Премини към съдържанието
  • Добре дошли!

    Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

    Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

     

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Lugos

Вирус от USB флашка създава shortcut

Препоръчан отговор


Преди да пусна за проверка Публикувано изображениеFarbar Recovery Scan Tool бих искал да споделя,че компютъра е свързан в мрежа с още два компютъра и един сървър.

Необходимо ли е да се разкачи мрежата или може да се изчистят един по един докато са в мрежа?

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Зависи от червея...засега не ги разкачайте, а ги сканирайте по-етапно и публикувайте логовете за всяка една система. :)

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Зависи от червея...засега не ги разкачайте, а ги сканирайте по-етапно и публикувайте логовете за всяка една система. :)

Tова са логовете от първия компютър

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01

Ran by Janeta Veskova (administrator) on JANETA on 01-04-2014 09:37:49

Running from C:Documents and SettingsJaneta VeskovaDesktop

Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: English(US)

Internet Explorer Version 8

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Malwarebytes Corporation) C:Program FilesMalwarebytes' Anti-Malwarembamscheduler.exe

(Google Inc.) C:Program FilesGoogleUpdate1.3.22.5GoogleCrashHandler.exe

(Malwarebytes Corporation) C:Program FilesMalwarebytes' Anti-Malwarembamservice.exe

(Malwarebytes Corporation) C:Program FilesMalwarebytes' Anti-Malwarembamgui.exe

(Microsoft Corporation) C:WINDOWSsystem32wscntfy.exe

(Realtek Semiconductor Corp.) C:WINDOWSRTHDCPL.EXE

(Macrovision Corporation) C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe

(Intel Corporation) C:WINDOWSsystem32hkcmd.exe

(Intel Corporation) C:WINDOWSsystem32igfxpers.exe

(Intel Corporation) C:WINDOWSsystem32igfxsrvc.exe

(Microsoft Corporation) C:WINDOWSsystem32wscript.exe

(Electronics For Imaging, Inc.) C:Program FilesFieryCStationcstation.exe

() C:Program FilesDatecsFlexType 2KFType2K.exe

(Panda Security) C:Program FilesPanda USB VaccineUSBVaccine.exe

(Microsoft Corporation) C:WINDOWSsystem32wuauclt.exe

(Mozilla Corporation) C:Program FilesMozilla Firefoxfirefox.exe

(Mozilla Corporation) C:Program FilesMozilla Firefoxplugin-container.exe

==================== Registry (Whitelisted) ==================

HKLM...Run: [RTHDCPL] - C:WINDOWSRTHDCPL.EXE [16871936 2008-06-13] (Realtek Semiconductor Corp.)

HKLM...Run: [iSUSPM Startup] - C:Program FilesCommon FilesInstallShieldUpdateServiceisuspm.exe [249856 2005-08-11] (Macrovision Corporation)

HKLM...Run: [iSUSScheduler] - C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe [81920 2005-08-11] (Macrovision Corporation)

HKLM...Run: [rspwqkvjgw] - wscript.exe //B "C:DOCUME~1JANETA~1LOCALS~1Temprspwqkvjgw.vbs" <===== ATTENTION

HKUS-1-5-21-2025429265-884357618-682003330-1004...Run: [Wxiaiw] - C:Documents and SettingsJaneta VeskovaApplication DataWxiaiw.scr

HKUS-1-5-21-2025429265-884357618-682003330-1004...Run: [rspwqkvjgw] - wscript.exe //B "C:DOCUME~1JANETA~1LOCALS~1Temprspwqkvjgw.vbs" <===== ATTENTION

Startup: C:Documents and SettingsAll UsersStart MenuProgramsStartupAdobe Gamma Loader.lnk

ShortcutTarget: Adobe Gamma Loader.lnk -> C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe (Adobe Systems, Inc.)

Startup: C:Documents and SettingsAll UsersStart MenuProgramsStartupAdobe Reader Speed Launch.lnk

ShortcutTarget: Adobe Reader Speed Launch.lnk -> C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe (Adobe Systems Incorporated)

Startup: C:Documents and SettingsAll UsersStart MenuProgramsStartupCommand WorkStation.lnk

ShortcutTarget: Command WorkStation.lnk -> C:Program FilesFieryCStationcstation.exe (Electronics For Imaging, Inc.)

Startup: C:Documents and SettingsAll UsersStart MenuProgramsStartupFlexType 2K.lnk

ShortcutTarget: FlexType 2K.lnk -> C:Program FilesDatecsFlexType 2KFType2K.exe ()

Startup: C:Documents and SettingsJaneta VeskovaStart MenuProgramsStartupPandaUSBVaccine.lnk

ShortcutTarget: PandaUSBVaccine.lnk -> C:Program FilesPanda USB VaccineUSBVaccine.exe (Panda Security)

Startup: C:Documents and SettingsJaneta VeskovaStart MenuProgramsStartuprspwqkvjgw.vbs ()

==================== Internet (Whitelisted) ====================

HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.bg/

HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll (Adobe Systems Incorporated)

Toolbar: HKCU - &Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:WINDOWSsystem32browseui.dll (Microsoft Corporation)

Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:WINDOWSsystem32SHELL32.dll (Microsoft Corporation)

TcpipParameters: [DhcpNameServer] 192.168.4.1

FireFox:

========

FF ProfilePath: C:Documents and SettingsJaneta VeskovaApplication DataMozillaFirefoxProfilesvrp47w1s.default-1377870160375

FF Homepage: hxxp://www.google.bg/

FF Plugin: @adobe.com/FlashPlayer - C:WINDOWSsystem32MacromedFlashNPSWF32_12_0_0_77.dll ()

FF Plugin: @microsoft.com/WPF,version=3.5 - C:WINDOWSMicrosoft.NETFrameworkv3.5Windows Presentation FoundationNPWPF.dll (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 - C:Program FilesGoogleUpdate1.3.22.5npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:Program FilesGoogleUpdate1.3.22.5npGoogleUpdate3.dll (Google Inc.)

FF SearchPlugin: C:Program Filesmozilla firefoxbrowsersearchplugins911bg.xml

FF SearchPlugin: C:Program Filesmozilla firefoxbrowsersearchpluginsdiribg.xml

FF SearchPlugin: C:Program Filesmozilla firefoxbrowsersearchpluginspe-bg.xml

FF SearchPlugin: C:Program Filesmozilla firefoxbrowsersearchpluginsportalbgdict.xml

FF Extension: Bulgarian+Germany Dictionary - C:Documents and SettingsJaneta VeskovaApplication DataMozi[email protected]dictionaries.addons.mozilla.org [2013-08-30]

FF HKLM...FirefoxExtensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:WINDOWSMicrosoft.NETFrameworkv3.5Windows Presentation FoundationDotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - C:WINDOWSMicrosoft.NETFrameworkv3.5Windows Presentation FoundationDotNetAssistantExtension []

Chrome:

=======

CHR Plugin: (Shockwave Flash) - C:Program FilesGoogleChromeApplication33.0.1750.154PepperFlashpepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:Program FilesGoogleChromeApplication33.0.1750.154ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:Program FilesGoogleChromeApplication33.0.1750.154pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:Program FilesAdobeAcrobat 7.0ReaderBrowsernppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Microsoft® DRM) - C:Program FilesWindows Media Playernpdrmv2.dll (Microsoft Corporation)

CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:Program FilesWindows Media Playernpdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))

CHR Plugin: (Microsoft® DRM) - C:Program FilesWindows Media Playernpwmsdrm.dll (Microsoft Corporation)

CHR Plugin: (Google Update) - C:Program FilesGoogleUpdate1.3.21.124npGoogleUpdate3.dll No File

CHR Plugin: (Shockwave Flash) - C:WINDOWSsystem32MacromedFlashNPSWF32_11_5_502_146.dll No File

CHR Extension: (Google Документи) - C:Documents and SettingsJaneta VeskovaLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionsaohghmighlieiainnegkcijnfilokake [2013-01-31]

CHR Extension: (Google Диск) - C:Documents and SettingsJaneta VeskovaLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionsapdfllckaahabafndbhieahigkjlhalf [2013-01-31]

CHR Extension: (YouTube) - C:Documents and SettingsJaneta VeskovaLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionsblpcfgokakmgnkcojhhkbfbldkacnbeo [2013-01-31]

CHR Extension: (Google Търсене) - C:Documents and SettingsJaneta VeskovaLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionscoobgpohoikkiipiblmjeljniedjpjpf [2013-01-31]

CHR Extension: (Google Wallet) - C:Documents and SettingsJaneta VeskovaLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionsnmmhkkegccagdldgiimedpiccmgmieda [2013-10-31]

CHR Extension: (Gmail) - C:Documents and SettingsJaneta VeskovaLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionspjkljhegncpnkpknbcohdijeoejaedia [2013-01-31]

========================== Services (Whitelisted) =================

R2 MBAMScheduler; C:Program FilesMalwarebytes' Anti-Malwarembamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:Program FilesMalwarebytes' Anti-Malwarembamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

==================== Drivers (Whitelisted) ====================

R3 MBAMProtector; C:WINDOWSsystem32driversmbam.sys [22856 2013-04-04] (Malwarebytes Corporation)

S3 EverestDriver; ??C:Program FilesLavalysEVEREST Ultimate Editionkerneld.wnt [X]

S4 IntelIde; No ImagePath

U5 ScsiPort; C:WINDOWSsystem32driversscsiport.sys [96384 2008-04-14] (Microsoft Corporation)

U1 WS2IFSL;

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-04-01 09:37 - 2014-04-01 09:37 - 01145856 _____ (Farbar) C:Documents and SettingsJaneta VeskovaDesktopFRST.exe

2014-04-01 09:37 - 2014-04-01 09:37 - 00009540 _____ () C:Documents and SettingsJaneta VeskovaDesktopFRST.txt

2014-04-01 09:37 - 2014-04-01 09:37 - 00000000 ____D () C:FRST

2014-03-24 11:59 - 2014-03-24 11:59 - 00000000 _____ () C:WINDOWSsystem32Internet Explorer.exe

2014-03-19 11:39 - 2014-03-19 11:40 - 00000000 ____D () C:Program FilesMozilla Firefox

2014-03-19 09:15 - 2014-04-01 09:09 - 00000240 _____ () C:WINDOWSTasksMicrosoft Windows XP End of Service Notification Logon.job

2014-03-19 09:15 - 2014-03-20 10:07 - 00000234 _____ () C:WINDOWSTasksMicrosoft Windows XP End of Service Notification Monthly.job

2014-03-18 19:27 - 2014-03-18 19:27 - 00004016 _____ () C:WINDOWSKB2934207.log

2014-03-18 19:27 - 2014-03-18 19:27 - 00000000 __HDC () C:WINDOWS$NtUninstallKB2934207$

2014-03-18 11:42 - 2014-02-26 04:59 - 00013312 ____N (Microsoft Corporation) C:WINDOWSsystem32xp_eos.exe

2014-03-18 11:42 - 2014-02-26 04:59 - 00013312 ____C (Microsoft Corporation) C:WINDOWSsystem32dllcachexp_eos.exe

2014-03-14 18:31 - 2014-03-14 18:31 - 00011088 _____ () C:WINDOWSKB2925418-IE8.log

2014-03-14 18:31 - 2014-03-14 18:31 - 00000000 __HDC () C:WINDOWS$NtUninstallKB2930275$

2014-03-14 18:31 - 2014-03-14 18:31 - 00000000 __HDC () C:WINDOWS$NtUninstallKB2929961$

2014-03-14 10:02 - 2014-03-14 18:31 - 00008291 _____ () C:WINDOWSKB2929961.log

2014-03-14 10:01 - 2014-03-14 18:31 - 00009560 _____ () C:WINDOWSKB2930275.log

==================== One Month Modified Files and Folders =======

2014-04-01 09:37 - 2014-04-01 09:37 - 01145856 _____ (Farbar) C:Documents and SettingsJaneta VeskovaDesktopFRST.exe

2014-04-01 09:37 - 2014-04-01 09:37 - 00009540 _____ () C:Documents and SettingsJaneta VeskovaDesktopFRST.txt

2014-04-01 09:37 - 2014-04-01 09:37 - 00000000 ____D () C:FRST

2014-04-01 09:37 - 2013-01-23 10:07 - 00000392 _____ () C:WINDOWSefinl.ini

2014-04-01 09:13 - 2013-01-22 18:09 - 00509828 _____ () C:WINDOWSsystem32PerfStringBackup.INI

2014-04-01 09:11 - 2013-01-22 16:17 - 01499787 _____ () C:WINDOWSWindowsUpdate.log

2014-04-01 09:10 - 2013-07-19 09:14 - 00422681 _____ () C:WINDOWSKB2686509.log

2014-04-01 09:10 - 2013-07-19 09:14 - 00000056 _____ () C:WINDOWSfaultykeyboard.log

2014-04-01 09:09 - 2014-03-19 09:15 - 00000240 _____ () C:WINDOWSTasksMicrosoft Windows XP End of Service Notification Logon.job

2014-04-01 09:09 - 2013-01-31 11:00 - 00000898 _____ () C:WINDOWSTasksGoogleUpdateTaskMachineCore.job

2014-04-01 09:09 - 2013-01-22 18:32 - 00000282 _____ () C:WINDOWSTasksGo for FilesUpdate.job

2014-04-01 09:09 - 2013-01-22 18:11 - 00000159 _____ () C:WINDOWSwiadebug.log

2014-04-01 09:09 - 2013-01-22 18:11 - 00000052 _____ () C:WINDOWSwiaservc.log

2014-04-01 09:09 - 2013-01-22 16:22 - 00000006 ____H () C:WINDOWSTasksSA.DAT

2014-03-31 18:19 - 2013-01-22 16:24 - 00000178 ___SH () C:Documents and SettingsJaneta Veskovantuser.ini

2014-03-31 18:19 - 2013-01-22 16:22 - 00032602 _____ () C:WINDOWSSchedLgU.Txt

2014-03-31 18:05 - 2013-01-22 18:00 - 00000830 _____ () C:WINDOWSTasksAdobe Flash Player Updater.job

2014-03-31 17:46 - 2013-01-31 11:00 - 00000902 _____ () C:WINDOWSTasksGoogleUpdateTaskMachineUA.job

2014-03-31 12:23 - 2014-01-23 16:30 - 00145742 _____ () C:WINDOWSsetupapi.log

2014-03-31 08:53 - 2006-02-28 15:00 - 00013646 _____ () C:WINDOWSsystem32wpa.dbl

2014-03-28 17:50 - 2013-01-23 17:46 - 00002516 ___SH () C:WINDOWSsystem32KGyGaAvL.sys

2014-03-24 11:59 - 2014-03-24 11:59 - 00000000 _____ () C:WINDOWSsystem32Internet Explorer.exe

2014-03-20 15:49 - 2013-01-23 11:14 - 00000110 _____ () C:WINDOWSfiery.ini

2014-03-20 10:07 - 2014-03-19 09:15 - 00000234 _____ () C:WINDOWSTasksMicrosoft Windows XP End of Service Notification Monthly.job

2014-03-20 10:06 - 2013-08-30 12:41 - 00000000 ____D () C:Program FilesMozilla Maintenance Service

2014-03-19 11:40 - 2014-03-19 11:39 - 00000000 ____D () C:Program FilesMozilla Firefox

2014-03-18 19:27 - 2014-03-18 19:27 - 00004016 _____ () C:WINDOWSKB2934207.log

2014-03-18 19:27 - 2014-03-18 19:27 - 00000000 __HDC () C:WINDOWS$NtUninstallKB2934207$

2014-03-18 19:27 - 2013-01-22 18:09 - 01068771 _____ () C:WINDOWSFaxSetup.log

2014-03-18 19:27 - 2013-01-22 18:09 - 00520030 _____ () C:WINDOWSocgen.log

2014-03-18 19:27 - 2013-01-22 18:09 - 00410772 _____ () C:WINDOWStsoc.log

2014-03-18 19:27 - 2013-01-22 18:09 - 00365590 _____ () C:WINDOWScomsetup.log

2014-03-18 19:27 - 2013-01-22 18:09 - 00219838 _____ () C:WINDOWSntdtcsetup.log

2014-03-18 19:27 - 2013-01-22 18:09 - 00167776 _____ () C:WINDOWSiis6.log

2014-03-18 19:27 - 2013-01-22 18:09 - 00059186 _____ () C:WINDOWSocmsn.log

2014-03-18 19:27 - 2013-01-22 18:09 - 00053554 _____ () C:WINDOWSmsgsocm.log

2014-03-18 19:27 - 2013-01-22 18:09 - 00001374 _____ () C:WINDOWSimsins.log

2014-03-17 10:53 - 2013-01-31 11:01 - 00001845 _____ () C:Documents and SettingsAll UsersDesktopGoogle Chrome.lnk

2014-03-17 10:03 - 2013-01-22 18:08 - 00921384 _____ () C:WINDOWSsystem32FNTCACHE.DAT

2014-03-14 18:31 - 2014-03-14 18:31 - 00011088 _____ () C:WINDOWSKB2925418-IE8.log

2014-03-14 18:31 - 2014-03-14 18:31 - 00000000 __HDC () C:WINDOWS$NtUninstallKB2930275$

2014-03-14 18:31 - 2014-03-14 18:31 - 00000000 __HDC () C:WINDOWS$NtUninstallKB2929961$

2014-03-14 18:31 - 2014-03-14 10:02 - 00008291 _____ () C:WINDOWSKB2929961.log

2014-03-14 18:31 - 2014-03-14 10:01 - 00009560 _____ () C:WINDOWSKB2930275.log

2014-03-14 18:31 - 2013-01-23 12:58 - 00157177 _____ () C:WINDOWSupdspapi.log

2014-03-14 18:31 - 2013-01-22 18:09 - 00001374 _____ () C:WINDOWSimsins.BAK

2014-03-12 12:05 - 2013-01-22 18:00 - 00692616 _____ (Adobe Systems Incorporated) C:WINDOWSsystem32FlashPlayerApp.exe

2014-03-12 12:05 - 2013-01-22 18:00 - 00071048 _____ (Adobe Systems Incorporated) C:WINDOWSsystem32FlashPlayerCPLApp.cpl

2014-03-06 16:11 - 2013-03-22 11:07 - 00126976 ___SH () C:Documents and SettingsJaneta VeskovaDesktopThumbs.db

Some content of TEMP:

====================

C:Documents and SettingsJaneta VeskovaLocal SettingsTemphtmlayout.dll

C:Documents and SettingsJaneta VeskovaLocal SettingsTempPicaView.dll

C:Documents and SettingsJaneta VeskovaLocal SettingsTempuninstall596828.exe

==================== Bamital & volsnap Check =================

C:WINDOWSexplorer.exe => MD5 is legit

C:WINDOWSsystem32winlogon.exe => MD5 is legit

C:WINDOWSsystem32svchost.exe => MD5 is legit

C:WINDOWSsystem32services.exe => MD5 is legit

C:WINDOWSsystem32User32.dll => MD5 is legit

C:WINDOWSsystem32userinit.exe => MD5 is legit

C:WINDOWSsystem32rpcss.dll => MD5 is legit

C:WINDOWSsystem32Driversvolsnap.sys => MD5 is legit

==================== End Of Log ============================

Tова са логовете от втори компютър

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01

Ran by Galin Marinov (administrator) on GMM on 01-04-2014 09:44:59

Running from C:Documents and SettingsGalin MarinovDesktop

Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: English(US)

Internet Explorer Version 8

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(ATI Technologies Inc.) C:WINDOWSsystem32Ati2evxx.exe

(HP) C:WINDOWSsystem32HPSIsvc.exe

(ATI Technologies Inc.) C:WINDOWSsystem32Ati2evxx.exe

(Microsoft Corporation) C:WINDOWSsystem32wscntfy.exe

(Realtek Semiconductor Corp.) C:WINDOWSSkyTel.EXE

(Realtek Semiconductor Corp.) C:WINDOWSRTHDCPL.EXE

(JMicron Technology Corp.) C:WINDOWSsystem32JMRaidTool.exe

() C:Program FilesWinampwinampa.exe

(Macrovision Corporation) C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe

(Microsoft Corporation) C:Program FilesMessengermsmsgs.exe

(Electronics For Imaging, Inc.) C:Program FilesFieryCStationcstation.exe

() C:WINDOWSDatecsFlex2K.exe

(Panda Security) C:Program FilesPanda USB VaccineUSBVaccine.exe

(Microsoft Corporation) C:WINDOWSsystem32wscript.exe

(Mozilla Corporation) C:Program FilesMozilla Firefoxfirefox.exe

(Mozilla Corporation) C:Program FilesMozilla Firefoxplugin-container.exe

(Corel Corporation) C:Program FilesCorelGraphics9Programscoreldrw.exe

==================== Registry (Whitelisted) ==================

HKLM...Run: [skyTel] - C:WINDOWSSkyTel.EXE [1448960 2006-04-24] (Realtek Semiconductor Corp.)

HKLM...Run: [RTHDCPL] - C:WINDOWSRTHDCPL.EXE [16206848 2006-05-04] (Realtek Semiconductor Corp.)

HKLM...Run: [JMB36X Configure] - C:WINDOWSsystem32JMRaidTool.exe [385024 2006-04-20] (JMicron Technology Corp.)

HKLM...Run: [WinampAgent] - C:Program FilesWinampwinampa.exe [37888 2009-07-01] ()

HKLM...Run: [iSUSPM Startup] - C:Program FilesCommon FilesInstallShieldUpdateServiceisuspm.exe [249856 2005-08-11] (Macrovision Corporation)

HKLM...Run: [iSUSScheduler] - C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe [81920 2005-08-11] (Macrovision Corporation)

HKLM...Run: [NeroFilterCheck] - C:WINDOWSsystem32NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)

HKLM...Run: [HPUsageTrackingLEDM] - C:Program FilesHPHP UT LEDMbinhppusg.exe [30264 2009-08-04] (Hewlett-Packard Company)

HKLM...Run: [Adobe ARM] - C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM...Run: [rspwqkvjgw] - wscript.exe //B "C:DOCUME~1GALINM~1LOCALS~1Temprspwqkvjgw.vbs" <===== ATTENTION

WinlogonNotifyAtiExtEvent: C:WINDOWSsystem32Ati2evxx.dll (ATI Technologies Inc.)

HKUS-1-5-21-117609710-602609370-682003330-1004...Run: [MSMSGS] - C:Program FilesMessengermsmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)

HKUS-1-5-21-117609710-602609370-682003330-1004...Run: [rspwqkvjgw] - wscript.exe //B "C:DOCUME~1GALINM~1LOCALS~1Temprspwqkvjgw.vbs" <===== ATTENTION

Startup: C:Documents and SettingsAll UsersStart MenuProgramsStartupAdobe Gamma Loader.lnk

ShortcutTarget: Adobe Gamma Loader.lnk -> C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe (Adobe Systems, Inc.)

Startup: C:Documents and SettingsAll UsersStart MenuProgramsStartupCommand WorkStation.lnk

ShortcutTarget: Command WorkStation.lnk -> C:Program FilesFieryCStationcstation.exe (Electronics For Imaging, Inc.)

Startup: C:Documents and SettingsAll UsersStart MenuProgramsStartupFlexType 2K.lnk

ShortcutTarget: FlexType 2K.lnk -> C:WINDOWSDatecsFlex2K.exe ()

Startup: C:Documents and SettingsGalin MarinovStart MenuProgramsStartupPandaUSBVaccine.lnk

ShortcutTarget: PandaUSBVaccine.lnk -> C:Program FilesPanda USB VaccineUSBVaccine.exe (Panda Security)

Startup: C:Documents and SettingsGalin MarinovStart MenuProgramsStartuprspwqkvjgw.vbs ()

==================== Internet (Whitelisted) ====================

HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank

HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://www.google.com/ie

URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.

BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre6binjp2ssv.dll No File

Toolbar: HKCU - &Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:WINDOWSsystem32browseui.dll (Microsoft Corporation)

Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:WINDOWSsystem32SHELL32.dll (Microsoft Corporation)

DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

TcpipParameters: [DhcpNameServer] 192.168.4.1

FireFox:

========

FF ProfilePath: C:Documents and SettingsGalin MarinovApplication DataMozillaFirefoxProfiles4fgnhrif.default

FF user.js: detected! => C:Documents and SettingsGalin MarinovApplication DataMozillaFirefoxProfiles4fgnhrif.defaultuser.js

FF NewTab: user_pref("browser.newtab.url", "");

FF DefaultSearchEngine: user_pref("browser.search.defaultenginename", "");

FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");

FF Homepage: hxxp://www.google.bg/

FF Plugin: @adobe.com/FlashPlayer - C:WINDOWSsystem32MacromedFlashNPSWF32_12_0_0_77.dll ()

FF Plugin: @adobe.com/ShockwavePlayer - C:WINDOWSsystem32AdobeDirectornp32dsw.dll (Adobe Systems, Inc.)

FF Plugin: @real.com/nppl3260;version=6.0.12.709 - C:Program FilesK-Lite Codec PackRealbrowserpluginsnppl3260.dll (RealNetworks, Inc.)

FF Plugin: @real.com/nprpjplug;version=6.0.12.709 - C:Program FilesK-Lite Codec PackRealbrowserpluginsnprpjplug.dll (RealNetworks, Inc.)

FF Plugin: Adobe Reader - C:Program FilesAdobeReader 10.0ReaderAIRnppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:Program Filesmozilla firefoxpluginsnp-mswmp.dll (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:Program Filesmozilla firefoxpluginsnpdeployJava1.dll (Sun Microsystems, Inc.)

FF Plugin ProgramFiles/Appdata: C:Program Filesmozilla firefoxpluginsnppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:Program Filesmozilla firefoxpluginsnppl3260.dll (RealNetworks, Inc.)

FF Plugin ProgramFiles/Appdata: C:Program Filesmozilla firefoxpluginsnprpjplug.dll (RealNetworks, Inc.)

FF SearchPlugin: C:Program Filesmozilla firefoxbrowsersearchplugins911bg.xml

FF SearchPlugin: C:Program Filesmozilla firefoxbrowsersearchpluginsdiribg.xml

FF SearchPlugin: C:Program Filesmozilla firefoxbrowsersearchpluginspe-bg.xml

FF SearchPlugin: C:Program Filesmozilla firefoxbrowsersearchpluginsportalbgdict.xml

FF Extension: ABV Notifier - C:Documents and SettingsGalin MarinovApplication [email protected]netinfo.bg.xpi [2013-07-11]

FF HKLM...FirefoxExtensions: [[email protected]] - C:Documents and SettingsGalin MarinovApplication DataiPumperextension_firefox.xpi

========================== Services (Whitelisted) =================

S2 ATI Smart; C:WINDOWSsystem32ati2sgag.exe [516096 2005-08-05] ()

S2 HP LaserJet Service; C:Program FilesHPHPLaserJetServiceHPLaserJetService.exe [136704 2009-06-24] (HP)

S2 Browser Defender Update Service; "C:Program FilesPC ToolsPC Tools SecurityBDTBDTUpdateService.exe" [X]

==================== Drivers (Whitelisted) ====================

S3 andnetadb; C:WINDOWSSystem32Driverslgandnetadb.sys [25856 2010-11-29] (Google Inc)

S3 CCDECODE; C:WINDOWSSystem32DRIVERSCCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)

R1 cdrbsvsd; C:WINDOWSsystem32Driverscdrbsvsd.sys [10940 2003-04-29] (B.H.A Corporation)

R0 JGOGO; C:WINDOWSSystem32DRIVERSJGOGO.sys [6912 2006-02-07] (JMicron )

R0 JRAID; C:WINDOWSSystem32DRIVERSjraid.sys [42368 2006-04-20] (JMicron Technology Corp.)

R3 LgBttPort; C:WINDOWSSystem32DRIVERSlgbtport.sys [12160 2009-09-29] (LG Electronics Inc.)

R3 lgbusenum; C:WINDOWSSystem32DRIVERSlgbtbus.sys [10496 2009-09-29] (LG Electronics Inc.)

R3 LGVMODEM; C:WINDOWSSystem32DRIVERSlgvmodem.sys [12928 2009-09-29] (LG Electronics Inc.)

S3 NdisIP; C:WINDOWSSystem32DRIVERSNdisIP.sys [10880 2008-04-14] (Microsoft Corporation)

S3 rtl8139; C:WINDOWSSystem32DRIVERSRTL8139.SYS [20992 2004-08-04] (Realtek Semiconductor Corporation)

S3 sonypvs1; C:WINDOWSSystem32DRIVERSsonypvs1.sys [102220 2002-10-15] (Sony Corporation)

S3 SONYPVU1; C:WINDOWSSystem32DRIVERSSONYPVU1.SYS [7552 2001-08-17] (Sony Corporation)

S3 GMSIPCI; ??E:INSTALLGMSIPCI.SYS [X]

S4 IntelIde; No ImagePath

S3 NTACCESS; ??E:NTACCESS.sys [X]

U5 ScsiPort; C:WINDOWSsystem32driversscsiport.sys [96384 2008-04-14] (Microsoft Corporation)

S3 SetupNTGLM7X; ??E:NTGLM7X.sys [X]

U3 TlntSvr;

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-04-01 09:44 - 2014-04-01 09:45 - 00009758 _____ () C:Documents and SettingsGalin MarinovDesktopFRST.txt

2014-04-01 09:44 - 2014-04-01 09:44 - 00000000 ____D () C:FRST

2014-04-01 09:44 - 2014-04-01 09:37 - 01145856 _____ (Farbar) C:Documents and SettingsGalin MarinovDesktopFRST.exe

2014-04-01 09:22 - 2014-04-01 09:22 - 00278720 _____ () C:Documents and SettingsGalin MarinovDesktopBackup_of_Panajot_Nikolov.cdr

2014-03-31 15:48 - 2014-03-31 15:48 - 00062104 _____ () C:Documents and SettingsGalin MarinovDesktopPapki_print.cdr

2014-03-31 15:35 - 2014-03-31 15:35 - 00000000 ____D () C:Program FilesESET

2014-03-31 15:32 - 2014-03-31 15:32 - 02347384 _____ (ESET) C:Documents and SettingsGalin MarinovDesktopesetsmartinstaller_bgr.exe

2014-03-31 12:40 - 2014-03-31 13:26 - 214375800 _____ () C:Documents and SettingsGalin MarinovDesktopMenu_2014.cdr

2014-03-31 12:40 - 2014-03-31 13:10 - 214752994 _____ () C:Documents and SettingsGalin MarinovDesktopMenu_2014_ceni.cdr

2014-03-31 12:29 - 2014-03-31 12:36 - 37169730 _____ () C:Documents and SettingsGalin MarinovDesktopMenu_Korici.cdr

2014-03-31 12:18 - 2014-03-31 12:19 - 00058076 _____ () C:Documents and SettingsGalin MarinovDesktopStikeri_Print.cdr

2014-03-31 09:24 - 2014-03-31 09:26 - 00029996 _____ () C:Documents and SettingsGalin MarinovDesktopZnamena_print.cdr

2014-03-29 14:30 - 2014-03-29 14:38 - 00000000 ____D () C:Documents and SettingsGalin MarinovDesktopMenu

2014-03-29 11:30 - 2014-03-29 11:34 - 00000000 ____D () C:Program FilesMozilla Firefox

2014-03-28 10:59 - 2014-03-28 11:06 - 00109942 _____ () C:Documents and SettingsGalin MarinovDesktopKaska.cdr

2014-03-27 11:11 - 2014-03-27 11:10 - 00067722 _____ () C:Documents and SettingsGalin MarinovDesktopplaket.cdr

2014-03-24 12:16 - 2014-03-24 12:16 - 00090112 _____ () C:WINDOWSMinidumpMini032414-01.dmp

2014-03-24 12:16 - 2014-03-24 12:16 - 00000000 ____D () C:WINDOWSMinidump

2014-03-24 10:16 - 2014-03-24 10:18 - 00013970 _____ () C:Documents and SettingsGalin MarinovDesktopPrege.cdr

2014-03-21 15:26 - 2014-03-31 17:45 - 00000000 ____D () C:Documents and SettingsGalin MarinovDesktopUM

2014-03-21 09:54 - 2014-03-25 15:28 - 00000000 ____D () C:Documents and SettingsGalin MarinovDesktopLodka

2014-03-20 13:52 - 2014-04-01 09:26 - 02313838 _____ () C:Documents and SettingsGalin MarinovDesktopPanajot_Nikolov.cdr

2014-03-19 19:34 - 2014-03-19 19:34 - 00050300 _____ () C:Documents and SettingsGalin MarinovDesktopOrnaments2.cdr

2014-03-19 19:32 - 2014-03-19 19:32 - 00055698 _____ () C:Documents and SettingsGalin MarinovDesktopOrnaments.cdr

2014-03-17 10:37 - 2014-03-28 13:39 - 00000000 ____D () C:Documents and SettingsGalin MarinovDesktopVip_Room_Cosmetics

2014-03-13 12:16 - 2014-03-13 12:40 - 06680460 _____ () C:Documents and SettingsGalin MarinovDesktopDarenie.cdr

2014-03-12 18:34 - 2014-03-13 14:57 - 82795064 _____ () C:Documents and SettingsGalin MarinovDesktopPrinter_print.cdr

2014-03-12 16:27 - 2014-03-27 18:12 - 00000000 ____D () C:Documents and SettingsGalin MarinovDesktopKatalog

2014-03-11 09:40 - 2014-03-13 11:30 - 00000000 ____D () C:Documents and SettingsGalin MarinovDesktopSkara

2014-03-06 17:19 - 2014-04-01 09:41 - 00000000 ____D () C:Documents and SettingsGalin MarinovDesktopZnamena

==================== One Month Modified Files and Folders =======

2014-04-01 09:45 - 2014-04-01 09:44 - 00009758 _____ () C:Documents and SettingsGalin MarinovDesktopFRST.txt

2014-04-01 09:44 - 2014-04-01 09:44 - 00000000 ____D () C:FRST

2014-04-01 09:41 - 2014-03-06 17:19 - 00000000 ____D () C:Documents and SettingsGalin MarinovDesktopZnamena

2014-04-01 09:37 - 2014-04-01 09:44 - 01145856 _____ (Farbar) C:Documents and SettingsGalin MarinovDesktopFRST.exe

2014-04-01 09:33 - 2012-09-21 11:00 - 00000830 _____ () C:WINDOWSTasksAdobe Flash Player Updater.job

2014-04-01 09:26 - 2014-03-20 13:52 - 02313838 _____ () C:Documents and SettingsGalin MarinovDesktopPanajot_Nikolov.cdr

2014-04-01 09:22 - 2014-04-01 09:22 - 00278720 _____ () C:Documents and SettingsGalin MarinovDesktopBackup_of_Panajot_Nikolov.cdr

2014-04-01 09:15 - 2010-08-13 10:27 - 00437109 _____ () C:WINDOWSWindowsUpdate.log

2014-04-01 09:11 - 2010-08-13 13:31 - 00000392 _____ () C:WINDOWSefinl.ini

2014-04-01 09:11 - 2010-08-13 13:17 - 00554168 _____ () C:WINDOWSsystem32PerfStringBackup.INI

2014-04-01 09:10 - 2013-01-14 13:07 - 00000290 _____ () C:WINDOWSTasksExpress FilesUpdate.job

2014-04-01 09:10 - 2010-08-13 13:19 - 00000159 _____ () C:WINDOWSwiadebug.log

2014-04-01 09:10 - 2010-08-13 13:19 - 00000052 _____ () C:WINDOWSwiaservc.log

2014-04-01 09:09 - 2010-08-13 10:31 - 00000006 ____H () C:WINDOWSTasksSA.DAT

2014-04-01 09:09 - 2004-08-04 15:00 - 00013680 _____ () C:WINDOWSsystem32wpa.dbl

2014-03-31 18:18 - 2010-08-13 10:32 - 00000178 ___SH () C:Documents and SettingsGalin Marinovntuser.ini

2014-03-31 18:18 - 2010-08-13 10:31 - 00032372 _____ () C:WINDOWSSchedLgU.Txt

2014-03-31 18:01 - 2010-08-23 12:25 - 00000110 _____ () C:WINDOWSfiery.ini

2014-03-31 17:45 - 2014-03-21 15:26 - 00000000 ____D () C:Documents and SettingsGalin MarinovDesktopUM

2014-03-31 15:48 - 2014-03-31 15:48 - 00062104 _____ () C:Documents and SettingsGalin MarinovDesktopPapki_print.cdr

2014-03-31 15:35 - 2014-03-31 15:35 - 00000000 ____D () C:Program FilesESET

2014-03-31 15:34 - 2013-03-19 17:38 - 00012288 ___SH () C:WINDOWSThumbs.db

2014-03-31 15:32 - 2014-03-31 15:32 - 02347384 _____ (ESET) C:Documents and SettingsGalin MarinovDesktopesetsmartinstaller_bgr.exe

2014-03-31 13:26 - 2014-03-31 12:40 - 214375800 _____ () C:Documents and SettingsGalin MarinovDesktopMenu_2014.cdr

2014-03-31 13:10 - 2014-03-31 12:40 - 214752994 _____ () C:Documents and SettingsGalin MarinovDesktopMenu_2014_ceni.cdr

2014-03-31 12:36 - 2014-03-31 12:29 - 37169730 _____ () C:Documents and SettingsGalin MarinovDesktopMenu_Korici.cdr

2014-03-31 12:19 - 2014-03-31 12:18 - 00058076 _____ () C:Documents and SettingsGalin MarinovDesktopStikeri_Print.cdr

2014-03-31 11:40 - 2010-08-13 12:39 - 00002828 ___SH () C:WINDOWSsystem32KGyGaAvL.sys

2014-03-31 09:26 - 2014-03-31 09:24 - 00029996 _____ () C:Documents and SettingsGalin MarinovDesktopZnamena_print.cdr

2014-03-29 14:38 - 2014-03-29 14:30 - 00000000 ____D () C:Documents and SettingsGalin MarinovDesktopMenu

2014-03-29 11:34 - 2014-03-29 11:30 - 00000000 ____D () C:Program FilesMozilla Firefox

2014-03-28 15:08 - 2010-08-13 15:44 - 08881746 ___SH () C:Documents and SettingsGalin MarinovDesktopThumbs.db

2014-03-28 13:39 - 2014-03-17 10:37 - 00000000 ____D () C:Documents and SettingsGalin MarinovDesktopVip_Room_Cosmetics

2014-03-28 13:39 - 2010-08-13 13:16 - 01666552 _____ () C:WINDOWSsetupapi.log

2014-03-28 11:06 - 2014-03-28 10:59 - 00109942 _____ () C:Documents and SettingsGalin MarinovDesktopKaska.cdr

2014-03-27 18:12 - 2014-03-12 16:27 - 00000000 ____D () C:Documents and SettingsGalin MarinovDesktopKatalog

2014-03-27 17:57 - 2011-05-05 11:36 - 00000284 _____ () C:WINDOWSTasksAppleSoftwareUpdate.job

2014-03-27 11:10 - 2014-03-27 11:11 - 00067722 _____ () C:Documents and SettingsGalin MarinovDesktopplaket.cdr

2014-03-25 15:33 - 2014-02-28 17:38 - 00019454 _____ () C:Documents and SettingsGalin MarinovDesktopTenor.cdr

2014-03-25 15:28 - 2014-03-21 09:54 - 00000000 ____D () C:Documents and SettingsGalin MarinovDesktopLodka

2014-03-24 13:36 - 2010-08-13 13:08 - 00000000 ____D () C:WINDOWSsecurity

2014-03-24 12:16 - 2014-03-24 12:16 - 00090112 _____ () C:WINDOWSMinidumpMini032414-01.dmp

2014-03-24 12:16 - 2014-03-24 12:16 - 00000000 ____D () C:WINDOWSMinidump

2014-03-24 10:18 - 2014-03-24 10:16 - 00013970 _____ () C:Documents and SettingsGalin MarinovDesktopPrege.cdr

2014-03-21 18:51 - 2012-09-21 10:37 - 00000000 __HDC () C:WINDOWS$NtServicePackUninstall$

2014-03-21 17:24 - 2011-12-20 17:03 - 00297666 _____ () C:Documents and SettingsGalin MarinovDesktoppechat.cdr

2014-03-21 09:51 - 2010-08-13 10:25 - 00000000 ____D () C:WINDOWSRegistration

2014-03-20 13:50 - 2010-08-23 13:19 - 00327081 _____ () C:WINDOWSsystem32AdobeFnt.lst

2014-03-19 19:34 - 2014-03-19 19:34 - 00050300 _____ () C:Documents and SettingsGalin MarinovDesktopOrnaments2.cdr

2014-03-19 19:32 - 2014-03-19 19:32 - 00055698 _____ () C:Documents and SettingsGalin MarinovDesktopOrnaments.cdr

2014-03-14 17:43 - 2010-08-13 15:04 - 00000000 ____D () C:Documents and SettingsGalin MarinovDesktopC

2014-03-13 14:57 - 2014-03-12 18:34 - 82795064 _____ () C:Documents and SettingsGalin MarinovDesktopPrinter_print.cdr

2014-03-13 12:40 - 2014-03-13 12:16 - 06680460 _____ () C:Documents and SettingsGalin MarinovDesktopDarenie.cdr

2014-03-13 11:30 - 2014-03-11 09:40 - 00000000 ____D () C:Documents and SettingsGalin MarinovDesktopSkara

2014-03-13 11:05 - 2013-03-19 18:52 - 00002561 _____ () C:Documents and SettingsGalin MarinovDesktopWord.lnk

2014-03-12 19:09 - 2013-01-17 11:50 - 00000000 ____D () C:Documents and SettingsGalin MarinovApplication DatauTorrent

2014-03-12 12:33 - 2012-09-21 11:00 - 00692616 _____ (Adobe Systems Incorporated) C:WINDOWSsystem32FlashPlayerApp.exe

2014-03-12 12:33 - 2011-08-18 09:47 - 00071048 _____ (Adobe Systems Incorporated) C:WINDOWSsystem32FlashPlayerCPLApp.cpl

2014-03-04 15:49 - 2012-02-16 12:24 - 00000000 ____D () C:Documents and SettingsGalin MarinovDesktopRazni

==================== Bamital & volsnap Check =================

C:WINDOWSexplorer.exe => MD5 is legit

C:WINDOWSsystem32winlogon.exe => MD5 is legit

C:WINDOWSsystem32svchost.exe => MD5 is legit

C:WINDOWSsystem32services.exe => MD5 is legit

C:WINDOWSsystem32User32.dll => MD5 is legit

C:WINDOWSsystem32userinit.exe => MD5 is legit

C:WINDOWSsystem32rpcss.dll => MD5 is legit

C:WINDOWSsystem32Driversvolsnap.sys => MD5 is legit

==================== End Of Log ============================

Tова са логовете от трети компютър

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01

Ran by GMarinov (administrator) on GAMA-7 on 01-04-2014 09:52:56

Running from C:Documents and SettingsGMarinovDesktop

Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: English(US)

Internet Explorer Version 6

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Malwarebytes Corporation) C:Program FilesMalwarebytes' Anti-Malwarembamscheduler.exe

(Malwarebytes Corporation) C:Program FilesMalwarebytes' Anti-Malwarembamservice.exe

(Malwarebytes Corporation) C:Program FilesMalwarebytes' Anti-Malwarembamgui.exe

(Realtek Semiconductor Corp.) C:WINDOWSSOUNDMAN.EXE

(Macrovision Corporation) C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe

(Microsoft Corporation) C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe

(Skype Technologies S.A.) C:Program FilesSkypePhoneSkype.exe

(Electronics For Imaging, Inc.) C:Program FilesFieryCStationcstation.exe

() C:WINDOWSDatecsFlex2K.exe

(WinZip Computing, Inc.) C:Program FilesWinZipWZQKPICK.EXE

(Panda Security) C:Program FilesPanda USB VaccineUSBVaccine.exe

(Brother Industries, Ltd.) C:Program FilesBrowny02BrYNSvc.exe

(Microsoft Corporation) C:WINDOWSsystem32wscntfy.exe

(Skype Technologies) C:Program FilesSkypePlugin ManagerskypePM.exe

==================== Registry (Whitelisted) ==================

HKLM...Run: [soundMan] - C:WINDOWSSOUNDMAN.EXE [69632 2004-09-16] (Realtek Semiconductor Corp.)

HKLM...Run: [iSUSPM Startup] - C:Program FilesCommon FilesInstallShieldUpdateServiceisuspm.exe [249856 2005-08-11] (Macrovision Corporation)

HKLM...Run: [iSUSScheduler] - C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe [81920 2005-08-11] (Macrovision Corporation)

HKLM...Run: [GrooveMonitor] - C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe [31072 2008-10-25] (Microsoft Corporation)

HKLM...Run: [] - [X]

HKLM...Run: [HPUsageTrackingLEDM] - C:Program FilesHPHP UT LEDMbinhppusg.exe [30264 2009-08-04] (Hewlett-Packard Company)

HKLM...Run: [brStsMon00] - C:Program FilesBrowny02BrotherBrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)

HKLM...Run: [CanonMyPrinter] - C:Program FilesCanonMyPrinterBJMyPrt.exe [1848648 2009-07-07] (CANON INC.)

HKUS-1-5-21-790525478-1757981266-725345543-1004...Run: [Google Update] - C:Documents and SettingsGMarinovLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe [136176 2011-05-30] (Google Inc.)

HKUS-1-5-21-790525478-1757981266-725345543-1004...Run: [skype] - C:Program FilesSkypePhoneSkype.exe [21633320 2008-11-07] (Skype Technologies S.A.)

Startup: C:Documents and SettingsAll UsersStart MenuProgramsStartupAdobe Gamma Loader.lnk

ShortcutTarget: Adobe Gamma Loader.lnk -> C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe (Adobe Systems, Inc.)

Startup: C:Documents and SettingsAll UsersStart MenuProgramsStartupAdobe Reader Speed Launch.lnk

ShortcutTarget: Adobe Reader Speed Launch.lnk -> C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe (Adobe Systems Incorporated)

Startup: C:Documents and SettingsAll UsersStart MenuProgramsStartupCommand WorkStation.lnk

ShortcutTarget: Command WorkStation.lnk -> C:Program FilesFieryCStationcstation.exe (Electronics For Imaging, Inc.)

Startup: C:Documents and SettingsAll UsersStart MenuProgramsStartupFlexType 2K.lnk

ShortcutTarget: FlexType 2K.lnk -> C:WINDOWSDatecsFlex2K.exe ()

Startup: C:Documents and SettingsAll UsersStart MenuProgramsStartupWinZip Quick Pick.lnk

ShortcutTarget: WinZip Quick Pick.lnk -> C:Program FilesWinZipWZQKPICK.EXE (WinZip Computing, Inc.)

Startup: C:Documents and SettingsGMarinovStart MenuProgramsStartupPandaUSBVaccine.lnk

ShortcutTarget: PandaUSBVaccine.lnk -> C:Program FilesPanda USB VaccineUSBVaccine.exe (Panda Security)

==================== Internet (Whitelisted) ====================

HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://google.bg/

HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page = %SystemRoot%system32blank.htm

HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home

SearchScopes: HKLM - DefaultScope {CCC7A320-B3CA-4199-B1A6-9F516DD69829} URL =

SearchScopes: HKCU - DefaultScope {CCC7A320-B3CA-4199-B1A6-9F516DD69829} URL =

SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678

BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll (Adobe Systems Incorporated)

BHO: No Name - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -  No File

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:Program FilesMicrosoft OfficeOffice12GrooveShellExtensions.dll (Microsoft Corporation)

BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre6binjp2ssv.dll No File

Toolbar: HKCU - &Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:WINDOWSsystem32browseui.dll (Microsoft Corporation)

Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:WINDOWSsystem32SHELL32.dll (Microsoft Corporation)

DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:Program FilesAVGAVG10ToolbarIEToolbar.dll No File

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:Program FilesMicrosoft OfficeOffice12GrooveSystemServices.dll (Microsoft Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:Program FilesCommon FilesSkypeSkype4COM.dll (Skype Technologies)

TcpipParameters: [DhcpNameServer] 192.168.4.1

FireFox:

========

FF ProfilePath: C:Documents and SettingsGMarinovApplication DataMozillaFirefoxProfilesd2qd2sv9.default

FF DefaultSearchEngine: AVG Secure Search

FF Homepage: google.bg

FF Keyword.URL: hxxp://search.avg.com/route/?d=4d41761d&v=6.011.025.001&i=26&tp=ab&iy=&ychte=us&lng=bg&q=

FF Plugin: @adobe.com/FlashPlayer - C:WINDOWSsystem32MacromedFlashNPSWF32_12_0_0_44.dll ()

FF Plugin: @adobe.com/ShockwavePlayer - C:WINDOWSsystem32AdobeDirectornp32dsw.dll (Adobe Systems, Inc.)

FF Plugin: @microsoft.com/WPF,version=3.5 - C:WINDOWSMicrosoft.NETFrameworkv3.5Windows Presentation FoundationNPWPF.dll (Microsoft Corporation)

FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:Documents and SettingsGMarinovLocal SettingsApplication DataGoogleUpdate1.3.23.9npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:Documents and SettingsGMarinovLocal SettingsApplication DataGoogleUpdate1.3.23.9npGoogleUpdate3.dll (Google Inc.)

FF Plugin ProgramFiles/Appdata: C:Program Filesmozilla firefoxpluginsnpdeployJava1.dll (Sun Microsystems, Inc.)

FF Plugin ProgramFiles/Appdata: C:Program Filesmozilla firefoxpluginsnppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:Program Filesmozilla firefoxbrowsersearchplugins911bg.xml

FF SearchPlugin: C:Program Filesmozilla firefoxbrowsersearchpluginsdiribg.xml

FF SearchPlugin: C:Program Filesmozilla firefoxbrowsersearchpluginspe-bg.xml

FF SearchPlugin: C:Program Filesmozilla firefoxbrowsersearchpluginsportalbgdict.xml

FF Extension: Bulgarian Dictionary - C:Documents and SettingsGMarinovApplication [email protected]naries.addons.mozilla.org [2011-04-27]

FF HKLM...FirefoxExtensions: [[email protected]] - C:Program [email protected]

FF HKLM...FirefoxExtensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:WINDOWSMicrosoft.NETFrameworkv3.5Windows Presentation FoundationDotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - C:WINDOWSMicrosoft.NETFrameworkv3.5Windows Presentation FoundationDotNetAssistantExtension []

Chrome:

=======

CHR HomePage: hxxp://www.google.com

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:Documents and SettingsGMarinovLocal SettingsApplication DataGoogleChromeApplication27.0.1453.110ppGoogleNaClPluginChrome.dll No File

CHR Plugin: (Chrome PDF Viewer) - C:Documents and SettingsGMarinovLocal SettingsApplication DataGoogleChromeApplication27.0.1453.110pdf.dll No File

CHR Plugin: (Shockwave Flash) - C:Documents and SettingsGMarinovLocal SettingsApplication DataGoogleChromeApplication27.0.1453.110gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:WINDOWSsystem32MacromedFlashNPSWF32.dll No File

CHR Plugin: (Adobe Acrobat) - C:Program FilesAdobeAcrobat 7.0ReaderBrowsernppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:Program FilesMozilla FirefoxpluginsnpdeployJava1.dll (Sun Microsystems, Inc.)

CHR Plugin: (Microsoft® DRM) - C:Program FilesWindows Media Playernpdrmv2.dll (Microsoft Corporation)

CHR Plugin: (Microsoft® DRM) - C:Program FilesWindows Media Playernpwmsdrm.dll (Microsoft Corporation)

CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:Program FilesWindows Media Playernpdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))

CHR Plugin: (Google Update) - C:Documents and SettingsGMarinovLocal SettingsApplication DataGoogleUpdate1.3.21.111npGoogleUpdate3.dll No File

CHR Plugin: (Windows Presentation Foundation) - C:WINDOWSMicrosoft.NETFrameworkv3.5Windows Presentation FoundationNPWPF.dll (Microsoft Corporation)

CHR Plugin: (Shockwave for Director) - C:WINDOWSsystem32AdobeDirectornp32dsw.dll (Adobe Systems, Inc.)

CHR Extension: (uTorrentBar) - C:Documents and SettingsGMarinovLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionsbejbohlohkkgompgecdcbbglkpjfjgdj [2011-09-21]

CHR HKLM...ChromeExtension: [bejbohlohkkgompgecdcbbglkpjfjgdj] - C:DOCUME~1GMarinovLOCALS~1Tempcrx24.tmp [2011-08-17]

CHR StartMenuInternet: Google Chrome - C:Documents and SettingsGMarinovLocal SettingsApplication DataGoogleChromeApplicationchrome.exe

========================== Services (Whitelisted) =================

R3 BrYNSvc; C:Program FilesBrowny02BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.)

S2 HP LaserJet Service; C:Program FilesHPHPLaserJetServiceHPLaserJetService.exe [136704 2009-06-24] (HP)

S3 IJPLMSVC; C:Program FilesCanonIJPLMIJPLMSVC.EXE [103808 2008-01-22] ()

R2 MBAMScheduler; C:Program FilesMalwarebytes' Anti-Malwarembamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:Program FilesMalwarebytes' Anti-Malwarembamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

==================== Drivers (Whitelisted) ====================

R3 ALCXWDM; C:WINDOWSSystem32driversALCXWDM.SYS [2278784 2004-09-21] (Realtek Semiconductor Corp.)

R3 DM9102; C:WINDOWSSystem32DRIVERSDM9PCI5.SYS [29696 2001-08-17] (CNet Technology, Inc.   )

R3 MBAMProtector; C:WINDOWSsystem32driversmbam.sys [22856 2013-04-04] (Malwarebytes Corporation)

R3 RTL8023; C:WINDOWSSystem32DRIVERSRtlnic51.sys [69504 2003-12-31] (Realtek Semiconductor Corporation )

S3 rtl8139; C:WINDOWSSystem32DRIVERSRTL8139.SYS [20992 2004-08-04] (Realtek Semiconductor Corporation)

U5 AppMgmt; C:WINDOWSsystem32svchost.exe [14336 2008-04-14] (Microsoft Corporation)

U5 ScsiPort; C:WINDOWSsystem32driversscsiport.sys [96384 2008-04-14] (Microsoft Corporation)

U3 TlntSvr;

U1 WS2IFSL;

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-04-01 09:52 - 2014-04-01 09:53 - 00012775 _____ () C:Documents and SettingsGMarinovDesktopFRST.txt

2014-04-01 09:52 - 2014-04-01 09:52 - 00000000 ____D () C:FRST

2014-04-01 09:52 - 2014-04-01 09:37 - 01145856 _____ (Farbar) C:Documents and SettingsGMarinovDesktopFRST.exe

2014-03-20 16:47 - 2014-03-21 16:14 - 00000567 _____ () C:Documents and SettingsGMarinovDesktopShortcut to ABBYY FineReader 11.lnk

==================== One Month Modified Files and Folders =======

2014-04-01 09:53 - 2014-04-01 09:52 - 00012775 _____ () C:Documents and SettingsGMarinovDesktopFRST.txt

2014-04-01 09:52 - 2014-04-01 09:52 - 00000000 ____D () C:FRST

2014-04-01 09:37 - 2014-04-01 09:52 - 01145856 _____ (Farbar) C:Documents and SettingsGMarinovDesktopFRST.exe

2014-04-01 09:30 - 2010-05-18 17:21 - 00000000 ____D () C:Documents and SettingsGMarinovApplication DataSkype

2014-04-01 09:28 - 2013-01-07 14:57 - 00000830 _____ () C:WINDOWSTasksAdobe Flash Player Updater.job

2014-04-01 09:18 - 2011-05-30 15:33 - 00001090 _____ () C:WINDOWSTasksGoogleUpdateTaskUserS-1-5-21-790525478-1757981266-725345543-1004UA.job

2014-04-01 09:13 - 2010-05-15 15:50 - 00508956 _____ () C:WINDOWSsystem32PerfStringBackup.INI

2014-04-01 09:12 - 2010-05-17 09:19 - 00000516 _____ () C:WINDOWSefinl.ini

2014-04-01 09:10 - 2010-05-18 17:27 - 00000000 ____D () C:Documents and SettingsGMarinovApplication DataskypePM

2014-04-01 09:10 - 2010-05-15 13:05 - 01082034 _____ () C:WINDOWSWindowsUpdate.log

2014-04-01 09:09 - 2010-05-15 15:53 - 00000159 _____ () C:WINDOWSwiadebug.log

2014-04-01 09:09 - 2010-05-15 15:53 - 00000052 _____ () C:WINDOWSwiaservc.log

2014-04-01 09:09 - 2010-05-15 13:10 - 00000006 ____H () C:WINDOWSTasksSA.DAT

2014-03-31 18:18 - 2010-05-15 13:11 - 00000178 ___SH () C:Documents and SettingsGMarinovntuser.ini

2014-03-31 18:18 - 2010-05-15 13:10 - 00032482 _____ () C:WINDOWSSchedLgU.Txt

2014-03-31 17:59 - 2004-08-04 15:00 - 00013680 _____ () C:WINDOWSsystem32wpa.dbl

2014-03-31 17:54 - 2010-05-15 15:04 - 00000041 _____ () C:WINDOWScrw.ini

2014-03-31 17:54 - 2004-08-04 15:00 - 00000615 _____ () C:WINDOWSwin.ini

2014-03-31 14:18 - 2011-05-30 15:33 - 00001038 _____ () C:WINDOWSTasksGoogleUpdateTaskUserS-1-5-21-790525478-1757981266-725345543-1004Core.job

2014-03-25 11:01 - 2010-05-17 11:43 - 00003766 ___SH () C:WINDOWSsystem32KGyGaAvL.sys

2014-03-21 16:14 - 2014-03-20 16:47 - 00000567 _____ () C:Documents and SettingsGMarinovDesktopShortcut to ABBYY FineReader 11.lnk

2014-03-20 16:46 - 2010-08-06 10:11 - 00000110 _____ () C:WINDOWSfiery.ini

2014-03-17 10:11 - 2011-05-30 15:34 - 00002341 _____ () C:Documents and SettingsGMarinovDesktopGoogle Chrome.lnk

Some content of TEMP:

====================

C:Documents and SettingsGMarinovLocal Settingstempfirefoxjre_exe.exe

C:Documents and SettingsGMarinovLocal SettingstempFP_PL_PFS_INSTALLER.exe

C:Documents and SettingsGMarinovLocal Settingstemphtmlayout.dll

C:Documents and SettingsGMarinovLocal SettingstempMSETUP4.EXE

C:Documents and SettingsGMarinovLocal Settingstemposrwphul.dll

C:Documents and SettingsGMarinovLocal SettingstempRefresh.exe

C:Documents and SettingsGMarinovLocal SettingstempShockwave_Installer_FF.exe

C:Documents and SettingsGMarinovLocal SettingstempSkypeSetup.exe

C:Documents and SettingsGMarinovLocal Settingstemp_is2D4.exe

==================== Bamital & volsnap Check =================

C:WINDOWSexplorer.exe => MD5 is legit

C:WINDOWSsystem32winlogon.exe => MD5 is legit

C:WINDOWSsystem32svchost.exe => MD5 is legit

C:WINDOWSsystem32services.exe => MD5 is legit

C:WINDOWSsystem32User32.dll => MD5 is legit

C:WINDOWSsystem32userinit.exe => MD5 is legit

C:WINDOWSsystem32rpcss.dll => MD5 is legit

C:WINDOWSsystem32Driversvolsnap.sys => MD5 is legit

==================== End Of Log ============================

 

Tова са логовете от Server компютър

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01

Ran by Server (administrator) on SERVER-GMM on 01-04-2014 09:58:02

Running from C:Documents and SettingsServerDesktop

Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: English(US)

Internet Explorer Version 6

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Intel Corporation) C:WINDOWSsystem32igfxtray.exe

(Intel Corporation) C:WINDOWSsystem32hkcmd.exe

(Intel Corporation) C:WINDOWSsystem32igfxpers.exe

(Microsoft Corporation) C:WINDOWSsystem32wscntfy.exe

(Microsoft Corporation) C:WINDOWSsystem32wuauclt.exe

(Microsoft Corporation) C:WINDOWSsystem32wuauclt.exe

==================== Registry (Whitelisted) ==================

==================== Internet (Whitelisted) ====================

HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page = %SystemRoot%system32blank.htm

HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home

SearchScopes: HKLM - DefaultScope value is missing.

Toolbar: HKCU - &Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:WINDOWSsystem32browseui.dll (Microsoft Corporation)

Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:WINDOWSsystem32SHELL32.dll (Microsoft Corporation)

TcpipParameters: [DhcpNameServer] 192.168.4.1

FireFox:

========

FF ProfilePath: C:Documents and SettingsServerApplication DataMozillaFirefoxProfilesnexmkzps.default

FF Homepage: google.bg

FF SearchPlugin: C:Program Filesmozilla firefoxsearchplugins911bg.xml

FF SearchPlugin: C:Program Filesmozilla firefoxsearchpluginsdiribg.xml

FF SearchPlugin: C:Program Filesmozilla firefoxsearchpluginspe-bg.xml

FF SearchPlugin: C:Program Filesmozilla firefoxsearchpluginsportalbgdict.xml

========================== Services (Whitelisted) =================

==================== Drivers (Whitelisted) ====================

S3 EverestDriver; C:Program FilesLavalysEVEREST Corporate Editionkerneld.wnt [27760 2010-03-31] ()

U5 ScsiPort; C:WINDOWSsystem32driversscsiport.sys [96384 2008-04-14] (Microsoft Corporation)

U1 WS2IFSL;

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-04-01 09:58 - 2014-04-01 09:58 - 00003466 _____ () C:Documents and SettingsServerDesktopFRST.txt

2014-04-01 09:57 - 2014-04-01 09:58 - 00000000 ____D () C:FRST

2014-04-01 09:53 - 2014-04-01 09:37 - 01145856 _____ (Farbar) C:Documents and SettingsServerDesktopFRST.exe

==================== One Month Modified Files and Folders =======

2014-04-01 09:58 - 2014-04-01 09:58 - 00003466 _____ () C:Documents and SettingsServerDesktopFRST.txt

2014-04-01 09:58 - 2014-04-01 09:57 - 00000000 ____D () C:FRST

2014-04-01 09:56 - 2013-01-29 16:25 - 00000006 ____H () C:WINDOWSTasksSA.DAT

2014-04-01 09:56 - 2013-01-29 16:21 - 00323151 _____ () C:WINDOWSWindowsUpdate.log

2014-04-01 09:54 - 2013-01-29 16:26 - 00000178 ___SH () C:Documents and SettingsServerntuser.ini

2014-04-01 09:54 - 2013-01-29 16:25 - 00032592 _____ () C:WINDOWSSchedLgU.Txt

2014-04-01 09:37 - 2014-04-01 09:53 - 01145856 _____ (Farbar) C:Documents and SettingsServerDesktopFRST.exe

2014-04-01 09:13 - 2013-01-29 18:14 - 00356120 _____ () C:WINDOWSsystem32PerfStringBackup.INI

2014-04-01 09:08 - 2006-02-28 15:00 - 00013646 _____ () C:WINDOWSsystem32wpa.dbl

==================== Bamital & volsnap Check =================

C:WINDOWSexplorer.exe => MD5 is legit

C:WINDOWSsystem32winlogon.exe => MD5 is legit

C:WINDOWSsystem32svchost.exe => MD5 is legit

C:WINDOWSsystem32services.exe => MD5 is legit

C:WINDOWSsystem32User32.dll => MD5 is legit

C:WINDOWSsystem32userinit.exe => MD5 is legit

C:WINDOWSsystem32rpcss.dll => MD5 is legit

C:WINDOWSsystem32Driversvolsnap.sys => MD5 is legit

==================== End Of Log ============================

Addition.txt

Addition.txt

Addition.txt

Addition.txt

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Последните два не са засегнати...но все пак на предпоследния можем да изчистим някой боклуци..

 

Това е примерния образец:

 

Изтеглете fixlist.txt и го запазете в папката от която стартирахте FRST.exe.

Стартирайте FRST.exe и натиснете бутона Fix веднъж!

След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - fixlog.txt, който ще се създаде след работата.

 

Важно...сложил съм по една цифра след всеки фикс за да се ориентирате, кой за кой компютър е...но трябва да я махнете преди да натиснете бутона Fix в FRST!

 

Линк към трите фикса => тук. :)

 

 

Поздрави!

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Последните два не са засегнати...но все пак на предпоследния можем да изчистим някой боклуци..

 

Това е примерния образец:

 

 

Важно...сложил съм по една цифра след всеки фикс за да се ориентирате, кой за кой компютър е...но трябва да я махнете преди да натиснете бутона Fix в FRST!

 

Линк към трите фикса => тук. :)

 

 

Поздрави!

Компютър 1

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-03-2014  01

Ran by Janeta Veskova at 2014-04-01 14:03:28 Run:1

Running from C:Documents and SettingsJaneta VeskovaDesktop

Boot Mode: Normal

==============================================

Content of fixlist:

*****************

start

HKLM...Run: [rspwqkvjgw] - wscript.exe //B "C:DOCUME~1JANETA~1LOCALS~1Temprspwqkvjgw.vbs" <===== ATTENTION

HKUS-1-5-21-2025429265-884357618-682003330-1004...Run: [Wxiaiw] - C:Documents and SettingsJaneta VeskovaApplication DataWxiaiw.scr

HKUS-1-5-21-2025429265-884357618-682003330-1004...Run: [rspwqkvjgw] - wscript.exe //B "C:DOCUME~1JANETA~1LOCALS~1Temprspwqkvjgw.vbs" <===== ATTENTION

C:Documents and SettingsJaneta VeskovaApplication DataWxiaiw.scr

C:Documents and SettingsJaneta VeskovaStart MenuProgramsStartuprspwqkvjgw.vbs

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp

end

*****************

HKLMSoftwareMicrosoftWindowsCurrentVersionRunrspwqkvjgw => Value deleted successfully.

HKUS-1-5-21-2025429265-884357618-682003330-1004SoftwareMicrosoftWindowsCurrentVersionRunWxiaiw => Value deleted successfully.

HKUS-1-5-21-2025429265-884357618-682003330-1004SoftwareMicrosoftWindowsCurrentVersionRunrspwqkvjgw => Value deleted successfully.

"C:Documents and SettingsJaneta VeskovaApplication DataWxiaiw.scr" => File/Directory not found.

C:Documents and SettingsJaneta VeskovaStart MenuProgramsStartuprspwqkvjgw.vbs => Moved successfully.

"C:Documents and SettingsJaneta VeskovaLocal SettingsTemp" directory move:

Could not move "C:Documents and SettingsJaneta VeskovaLocal SettingsTempetilqs_aKEXcdYV6cxEu8Y" => Scheduled to move on reboot.

Could not move "C:Documents and SettingsJaneta VeskovaLocal SettingsTempetilqs_O4O9Pcgw0cb6HAS" => Scheduled to move on reboot.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempFinnish.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempFrench.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempgeColladaModelCacheLock => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempgeIconCacheLock => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempGerman.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempGLF151.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempGreek.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempHebrew.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemphtmlayout.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempHungarian.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempIMT5D.xml => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempIMT5E.xml => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempIMT5F.xml => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempINVOICE 94 - HELGA.docx => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempis125.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempis130.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempis47.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempis55.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempisC9.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempisFF.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempItalian.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempJapanese.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempJET43.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempKorean.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemplog3 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempMPC28D.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempMSI45d26.LOG => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempngpEC.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempNorwegian.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempPCULog0.txt => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempPCULog1.txt => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempPCULog2.txt => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempPCULog3.txt => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempPFNFMdJ5.doc.part => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempPicaView.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempPolish.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempPortuguese(Brazil).bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempPortuguese.bin => Moved successfully.

Could not move "C:Documents and SettingsJaneta VeskovaLocal SettingsTemprspwqkvjgw.vbs" => Scheduled to move on reboot.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempRussian.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempSE5JXH_tashkova[1] nikol.pdf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempSE5JXH_vracheva[1].pdf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempSetupExe(201301231122356F8).log => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempSetupExe(201301231122505E0).log => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempSFZalLNi.jpg.part => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempSimChin.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempSpanish.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempSWEDISH.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempThai.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemptmp11.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempTMP4A.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemptmp5.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempTradChin.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempTurkish.bin => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempTWAIN.LOG => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempTwain001.Mtx => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempTwunk001.MTX => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempTwunk002.MTX => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempUcv2x9e9.cdr.part => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempuninstall596828.exe => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempxVp05aXT.txt.part => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF1028.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF159A.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF1943.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF2051.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF2054.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF2687.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF290F.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF29E1.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF38E4.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF3CAF.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF3EF.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF4AF2.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF4F9C.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF5386.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF56AD.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF59E7.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF5BEA.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF5DE7.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF6060.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF68D4.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF6A0E.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF6A1A.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF6A5C.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF7352.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF7622.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF819.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF82B8.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF842C.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF8A2B.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF9385.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF9ACB.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF9B2A.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DF9C15.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFA795.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFAA97.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFAAA4.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFAC8A.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFAF8A.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFAFC0.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFB82F.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFC36A.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFC62D.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFCBD0.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFCEB9.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFD356.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFD504.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFDD27.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFE058.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFE356.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFE77E.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFEC8F.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFFC45.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFFE0A.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFFE9E.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~DFFF31.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp~PST5815.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}ConfigCheck.vbs => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}Crash_dll.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}DMIXSetpCHS.reg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}DMIXSetpCHT.reg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}DMIXSetpDAN.reg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}DMIXSetpDEU.reg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}DMIXSetpENU.reg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}DMIXSetpESN.reg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}DMIXSetpFIN.reg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}DMIXSetpFRA.reg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}DMIXSetpITA.reg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}DMIXSetpJPN.reg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}DMIXSetpKOR.reg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}DMIXSetpNLD.reg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}DMIXSetpNOR.reg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}DMIXSetpPTB.reg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}DMIXSetpSVE.reg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}SavResDX.vbs => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}SavResPROSet.vbs => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}SetLinksecParams.vbs => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}StrProv.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}StrProvR.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}uninstall.reg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp{04DC5093-5E47-42C2-8A39-33371DABA5D4}fpb.tmp => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempmsohtmlclip101clip_colorschememapping.xml => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempmsohtmlclip101clip_themedata.thmx => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempIXP001.TMPcryptsys.exe => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempIXP001.TMPDCom95.exe => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempIXP001.TMPfiller.inf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempIXP001.TMPjava.inf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempIXP001.TMPjavabase.cab => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempIXP000.TMPcryptsys.exe => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempIXP000.TMPDCom95.exe => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempIXP000.TMPfiller.inf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempIXP000.TMPjava.inf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempIXP000.TMPjavabase.cab => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempisp10.tmp_Setup.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempCRX_75DAF8CB7768crl-set => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempCRX_75DAF8CB7768manifest.json => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp3936_16834crl-set => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp3936_16834manifest.fingerprint => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp3936_16834manifest.json => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp3604_15701crl-set => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp3604_15701manifest.fingerprint => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp3604_15701manifest.json => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp3584_20075crl-set => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp3584_20075manifest.fingerprint => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp3584_20075manifest.json => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp3584_14454crl-set => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp3584_14454manifest.fingerprint => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp3584_14454manifest.json => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp3132_5070crl-set => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp3132_5070manifest.fingerprint => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp3132_5070manifest.json => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp2752_377crl-set => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp2752_377manifest.fingerprint => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp2752_377manifest.json => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp2576_14380crl-set => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp2576_14380manifest.fingerprint => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp2576_14380manifest.json => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp2320_28548crl-set => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp2320_28548manifest.fingerprint => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp2320_28548manifest.json => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp160_22739crl-set => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp160_22739manifest.fingerprint => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp160_22739manifest.json => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp1224_15684crl-set => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp1224_15684manifest.fingerprint => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp1224_15684manifest.json => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0402.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0403.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0404.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0405.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0406.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0407.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0408.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0409.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x040a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x040b.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x040c.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x040d.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x040e.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0410.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0411.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0412.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0413.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0414.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0415.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0416.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0418.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0419.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x041a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x041b.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x041d.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x041e.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x041f.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0421.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0422.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0424.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0426.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0427.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x042a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0804.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0809.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x080a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0816.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0c01.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0c0a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x0c1a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x100a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x140a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x180a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x1c0a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x200a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x240a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x280a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x2c0a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x300a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x340a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x380a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige610x3c0a.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige6110250.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611026.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611027.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611028.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611029.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611030.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611031.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611032.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611033.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611034.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611035.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611036.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611037.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611038.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611040.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611041.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611042.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611043.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611044.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611045.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611046.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611048.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611049.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611050.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611051.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611053.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611054.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611055.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611057.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611058.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611060.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611062.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611063.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige611066.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige6111274.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige6112298.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige6113322.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige6114346.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige6115370.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige612052.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige612057.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige612058.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige612070.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige613073.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige613082.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige613098.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige614106.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige615130.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige616154.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige617178.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige618202.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige619226.mst => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61Google Earth.msi => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61GoogleEarth.exe => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61Setup.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginalchemyext.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthplugindrivers.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginearthps.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthplugingeplugin.exe => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginge_expat.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthplugingoogleearth.exe.local => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthplugingoogleearth_free.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthplugingoogle_earth.ico => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthplugingpl.txt => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginicudt.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginIGAttrs.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginIGCore.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginIGExportCommon.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginIGGfx.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginIGMath.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginIGOpt.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginIGSg.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginIGUtils.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginImporterGlobalSettings.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginImporterUISettings.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginkh20 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginLeap.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginmsvcp100.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginmsvcr100.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginnpgeplugin.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginPCOptimizations.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginplugin_ax.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginQtCore4.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginQtGui4.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginQtNetwork4.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginQtWebKit4.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginuninstall.ico => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersatmosphere.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersatmosphere.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersatmosphere.glsllib => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshaderscolor.h => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersglsles.h => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadershammer_aitoff.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadershammer_aitoff.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshaderslighting.h => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersprecipitation_double_cone.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersprecipitation_double_cone.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersspeedtree_configuration_glsles.h => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersspeedtree_utils_glsles.h => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstars.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstars.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstbillboard.arbfp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstbillboard.arbvp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstbillboard.asd => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstbillboard.cfg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstbillboard.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstbillboard.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstbillboard.ps_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstbillboard.vs_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstbranch.arbfp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstbranch.arbvp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstbranch.asd => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstbranch.cfg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstbranch.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstbranch.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstbranch.ps_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstbranch.vs_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstcommonobjects.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstfrond.arbfp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstfrond.arbvp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstfrond.asd => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstfrond.cfg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstfrond.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstfrond.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstfrond.ps_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstfrond.vs_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstleafcard.arbfp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstleafcard.arbvp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstleafcard.asd => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstleafcard.cfg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstleafcard.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstleafcard.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstleafcard.ps_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstleafcard.vs_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstleafmesh.arbfp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstleafmesh.arbvp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstleafmesh.asd => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstleafmesh.cfg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstleafmesh.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstleafmesh.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstleafmesh.ps_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersstleafmesh.vs_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshadersviewshed.h => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshaderswater.glsllib => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshaderswatersurface.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginshaderswatersurface.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresapplication.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresballoons.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresbuiltin_webdata.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginrescursor_crosshair_inverse.png => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginrescursor_crosshair_thick.png => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresdoppler.txt => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginreseffects.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresfilmstrip.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresleftpanel-common.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresleftpanel-layer.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginreslocalshapes.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresmouse3dgui.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresnavcontrols.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresnotifications.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresprint.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresprogress.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresrenderui.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginressearch.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresspin_icon.png => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresstatusbar.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresterrainmgr.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginrestmcontrols.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginrestoolbar.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginrestourcontrols.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresunknown_plugin.png => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresuserpalette.kml => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginreswebbrowser.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimflightsim.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimplanetearth.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimkeyboardgeneric.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimkeyboardsr22.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimhudgeneric.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimhudsr22.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimcontrollergeneric.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimcontrollergenius_maxfighter_f16u.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimcontrollerlogitech_attack3.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimcontrollerlogitech_extreme_3d.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimcontrollerlogitech_force_3d.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimcontrollerlogitech_freedom.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimcontrollersaitek_cyborg_evo.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimcontrollersaitek_x52.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimcontrollerspeed_link_black_hawk.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimcontrollerspeed_link_black_widow.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimcontrollerspeed_link_cougar_flightstick.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimcontrollerspeed_link_dark_tornado.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimcontrollerxbox_360.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimaircraftf16.acf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginresflightsimaircraftsr22.acf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangar.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangbg.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangca.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangcs.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangda.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangde.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangel.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangen.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlanges-419.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlanges.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangfa.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangfi.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangfil.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangfr.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlanghe.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlanghi.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlanghr.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlanghu.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangid.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangit.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangja.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangko.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlanglt.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlanglv.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangnl.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangno.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangpl.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangpt-PT.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangpt.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangro.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangru.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangsk.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangsl.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangsr.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangsv.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangth.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangtr.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlanguk.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangvi.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangzh-Hans.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangzh-Hant-HK.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginlangzh-Hant.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginimageformatsqgif4.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginimageformatsqjpeg4.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginalchemyoptimizationsIGOptExtension.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginalchemyogles20D3DCompiler_43.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginalchemyogles20d3dx9_43.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginalchemyogles20IGAttrs.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginalchemyogles20IGGfx.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginalchemyogles20IGSg.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginalchemyogles20libEGL.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthpluginalchemyogles20libGLESv2.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginalchemyoglIGAttrs.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginalchemyoglIGGfx.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthpluginalchemyoglIGSg.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientalchemyext.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientdrivers.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientearthflashsol.exe => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientearthps.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientge_expat.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientgoogleearth.exe => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientgoogleearth.exe.local => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientgoogleearth_free.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientgoogle_earth.ico => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientgpl.txt => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientgpsbabel.exe => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclienticudt.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientIGAttrs.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientIGCore.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientIGExportCommon.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientIGGfx.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientIGMath.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientIGOpt.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientIGSg.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientIGUtils.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientImporterGlobalSettings.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientImporterUISettings.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientkh20 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientkml_file.ico => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientkmz_file.ico => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientLeap.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientmsvcp100.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientmsvcr100.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientPCOptimizations.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientQtCore4.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientQtGui4.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientQtNetwork4.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientQtWebKit4.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientuninstall.ico => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientwavdest.ax => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersatmosphere.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersatmosphere.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersatmosphere.glsllib => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshaderscolor.h => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersglsles.h => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadershammer_aitoff.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadershammer_aitoff.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshaderslighting.h => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersprecipitation_double_cone.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersprecipitation_double_cone.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersspeedtree_configuration_glsles.h => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersspeedtree_utils_glsles.h => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstars.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstars.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstbillboard.arbfp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstbillboard.arbvp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstbillboard.asd => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstbillboard.cfg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstbillboard.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstbillboard.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstbillboard.ps_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstbillboard.vs_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstbranch.arbfp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstbranch.arbvp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstbranch.asd => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstbranch.cfg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstbranch.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstbranch.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstbranch.ps_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstbranch.vs_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstcommonobjects.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstfrond.arbfp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstfrond.arbvp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstfrond.asd => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstfrond.cfg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstfrond.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstfrond.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstfrond.ps_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstfrond.vs_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstleafcard.arbfp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstleafcard.arbvp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstleafcard.asd => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstleafcard.cfg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstleafcard.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstleafcard.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstleafcard.ps_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstleafcard.vs_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstleafmesh.arbfp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstleafmesh.arbvp1 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstleafmesh.asd => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstleafmesh.cfg => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstleafmesh.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstleafmesh.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstleafmesh.ps_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersstleafmesh.vs_2_0 => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshadersviewshed.h => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshaderswater.glsllib => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshaderswatersurface.glslesf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientshaderswatersurface.glslesv => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresapplication.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresballoons.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresbuiltin_webdata.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientrescursor_crosshair_inverse.png => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientrescursor_crosshair_thick.png => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresdefault_myplaces.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresdoppler.txt => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientreseffects.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresfilmstrip.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresleftpanel-common.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresleftpanel-layer.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientreslocalshapes.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresmouse3dgui.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresnavcontrols.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresnotifications.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresprint.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresprogress.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresrenderui.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientressearch.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresspin_icon.png => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresstartinglocations-nonmac.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresstartinglocations.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresstatusbar.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresterrainmgr.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientrestmcontrols.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientrestoolbar.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientrestourcontrols.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresunknown_plugin.png => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresuserpalette.kml => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientreswebbrowser.rcc => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimflightsim.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimplanetearth.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimkeyboardgeneric.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimkeyboardsr22.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimhudgeneric.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimhudsr22.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimcontrollergeneric.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimcontrollergenius_maxfighter_f16u.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimcontrollerlogitech_attack3.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimcontrollerlogitech_extreme_3d.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimcontrollerlogitech_force_3d.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimcontrollerlogitech_freedom.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimcontrollersaitek_cyborg_evo.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimcontrollersaitek_x52.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimcontrollerspeed_link_black_hawk.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimcontrollerspeed_link_black_widow.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimcontrollerspeed_link_cougar_flightstick.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimcontrollerspeed_link_dark_tornado.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimcontrollerxbox_360.ini => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimaircraftf16.acf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientresflightsimaircraftsr22.acf => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientPluginsnpgeinprocessplugin.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangar.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangbg.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangca.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangcs.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangda.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangde.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangel.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangen.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlanges-419.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlanges.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangfa.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangfi.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangfil.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangfr.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlanghe.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlanghi.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlanghr.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlanghu.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangid.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangit.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangja.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangko.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlanglt.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlanglv.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangnl.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangno.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangpl.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangpt-PT.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangpt.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangro.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangru.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangsk.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangsl.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangsr.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangsv.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangth.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangtr.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlanguk.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangvi.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangzh-Hans.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangzh-Hant-HK.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientlangzh-Hant.qm => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientimageformatsqgif4.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientimageformatsqjpeg4.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientalchemyoptimizationsIGOptExtension.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientalchemyogles20D3DCompiler_43.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientalchemyogles20d3dx9_43.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientalchemyogles20IGAttrs.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientalchemyogles20IGGfx.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientalchemyogles20IGSg.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientalchemyogles20libEGL.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle Earthclientalchemyogles20libGLESv2.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientalchemyoglIGAttrs.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientalchemyoglIGGfx.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61program filesGoogleGoogle EarthclientalchemyoglIGSg.dll => Moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp._msige61LocalAppDataGoogleCustom Buttonstoolbar.google.com_MXE8GT6B9RBHXCGLZ06L.xml => Moved successfully.

Could not move "C:Documents and SettingsJaneta VeskovaLocal SettingsTemp" directory. => Scheduled to move on reboot.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-04-01 14:05:15)<=

C:Documents and SettingsJaneta VeskovaLocal SettingsTempetilqs_aKEXcdYV6cxEu8Y => Is moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTempetilqs_O4O9Pcgw0cb6HAS => Is moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemprspwqkvjgw.vbs => Is moved successfully.

C:Documents and SettingsJaneta VeskovaLocal SettingsTemp => Moved successfully.

==== End of Fixlog ====

Компютър 2

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-03-2014  01

Ran by Galin Marinov at 2014-04-01 14:11:10 Run:1

Running from C:Documents and SettingsGalin MarinovDesktop

Boot Mode: Normal

==============================================

Content of fixlist:

*****************

start

HKLM...Run: [rspwqkvjgw] - wscript.exe //B "C:DOCUME~1GALINM~1LOCALS~1Temprspwqkvjgw.vbs" <===== ATTENTION

HKUS-1-5-21-117609710-602609370-682003330-1004...Run: [rspwqkvjgw] - wscript.exe //B "C:DOCUME~1GALINM~1LOCALS~1Temprspwqkvjgw.vbs" <===== ATTENTION

C:Documents and SettingsGalin MarinovStart MenuProgramsStartuprspwqkvjgw.vbs

URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.

FF NewTab: user_pref("browser.newtab.url", "");

FF DefaultSearchEngine: user_pref("browser.search.defaultenginename", "");

FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");

C:DOCUME~1GALINM~1LOCALS~1Temp

end

*****************

HKLMSoftwareMicrosoftWindowsCurrentVersionRunrspwqkvjgw => Value deleted successfully.

HKUS-1-5-21-117609710-602609370-682003330-1004SoftwareMicrosoftWindowsCurrentVersionRunrspwqkvjgw => Value deleted successfully.

C:Documents and SettingsGalin MarinovStart MenuProgramsStartuprspwqkvjgw.vbs => Moved successfully.

Default URLSearchHook was restored successfully .

Firefox newtab deleted successfully.

Firefox DefaultSearchEngine deleted successfully.

Firefox SelectedSearchEngine deleted successfully.

"C:Documents and SettingsGalin MarinovLocal Settingstemp" directory move:

Could not move "C:Documents and SettingsGalin MarinovLocal SettingstempJET7F.tmp" => Scheduled to move on reboot.

C:Documents and SettingsGalin MarinovLocal SettingstempJETD4.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempKorean.bin => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemplog3 => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempNorwegian.bin => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempnsp235.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempnsv236.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempPCULog0.txt => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempPCULog1.txt => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempPCULog3.txt => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempplakati_i_listovki_4_4_RA.pdf => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempplatejni.pdf111111gam_7_ДОД.pdf => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempplatejni.pdf5511111gam_7_самоос.pdf => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempplatejni.pdf551111gam_7_DOO.pdf => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempplatejni.pdf5611111gam_7_самоос.pdf => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempplatejni.pdf561111gam_7zo.pdf => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempplatejni.pdf5811111gam_7_самоос.pdf => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempplatejni.pdf5811111gam_7_труд.pdf => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempPolish.bin => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempPortuguese(Brazil).bin => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempPortuguese.bin => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempPPGB8.tmp => Moved successfully.

Could not move "C:Documents and SettingsGalin MarinovLocal Settingstemprspwqkvjgw.vbs" => Scheduled to move on reboot.

C:Documents and SettingsGalin MarinovLocal SettingstempRussian.bin => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempSimChin.bin => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempSpanish.bin => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempSWEDISH.bin => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempThai.bin => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempTMP128.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempTMP85.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempTradChin.bin => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempTurkish.bin => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempTWAIN.LOG => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempTwain001.Mtx => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempTwunk001.MTX => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempTwunk002.MTX => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemputt11A.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemputt11B.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemputt11C.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemputt11D.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemputt11E.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemputt11F.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemputt120.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemputt121.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemputt122.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemputt123.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF1B46.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF1B52.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF2288.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF29BB.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF2BB4.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF419D.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF47F1.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF51AC.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF52C6.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF5719.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF615E.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF6684.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF67DB.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF68DF.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF6A9B.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF710D.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF73EF.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF75B9.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF83A7.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF88D3.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF8C7.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF9D43.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DF9E84.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DFA2E9.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DFA5B9.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DFAD85.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DFAFC1.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DFB042.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DFC58A.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DFC7DE.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DFCBB2.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DFE1EE.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DFE256.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DFE830.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~DFFE6.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp~PST1244.tmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempЦени_Рекламни_агенции_2014.pdf => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempWERa0a6.dir00Photoshop.exe.mdmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempTemporary Internet FilesContent.IE5desktop.ini => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempTemporary Internet FilesContent.IE5index.dat => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempTemporary Internet FilesContent.IE5MPYHD7P8desktop.ini => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempTemporary Internet FilesContent.IE5BGSQWA9Fdesktop.ini => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempTemporary Internet FilesContent.IE57LRLJAYOdesktop.ini => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempTemporary Internet FilesContent.IE51K08E21Ddesktop.ini => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempnsz234config.xml => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempmsohtmlclip101clip_colorschememapping.xml => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempmsohtmlclip101clip_themedata.thmx => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempis-2BUOL.tmppcbackup.bmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempis-2BUOL.tmpsetup_en.bmp => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempis-2BUOL.tmp_isetup_iscrypt.dll => Moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstempis-2BUOL.tmp_isetup_shfoldr.dll => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempHistoryHistory.IE5desktop.ini => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempHistoryHistory.IE5index.dat => Moved successfully.

C:Documents and SettingsGalin MarinovLocal SettingstempCookiesindex.dat => Moved successfully.

Could not move "C:Documents and SettingsGalin MarinovLocal Settingstemp" directory. => Scheduled to move on reboot.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-04-01 14:13:13)<=

C:Documents and SettingsGalin MarinovLocal SettingstempJET7F.tmp => Is moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemprspwqkvjgw.vbs => Is moved successfully.

C:Documents and SettingsGalin MarinovLocal Settingstemp => Moved successfully.

==== End of Fixlog ====

Компютър 3, единствено той не се рестартира 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-03-2014  01

Ran by GMarinov at 2014-04-01 14:11:12 Run:1

Running from C:Documents and SettingsGMarinovDesktop

Boot Mode: Normal

==============================================

Content of fixlist:

*****************

start

HKLM...Run: [] - [X]

SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.condui...&ctid=CT2786678

BHO: No Name - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -  No File

BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre6binjp2ssv.dll No File

Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:Program FilesAVGAVG10ToolbarIEToolbar.dll No File

FF DefaultSearchEngine: AVG Secure Search

FF Keyword.URL: hxxp://search.avg.com/route/?d=4d41761d&v=6.011.025.001&i=26&tp=ab&iy=&ychte=us&lng=bg&q=

FF HKLM...FirefoxExtensions: [[email protected]] - C:Program [email protected]

CHR Extension: (uTorrentBar) - C:Documents and SettingsGMarinovLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionsbejbohlohkkgompgecdcbbglkpjfjgdj [2011-09-21]

CHR HKLM...ChromeExtension: [bejbohlohkkgompgecdcbbglkpjfjgdj] - C:DOCUME~1GMarinovLOCALS~1Tempcrx24.tmp [2011-08-17]

C:Documents and SettingsGMarinovLocal Settingstemp

end

*****************

HKLMSoftwareMicrosoftWindowsCurrentVersionRun => Value deleted successfully.

HKCUSOFTWAREMicrosoftInternet ExplorerSearchScopes{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key deleted successfully.

HKCRWow6432NodeCLSID{afdbddaa-5d3f-42ee-b79c-185a7020515b} => Key not found.

HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} => Key deleted successfully.

HKCRCLSID{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} => Key not found.

HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9} => Key deleted successfully.

HKCRCLSID{DBC80044-A445-435b-BC74-9C25C1C588A9} => Key deleted successfully.

HKCRPROTOCOLSHandleravgsecuritytoolbar => Key deleted successfully.

HKCRCLSID{F2DDE6B2-9684-4A55-86D4-E255E237B77C} => Key deleted successfully.

Firefox DefaultSearchEngine deleted successfully.

Firefox Keyword.URL deleted successfully.

[email protected] => Value deleted successfully.

C:Documents and SettingsGMarinovLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionsbejbohlohkkgompgecdcbbglkpjfjgdj => Moved successfully.

HKLMSOFTWAREGoogleChromeExtensionsbejbohlohkkgompgecdcbbglkpjfjgdj => Key deleted successfully.

C:DOCUME~1GMarinovLOCALS~1Tempcrx24.tmp => Moved successfully.

C:Documents and SettingsGMarinovLocal Settingstemp => Moved successfully.

==== End of Fixlog ====


Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Здравейте,

Спрете Autorun функцията на всички системи:

 

 

 Как точно се спира Autorun функцията ?

 

 

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Ми с инструмента в първа стъпка...

При стъпка 2, след като сложим флашката не се появява лог файл.

Да преминем ли към стъпка 3?

 

Това сме го копирали от програмата не е излязал в отделен прозорец.MCShield ::Anti-Malware Tool:: http://www.mcshield.net/>>> v 3.0.4.27 / DB: 2014.3.30.1 / Windows XP <<<02.4.2014 г. 11:04:38 > Drive F: - scan started (CORSAIR ~966 MB, FAT32 flash drive )...=> The drive is clean. 

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Е те това е лог файла от стъпка 2...вие сте го публикували вече. :)

Мда...иначе можете да изпълните всички неща и да споделите за проблеми....машините са изчистени, както и начините за проникване на червея са затворени...остава ако има нещо по-флашките да се почистят с програмите (по-горе) и би трябвало да няма повече проблеми...

 

Ама вие ще кажете. ;)

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Изпълнихме и стъпка 3, мисля че всичко е нормално.

Работим в офис и ни се налага често да отваряме флашки,

можеш ли да ни препоръчаш каква антивирусна  програма да си закупим легална за 3 PC.

Спрели сме се на КAV2014, какво ще кажеш.

 

 

 

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Платени:

Касперски Антивирус: https://www.lekarstvo.com/kaspersky_in_bg_ceni.html 3 лиценза за 1 година = 60лв

Др.Веб : http://www.technomarket.bg/products/09069275/dr-web-security-space 1 лиценз за една година/с доставка/=13лв

??? F-Secure internet cecuriti 200 :http://www.technomarket.bg/products/09025645/antivirus-f-secure-internet-security-200  1лиценз за 1 година/с доставка/=4.01лв

А също има и специален разделhttp://www.kaldata.com/forums/forum/265-%D0%BF%D1%80%D0%BE%D0%BC%D0%BE%D1%86%D0%B8%D0%B8-%D0%BD%D0%B0-%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%B8-%D0%B7%D0%B0-%D1%81%D0%B8%D0%B3%D1%83%D1%80%D0%BD%D0%BE%D1%81%D1%82/

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Е те това е лог файла от стъпка 2...вие сте го публикували вече. :)

Мда...иначе можете да изпълните всички неща и да споделите за проблеми....машините са изчистени, както и начините за проникване на червея са затворени...остава ако има нещо по-флашките да се почистят с програмите (по-горе) и би трябвало да няма повече проблеми...

 

Ама вие ще кажете. ;)

:Може ли да те питам как прониква червея и как затворихте пътя за проникване? В смисъл може ли да се направи нещо превантивно на компютъра да се спре такъв червей? Скоро и аз имах такъв на флашката Касперски 2014 не го откри , ESS 7 го изтри от флашката но на компютъра не намери нищо.

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

:Може ли да те питам как прониква червея и как затворихте пътя за проникване? В смисъл може ли да се направи нещо превантивно на компютъра да се спре такъв червей? Скоро и аз имах такъв на флашката Касперски 2014 не го откри , ESS 7 го изтри от флашката но на компютъра не намери нищо.

Тук :http://www.kaldata.com/forums/topic/225458-вирус-от-usb-флашка-създава-shortcut/?p=2820955

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Да прочетох , но не разбрах - само Autorun ли е достатъчно да се спре с Fix It или после и с MCShield 3 трябва да се изпълни стъпката.

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

Зависи от червея. Конкретно за този и за повечето USB бацили основните практики са:

 

1. Да се почисти вече заразения компютър (за да се спре цикъла на разпространение) без да се поставя флашка в него.

2.Да се спре Autorun-a (специално за този е добре да се спре поддръжката на Windows Scripting Host - vbs форматите с инструмента на Symantec - NoScript - Disable), за други може да се наложат допълнителни рестрикции (спиране на услуги като Server отговаряща за споделените файлове и папки, ограничаване на TCP мрежовия лимит - TCP half-open connections, анонимния достъп, услуги като Scheduled Tasks - планировчика, празни сесии, Remote Assistance коненции - в случай, че няма стена, която да спира изходящите заявки, защото много червеи изпращат такива и чакат команди от хакера по отдалечен достъп) и т.н.

3.Да се почисти вече флашката (дали ще е с десен бутон от контекстното меню и сканиране с обновена антивирусна програма, дали ще е с инструменти от сорта на MCShield 3 и USBFix, дали ще е ръчна проверка на скритите файлове и папки - особено на папките $RECYCLE.BIN или Recycler или пълен формат на флашката) няма значение.

4.Ваксиниране на флашките (могат го и USBFix, Panda USB Vaccine, Bitdefender USB Immunizer, Flash_Desinfector - само за XP) и т.н.

 

Общо взето това са стъпките...досадни ама няма начин... ;)

 

Бтв: Ще маркирам темата като решена тогава.  Можете да изтриете използваните от нас неща - ако антивирусната има опция за проверяване на removable media, то включете я...ако не може, тогава си оставете MCShield 3 да пази в реално време редом до антивирусната...няма да има конфликти по-между им и не заема много системни ресурси. :)

 

Поздрави!

Сподели този отговор


Линк към този отговор
Сподели в други сайтове

×
×
  • Добави ново...