zacinający się komp

[MmarcinekK]

Witam
Po uruchomieniu kompa gdy chce otworzyć np jakiś program to po kliknięciu trzeba czekać długo chwile aż będzie reakcja kompa. Menadżer zadań pokazuje mi 100% zużycie procesora

Kod: Zaznacz wszystko

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:15:45, on 2008-04-13
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
c:\windows\tasks\update.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\Program Files\Sony\WALKMAN Launcher\WMAAD.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\KWORLD\MpegTV Station PCITV\RemoteCtl.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ICQ-PL\X_icq-pl.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Opera\Opera.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.hotbar.com/dyn/hotbar/3.0/sb_searchPageHome.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL (file missing)
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe,C:\WINDOWS\system32\ntos.exe,
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: (no name) - {33161E98-0A6C-4d3c-BD62-3A7D56137F52} - (no file)
O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [WMAAD] C:\Program Files\Sony\WALKMAN Launcher\WMAAD.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AQQ] C:\PROGRA~1\Wapster\AQQ\AQQ.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Cool burn] C:\DOCUME~1\KAMILA~1.CZA\DANEAP~1\TRAYLI~1\buildmp3.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [userinit] C:\WINDOWS\System32\ntos.exe
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: ICQ-PL - Auto Update.lnk = C:\Program Files\ICQ-PL\icq-pl.exe
O4 - Global Startup: MpegTV Station PCITV Remote Control.lnk = C:\Program Files\KWORLD\MpegTV Station PCITV\RemoteCtl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe
O4 - Global Startup: LUMIX Simple Viewer.lnk = ?
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Transfer by Image Converter 3 - C:\PROGRAM FILES\SONY\IMAGE CONVERTER 3\menu.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Broken Internet access because of LSP provider 'c:\program files\newdotnet\newdotnet6_38.dll' missing
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1198420246545
O17 - HKLM\System\CCS\Services\Tcpip\..\{777856BF-E9C1-4EF2-957E-DA96C68607D7}: NameServer = 85.255.116.150,85.255.112.24
O17 - HKLM\System\CCS\Services\Tcpip\..\{F2204FCC-E2CE-42A0-B782-96140AC59BDB}: NameServer = 85.255.116.150,85.255.112.24
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.116.150 85.255.112.24
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: NameServer = 85.255.116.150 85.255.112.24
O17 - HKLM\System\CS4\Services\Tcpip\Parameters: NameServer = 85.255.116.150 85.255.112.24
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.150 85.255.112.24
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: hpdj - Unknown owner - C:\DOCUME~1\Bartek\USTAWI~1\Temp\hpdj.exe (file missing)
O23 - Service: Image Converter SCSI Service (ICScsiSV) - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\ICScsiSV.exe
O23 - Service: IcVzMonLauncher - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\IcVzMonLauncher.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\IcVzMon.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

--
End of file - 10023 bytes


[wojtas]

Wykonaj to co jest podane w tym temacie

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Ściągnij program Fixwareout i zastosuj go

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z combofixa oraz daj loga z hijacka

[MmarcinekK]

Hijack

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:59:38, on 2008-04-15
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\windows\tasks\update.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\Program Files\Sony\WALKMAN Launcher\WMAAD.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\KWORLD\MpegTV Station PCITV\RemoteCtl.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe
C:\Program Files\Gadu-Gadu\Gadu-Gadu\gg.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [WMAAD] C:\Program Files\Sony\WALKMAN Launcher\WMAAD.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AQQ] C:\PROGRA~1\Wapster\AQQ\AQQ.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Cool burn] C:\DOCUME~1\KAMILA~1.CZA\DANEAP~1\TRAYLI~1\buildmp3.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: ICQ-PL - Auto Update.lnk = C:\Program Files\ICQ-PL\icq-pl.exe
O4 - Global Startup: MpegTV Station PCITV Remote Control.lnk = C:\Program Files\KWORLD\MpegTV Station PCITV\RemoteCtl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe
O4 - Global Startup: LUMIX Simple Viewer.lnk = ?
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Transfer by Image Converter 3 - C:\PROGRAM FILES\SONY\IMAGE CONVERTER 3\menu.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1198420246545
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: NameServer = 85.255.116.150 85.255.112.24
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: hpdj - Unknown owner - C:\DOCUME~1\Bartek\USTAWI~1\Temp\hpdj.exe (file missing)
O23 - Service: Image Converter SCSI Service (ICScsiSV) - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\ICScsiSV.exe
O23 - Service: IcVzMonLauncher - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\IcVzMonLauncher.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\IMAGE CONVERTER 3\IcVzMon.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

--
End of file - 9061 bytes

[ Dodano: Dzisiaj o 20:19 ]
report txt

SDFix: Version 1.170
Run by Kamila on 2008-04-13 at 22:10

Microsoft Windows XP [Wersja 5.1.2600]
Running From: C:\SDFix

Checking Services :

Name:
runtime

Path:
\??\C:\WINDOWS\System32\drivers\runtime.sys

runtime - Deleted



Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting


Checking Files :

Trojan Files Found:

C:\WINDOWS\system32\cspzt.exe - Deleted
C:\WINDOWS\SYSTEM32\KERNEL32.EXE - Deleted
C:\WINDOWS\SYSTEM32\HELPER.XML - Deleted
C:\WINDOWS\system32\3_exception.nls - Deleted
C:\WINDOWS\system32\Kernel32.exe - Deleted
C:\WINDOWS\Temp\$_2341233.TMP - Deleted
C:\WINDOWS\Temp\$_2341234.TMP - Deleted
C:\WINDOWS\Temp\$b17a2e8.tmp - Deleted
C:\WINDOWS\system32\wsnpoem\audio.dll - Deleted
C:\WINDOWS\system32\wsnpoem\video.dll - Deleted



Folder C:\WINDOWS\system32\wsnpoem - Removed


Removing Temp Files

ADS Check :



Final Check :


Remaining Services :



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

Remaining Files :


File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes :

Sat 23 Feb 2008 65,536 A..H. --- "C:\WINDOWS\Tasks\update.exe"
Wed 29 Dec 2004 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Wed 29 Dec 2004 401 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv19.bak"
Sun 20 Nov 2005 30,208 ...H. --- "C:\Documents and Settings\Kamila.CZAPIOR\Pulpit\fotosy\aga\~WRL0001.tmp"
Sun 20 Nov 2005 30,208 ...H. --- "C:\Documents and Settings\Kamila.CZAPIOR\Pulpit\fotosy\aga\~WRL0003.tmp"
Tue 1 Feb 2005 19,456 ...H. --- "C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Microsoft\Word\~WRL0003.tmp"
Tue 1 Feb 2005 20,992 ...H. --- "C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Microsoft\Word\~WRL2409.tmp"

Finished!

[wojtas]

Ściągnij program Fixwareout i zastosuj go

skasuj :

O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareIEHelper.dll
O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll
O4 - HKCU\..\Run: [Cool burn] C:\DOCUME~1\KAMILA~1.CZA\DANEAP~1\TRAYLI~1\buildmp3.exe
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: NameServer = 85.255.116.150 85.255.112.24

daj loga z combofixa oraz nowy log z hijacka

[MmarcinekK]

combofix ( pousuwałem kilkaset ? linijek z tych co usunął bo był za duży post)

ComboFix 08-04-13.1 - Kamila 2008-04-13 23:04:02.1 - FAT32x86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.212 [GMT 2:00]
Running from: C:\Programy\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\reports.txt
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\1.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\1032719.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\1058178.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\1070500.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\1070524.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\1070537.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\1287196.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\133463.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\1383369.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\1383371.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\1383704.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\1383752.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\1384138.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\596166.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\627350.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\634860.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\650842.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\65445.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\672952.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\724667.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\737654.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\7555.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\756103.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\78289.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\810469.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\825025.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\846926.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\854381.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\886877.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\903443.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\951083.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\970744.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\986772.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\988463.sdf
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\ASPL1.dat
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\domains.txt
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\10748
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\10807
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\10858
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\98493
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\98677
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\99008
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\99507
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\9974
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\ustat\321f.dat
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\dynamic\ustat\3246.dat
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar9.xip
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_logos.xip
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_other.xip
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_x.xip
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_weather.xip
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\default.xip
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\top7.xip
C:\Documents and Settings\Kamila.CZAPIOR\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\tsd_bg.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\eskin\empty_bg_st.htm
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\eskin\FileManager.txt
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\reports.txt
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\030203lib_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\033102angel_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\033102bigluf_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\033102bigsmile_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\033102birthday_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\033102cheers_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\033102flo_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\033102good_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\033102jump_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\033102king_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\033102lough_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\033102luf_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\033102smile_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\033102smiled_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\033102sor_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\033102thanx_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\033102uhu_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\040103ahh_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\040103wow_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\040104_emi2_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\042102_1134_112_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\050103big_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\050103gig_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\050103hm_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\050103nomail_emoti_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\050103norm_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\060104_ema30_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\060104_ema33_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\060104_ema34_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\062802hippi_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\062802jumpie_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\080402argh_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\080402oops_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\080402ouch_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\082502no_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\082502yes_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\110103_boring1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\110103_confused_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\110103_crying_ugly_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\110103_fantastic_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\110103_feel_better_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\110103_gimme_break_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\110103_heehee_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\110103_hlopaet_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\110103_ign_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\110103_lol_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\110103_no_comment_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\110103_peace_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\110103_smashing_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\110103_talk2thehand_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\block_sm.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\block_sm2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\block_smli.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\block_smli2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\blocked.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\blocked2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\btn_add-but.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\btn_back-but.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\btn_left_cut_enabled_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\btn_left_enabled_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\btn_left_pressed_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\btn_middle_enabled_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\btn_middle_pressed_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\btn_right_cut_enabled_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\btn_right_enabled_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\btn_right_pressed_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\business_promo.htm
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\buttondir.txt
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\components.cdf
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\css_cattree.css
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\css_flashpreview.css
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\css2_main.css
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\css2_pagingmodule.css
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\css2_topbuttons.css
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\delete.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\edit_clear_sound.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\edit_fs.htm
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\edit_select.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\email-t1-bg.res
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\estatationery.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\flashpreview.htm
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\fs3.htm
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\hotbar_promo.htm
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\icon_checked_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\icon_close_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\icon_close_pressed_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\icon_edit_preview.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\icon_edit_send.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\icon_flash_preview.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\icon_recently_used.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\icon_remove_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\icon_remove_pressed_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\icon_sand-clock2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\icon_tell_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\icon_tell_pressed_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\icon_tree_null.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\icon_unchecked_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\icon_unchecked_pressed_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\img_barlayout.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\img_barlayout2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\img_barlayout4.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\img_corner_left.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\img_local_logo.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\js2_basetemplate.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\js2_hbgroups.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\js2_hbobject3.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\js2_hbobjectset3.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\js2_hotbarwrapper.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\js2_iteratorsandreaders3nf.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\js2_pagingmoduleobj3.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\js2_texts3.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\js2_xmltree3nf.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\layout.cdf
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\linkpathlegal.txt
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\n.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\nav_b_2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\nav_bb_2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\nav_f_2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\nav_ff_2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\progress.res
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\searchbtn.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\submit.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\tab_bg.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\tab_bga.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\tab_bgia.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\tab_l.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\tab_la.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\tab_lia.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\tab_r.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\tab_ra.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\tab_ria.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\tree_dots.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\tree_minus.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\tree_plus.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\treedata_animations.xml
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\treedata_backgrounds.xml
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\treedata_ecards.xml
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\treedata_emoticons.xml
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\treedata_notifiers.xml
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\2\treedata_text.xml
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\DownLoad\business_promo.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\DownLoad\buttondir.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\DownLoad\code.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\DownLoad\email-def.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\DownLoad\email-t1-bg.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\DownLoad\hotbar_promo.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\DownLoad\images.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\DownLoad\layout.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\DownLoad\linkpathlegal.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\DownLoad\localcontent.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\DownLoad\progress.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOI\static\DownLoad\treexml.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\030104_emte10_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\030104_emte11_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\030104_emte12_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\030104_emte13_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\030104_emte14_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\030104_emte19_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\030104_emte20_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\030104_emte21_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\030104_emte9_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\030203lib_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\033102angel_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\033102bigluf_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\033102bigsmile_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\033102birthday_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\033102cheers_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\033102flo_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\033102good_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\033102jump_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\033102king_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\033102lough_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\033102luf_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\033102smile_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\033102smiled_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\033102sor_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\033102thanx_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\033102uhu_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\040103ahh_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\040103wow_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\040104_emi2_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\042102_1134_112_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\050103big_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\050103gig_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\050103hm_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\email-def-email-people.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\email-def-email-photo.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\email-def-email-tell.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\email-def-email-temp.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\email-def-email-text.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\email-def-email-voice.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\email-def.cdf
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\email-premium-email-premium.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\email-t1-bg.res
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\estatationery.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\flashpreview.htm
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\fs3.htm
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\hotbar_promo.htm
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\icon_checked_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\icon_close_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\icon_close_pressed_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\icon_edit_preview.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\icon_edit_send.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\icon_flash_preview.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\icon_recently_used.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\icon_remove_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\icon_remove_pressed_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\icon_sand-clock2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\icon_tell_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\icon_tell_pressed_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\icon_tree_null.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\icon_unchecked_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\icon_unchecked_pressed_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\img_barlayout.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\img_barlayout2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\img_barlayout4.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\img_corner_left.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\img_local_logo.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\js2_basetemplate.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\js2_hbgroups.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\js2_hbobject3.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\js2_hbobjectset3.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\js2_hotbarwrapper.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\js2_iteratorsandreaders3nf.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\js2_pagingmoduleobj3.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\js2_texts3.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\js2_xmltree3nf.js
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\layout.cdf
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\linkpathlegal.txt
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\meetpeople.cdf
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\n.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\nav_b_2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\nav_bb_2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\nav_f_2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\nav_ff_2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\progress.res
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\searchbtn.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\submit.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\tab_bg.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\tab_bga.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\tab_bgia.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\tab_l.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\tab_la.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\tab_lia.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\tab_r.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\tab_ra.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\tab_ria.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\tree_dots.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\tree_minus.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\tree_plus.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\treedata_animations.xml
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\treedata_backgrounds.xml
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\treedata_ecards.xml
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\treedata_emoticons.xml
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\treedata_notifiers.xml
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\1\treedata_text.xml
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\030104_emte10_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\030104_emte11_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\030104_emte12_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\030104_emte13_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\030104_emte14_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\030104_emte19_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\030104_emte20_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\030104_emte21_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\030104_emte9_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\030203lib_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\033102angel_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\033102bigluf_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\033102bigsmile_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\033102birthday_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\033102cheers_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\033102flo_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\033102good_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\033102jump_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\033102king_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\033102lough_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\033102luf_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\033102smile_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\033102smiled_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\033102sor_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\033102thanx_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\033102uhu_1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\040103ahh_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\040103wow_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\040104_emi2_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\042102_1134_112_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\050103big_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\050103gig_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\050103hm_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\050103nomail_emoti_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\050103norm_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\060104_ema15_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\060104_ema16_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\060104_ema17_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\060104_ema18_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\060104_ema19_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\060104_ema20_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\060104_ema21_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\060104_ema24_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\060104_ema25_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\060104_ema26_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\060104_ema30_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\060104_ema33_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\060104_ema34_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\062802hippi_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\062802jumpie_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\080402argh_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\080402oops_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\080402ouch_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\082502no_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\082502yes_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\110103_boring1_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\110103_confused_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\110103_crying_ugly_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\110103_fantastic_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\110103_feel_better_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\110103_gimme_break_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\110103_heehee_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\110103_hlopaet_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\110103_ign_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\110103_lol_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\110103_no_comment_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\110103_peace_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\110103_smashing_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\110103_talk2thehand_prv.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\block_sm.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\block_sm2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\block_smli.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\block_smli2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\blocked.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\blocked2.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\btn_add-but.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\btn_back-but.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\btn_left_cut_enabled_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\btn_left_enabled_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\btn_left_pressed_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\btn_middle_enabled_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\btn_middle_pressed_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\btn_right_cut_enabled_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\btn_right_enabled_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\btn_right_pressed_1.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\business_promo.htm
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\buttondir.txt
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\components.cdf
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\css_cattree.css
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\css_flashpreview.css
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\css2_main.css
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\css2_pagingmodule.css
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\css2_topbuttons.css
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\delete.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\edit_clear_sound.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\edit_fs.htm
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\edit_select.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-511724-9595.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-511724-9696.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-511745-514279.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-backgrounds.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-bcards.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-ecards.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-emoticons.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-estationery.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-funny.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-help.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-images.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-info.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-more.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-my.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-new.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-new2.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-options.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-people.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-photo.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-tell.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-temp.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-text.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def-email-voice.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-def.cdf
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-premium-email-premium.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\email-t1-bg.res
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\estatationery.gif
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\flashpreview.htm
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\HostOL\static\2\fs3.htm
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\2\keywords.idx
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\2\keywords_idx.idx
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\2\keywords_sdf.sdf
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\2\keywords1.dat
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\2\layout.cdf
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\2\linkpathlegal.txt
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\2\progress.res
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\2\s_icons_buttons.res
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\2\t2_bg.res
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\2\theweb.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\2\top7.cdf
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\2\Top7_theweb.mnu
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\2\tsd_bg.res
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\ads.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\business_promo.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\buttondir.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_1000.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_2000.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_3000.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bar.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar1.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar10.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar11.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar12.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar13.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar14.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar2.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar3.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar4.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar5.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar6.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar7.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar8.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_bbar9.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_logos.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_other.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_buttons_x.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\d_icons_weather.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\default.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\email-t1-bg.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\hotbar-premium.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\hotbar_promo.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\icons2.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\keywords.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\keywords_idx.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\keywords_sdf.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\keywords1.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\layout.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\linkpathlegal.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\progress.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\s_icons_buttons.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\samplegroups2.txt
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\samplegroups2.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\t2_bg.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\top7.xip
C:\Documents and Settings\Kamila\Dane aplikacji\Hotbar\v3.0\Hotbar\static\DownLoad\tsd_bg.xip
C:\Program Files\Hotbar
C:\Program Files\Hotbar\bin\4.5.2.0\Install.scr
C:\Program Files\Hotbar\hotbar.log

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_NTMLSVC
-------\Legacy_WINDOWS_MANAGEMENT_SERVICE


((((((((((((((((((((((((( Files Created from 2008-03-13 to 2008-04-13 )))))))))))))))))))))))))))))))
.

2008-04-13 22:36 . 2008-04-13 22:36 <DIR> d-------- C:\fixwareout
2008-04-13 22:09 . 2008-04-13 22:09 <DIR> d-------- C:\WINDOWS\ERUNT
2008-04-13 22:07 . 2008-04-13 22:07 <DIR> d--hs---- C:\FOUND.216
2008-04-13 22:01 . 2008-04-12 19:17 <DIR> d-------- C:\SDFix
2008-04-13 19:14 . 2008-04-13 19:14 <DIR> d-------- C:\Program Files\Trend Micro
2008-04-11 09:00 . 2008-04-11 09:00 <DIR> d--hs---- C:\FOUND.215
2008-04-10 15:58 . 2008-03-29 19:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys
2008-04-10 15:58 . 2008-03-29 19:35 20,560 --a------ C:\WINDOWS\system32\drivers\aswFsBlk.sys
2008-04-08 16:32 . 2008-04-08 16:32 <DIR> d--hs---- C:\FOUND.214
2008-04-05 14:40 . 2008-04-05 14:40 <DIR> d--hs---- C:\FOUND.213
2008-04-03 08:28 . 2008-04-03 08:28 <DIR> d--hs---- C:\FOUND.212
2008-04-02 14:44 . 2008-04-02 14:44 <DIR> d-------- C:\Program Files\eMule
2008-03-31 17:17 . 2008-03-31 17:17 <DIR> d--hs---- C:\FOUND.211
2008-03-28 13:50 . 2008-03-28 13:50 <DIR> d--hs---- C:\FOUND.210
2008-03-27 13:32 . 2008-03-27 13:32 <DIR> d--hs---- C:\FOUND.209
2008-03-27 08:23 . 2008-03-27 08:23 <DIR> d--hs---- C:\FOUND.208
2008-03-26 15:22 . 2008-03-26 15:22 <DIR> d--hs---- C:\FOUND.207
2008-03-25 10:45 . 2008-03-25 10:45 <DIR> d--hs---- C:\FOUND.206
2008-03-24 10:51 . 2008-03-24 10:51 <DIR> d--hs---- C:\FOUND.205
2008-03-19 19:08 . 2008-03-19 19:08 <DIR> d--hs---- C:\FOUND.204
2008-03-17 17:53 . 2008-03-17 17:53 <DIR> d--hs---- C:\FOUND.203
2008-03-17 14:31 . 2008-03-17 14:31 <DIR> d--hs---- C:\FOUND.202

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-29 17:45 1,146,232 ----a-w C:\WINDOWS\system32\aswBoot.exe
2008-03-29 17:35 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
2008-03-29 17:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
2008-03-29 17:27 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
2008-03-29 17:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
2008-03-29 17:23 95,608 ----a-w C:\WINDOWS\system32\AVASTSS.scr
2008-02-26 15:44 --------- d-----w C:\Program Files\Deutsch Translator 2
2008-02-23 16:14 65,536 ---ha-w C:\WINDOWS\Tasks\update.exe
2008-02-17 19:22 --------- d-----w C:\Program Files\Winamp Toolbar
2008-02-17 19:22 --------- d-----w C:\Program Files\Winamp Remote
2008-02-17 19:22 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar
2008-02-17 19:22 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\OrbNetworks
2008-02-05 16:09 70,220 ----a-w C:\syslziw.exe
2007-08-27 12:22 4,151 ----a-w C:\Program Files\INSTALL.LOG
2007-08-03 17:35 24,192 ----a-w C:\Documents and Settings\Kamila.CZAPIOR\usbsermptxp.sys
2007-08-03 17:35 22,768 ----a-w C:\Documents and Settings\Kamila.CZAPIOR\usbsermpt.sys
2007-03-19 18:13 6,422,611 ----a-w C:\Program Files\frostwire-4.13.1.6.windows.exe
1998-04-30 12:56 129,024 ----a-w C:\Program Files\UNWISE.EXE
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
2007-12-13 17:49 1185120 --a------ C:\Program Files\Winamp Toolbar\winamptb.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}]
2007-12-02 15:13 394680 --a------ C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareIEHelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= "C:\Program Files\Winamp Toolbar\winamptb.dll" [2007-12-13 17:49 1185120]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-12-13 17:49 1185120]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-08-04 00:44 1667584]
"AQQ"="C:\PROGRA~1\Wapster\AQQ\AQQ.exe" [ ]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2006-06-12 17:33 20002856]
"Cool burn"="C:\DOCUME~1\KAMILA~1.CZA\DANEAP~1\TRAYLI~1\buildmp3.exe" [ ]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\Gadu-Gadu\gg.exe" [2007-04-19 17:43 2101248]
"Orb"="C:\Program Files\Winamp Remote\bin\OrbTray.exe" [2008-01-07 21:02 495616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2003-11-25 09:43 5058560]
"nwiz"="nwiz.exe" [2003-11-25 09:43 741376 C:\WINDOWS\system32\nwiz.exe]
"EM_EXEC"="C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE" [2002-07-01 09:50 28672]
"zBrowser Launcher"="C:\Program Files\Logitech\iTouch\iTouch.exe" [2002-05-29 01:59 520192]
"SoundMan"="SOUNDMAN.EXE" [2003-08-15 09:34 57344 C:\WINDOWS\SOUNDMAN.EXE]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"HPDJ Taskbar Utility"="C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe" [2003-07-28 15:43 188416]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43 83608]
"HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe" [2003-06-25 11:24 49152]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2003-10-23 19:51 233472]
"DeviceDiscovery"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe" [2003-05-21 18:37 229437]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2005-12-10 15:57 133016]
"VolPanel"="C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" [2006-07-13 14:11 122880]
"AudioDrvEmulator"="C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" [2005-11-04 18:07 49152]
"CTHelper"="CTHELPER.EXE" [2006-05-24 06:20 17920 C:\WINDOWS\CTHELPER.EXE]
"CTxfiHlp"="CTXFIHLP.EXE" [2006-05-24 06:20 18944 C:\WINDOWS\system32\CTXFIHLP.EXE]
"UpdReg"="C:\WINDOWS\UpdReg.EXE" [2000-05-11 01:00 90112]
"WMAAD"="C:\Program Files\Sony\WALKMAN Launcher\WMAAD.exe" [2007-02-16 18:41 110592]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2008-01-15 23:54 37376]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-04 00:44 15360]

C:\Documents and Settings\Kamila.CZAPIOR\Menu Start\Programy\Autostart\
ICQ-PL - Auto Update.lnk - C:\Program Files\ICQ-PL\icq-pl.exe [2006-12-13 17:08:00 151768]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
MpegTV Station PCITV Remote Control.lnk - C:\Program Files\KWORLD\MpegTV Station PCITV\RemoteCtl.exe [2004-05-15 12:44:41 118784]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 20:05:56 65588]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]
C:\Program Files\D-Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\gcasServ]
C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasServ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hotbar]
C:\Program Files\Hotbar\bin\4.5.2.0\HbInst.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WeatherOnTray]
C:\Program Files\Hotbar\bin\4.5.2.0\WeatherOnTray.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fe89a422-256c-11dc-b9e2-000d61c1ff1e}]
\Shell\AutoRun\command - G:\-.exe
\Shell\explore\Command - G:\-.exe
\Shell\open\Command - G:\-.exe

.
Contents of the 'Scheduled Tasks' folder
"2008-04-13 21:00:26 C:\WINDOWS\Tasks\AC1B5AB49120CD04.job"
- c:\docume~1\kamila~1.cza\daneap~1\trayli~1\Beep htm soft.exe
"2008-03-15 23:34:02 C:\WINDOWS\Tasks\RunUpdate.job"
- c:\windows\system32
"2008-03-15 23:33:02 C:\WINDOWS\Tasks\EndUpdate.job"
- c:\windows\system32
"2008-04-13 21:11:28 C:\WINDOWS\Tasks\Update.job"
- c:\windows\tasks\update.exe
.
**************************************************************************

catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-13 23:16:05
Windows 5.1.2600 Dodatek Service Pack 2 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASWUPDSV.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
C:\WINDOWS\SYSTEM32\CTSVCCDA.EXE
C:\WINDOWS\SYSTEM32\NVSVC32.EXE
C:\WINDOWS\SYSTEM32\WDFMGR.EXE
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE
C:\WINDOWS\SYSTEM32\WSCNTFY.EXE
C:\PROGRAM FILES\PANASONIC\LUMIXSIMPLEVIEWER\PHLEAUTORUN.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE
C:\Program Files\ICQ-PL\X_icq-pl.exe
C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe
C:\WINDOWS\SYSTEM32\IMAPI.EXE
.
**************************************************************************
.
Completion time: 2008-04-13 23:34:33 - machine was rebooted
ComboFix-quarantined-files.txt 2008-04-13 21:30:46
Pre-Run: 11,992,203,264 bajtów wolnych
Post-Run: 11,911,987,200 bajt˘w wolnych

[wojtas]

log sie nie zmiescil wklej go na www.wklej.org lub wrzuc na jakis serwer np. www.sendspace.pl

[MmarcinekK]

Całość na ComboFix.txt
log z hijacka jest juz po odpaleniu firewareout

[wojtas]

Otworz notatnik i wklej w nim to:

File::
C:\WINDOWS\Tasks\update.exe
C:\syslziw.exe
C:\WINDOWS\Tasks\AC1B5AB49120CD04.job
C:\WINDOWS\Tasks\RunUpdate.job
C:\WINDOWS\Tasks\EndUpdate.job
C:\WINDOWS\Tasks\Update.job

Folder::
C:\FOUND.211
C:\FOUND.210
C:\FOUND.209
C:\FOUND.208
C:\FOUND.207
C:\FOUND.206
C:\FOUND.205
C:\FOUND.204
C:\FOUND.203
C:\FOUND.216
C:\FOUND.215
C:\FOUND.214
C:\FOUND.213
C:\FOUND.212
C:\FOUND.202

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WeatherOnTray]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hotbar]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fe89a422-256c-11dc-b9e2-000d61c1ff1e}]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Cool burn"=-

Plik >>> zapisz jako CFScript.txt .Plik przeciągnij i upuść na ikonę ComboFixa (tak jak tu ) . odczekaj az wygeneruje sie nowy log i go daj na forum oraz nowy log z hj