Problem sa odredjenim sajtovima!

Imam bezicni net, jedno vreme mi se nakon svakih 5-10 minuta diskontektovao sam od sebe. Googlovao sam malo i nasao resenje da pogasim
neke portove i da se to nece desavati sto je i uspelo. Medjutim naisao sam na drugi problem. Od kad sam to uradio( Nemam pojma kako je tekla cela procedura) sada nemogu da pristupim nekolicini sajtova kao sto su Facebook, Yahoo,... i to ni sa jednim browserom, trazio sam resenje po netu ali ga nisam nasao kako to da ispravim. Naime Firefox mi posle par sekundi samo ispise Network Timeout. Postoji li neko drugo resenje ovog problema osim reinstalacije OS???? Tnx unapred........

Koji su to "neki portovi" koje si pogasio? Na cemu si "gasio portove" - na firewallu ili na wireless ruteru ili gde? Cemu tacno ne mozes da pristupis na Facebooku, Yahoo-u i "nekolicini sajtova"? Da li ti uopste ne prikaze nista kad pokusas da pristupis bilo kojoj stranici na facebook ili yahoo domenu ili samo kad ides na tacno odredjene stranice? Koje verzije browsera koristis i imas li neke dodatke instalirane u njima? Koji operativni sistem koristis? Preko cega se kacis na "bezicni net" (koji uredjaj - proizvodjac i model)?

Gasio sam neke portove valjda u registriju, zapravo ja mislim da sam ih zaustavljao. Za sad znam da facebook i yahoo nemogu da posecujem.
Znaci kad probam da odem na jednu od te dve adrese bukvalno nista mi ne pokaze, samo posle par sekundi izbaci network timeout. Ostale stranice rade ok. OS mi je win xp sp3, browser firefox 3.0.13. Probao sam i preko chrome-a i preko IE itd. Stvarno se ne secam koji su portovi bili u pitanju. Koristim bezicni net, nemam AP niti Rruter. Imam wirless karticu "D-Link AirPlus G DWL-G510 Wirless PCI adapter". Ni kad probam da pingujem facebook u cmd-u on mi izbacuje server timeout. Zapravo zaboravio sam da pomenem da na Yahoo mogu da odem ali Yahoo mail mi ne radi. To zaustavljanje portova sam radio pre 8 meseci i ubrzo nakon toga nisam bio u zemlji narednih 6, tek kad sam se vratio sam s-kontao da ne radi facebook i yahoo mail. Nemojte mi zameriti ali sam skroz zaboravio koju proceduru sam ja izvodio sa tim portovima, pokusacu da se setim i postujem sta sam tacno uradio..... tnx

Upravo sam se setio koji sam problem imao tad kad sam petljao oko tih portova, naime posle nekoliko minuta provedenih na netu veza mi je pucala. Jednostavno se dikonektuje a windows nije pronalazio niti jednu wirless stanicu. Restart kompa mi je pomagao ali se to "PUCANJE" desavalo u proseku svakih 7-10 min tako da sam poludeo resetovajuci komp.......

Prema tvom opisu problema sa pingom do Facebooka, zvuci kao da imas problema sa DNS-om. Da li "ping 69.63.186.30" prolazi kod tebe? (69.63.186.30 je IP adresa za www.facebook.com). Mozes isto i da probas sa 69.147.112.160 (IP za mail.yahoo.com). Problem sa Yahoo mailom moze biti i zbog blokiranog porta 443 (za https) saobracaj - ako bi se setio otprilike sta si i gde gasio, to bi mnogo pomoglo da lakse pronadjemo gde je problem.

Generic Host For Win32 Error- ovo je bio problem a ja sam uradio sledece:
\

Hop to 'Run' and open 'Regedit'
Navigate to:
HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Services > Browser > Parameters
Find the Key
Name: IsDomainMaster
and set
Data: False
Restart Your PC
---------------------------------------
http://www.sizlopedia.com/2007...-host-for-win32-process-error/

ovde sam nasao resenje za taj problem......

mislim da je to bilo u pitanju.....

Close Port 445:

1. Start Registry Editor (Regedit.exe) by clicking Start menu, and then click the Run icon.
2. In the small box that Opens, type: regedit then click the OK button. The Registry Editor will now have opened.
3. Locate the following key in the registry:
HKEY_LOCAL_MACHINESystemCurrentControlSetServicesNetBTParameters
In the right-hand side of the window find an option called TransportBindName.
Double click that value, and then delete the default value, thus giving it a blank value.

Close Port 135:

1. Then you must now navigate to the following registry key:
HKEY_LOCAL_MACHINESoftwareMicrosoftOLE
2. You will see there is a String Value called: EnableDCOM
Set the value to: N (it should currently be Y)
3. Close the Registry Editor. Shutdown and Restart your computer.


Verovatno sam i ovo radio........

JBT, trazim vec x dana resenje da sredim ovo i ne polazi mi za rukom. Ako neko ima resenje a da to nije reinstalacija sistema bio bi mu veoma zahvalan kad bi podelio to sa ostalih 5000000 ljudi koji imaju isti problem..................

Jesi li gledao da nisu ubaceni u hosts file?

Moraces malo da mi pojasnis....... kako mislis da li su ubaceni u host files?

Evo, baš je bilo pitanje pre neki dan http://www.elitesecurity.org/p2406318

Ti naravno brišeš a ne dodaješ.

---

Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost
**************************************************************
To je to sto sam nasao u tom fajlu "host"
Tako da otprilike nije blokiran niti jedan od tih sajtova...... znaci samo example-ovi.......

Pazi, znaci nema sta nisam probao..... cak sam i probao da vratim sve na staro pre nego sto sam zatvorio port 445, medjutim nisam skontao default falue tog fajla..... posto da bi resio problem sa generic..... win32..... bla bla..... morao sam da tu vrednos ostavim praznu..... e sad.... zanima me da kad bi hteo da vratim default value tog porta, da li je ona razlicita na svakom kompu, jer ne razumem najbolje na kom principu taj protokol funkcionise...., koliko sam uspeo da skontam da je on podlozan nekim virusima (korgo) ili tako nesto, kontao sam jer sam u svakom smislu ocistio komp uz pomoc x programa od svih mogucih sranja, da kad bih vratio na staro ne bih imao taj g.h. for win32 service problem...... da li bi mozda mogao da mi ti ako je taj default value tog 445 protokola isto da mi posaljes pa da probam da vratim sve na staro. Da vidim da li ce se taj problem ponovo pojavljivati. TNX................

ajd cisto nesto da proverim...

Skini ovaj File na Desktop,pokreni ga dvoklikom,i na Desktopu ce se pojaviti showreg.txt.
kopiraj mi sadrzaj tog txt

---

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer]
@=""
"Download Directory"="D:\\Documents and Settings\\skeva\\Desktop"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation]
"TLDUpdates"=dword:00000000
"UnattendLoaded"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,e6,00,00,00,00,00,00,00,9a,03,00,00,44,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\
00,00,01,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\General]
"BackupWallpaper"=""
"WallpaperFileTime"=hex:00,00,00,00,00,00,00,00
"WallpaperLocalFileTime"=hex:00,d0,88,c3,10,00,00,00
"TileWallpaper"="0"
"WallpaperStyle"="2"
"Wallpaper"=""
"ComponentsPositioned"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Old WorkAreas]
"NoOfOldWorkAreas"=dword:00000001
"OldWorkAreaRects"=hex:00,00,00,00,00,00,00,00,80,04,00,00,44,03,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\SafeMode]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\SafeMode\General]
"Wallpaper"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
74,00,25,00,5c,00,57,00,65,00,62,00,5c,00,53,00,61,00,66,00,65,00,4d,00,6f,\
00,64,00,65,00,2e,00,68,00,74,00,74,00,00,00
"VisitGallery"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Scheme]
"Edit"=""
"Display"=""

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Document Windows]
"Maximized"="no"
"height"=hex:00,00,00,00
"width"=hex:00,00,00,80
"x"=hex:00,00,00,80
"y"=hex:00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download]
"CheckExeSignatures"="yes"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\CmdMapping]
"{FB5F1910-F110-11d2-BB9E-00C04F795683}"=dword:00002000
"NextId"=dword:00002001

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Help_Menu_URLs]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld]
"IETldDllVersionHigh"=dword:00080000
"IETldDllVersionLow"=dword:1771490e
"IETldVersionHigh"=dword:00000001
"IETldVersionLow"=dword:00000001
"StaleIETldCache"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\LowMic]
"IETldDllVersionHigh"=dword:00080000
"IETldDllVersionLow"=dword:1771490e
"IETldVersionHigh"=dword:00000001
"IETldVersionLow"=dword:00000001
"StaleIETldCache"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms]
"AskUser"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International]
@=""
"CodePointToFontMap"=hex:22,00,00,00,54,00,69,00,6d,00,65,00,73,00,20,00,4e,00,\
65,00,77,00,20,00,52,00,6f,00,6d,00,61,00,6e,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,53,00,61,00,6e,\
00,73,00,20,00,53,00,65,00,72,00,69,00,66,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,4c,00,75,00,63,00,69,00,64,00,61,\
00,20,00,53,00,61,00,6e,00,73,00,20,00,55,00,6e,00,69,00,63,00,6f,00,64,00,\
65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,53,00,79,00,6c,00,66,00,61,00,65,00,6e,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,45,00,73,00,74,00,72,00,\
61,00,6e,00,67,00,65,00,6c,00,6f,00,20,00,45,00,64,00,65,00,73,00,73,00,61,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,4d,00,56,00,20,00,42,00,6f,00,6c,00,69,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4d,00,61,00,6e,\
00,67,00,61,00,6c,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,56,00,72,00,69,00,6e,00,64,00,61,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,52,00,\
61,00,61,00,76,00,69,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,53,00,68,00,72,00,75,00,74,00,69,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,4b,00,61,00,6c,00,69,00,6e,00,67,00,61,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4c,00,61,00,74,00,68,00,61,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,47,00,61,00,75,00,74,00,61,00,6d,00,69,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,54,00,75,00,6e,00,67,\
00,61,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,4b,00,61,00,72,00,74,00,69,00,6b,00,61,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,49,00,73,00,\
6b,00,6f,00,6f,00,6c,00,61,00,20,00,50,00,6f,00,74,00,61,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,44,\
00,6f,00,6b,00,43,00,68,00,61,00,6d,00,70,00,61,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,53,00,69,00,6d,00,53,00,75,00,6e,00,\
2d,00,31,00,38,00,30,00,33,00,30,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,42,00,61,00,74,00,61,00,6e,00,67,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4e,00,79,00,61,00,6c,00,61,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,50,00,6c,00,61,00,6e,00,74,00,61,00,67,00,65,00,6e,00,65,00,\
74,00,20,00,43,00,68,00,65,00,72,00,6f,00,6b,00,65,00,65,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,45,00,75,00,70,00,\
68,00,65,00,6d,00,69,00,61,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,44,00,61,00,75,00,6e,00,50,00,65,00,6e,00,68,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4d,00,53,\
00,20,00,4d,00,69,00,6e,00,63,00,68,00,6f,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,50,00,4d,00,69,00,6e,00,67,00,4c,00,69,00,\
75,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
4d,00,65,00,69,00,72,00,79,00,6f,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,53,00,69,00,6d,00,53,00,75,00,6e,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,4d,00,69,00,6e,00,67,00,4c,00,69,00,55,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,50,00,4d,00,69,00,6e,00,\
67,00,4c,00,69,00,55,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,50,00,61,00,6c,00,61,00,74,00,69,00,6e,00,6f,00,20,00,4c,\
00,69,00,6e,00,6f,00,74,00,79,00,70,00,65,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,54,00,72,00,61,\
00,64,00,69,00,74,00,69,00,6f,00,6e,00,61,00,6c,00,20,00,41,00,72,00,61,00,\
62,00,69,00,63,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,53,00,69,00,6d,00,70,00,6c,00,69,00,66,00,69,00,\
65,00,64,00,20,00,41,00,72,00,61,00,62,00,69,00,63,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4d,00,\
69,00,6e,00,67,00,4c,00,69,00,55,00,2d,00,45,00,78,00,74,00,42,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,5a,00,00,00,20,00,00,00,7f,00,00,00,00,\
a0,00,00,00,7f,01,00,00,00,80,01,00,00,af,02,00,00,01,b0,02,00,00,ff,02,00,\
00,02,00,03,00,00,6f,03,00,00,01,70,03,00,00,7a,03,00,00,02,7b,03,00,00,cf,\
03,00,00,00,d0,03,00,00,2f,05,00,00,01,30,05,00,00,8f,05,00,00,03,b0,05,00,\
00,ff,06,00,00,00,00,07,00,00,4f,07,00,00,04,80,07,00,00,bf,07,00,00,05,00,\
09,00,00,7f,09,00,00,06,80,09,00,00,ff,09,00,00,07,00,0a,00,00,7f,0a,00,00,\
08,80,0a,00,00,ff,0a,00,00,09,00,0b,00,00,7f,0b,00,00,0a,80,0b,00,00,ff,0b,\
00,00,0b,00,0c,00,00,7f,0c,00,00,0c,80,0c,00,00,ff,0c,00,00,0d,00,0d,00,00,\
7f,0d,00,00,0e,80,0d,00,00,ff,0d,00,00,0f,00,0e,00,00,7f,0e,00,00,10,80,0e,\
00,00,ff,0e,00,00,11,00,0f,00,00,ff,0f,00,00,12,a0,10,00,00,ff,10,00,00,03,\
00,11,00,00,ff,11,00,00,13,00,12,00,00,9f,13,00,00,14,a0,13,00,00,ff,13,00,\
00,15,00,14,00,00,7f,16,00,00,16,80,17,00,00,ff,17,00,00,17,00,18,00,00,af,\
18,00,00,12,e0,19,00,00,ff,19,00,00,17,00,1e,00,00,9f,1e,00,00,01,a0,1e,00,\
00,ff,1e,00,00,00,00,1f,00,00,ff,1f,00,00,01,00,20,00,00,3e,20,00,00,02,3f,\
20,00,00,5f,20,00,00,18,60,20,00,00,6f,20,00,00,00,70,20,00,00,9f,20,00,00,\
18,a0,20,00,00,cf,20,00,00,01,00,21,00,00,38,21,00,00,18,50,21,00,00,f1,22,\
00,00,18,00,23,00,00,06,23,00,00,02,07,23,00,00,07,23,00,00,19,08,23,00,00,\
0f,23,00,00,02,10,23,00,00,1f,23,00,00,18,20,23,00,00,3f,24,00,00,02,40,24,\
00,00,5f,24,00,00,1a,60,24,00,00,6f,26,00,00,18,70,26,00,00,ff,26,00,00,04,\
00,27,00,00,bf,27,00,00,18,80,2e,00,00,ff,2e,00,00,1b,00,2f,00,00,df,2f,00,\
00,1a,f0,2f,00,00,ff,2f,00,00,1b,00,30,00,00,20,30,00,00,18,21,30,00,00,2f,\
30,00,00,1b,30,30,00,00,37,30,00,00,18,3e,30,00,00,3f,30,00,00,12,40,30,00,\
00,ff,30,00,00,18,00,31,00,00,2f,31,00,00,1b,30,31,00,00,8f,31,00,00,13,90,\
31,00,00,9f,31,00,00,1c,f0,31,00,00,ff,31,00,00,18,00,32,00,00,1f,32,00,00,\
13,20,32,00,00,43,32,00,00,18,60,32,00,00,7f,32,00,00,13,80,32,00,00,ff,33,\
00,00,18,00,34,00,00,bf,4d,00,00,12,00,4e,00,00,ff,9f,00,00,1b,00,a0,00,00,\
cf,a4,00,00,12,00,ac,00,00,af,d7,00,00,13,00,f9,00,00,ff,fa,00,00,1d,00,fb,\
00,00,0f,fb,00,00,1e,10,fb,00,00,17,fb,00,00,03,18,fb,00,00,e7,fb,00,00,00,\
e8,fb,00,00,fb,fb,00,00,12,fc,fb,00,00,ff,fb,00,00,00,00,fc,00,00,f0,fd,00,\
00,1f,f2,fd,00,00,f2,fd,00,00,00,00,fe,00,00,0f,fe,00,00,1b,30,fe,00,00,6f,\
fe,00,00,1b,70,fe,00,00,7f,fe,00,00,20,80,fe,00,00,ff,fe,00,00,00,00,ff,00,\
00,e5,ff,00,00,18,e6,ff,00,00,e6,ff,00,00,13,e7,ff,00,00,ef,ff,00,00,18,f0,\
ff,00,00,ff,ff,00,00,00,00,00,02,00,df,a6,02,00,21,00,f8,02,00,1f,fa,02,00,\
21

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\CpMRU]
"Enable"=dword:00000001
"Size"=dword:0000000a
"InitHits"=dword:00000064
"Factor"=dword:00000014
"Cache"=hex:e2,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\10]
"IEPropFontName"="Mangal"
"IEFixedFontName"="Mangal"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\11]
"IEPropFontName"="Vrinda"
"IEFixedFontName"="Vrinda"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\12]
"IEPropFontName"="Raavi"
"IEFixedFontName"="Raavi"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\13]
"IEPropFontName"="Shruti"
"IEFixedFontName"="Shruti"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\14]
"IEPropFontName"="Kalinga"
"IEFixedFontName"="Kalinga"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\15]
"IEPropFontName"="Latha"
"IEFixedFontName"="Latha"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\16]
"IEPropFontName"="Gautami"
"IEFixedFontName"="Gautami"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\17]
"IEPropFontName"="Tunga"
"IEFixedFontName"="Tunga"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\18]
"IEPropFontName"="Kartika"
"IEFixedFontName"="Kartika"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\19]
"IEPropFontName"="Tahoma"
"IEFixedFontName"="Tahoma"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\20]
"IEPropFontName"="DokChampa"
"IEFixedFontName"="DokChampa"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\21]
"IEPropFontName"="Microsoft Himalaya"
"IEFixedFontName"="Microsoft Himalaya"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\22]
"IEPropFontName"="Sylfaen"
"IEFixedFontName"="Sylfaen"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\23]
"IEPropFontName"="Gulim"
"IEFixedFontName"="GulimChe"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\24]
"IEPropFontName"="MS PGothic"
"IEFixedFontName"="MS Gothic"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\25]
"IEPropFontName"="PMingLiu"
"IEFixedFontName"="MingLiu"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\26]
"IEPropFontName"="Simsun"
"IEFixedFontName"="NSimsun"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\27]
"IEPropFontName"="Nyala"
"IEFixedFontName"="Nyala"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\28]
"IEPropFontName"="Euphemia"
"IEFixedFontName"="Euphemia"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\29]
"IEPropFontName"="Plantagenet Cherokee"
"IEFixedFontName"="Plantagenet Cherokee"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\3]
"IEPropFontName"="Times New Roman"
"IEFixedFontName"="Courier New"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\30]
"IEPropFontName"="Microsoft Yi Baiti"
"IEFixedFontName"="Microsoft Yi Baiti"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\34]
"IEPropFontName"="Iskoola Pota"
"IEFixedFontName"="Iskoola Pota"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\35]
"IEPropFontName"="Estrangelo Edessa"
"IEFixedFontName"="Estrangelo Edessa"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\37]
"IEPropFontName"="DaunPenh"
"IEFixedFontName"="DaunPenh"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\38]
"IEPropFontName"="MV Boli"
"IEFixedFontName"="MV Boli"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\39]
"IEPropFontName"="Mongolian Baiti"
"IEFixedFontName"="Mongolian Baiti"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\4]
"IEPropFontName"="Times New Roman"
"IEFixedFontName"="Courier New"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\5]
"IEPropFontName"="Times New Roman"
"IEFixedFontName"="Courier New"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\6]
"IEPropFontName"="Times New Roman"
"IEFixedFontName"="Courier New"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\7]
"IEPropFontName"="Sylfaen"
"IEFixedFontName"="Sylfaen"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\8]
"IEPropFontName"="David"
"IEFixedFontName"="Miriam Fixed"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\9]
"IEPropFontName"="Simplified Arabic"
"IEFixedFontName"="Simplified Arabic Fixed"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar]
"LinksFolderMigrate"=hex:c6,af,7e,90,4b,f5,c9,01
"MarketingLinksMigrate"=hex:ae,a4,6f,53,bc,16,ca,01

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar\ItemCache]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\0]
"Path"="D:\\Documents and Settings\\skeva\\Favorites\\Links\\Suggested Sites.url"
"Handler"="{B0FA7D7C-7195-4F03-B03E-9DC1C9EBC394}"
"FeedUrl"="https://ieonline.microsoft.com/#ieslice"
"DisplayName"="Suggested Sites"
"DisplayMask"=dword:00000004
"ErrorState"=dword:00000040
"Expiration"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LinksBar\ItemCache\1]
"Path"="D:\\Documents and Settings\\skeva\\Favorites\\Links\\Web Slice Gallery.url"
"Handler"="{B0FA7D7C-7195-4F03-B03E-9DC1C9EBC394}"
"FeedUrl"="http://go.microsoft.com/fwlink/?LinkId=121315"
"DisplayName"="Web Slice Gallery"
"DisplayMask"=dword:00000004
"ErrorState"=dword:00000040
"Expiration"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B79267AC-3725-42EB-890A-6CF077567C47}]
"AppName"="GoogleUpdate.exe"
"AppPath"="D:\\Documents and Settings\\skeva\\Local Settings\\Application Data\\Google\\Update"
"Policy"=dword:00000003

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Extensions]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Extensions\CmdMapping]
"{FB5F1910-F110-11d2-BB9E-00C04F795683}"=dword:00002000
"NextId"=dword:00002002
"{e2e2dd38-d088-4134-82b7-f2ba38496583}"=dword:00002001

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"NoUpdateCheck"=dword:00000001
"NoJITSetup"=dword:00000001
"Disable Script Debugger"="yes"
"Show_ChannelBand"="No"
"Anchor Underline"="yes"
"Cache_Update_Frequency"="Once_Per_Session"
"Display Inline Images"="yes"
"Do404Search"=hex:01,00,00,00
"Local Page"="D:\\WINDOWS\\system32\\blank.htm"
"Save_Session_History_On_Exit"="no"
"Show_FullURL"="no"
"Show_StatusBar"="yes"
"Show_ToolBar"="yes"
"Show_URLinStatusBar"="yes"
"Show_URLToolBar"="yes"
"Start Page"="http://www.microsoft.com/isapi...d=ie&pver=6&ar=msnhome"
"Use_DlgBox_Colors"="yes"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"FullScreen"="no"
"Window_Placement"=hex:2c,00,00,00,02,00,00,00,03,00,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,66,00,00,00,74,00,00,00,86,03,00,00,cc,02,00,\
00
"NotifyDownloadComplete"="yes"
"ShowedCheckBrowser"="Yes"
"Check_Associations"="No"
"Error Dlg Displayed On Every Error"="no"
"Friendly http errors"="yes"
"XMLHTTP"=dword:00000001
"UseClearType"="yes"
"Enable Browser Extensions"="yes"
"Play_Background_Sounds"="yes"
"Play_Animations"="yes"
"CompatibilityFlags"=dword:00000000
"IE8RunOnceLastShown"=dword:00000001
"IE8RunOnceLastShown_TIMESTAMP"=hex:46,b8,c2,26,a1,1e,ca,01
"IE8TourShown"=dword:00000001
"IE8TourShownTime"=hex:d0,bb,76,2b,a1,1e,ca,01

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default Feeds]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default Feeds\{4B46A487-C6CE-4FB7-B01C-CDF67313657A}]
"Title"="Microsoft Feeds\\Microsoft at Home"
"Url"="http://go.microsoft.com/fwlink/?LinkId=68928"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default Feeds\{771110DE-72BE-42B6-B29B-7AE06DC65C2E}]
"Title"="Microsoft Feeds\\Microsoft at Work"
"Url"="http://go.microsoft.com/fwlink/?LinkId=68929"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\WindowsSearch]
"Version"="WS not installed"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Media]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Media\MimeTypes]
"text/vnd.rn-realtext"=hex:00
"application/vnd.rn-realplayer"=hex:00
"application/vnd.rn-rn_music_package"=hex:00
"application/vnd.rn-realmedia-secure"=hex:00
"application/vnd.rn-realaudio-secure"=hex:00
"audio/x-realaudio-secure"=hex:00
"video/vnd.rn-realvideo-secure"=hex:00
"application/vnd.rn-realsystem-rjs"=hex:00
"audio/vnd.rn-realaudio"=hex:00
"audio/x-realaudio"=hex:00
"application/vnd.rn-realmedia"=hex:00
"application/vnd.rn-realmedia-vbr"=hex:00
"image/vnd.rn-realpix"=hex:00
"audio/x-pn-realaudio"=hex:00
"application/vnd.rn-rsml"=hex:00
"video/vnd.rn-realvideo"=hex:00
"application/vnd.rn-realsystem-rmj"=hex:00
"application/vnd.rn-realsystem-rjt"=hex:00
"application/vnd.rn-realsystem-rmx"=hex:00
"application/smil"=hex:00
"application/sdp"=hex:00
"video/3gpp2"=hex:00
"audio/3gpp2"=hex:00
"application/streamingmedia"=hex:00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows]
"PopupMgr"="yes"
"PlaySound"=dword:00000001
"UseSecBand"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\ProtocolExecute]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\ProtocolExecute\ymsgr]
"WarnOnOpen"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\Active]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"
"DownloadRetries"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"SuggestionsURLFallback"="http://api.search.live.com/qsm...M=IE8SSC&market={Language}"
"FaviconURLFallback"="http://www.live.com/favicon.ico"
"FaviconPath"="D:\\Documents and Settings\\skeva\\Local Settings\\Application Data\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico"
"URL"="http://search.live.com/results...c=IE-SearchBox&Form=IE8SRC"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
"DisplayName"="Yahoo! Search"
"URL"="http://us.yhs.search.yahoo.com..._chrome_us&p={searchTerms}"
"SuggestionsURLFallback"="http://ie.search.yahoo.com/os?appid=ie8&command={searchTerms}"
"ShowSearchSuggestions"=dword:00000001
"SuggestionsURL"="http://ie.search.yahoo.com/os?appid=ie8&command={searchTerms}"
"Codepage"=dword:0000fde9
"OSDFileURL"="file:///D:/Documents%20and%20Settings/All%20Users/Application%20Data/AVG%20Security%20Toolbar/osd.xml"
"FaviconURL"="http://us.yhs.search.yahoo.com/favicon.ico"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security]
"Sending_Security"="Medium"
"Viewing_Security"="Low"
"Safety Warning Level"="Query"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security\P3Global]
"Enabled"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security\P3Sites]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Services]
@=""

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings]
"Anchor Color Visited"="128,0,128"
"Anchor Color"="0,0,255"
"Background Color"="192,192,192"
"Text Color"="0,0,0"
"Use Anchor Hover Color"="No"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SQM]
"InstallDate"=hex(b):da,f9,42,4a,00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Suggested Sites]
"MigrationTime"=hex:ec,55,c0,26,a1,1e,ca,01
"SlicePath"="D:\\Documents and Settings\\skeva\\Favorites\\Links\\Suggested Sites.url"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar]
"LinksFolderName"="Links"
"Locked"=dword:00000001
"SaveLinksOrder"=hex:01,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Explorer]
"ITBarLayout"=hex:11,00,00,00,4c,00,00,00,00,00,00,00,24,00,00,00,1b,00,00,00,\
56,00,00,00,01,00,00,00,20,07,00,00,a0,0f,00,00,05,00,00,00,62,05,00,00,26,\
00,00,00,02,00,00,00,21,07,00,00,a0,0f,00,00,04,00,00,00,21,01,00,00,a0,0f,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser]
"{01E04581-4EEE-11D0-BFE9-00AA005B4383}"=hex:81,45,e0,01,ee,4e,d0,11,bf,e9,00,\
aa,00,5b,43,83,10,00,00,00,00,00,00,00,01,e0,32,f4,01,00,00,00
"ITBarLayout"=hex:11,00,00,00,4c,00,00,00,00,00,00,00,24,00,00,00,1b,00,00,00,\
56,00,00,00,01,00,00,00,20,07,00,00,a0,0f,00,00,05,00,00,00,62,05,00,00,26,\
00,00,00,02,00,00,00,21,07,00,00,a0,0f,00,00,04,00,00,00,21,01,00,00,a0,0f,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{01E04581-4EEE-11D0-BFE9-00AA005B4383}"=hex:81,45,e0,01,ee,4e,d0,11,bf,e9,00,\
aa,00,5b,43,83,10,00,00,00,00,00,00,00,01,e0,32,f4,01,00,00,00
"{0E5CBF21-D15F-11D0-8301-00AA005B4383}"=hex:21,bf,5c,0e,5f,d1,d0,11,83,01,00,\
aa,00,5b,43,83,22,00,1c,00,08,00,00,00,06,00,00,00,01,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,4c,00,00,00,01,14,02,00,00,00,00,00,c0,00,00,00,00,\
00,00,46,81,00,00,00,10,00,00,00,36,d7,12,16,5b,4e,c9,01,dc,f4,d4,00,d5,f4,\
c9,01,50,fc,ef,1c,5b,4e,c9,01,00,00,00,00,00,00,00,00,01,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,4d,01,14,00,1f,50,e0,4f,d0,20,ea,3a,69,10,a2,d8,\
08,00,2b,30,30,9d,19,00,2f,44,3a,5c,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,5c,00,31,00,00,00,00,00,78,39,75,8c,10,00,44,4f,43,55,4d,\
45,7e,31,00,00,44,00,03,00,04,00,ef,be,78,39,e6,91,d8,3a,33,6b,14,00,00,00,\
44,00,6f,00,63,00,75,00,6d,00,65,00,6e,00,74,00,73,00,20,00,61,00,6e,00,64,\
00,20,00,53,00,65,00,74,00,74,00,69,00,6e,00,67,00,73,00,00,00,18,00,36,00,\
31,00,00,00,00,00,7a,39,37,69,10,00,73,6b,65,76,61,00,22,00,03,00,04,00,ef,\
be,78,39,75,8c,d8,3a,33,6b,14,00,00,00,73,00,6b,00,65,00,76,00,61,00,00,00,\
14,00,56,00,31,00,00,00,00,00,78,39,80,8c,11,00,46,41,56,4f,52,49,7e,31,00,\
00,3e,00,03,00,04,00,ef,be,78,39,75,8c,d6,3a,d3,85,14,00,28,00,46,00,61,00,\
76,00,6f,00,72,00,69,00,74,00,65,00,73,00,00,00,40,73,68,65,6c,6c,33,32,2e,\
64,6c,6c,2c,2d,31,32,36,39,33,00,18,00,36,00,31,00,00,00,00,00,78,39,80,8c,\
10,00,4c,69,6e,6b,73,00,22,00,03,00,04,00,ef,be,78,39,78,8c,cf,3a,30,00,14,\
00,00,00,4c,00,69,00,6e,00,6b,00,73,00,00,00,14,00,00,00,60,00,00,00,03,00,\
00,a0,58,00,00,00,00,00,00,00,73,6b,65,76,61,6b,6c,65,72,00,00,00,00,00,00,\
00,ba,13,b2,23,35,92,b6,48,8e,0f,26,d3,a4,47,51,5f,cf,72,6a,52,4e,ba,dd,11,\
9c,20,00,1b,11,c1,c0,23,ba,13,b2,23,35,92,b6,48,8e,0f,26,d3,a4,47,51,5f,cf,\
72,6a,52,4e,ba,dd,11,9c,20,00,1b,11,c1,c0,23,00,00,00,00
"ITBarLayout"=hex:11,00,00,00,4c,00,00,00,00,00,00,00,34,00,00,00,1f,00,07,00,\
c0,00,00,00,01,00,00,00,20,07,00,00,a0,0f,00,00,05,00,00,00,62,05,00,00,26,\
00,00,00,02,00,00,00,21,07,00,00,a0,0f,00,00,04,00,00,00,21,01,00,00,a0,0f,\
00,00,03,00,00,00,20,03,00,00,00,00,00,00,06,00,00,00,a1,04,00,00,00,00,00,\
00,07,00,00,00,20,05,00,00,00,00,00,00,08,00,00,00,20,05,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,32,bd,99,ef,fb,c1,d2,11,89,2f,00,90,27,1d,4f,88,20,a3,c7,\
cc,ca,b3,99,41,b1,a6,9f,51,6d,d6,98,29,3e,d0,41,30,4b,fd,e0,44,b7,42,2d,9b,\
88,30,5f,98,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}"=hex:32,bd,99,ef,fb,c1,d2,11,89,2f,00,\
90,27,1d,4f,88
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"=hex:20,a3,c7,cc,ca,b3,99,41,b1,a6,9f,\
51,6d,d6,98,29
"ITBar7Layout"=hex:13,00,00,00,00,00,00,00,00,00,00,00,30,00,00,00,10,00,06,00,\
1b,00,00,00,01,00,00,00,00,07,00,00,5e,01,00,00,07,00,00,00,00,01,00,00,00,\
00,00,00,08,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,20,a3,c7,\
cc,ca,b3,99,41,b1,a6,9f,51,6d,d6,98,29,3e,d0,41,30,4b,fd,e0,44,b7,42,2d,9b,\
88,30,5f,98,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"ITBar7Height"=dword:00000021

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs]
"url1"="www.belimantili.info"
"url2"="http://www.b92.net/"
"url3"="http://www.blic.co.yu/"
"url4"="http://www.google.com/"
"url5"="EntireNetwork"
"url6"="http://www.oriflame.com/"
"url7"="http://www.yahoo.com/"
"url8"="http://www.facebook.com/"
"url9"="firefox"
"url10"="http://www.microsoft.com/isapi...d=ie&pver=6&ar=msnhome"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"=""

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\User Preferences]
"6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,\
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,b5,f8,28,99,4f,f2,e1,4e,9a,c3,15,\
85,2a,dd,42,89,00,00,00,00,02,00,00,00,00,00,03,66,00,00,a8,00,00,00,10,00,\
00,00,b1,5b,2b,fa,c6,a5,38,28,a7,8f,00,79,5f,34,a0,3d,00,00,00,00,04,80,00,\
00,a0,00,00,00,10,00,00,00,30,5b,cf,fd,56,4f,11,cb,ab,10,88,1a,e4,86,90,a6,\
08,00,00,00,fe,0e,bd,22,d3,25,06,2e,14,00,00,00,78,9c,c7,cd,71,ea,ab,a9,53,\
05,26,80,2d,08,6a,76,19,4c,69,21
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,\
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,b5,f8,28,99,4f,f2,e1,4e,9a,c3,15,\
85,2a,dd,42,89,00,00,00,00,02,00,00,00,00,00,03,66,00,00,a8,00,00,00,10,00,\
00,00,9c,33,b3,ab,8b,b7,35,14,50,3a,96,3c,d7,46,7b,e3,00,00,00,00,04,80,00,\
00,a0,00,00,00,10,00,00,00,fb,1f,5e,e1,c8,b8,1e,9a,5d,fd,34,9f,40,7e,6f,7c,\
50,00,00,00,f9,86,a9,79,fc,4c,19,31,fe,e3,bb,05,93,92,d4,eb,4d,a0,42,c0,c4,\
6f,57,13,da,4f,81,04,60,50,db,da,55,48,a1,0b,fe,db,0d,f9,6c,f9,98,7c,f3,23,\
59,9e,fc,f9,e2,03,15,05,07,54,91,fe,6f,78,2b,a5,5f,17,1e,05,83,5e,f3,f3,8c,\
95,cd,fb,f9,13,f5,f6,02,9d,14,00,00,00,6f,98,3c,86,22,aa,c6,89,24,78,02,63,\
76,45,17,1d,d6,1a,01,1e
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,\
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,b5,f8,28,99,4f,f2,e1,4e,9a,c3,15,\
85,2a,dd,42,89,00,00,00,00,02,00,00,00,00,00,03,66,00,00,a8,00,00,00,10,00,\
00,00,31,c3,b0,a0,2b,62,38,9e,94,d2,29,42,8c,07,7f,07,00,00,00,00,04,80,00,\
00,a0,00,00,00,10,00,00,00,f0,6e,ed,3f,0c,18,6e,b5,8e,88,4d,a6,b2,ab,23,75,\
10,00,00,00,ee,1e,a6,23,d6,34,99,d4,50,f1,6f,e6,f5,b0,0c,2e,14,00,00,00,25,\
9a,f9,70,64,35,ca,5b,5c,f9,1d,e2,a7,01,3e,f8,60,c8,e0,96

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Zoom]
"ZoomFactor"=dword:000186a0

***********************************************************************

Hajde sad skini DDS Program na Desktop
http://download.bleepingcomputer.com/sUBs/dds.scr

Dvoklikom pokreni dds.scr

Kad zavrsi, DDS ce otvoriti dva loga:
1. DDS.txt
2. Attach.txt


Kopiraj mi DDS.txt

---

DDS (Ver_09-10-12.01) - NTFSx86
Run by skeva at 12:12:31.21 on Mon 10/12/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.511.91 [GMT 2:00]

AV: AVG Anti-Virus *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============

D:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
D:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
D:\Program Files\AVG\AVG8\avgrsx.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\RUNDLL32.EXE
D:\Program Files\DAEMON Tools\daemon.exe
D:\PROGRA~1\AVG\AVG8\avgtray.exe
D:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe
D:\WINDOWS\System32\svchost.exe -k HTTPFilter
D:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\uTorrent\uTorrent.exe
D:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
D:\PROGRA~1\AVG\AVG8\avgemc.exe
D:\Program Files\AVG\AVG8\avgcsrvx.exe
D:\Documents and Settings\skeva\Desktop\dds.scr

============== Pseudo HJT Report ===============

uInternet Connection Wizard,ShellNext = iexplore
uURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - d:\program files\avg\avg8\toolbar\IEToolbar.dll
mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - d:\program files\avg\avg8\toolbar\IEToolbar.dll
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - d:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - d:\program files\avg\avg8\avgssie.dll
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - d:\program files\avg\avg8\toolbar\IEToolbar.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - d:\program files\avg\avg8\toolbar\IEToolbar.dll
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
uRun: [Google Update] "d:\documents and settings\skeva\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [uTorrent] "d:\program files\utorrent\uTorrent.exe"
uRun: [ctfmon.exe] d:\windows\system32\ctfmon.exe
uRun: [MSMSGS] "d:\program files\messenger\msmsgs.exe" /background
uRun: [Skype] "d:\program files\skype\phone\Skype.exe" /nosplash /minimized
mRun: [NvCplDaemon] RUNDLL32.EXE d:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [NvMediaCenter] RUNDLL32.EXE d:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
mRun: [WinampAgent] "d:\program files\winamp\winampa.exe"
mRun: [TkBellExe] "d:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [DAEMON Tools] "d:\program files\daemon tools\daemon.exe" -lang 1033
mRun: [NeroFilterCheck] d:\windows\system32\NeroCheck.exe
mRun: [AVG8_TRAY] d:\progra~1\avg\avg8\avgtray.exe
mRun: [RemoteControl] "d:\program files\cyberlink\powerdvd\PDVDServ.exe"
mRun: [Malwarebytes Anti-Malware (reboot)] "d:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
mRun: [googletalk] d:\program files\google\google talk\googletalk.exe /autostart
StartupFolder: d:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - d:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
StartupFolder: d:\docume~1\alluse~1\startm~1\programs\startup\mcafee~1.lnk - d:\program files\mcafee security scan\1.0.150\SSScheduler.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - d:\program files\messenger\msmsgs.exe
TCP: {BBCBE00C-4261-425F-9F9A-4A6F3ED066EA} = 195.252.109.4 194.106.162.2
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - d:\program files\avg\avg8\avgpp.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - d:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: avgrsstarter - avgrsstx.dll

================= FIREFOX ===================

FF - ProfilePath - d:\docume~1\skeva\applic~1\mozilla\firefox\profiles\sqk067ol.default\
FF - component: d:\documents and settings\skeva\application data\mozilla\firefox\profiles\sqk067ol.default\extensions\[email protected]\components\coolirisstub.dll
FF - plugin: c:\program files\real\realplayer\netscape6\nppl3260.dll
FF - plugin: c:\program files\real\realplayer\netscape6\nprjplug.dll
FF - plugin: c:\program files\real\realplayer\netscape6\nprpjplug.dll
FF - plugin: d:\documents and settings\skeva\application data\mozilla\firefox\profiles\sqk067ol.default\extensions\[email protected]\plugins\npcoolirisplugin.dll
FF - plugin: d:\documents and settings\skeva\local settings\application data\google\update\1.2.183.7\npGoogleOneClick8.dll

============= SERVICES / DRIVERS ===============

R0 AvgRkx86;avgrkx86.sys;d:\windows\system32\drivers\avgrkx86.sys [2009-6-3 12552]
R1 AvgLdx86;AVG AVI Loader Driver x86;d:\windows\system32\drivers\avgldx86.sys [2009-6-3 335240]
R1 AvgTdiX;AVG8 Network Redirector;d:\windows\system32\drivers\avgtdix.sys [2009-6-3 108552]
R2 avg8emc;AVG8 E-mail Scanner;d:\progra~1\avg\avg8\avgemc.exe [2009-6-3 908056]
R2 avg8wd;AVG8 WatchDog;d:\progra~1\avg\avg8\avgwdsvc.exe [2009-6-3 297752]

=============== Created Last 30 ================

2009-10-10 07:24 <DIR> --d----- d:\program files\ServerBrowse
2009-10-09 13:29 <DIR> --d----- d:\program files\NetworkView36
2009-10-05 02:48 <DIR> --d--r-- d:\program files\Skype
2009-10-04 23:58 <DIR> --d----- d:\docume~1\alluse~1\applic~1\McAfee Security Scan
2009-10-04 23:58 <DIR> --d----- d:\program files\McAfee Security Scan
2009-10-04 22:48 <DIR> --d----- d:\docume~1\skeva\applic~1\Malwarebytes
2009-10-04 22:48 38,224 a------- d:\windows\system32\drivers\mbamswissarmy.sys
2009-10-04 22:48 19,160 a------- d:\windows\system32\drivers\mbam.sys
2009-10-04 22:48 <DIR> --d----- d:\program files\Malwarebytes' Anti-Malware
2009-10-04 22:48 <DIR> --d----- d:\docume~1\alluse~1\applic~1\Malwarebytes
2009-10-04 20:23 56,576 a------- d:\windows\system32\drivers\swmidi.sys
2009-10-04 16:03 <DIR> --d----- d:\program files\Picasa2
2009-09-26 14:34 <DIR> --d----- d:\windows\system32\URTTEMP
2009-09-26 05:12 <DIR> --d----- d:\program files\Mv2Player
2009-09-22 17:22 <DIR> --d----- d:\docume~1\alluse~1\applic~1\POP3Profiles
2009-09-16 09:18 <DIR> --d-h--- D:\$AVG8.VAULT$
2009-09-15 17:18 <DIR> --d----- d:\program files\VirtualDJ
2009-09-15 17:06 <DIR> --d----- d:\windows\system32\appmgmt

==================== Find3M ====================

2009-08-07 12:00 86,327 a------- d:\windows\pchealth\helpctr\offlinecache\index.dat
2009-08-01 09:27 11,952 a------- d:\windows\system32\avgrsstx.dll
2001-11-23 13:08 712,704 a------- d:\windows\inf\other\AUDIO3D.DLL

============= FINISH: 12:13:07.34 ===============

@skevakler
nadao sam se da cu naci nesto (bilo sta) ali nisam nasao nista sporno u logovima...
PS: AVG ti je disable-ovan. Jesi li ga ti to disable-ovao ili..?

---