12:56:56 -------- d-----w- c:\documents and settings\mario\local settings\application data\Burek Forum 2011-07-02 14:19:09 -------- d-----w- c:\documents and settings\mario\application data\TeamViewer 2011-07-02 14:18:51 -------- d-----w- c:\program files\TeamViewer . ==================== Find3M ==================== . 2011-07-06 17:52:42 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-07-06 17:52:42 22712 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-07-04 17:15:20 749088 ----a-w- c:\windows\system32\3Planesoft_Screensaver_Manager.scr 2011-06-18 10:24:33 348160 ----a-w- c:\windows\system32\msvcr71.dll 2011-06-02 14:02:05 1858944 ----a-w- c:\windows\system32\win32k.sys 2011-05-24 10:15:18 4496 -csha-w- c:\windows\system32\KGyGaAvL.sys 2011-05-04 02:52:22 472808 ----a-w- c:\windows\system32\deployJava1.dll 2011-05-04 00:25:49 73728 ----a-w- c:\windows\system32\javacpl.cpl 2011-05-02 15:31:52 692736 ----a-w- c:\windows\system32\inetcomm.dll . ============= FINISH: 22:13:59.56 =============== [Link mogu videti samo ulogovani korisnici] Dopuna: 28 Jul 2011 22:16 To je to valjda...

Profil

argus Poslao: 28 Jul 2011 22:31 Idi na vrh
rip argus Anti Malware Fighter Rank 2 Pridružio: 27 Apr 2008 Poruke: 9160 Gde živiš: Prokuplje	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Ok, instaliraj neki AV obavezno, ima besplatnih a dobrih, Avast, Avira... - Preporucujem da za zastitu USB memorijskih uredjaja koristis MCShield. Nema nikakve veze sa AntiVirus-om tj. nece ometati njegov rad a pokazao se kao jedan od najboljih vida zastite od malware-a koji se prenosi putem USB mem. uredjaja. Skines, instaliras, ubodes USB mem. uredjaj, izvrsi se skeniranje nakon cega dobijes obavestenje da je uredjaj cist (ukoliko je stvarno tako); ili dobijes log u kome vidis informacije o malware-u koji je nadjen i obrisan. Home Page MCShield-a: [Link mogu videti samo ulogovani korisnici] Vise o MCShield-u mozes saznati u ovoj temi: [Link mogu videti samo ulogovani korisnici] Preporuka da deinstaliras te silne toolbare i da sredis startup. Znaci sve sto je nepotrebno, ne mora da se podize sa sistemom. Ukoliko ne znas kako to da uradis, svrati do Windows foruma. Pozdrav!

Profil

MyCity » Ambulanta -> Arhiva Ambulante » Virus sa Facebook-a

Ko je trenutno na forumu

Ukupno su 792 korisnika na forumu :: 54 registrovanih, 4 sakrivenih i 734 gosta :: [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 15694 - dana 01 Feb 2026 12:23

Korisnici koji su trenutno na forumu:: Korisnici trenutno na forumu: _Rade, AndrejPetar, avijacija, Betta, blue, boro975, BOXRR, Bubili, Chainsaw, Crazzer, Desmond, Dimitrije Paunovic, djukapfc, Dorijan Grej, dragisa dragisa, dragoljub11987, gajasvi, GrammaticalAnalysis, istina, Ivan Gajic, j-22orao, lcc, Lelemood, m0nstrum_, markoskjk, marsi, mgolub, Milos1389, milos97, Ndsk, NklJov123, Ognjen D., Pohovani_00, raykan, Regrut Boskica, royst33, samocitam, saputnik plavetnila, savuni, Shilok, shiro, shlauf, simicnenadbg, Smiljkovich, sovanova95, Topaz9, username_25, Vanderx, vddutina, Vlada76, VPV, zil10, zivojin32, šumar bk2

Svaki korisnik ovog sajta je odgovoran za sadržaj svoje poruke koju objavi na sajtu. Sajt se odriče svake odgovornosti za sadržaj tih poruka.
Postavljanjem vaše poruke ili vašeg autorskog dela na ovaj sajt, saglasni ste da ovaj sajt postaje distributer vašeg dela, i odričete se mogućnosti njegovog povlačenja ili brisanja, bez saglasnosti uprave sajta.
Distribucija sadržaja sa ovog sajta je dozvoljena samo u nekomercijalne svrhe, uz obaveznu napomenu da je sadržaj preuzet sa ovog sajta, i uz obavezno navođenje adrese MyCity sajta. Za sve ostale vidove distribucije obavezni ste da prethodno zatražite odobrenje od vlasnika MyCity sajta.
MyCity pokrenuo, administrira i razvija Predrag Damnjanović, a o uređenju sajta se brine MyCity Tim.
Ukoliko želite da nas kontaktirate kliknite ovde.
Naši sajtovi:
Vesti, Vojni forum, Zaštita od virusa, TekstPesme.rs

This content is licensed under a Creative Commons License.
Based on phpBB 2, translated by Simke, designed by