Hallo,

Enkele dagen terug is mijn PC besmet geraakt met iets wat er voor zorgde dat geen enkel programma meer kon draaien en wat allemaal pop-ups over virussen op mijn scherm gaf.

Dit werd veroorzaakt door een bestand sshnas21.dll (een component van de trojan Fakealert). Via instructies van het internet heb ik dit bestand (en zijn componenten) kunnen verwijderen en kon toen weer normaal met Windows werken.

Vervolgens bleek dat Windows nog steeds niet optimaal werkte, want ik kreeg regelmatig de melding "Generic host proces for win32-services has encountered a problem and needs to close". Windows zit vervolgens helemaal vast en de PC kan alleen opnieuw opgestart worden door de stekker er uit te halen.

Ik heb vervolgens diverse malen een virus scan uitgevoerd (met AVG) en Malwarebytes gedraaid. Beide geven aan dat er geen problemen zijn. Wel krijg ik zo nu en dan een melding van het AVG resident shield dat C:\windows\system32\drivers\qikclnld.sys besmet is door Trojaans Paard Generic16.CAOB.
Ik kan dit niet verwijderen of herstellen. Het bestand qikclnld.sys kan ik op die locatie ook niet terug vinden.

Vervolgens Windows terug gezet naar een herstelpunt voor de eerste besmetting, zonder resultaat.
Met de originele Windows CD een sfc /scannow uitgevoerd, zonder resultaat.

Ik blijf de meldingen over het Generic host proces en het Trojaans Paard Generic16.CAOB krijgen en zo nu en dan ook "Windows explorer has encountered a problem and needs to close".

Net opnieuw Malwarebytes gedraaid, gevolgd door TFC en Hijackthis.

Ik hoop dat u me kunt helpen bij dit probleem.


Met vriendelijke groet,

Dogegg


Hierbij de Malwarebytes log:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Databaseversie: 5648

Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

1-2-2011 22:47:49
mbam-log-2011-02-01 (22-47-49).txt

Scantype: Volledige scan (C:\|)
Objecten gescand: 145268
Verstreken tijd: 16 minuut/minuten, 37 seconde(n)

Geheugenprocessen geïnfecteerd: 0
Geheugenmodulen geïnfecteerd: 0
Registersleutels geïnfecteerd: 0
Registerwaarden geïnfecteerd: 0
Registerdata geïnfecteerd: 0
Mappen geïnfecteerd: 0
Bestanden geïnfecteerd: 0

Geheugenprocessen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Geheugenmodulen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Registersleutels geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Registerwaarden geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Registerdata geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Mappen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Bestanden geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)


En de Hijackthis log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:26:49, on 1-2-2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
E:\FreeRAM XP Pro\FreeRAM XP Pro.exe
C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\system32\msiexec.exe
F:\Tmp1\Virusscan\HJT\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
R3 - URLSearchHook: (no name) - *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O2 - BHO: (no name) - {A77CB536-A261-AD23-5DD7-7232D11C0452} - c:\windows\system32\yidlqnug.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [FreeRAM XP] "E:\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: NETGEAR WG111v3 Smart Wizard.lnk = C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://E:\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG8\Toolbar\ToolbarBroker.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - E:\SiSoftware\SiSoftware Sandra Professional Business XII.SP1\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - E:\SiSoftware\SiSoftware Sandra Professional Business XII.SP1\RpcSandraSrv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 5181 bytes

Hoi, :)
=====================

1.

Download ComboFix van één van deze locaties:
Link 1 (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)
Link 2 (http://www.infospyware.net/antimalware/combofix/)

* BELANGRIJK !!! Sla ComboFix.exe op je Bureaublad op.
>>Hier<< (http://www.bleepingcomputer.com/combofix/nl/hoe-dient-combofix-gebruikt-te-worden) kunt u lezen hoe u Combofix dient te gebruiken.
1. Bij Windows XP gebruikers zal er indien nodig gevraagd worden om de "Recovery Console" te installeren, sta dit dan toe (hiervoor is een actieve internet verbinding vereist)
2. Schakel alle antivirus- en antispywareprogramma's uit, want anders kunnen ze misschien conflicteren met ComboFix.
* (hier (http://www.bleepingcomputer.com/forums/topic114351.html) of hier (http://www.techsupportforum.com/security-center/virus-trojan-spyware-help/490111-how-disable-your-security-applications.html) staat een handleiding over hoe je deze kan uitschakelen:)
3. Het kan voorkomen dat de computer meerdere malen opnieuw gestart moet worden, dit is normaal.
4. Dubbelklik op "Combofix.exe" om de tool te starten.
5. Klik niet in het scherm van Combofix als deze actief is, hierdoor kan de 'tool' vastlopen.
* Noot !!! Als er een error wordt getoond met de melding "Illegal operation attempted on a registery key that has been marked for deletion." herstart dan de computer.
6. Wanneer ComboFix klaar is, zal het het een logbestand voor je maken. Post de inhoud van dit logbestand (te vinden als C:\ComboFix.txt) in je volgende bericht.


============
2.
Download Security Check by screen317 via een van de onderstaande links.
Plaats deze op je bureaublad:
http://screen317.spywareinfoforum.org/SecurityCheck.exe
Of
http://screen317.changelog.fr/SecurityCheck.exe
Start Security Check
Volg de Instructies in het scherm
Aan het eind verschijnt een log ( checkup.txt ) plaats de inhoud ervan in je volgende antwoord
Sluit Kladblok.

Succes,
Eveline. ;)

Hoi Eveline,

Bij het opstarten van ComboFix krijg ik de volgende melding:

"ComboFix cannot run when AVG is installed. This is due to AVG's targeting of ComboFix's files/processes. It would be dangerous to continue. Please uninstall AVG or use another tool."

Ik heb vervolgens geprobeerd AVG (versie 8.5 build 420) te de-installeren. Tijdens dit proces kreeg ik de volgende melding:

"Verwijderen mislukt. 1 fout en 2 waarschuwingen hebben plaatsgevonden. Klik op 'Details' voor meer informatie."

Als ik op 'Details' klik krijg ik de volgende informatie:

"
Lokale computer: installatie mislukt
Initialisatie:
Waarschuwing: Het controleren van de status van het item bestand avgsched.log is mislukt.
Bestand kan niet worden geopend. %FILE% =
"Ðocuments and Settings\All Users\Application Data\avg8\Log\avgsched.log"
Error 0xe001042c
Waarschuwing: Het controleren van de status van het item bestand avgwd.log is mislukt.
Bestand kan niet worden geopend. %FILE% =
"Ðocuments and Settings\All Users\Application Data\avg8\Log\avgwd.log"
Error 0xe001042c
Installatie:
Fout: Actie is mislukt voor registersleutel HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows: registersleutel maken….
Error 0x80070005
"

Het is hierdoor niet mogelijk AVG te de-installeren.


SecurityCheck geeft het volgende resultaat:

Results of screen317's Security Check version 0.99.8
Windows XP Service Pack 2
Out of date service pack!! (http://windows.microsoft.com/en-us/windows/help/learn-how-to-install-windows-xp-service-pack-3-sp3)
Internet Explorer 6 Out of date!
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Enabled!
AVG 8.5
Antivirus up to date!
```````````````````````````````
Anti-malware/Other Utilities Check:
Malwarebytes' Anti-Malware
CCleaner
Java(TM) 6 Update 6
Out of date Java installed!
Adobe Flash Player 10.0.12.36
Adobe Reader 9 - Nederlands
Out of date Adobe Reader installed!
Mozilla Firefox (3.0.19) Firefox Out of Date!
````````````````````````````````
Process Check:
objlist.exe by Laurent
AVG avgwdsvc.exe
AVG avgrsx.exe
AVG avgnsx.exe
AVG avgemc.exe
``````````End of Log````````````


Met vriendelijke groet,

Dogegg

Hoi, ;)

Probeer het onderstaande eens:

Is de installatie van AVG beschadigd en deze kan niet meer gedeïnstalleerd worden, dan kan je het alsnog verwijderen via deze methode:

Open een kladblokbestand.
Kopieer de onderstaande code, en plak deze in het kladblokbestand.
Sla het kladblokbestand op als CFScript_AVG2011.txt


REGISTRY::
[-HKEY_CURRENT_USER\AppEvents\EventLabels\avgtrayRSA lert]
[-HKEY_CURRENT_USER\AppEvents\EventLabels\avgtraySca nFinished]
[-HKEY_CURRENT_USER\AppEvents\EventLabels\avgtraySca nFinishedThreatFound]
[-HKEY_CURRENT_USER\AppEvents\EventLabels\avgtraySca nStarted]
[-HKEY_CURRENT_USER\AppEvents\EventLabels\avgtrayUpd End]
[-HKEY_CURRENT_USER\AppEvents\EventLabels\avgtrayUpd EndFail]
[-HKEY_CURRENT_USER\AppEvents\EventLabels\avgtrayUpd Start]
[-HKEY_CURRENT_USER\AppEvents\Schemes\Apps\avgtray]
[-HKEY_CURRENT_USER\Software\Avg]
[-HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\AV G9 Shell Extension]
[-HKEY_CLASSES_ROOT\.avgdx]
[-HKEY_CLASSES_ROOT\CLSID\{1152F8E0-69DB-4935-AFC3-59F8A5A86A3E}]
[-HKEY_CLASSES_ROOT\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
[-HKEY_CLASSES_ROOT\CLSID\{41B21542-2055-4212-A6F2-395CD109B14B}]
[-HKEY_CLASSES_ROOT\CLSID\{50A96677-4378-434d-9F4B-6B28B485933F}]
[-HKEY_CLASSES_ROOT\CLSID\{6F59E522-4689-156E-316C-D5B48819DE95} ]
[-HKEY_CLASSES_ROOT\CLSID\{86E8C5B0-75B6-4ff2-B04F-6789CC7AE386}]
[-HKEY_CLASSES_ROOT\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}]
[-HKEY_CLASSES_ROOT\CLSID\{EF0BB4CD-81FA-48AF-99B3-AB6C1F079BEC}]
[-HKEY_CLASSES_ROOT\CLSID\{F1FE4608-7924-4908-8E12-81CFA206F00A}]
[-HKEY_CLASSES_ROOT\CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}]
[-HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandle rs\AVG9 Shell Extension]
[-HKEY_CLASSES_ROOT\Installer\Features\36E852A15FD8B DA48923830A21D156BE]
[-HKEY_CLASSES_ROOT\Installer\Features\69BC3230A1222 404483A39DE4E0799CF]
[-HKEY_CLASSES_ROOT\Installer\Features\CFD2C1F142D26 0E3CB8B271543DA9F98]
[-HKEY_CLASSES_ROOT\Installer\Products\36E852A15FD8B DA48923830A21D156BE]
[-HKEY_CLASSES_ROOT\Installer\Products\69BC3230A1222 404483A39DE4E0799CF]
[-HKEY_CLASSES_ROOT\Installer\Products\CFD2C1F142D26 0E3CB8B271543DA9F98]
[-HKEY_CLASSES_ROOT\Installer\UpgradeCodes\06DD9E4F7 F3FF9C41BC2BD64A2CE18FE]
[-HKEY_CLASSES_ROOT\Installer\UpgradeCodes\38F747DBD C97B4E459142E21199F9D10]
[-HKEY_CLASSES_ROOT\Installer\UpgradeCodes\41A387AA3 A7A33D3590FA953D1350011]
[-HKEY_CLASSES_ROOT\LinkScannerIE.NavFilter]
[-HKEY_CLASSES_ROOT\LinkScannerIE.NavFilter.1]
[-HKEY_CLASSES_ROOT\MicroScanner.MicroScanner]
[-HKEY_CLASSES_ROOT\piffile\shellex\ContextMenuHandl ers\AVG9 Shell Extension]
[-HKEY_CLASSES_ROOT\PROTOCOLS\Handler\linkscanner]
[-HKEY_LOCAL_MACHINE\SOFTWARE\AVG]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DevDiv\VC]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\App Paths\AVGSE.DLL]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\{0323CB96-221A-4042-84A3-93EDE47099FC}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\{1A258E63-8DF5-4ADB-9832-38A0121D65EB}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\AlwaysUnloadDll]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\AVG]
DRIVER::
Avg
AVGIDSAgent
AVGIDSDriver
AVGIDSEH
AVGIDSFilter
AVGIDSShim
Avgldx86
Avgmfx86
Avgrkx86
Avgtdix
avgwd
FOLDER::
%SYSTEMDRIVE%\$AVG
%COMMONAPPDATA%\AVG10
%COMMONAPPDATA%\MFAData
%COMMONPROGRAMS%\AVG 2011
%APPDATA%\AVG10
%PROGRAMFILES%\AVG
%SYSTEM%\drivers\AVG
File::
%COMMONAPPDATA%\Common Files\6F59E522-4689-156E-316C-D5B48819DE95.dat
%COMMONDESKTOP%\AVG 2011.lnk
%SYSTEM%\drivers\AVGIDSDriver.sys
%SYSTEM%\drivers\AVGIDSEH.sys
%SYSTEM%\drivers\AVGIDSFilter.sys
%SYSTEM%\drivers\AVGIDSShim.sys
%SYSTEM%\drivers\avgldx86.sys
%SYSTEM%\drivers\avgmfx86.sys
%SYSTEM%\drivers\avgrkx86.sys
%SYSTEM%\drivers\avgtdix.sys


Start de computer in veilige modus: http://users.telenet.be/marcvn/spyware/1378056.htm

Sleep nu het bestand CFScript.txt in het bestand ComboFix.exe
http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif

ComboFix zal opnieuw starten.
Wanneer ComboFix klaar is, dit kan na een herstart zijn, opent er een logfile.
Post de inhoud van de logfile.

Hoi Eveline,

Hierbij de logfile van ComboFix:

ComboFix 11-01-31.02 - Martina 05-02-2011 20:14:10.1.1 - x86 MINIMAL
Microsoft Windows XP Professional 5.1.2600.2.1252.31.1033.18.1271.1055 [GMT 1:00]
Gestart vanuit: c:\documents and settings\Martina\Desktop\ComboFix.exe
gebruikte Opdracht switches :: c:\documents and settings\Martina\Desktop\CFScript_AVG2011.txt
AV: AVG Internet Security *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}

WAARSCHUWING - DE RECOVERY CONSOLE IS NIET OP DIT SYSTEEM GEINSTALLEERD !!

FILE ::
"c:\documents and settings\All Users\Application Data\Common Files\6F59E522-4689-156E-316C-D5B48819DE95.dat"
"c:\documents and settings\All Users\Desktop\AVG 2011.lnk"
"c:\windows\system32\drivers\AVGIDSDriver.sys"
"c:\windows\system32\drivers\AVGIDSEH.sys"
"c:\windows\system32\drivers\AVGIDSFilter.sys"
"c:\windows\system32\drivers\AVGIDSShim.sys"
"c:\windows\system32\drivers\avgldx86.sys"
"c:\windows\system32\drivers\avgmfx86.sys"
"c:\windows\system32\drivers\avgrkx86.sys"
"c:\windows\system32\drivers\avgtdix.sys"
.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\AVG
c:\program files\AVG\AVG8\avg.snu
c:\program files\AVG\AVG8\avg7api.dll
c:\program files\AVG\AVG8\avg8nl.chm
c:\program files\AVG\AVG8\avg8nl.lng
c:\program files\AVG\AVG8\avg8us.chm
c:\program files\AVG\AVG8\avg8us.lng
c:\program files\AVG\AVG8\avgabout.dll
c:\program files\AVG\AVG8\avgam.exe
c:\program files\AVG\AVG8\avgameh.dll
c:\program files\AVG\AVG8\avgamnot.dll
c:\program files\AVG\AVG8\avgapix.dll
c:\program files\AVG\AVG8\avgar8nl.chm
c:\program files\AVG\AVG8\avgar8us.chm
c:\program files\AVG\AVG8\avgas8nl.chm
c:\program files\AVG\AVG8\avgas8us.chm
c:\program files\AVG\AVG8\avgatend.stp
c:\program files\AVG\AVG8\avgatupd.stp
c:\program files\AVG\AVG8\avgbat.bav
c:\program files\AVG\AVG8\avgcclix.dll
c:\program files\AVG\AVG8\avgcfgex.exe
c:\program files\AVG\AVG8\avgcfgx.dll
c:\program files\AVG\AVG8\avgchk.exe
c:\program files\AVG\AVG8\avgchk.exe0
c:\program files\AVG\AVG8\avgclitx.dll
c:\program files\AVG\AVG8\avgcmgr.exe
c:\program files\AVG\AVG8\avgcorex.dll
c:\program files\AVG\AVG8\avgcrlpx.dll
c:\program files\AVG\AVG8\avgcsrvx.exe
c:\program files\AVG\AVG8\avgdg8nl.chm
c:\program files\AVG\AVG8\avgdg8us.chm
c:\program files\AVG\AVG8\avgdiag.dll
c:\program files\AVG\AVG8\avgdiag.exe
c:\program files\AVG\AVG8\avgdiagex.exe
c:\program files\AVG\AVG8\avgdumpx.exe
c:\program files\AVG\AVG8\avgemc.exe
c:\program files\AVG\AVG8\avgfrw.exe
c:\program files\AVG\AVG8\avgfw8nl.chm
c:\program files\AVG\AVG8\avgfw8us.chm
c:\program files\AVG\AVG8\avginet.dll
c:\program files\AVG\AVG8\avgiproxy.exe
c:\program files\AVG\AVG8\avglngx.dll
c:\program files\AVG\AVG8\avglogx.dll
c:\program files\AVG\AVG8\avglvex.dll
c:\program files\AVG\AVG8\avgmail.dll
c:\program files\AVG\AVG8\avgmvflx.dll
c:\program files\AVG\AVG8\avgmwdef_nl.mht
c:\program files\AVG\AVG8\avgmwdef_us.mht
c:\program files\AVG\AVG8\avgnsx.exe
c:\program files\AVG\AVG8\avgoff2k.dll
c:\program files\AVG\AVG8\avgpp.dll
c:\program files\AVG\AVG8\avgrktx.dll
c:\program files\AVG\AVG8\avgrsx.exe
c:\program files\AVG\AVG8\avgscanx.dll
c:\program files\AVG\AVG8\avgscanx.exe
c:\program files\AVG\AVG8\avgsched.dll
c:\program files\AVG\AVG8\avgse.dll
c:\program files\AVG\AVG8\avgsrmax.exe
c:\program files\AVG\AVG8\avgsrmx.dll
c:\program files\AVG\AVG8\avgssie.dll
c:\program files\AVG\AVG8\avgst8nl.chm
c:\program files\AVG\AVG8\avgst8us.chm
c:\program files\AVG\AVG8\avgtbapi.dll
c:\program files\AVG\AVG8\AVGToolbarInstall.exe
c:\program files\AVG\AVG8\avgtray.exe
c:\program files\AVG\AVG8\avgui.exe
c:\program files\AVG\AVG8\avguiadv.dll
c:\program files\AVG\AVG8\avguires.dll
c:\program files\AVG\AVG8\avgupd.dll
c:\program files\AVG\AVG8\avgupd.exe
c:\program files\AVG\AVG8\avgvvx.dll
c:\program files\AVG\AVG8\avgwd.dll
c:\program files\AVG\AVG8\avgwdsvc.exe
c:\program files\AVG\AVG8\avgwdwsc.dll
c:\program files\AVG\AVG8\avgwebui.dll
c:\program files\AVG\AVG8\avgxch32.dll
c:\program files\AVG\AVG8\avgxpl.dll
c:\program files\AVG\AVG8\cf.dat
c:\program files\AVG\AVG8\contacts_nl.html
c:\program files\AVG\AVG8\contacts_us.html
c:\program files\AVG\AVG8\dbghelp.dll
c:\program files\AVG\AVG8\dfncfg.dat
c:\program files\AVG\AVG8\fixcfg.exe
c:\program files\AVG\AVG8\fixfp.exe
c:\program files\AVG\AVG8\Icons\background_middle_gray.gif
c:\program files\AVG\AVG8\Icons\background_middle_green.gif
c:\program files\AVG\AVG8\Icons\background_middle_orange.gif
c:\program files\AVG\AVG8\Icons\background_middle_red.gif
c:\program files\AVG\AVG8\Icons\background_middle_yellow.gif
c:\program files\AVG\AVG8\Icons\background_top_gray.gif
c:\program files\AVG\AVG8\Icons\background_top_green.gif
c:\program files\AVG\AVG8\Icons\background_top_orange.gif
c:\program files\AVG\AVG8\Icons\background_top_red.gif
c:\program files\AVG\AVG8\Icons\background_top_yellow.gif
c:\program files\AVG\AVG8\Icons\block-doc.gif
c:\program files\AVG\AVG8\Icons\blocked.gif
c:\program files\AVG\AVG8\Icons\border_bottom_gray.gif
c:\program files\AVG\AVG8\Icons\border_bottom_green.gif
c:\program files\AVG\AVG8\Icons\border_bottom_orange.gif
c:\program files\AVG\AVG8\Icons\border_bottom_red.gif
c:\program files\AVG\AVG8\Icons\border_bottom_yellow.gif
c:\program files\AVG\AVG8\Icons\border_top_gray.gif
c:\program files\AVG\AVG8\Icons\border_top_green.gif
c:\program files\AVG\AVG8\Icons\border_top_orange.gif
c:\program files\AVG\AVG8\Icons\border_top_red.gif
c:\program files\AVG\AVG8\Icons\border_top_yellow.gif
c:\program files\AVG\AVG8\Icons\box_bottom_red.gif
c:\program files\AVG\AVG8\Icons\box_top_red.gif
c:\program files\AVG\AVG8\Icons\caution.gif
c:\program files\AVG\AVG8\Icons\click_here_gray.gif
c:\program files\AVG\AVG8\Icons\click_here_green.gif
c:\program files\AVG\AVG8\Icons\click_here_orange.gif
c:\program files\AVG\AVG8\Icons\click_here_red.gif
c:\program files\AVG\AVG8\Icons\click_here_yellow.gif
c:\program files\AVG\AVG8\Icons\clock.gif
c:\program files\AVG\AVG8\Icons\close.gif
c:\program files\AVG\AVG8\Icons\icons_blocked.gif
c:\program files\AVG\AVG8\Icons\icons_caution.gif
c:\program files\AVG\AVG8\Icons\icons_close.gif
c:\program files\AVG\AVG8\Icons\icons_safe.gif
c:\program files\AVG\AVG8\Icons\icons_unknown.gif
c:\program files\AVG\AVG8\Icons\icons_warning.gif
c:\program files\AVG\AVG8\Icons\LS_Logo_Results.gif
c:\program files\AVG\AVG8\Icons\safe.gif
c:\program files\AVG\AVG8\Icons\unknown.gif
c:\program files\AVG\AVG8\Icons\warning.gif
c:\program files\AVG\AVG8\imsdk32.dll
c:\program files\AVG\AVG8\libsasl.dll
c:\program files\AVG\AVG8\license_nl.txt
c:\program files\AVG\AVG8\license_us.txt
c:\program files\AVG\AVG8\Notification\arrow.png
c:\program files\AVG\AVG8\Notification\arrow_big.png
c:\program files\AVG\AVG8\Notification\arrow_red.png
c:\program files\AVG\AVG8\Notification\AVGTBUpgrade2.exe
c:\program files\AVG\AVG8\Notification\banner1.png
c:\program files\AVG\AVG8\Notification\bkg_body.png
c:\program files\AVG\AVG8\Notification\bkg_body2.png
c:\program files\AVG\AVG8\Notification\bkg_header.png
c:\program files\AVG\AVG8\Notification\bkg_table.png
c:\program files\AVG\AVG8\Notification\bkg_table_small.png
c:\program files\AVG\AVG8\Notification\bkg_title.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-cz.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-da.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-de.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-es-la.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-es.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-fr.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-id.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-it.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-jp.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-ko.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-ms.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-nl.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-pl.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-pt.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-pt_br.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-ru.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-sc.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-sk.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-tr.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-zh.png
c:\program files\AVG\AVG8\Notification\box_shot_ais-zt.png
c:\program files\AVG\AVG8\Notification\box_shot_ais.png
c:\program files\AVG\AVG8\Notification\btn_recommended-da.png
c:\program files\AVG\AVG8\Notification\btn_recommended-de.png
c:\program files\AVG\AVG8\Notification\btn_recommended-en.png
c:\program files\AVG\AVG8\Notification\btn_recommended-es-la.png
c:\program files\AVG\AVG8\Notification\btn_recommended-es.png
c:\program files\AVG\AVG8\Notification\btn_recommended-fr.png
c:\program files\AVG\AVG8\Notification\btn_recommended-id.png
c:\program files\AVG\AVG8\Notification\btn_recommended-it.png
c:\program files\AVG\AVG8\Notification\btn_recommended-jp.png
c:\program files\AVG\AVG8\Notification\btn_recommended-ko.png
c:\program files\AVG\AVG8\Notification\btn_recommended-ms.png
c:\program files\AVG\AVG8\Notification\btn_recommended-nl.png
c:\program files\AVG\AVG8\Notification\btn_recommended-pl.png
c:\program files\AVG\AVG8\Notification\btn_recommended-pt.png
c:\program files\AVG\AVG8\Notification\btn_recommended-pt_br.png
c:\program files\AVG\AVG8\Notification\btn_recommended-sc.png
c:\program files\AVG\AVG8\Notification\btn_recommended-tr.png
c:\program files\AVG\AVG8\Notification\btn_recommended-zh.png
c:\program files\AVG\AVG8\Notification\btn_recommended-zt.png
c:\program files\AVG\AVG8\Notification\btn_recommended.png
c:\program files\AVG\AVG8\Notification\btn_red.png
c:\program files\AVG\AVG8\Notification\btn_red_300.png
c:\program files\AVG\AVG8\Notification\btn_red_right.png
c:\program files\AVG\AVG8\Notification\button_left.png
c:\program files\AVG\AVG8\Notification\button_left_hover.png
c:\program files\AVG\AVG8\Notification\button_right.png
c:\program files\AVG\AVG8\Notification\button_right_hover.png
c:\program files\AVG\AVG8\Notification\BuyFull_cz.htm
c:\program files\AVG\AVG8\Notification\BuyFull_da.htm
c:\program files\AVG\AVG8\Notification\BuyFull_fr.htm
c:\program files\AVG\AVG8\Notification\BuyFull_ge.htm
c:\program files\AVG\AVG8\Notification\BuyFull_hu.htm
c:\program files\AVG\AVG8\Notification\BuyFull_id.htm
c:\program files\AVG\AVG8\Notification\BuyFull_in.htm
c:\program files\AVG\AVG8\Notification\BuyFull_it.htm
c:\program files\AVG\AVG8\Notification\BuyFull_jp.htm
c:\program files\AVG\AVG8\Notification\BuyFull_ko.htm
c:\program files\AVG\AVG8\Notification\BuyFull_ms.htm
c:\program files\AVG\AVG8\Notification\BuyFull_nl.htm
c:\program files\AVG\AVG8\Notification\BuyFull_pb.htm
c:\program files\AVG\AVG8\Notification\BuyFull_pl.htm
c:\program files\AVG\AVG8\Notification\BuyFull_pt.htm
c:\program files\AVG\AVG8\Notification\BuyFull_ru.htm
c:\program files\AVG\AVG8\Notification\BuyFull_sc.htm
c:\program files\AVG\AVG8\Notification\BuyFull_sk.htm
c:\program files\AVG\AVG8\Notification\BuyFull_sp.htm
c:\program files\AVG\AVG8\Notification\BuyFull_tr.htm
c:\program files\AVG\AVG8\Notification\BuyFull_us.htm
c:\program files\AVG\AVG8\Notification\BuyFull_zh.htm
c:\program files\AVG\AVG8\Notification\BuyFull_zt.htm
c:\program files\AVG\AVG8\Notification\cmp2008_App_Free_8_fr. html
c:\program files\AVG\AVG8\Notification\cmp2008_App_Free_8_it. html
c:\program files\AVG\AVG8\Notification\cmp2008_App_Free_8_nl. html
c:\program files\AVG\AVG8\Notification\cmp2008_App_Free_8_pt. html
c:\program files\AVG\AVG8\Notification\cmp2008_App_Free_8_sp. html
c:\program files\AVG\AVG8\Notification\cmp2008_App_Free_8_us. html
c:\program files\AVG\AVG8\Notification\cmp2008_App_Paid_8_fr. html
c:\program files\AVG\AVG8\Notification\cmp2008_App_Paid_8_it. html
c:\program files\AVG\AVG8\Notification\cmp2008_App_Paid_8_nl. html
c:\program files\AVG\AVG8\Notification\cmp2008_App_Paid_8_pt. html
c:\program files\AVG\AVG8\Notification\cmp2008_App_Paid_8_sp. html
c:\program files\AVG\AVG8\Notification\cmp2008_App_Paid_8_us. html
c:\program files\AVG\AVG8\Notification\free8085_message_01_us .html
c:\program files\AVG\AVG8\Notification\head_blue_bg.png
c:\program files\AVG\AVG8\Notification\icon_bulb.gif
c:\program files\AVG\AVG8\Notification\icon_check.png
c:\program files\AVG\AVG8\Notification\image_app_-en.png
c:\program files\AVG\AVG8\Notification\logo.png
c:\program files\AVG\AVG8\Notification\logo_avg8.gif
c:\program files\AVG\AVG8\Notification\screenshot-cz.png
c:\program files\AVG\AVG8\Notification\screenshot-da.png
c:\program files\AVG\AVG8\Notification\screenshot-de.png
c:\program files\AVG\AVG8\Notification\screenshot-en.png
c:\program files\AVG\AVG8\Notification\screenshot-es-la.png
c:\program files\AVG\AVG8\Notification\screenshot-es.png
c:\program files\AVG\AVG8\Notification\screenshot-fr.png
c:\program files\AVG\AVG8\Notification\screenshot-hu.png
c:\program files\AVG\AVG8\Notification\screenshot-id.png
c:\program files\AVG\AVG8\Notification\screenshot-it.png
c:\program files\AVG\AVG8\Notification\screenshot-jp.png
c:\program files\AVG\AVG8\Notification\screenshot-ko.png
c:\program files\AVG\AVG8\Notification\screenshot-ms.png
c:\program files\AVG\AVG8\Notification\screenshot-nl.png
c:\program files\AVG\AVG8\Notification\screenshot-pl.png
c:\program files\AVG\AVG8\Notification\screenshot-pt.png
c:\program files\AVG\AVG8\Notification\screenshot-pt_br.png
c:\program files\AVG\AVG8\Notification\screenshot-ru.png
c:\program files\AVG\AVG8\Notification\screenshot-sc.png
c:\program files\AVG\AVG8\Notification\screenshot-sk.png
c:\program files\AVG\AVG8\Notification\screenshot-tr.png
c:\program files\AVG\AVG8\Notification\screenshot-zh.png
c:\program files\AVG\AVG8\Notification\screenshot-zt.png
c:\program files\AVG\AVG8\Notification\screenshot.png
c:\program files\AVG\AVG8\Notification\style.css
c:\program files\AVG\AVG8\Notification\styles.css
c:\program files\AVG\AVG8\Notification\tbfake.txt
c:\program files\AVG\AVG8\Notification\update-payment-details-bkg.png
c:\program files\AVG\AVG8\Notification\update-payment-details-btn.png
c:\program files\AVG\AVG8\Notification\update-payment-details-btn2.png
c:\program files\AVG\AVG8\Notification\update-payment-details-btn3.png
c:\program files\AVG\AVG8\Notification\update-payment-details-style.css
c:\program files\AVG\AVG8\Notification\update-payment-details.htm
c:\program files\AVG\AVG8\Notification\upg8to9mes7-cz.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-da.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-fr.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-ge.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-hu.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-id.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-it.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-jp.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-ko.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-ms.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-nl.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-pb.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-pl.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-pt.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-ru.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-sc.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-sk.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-sp.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-tr.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-us.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-zh.html
c:\program files\AVG\AVG8\Notification\upg8to9mes7-zt.html
c:\program files\AVG\AVG8\ph.dat
c:\program files\AVG\AVG8\saslcrammd5.dll
c:\program files\AVG\AVG8\sasldigestmd5.dll
c:\program files\AVG\AVG8\sasllogin.dll
c:\program files\AVG\AVG8\saslplain.dll
c:\program files\AVG\AVG8\sb.dat
c:\program files\AVG\AVG8\sb.dat.xcd
c:\program files\AVG\AVG8\sb2.dat
c:\program files\AVG\AVG8\sc.dat
c:\program files\AVG\AVG8\sc.dat.xcd
c:\program files\AVG\AVG8\setup.dat
c:\program files\AVG\AVG8\setup.exe
c:\program files\AVG\AVG8\setupnl.lns
c:\program files\AVG\AVG8\setupus.lns
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 26\chrome\content\config.xml
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 26\chrome\content\html\tabswelcome.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 26\chrome\content\html\tabswelcome_ie7header.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 26\chrome\content\Languages\en.ini
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 26\chrome\skin\searchProvider.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 26\sp.xml
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 41\chrome\content\config.xml
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 41\chrome\content\html\tabswelcome.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 41\chrome\content\html\tabswelcome_ie7header.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 41\chrome\content\Languages\en.ini
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 41\chrome\skin\searchProvider.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 41\chrome\skin\spYandex.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 41\sp.xml
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 42\chrome\content\config.xml
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 42\chrome\content\html\tabswelcome.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 42\chrome\content\html\tabswelcome_ie7header.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 42\chrome\content\Languages\en.ini
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 42\chrome\skin\searchProvider.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 42\chrome\skin\spGeneralSearch.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 42\sp.xml
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 49\chrome\content\config.xml
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 49\chrome\content\html\tabswelcome.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 49\chrome\content\html\tabswelcome_ie7header.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 49\chrome\content\Languages\en.ini
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 49\chrome\skin\searchProvider.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 49\chrome\skin\spBaidu.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ch_ 49\sp.xml
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\cha nnels.dat
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome.manifest
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\after_install.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\after_uninstall.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\autocomplete-popup.xml
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\avg\avgtbapi.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\avg\customwrapper.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\avg\partFiles.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\avg\statusindicator.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\config.xml
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\contexthtml.xul
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\custom.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\ex\marquee.xml
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\about.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_AB.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_ABSearch.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_arrow.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_bottom_shadow.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_confirm.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_confirmAVGSafe.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_confirmTbr.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_general.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_IDV.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_IDV1.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_IDV2.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_logo.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_protection.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_search.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_searchSearchBox.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_searchSearchBoxBaidu.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_searchSearchBoxBlank.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_SPupdate.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_SPupdateSearchBox.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_style.css
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\bubble_top_shadow.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\deletehistory_processing.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\icoUBAccess.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\icoUBCalc.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\icoUBExcel.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\icoUBExplorer.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\icoUBMediaPlayer.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\icoUBNotepad.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\icoUBOutlook.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\icoUBOutlookExpress.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\icoUBPaint.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\icoUBPowerPoint.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\icoUBWord.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\rssreader_!backgroundGrey.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\rssreader_!backgroundRed.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\rssreader_!bullet.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\rssreader_!close.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\rssreader_!icoiDNES.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\rssreader_!icoRead.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\rssreader_!icoRSS.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\rssreader_!icoSimple.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\rssreader_!icoUnread.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\rssreader_!logo.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\rssreader_!settings.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\rssreader_!tabHilighted.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\rssreader_advanced.css
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\rssreader_advanced.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\rssreader_config.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\rssreader_simple.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_askdialog.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_background.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_checkboxdialog.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_closedialog.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_icohelp.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_icoQuest.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_icoRisk.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_icoSafe.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_icoUnkn.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_loading.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_logo.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_main.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_menu1.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_menu2.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_menu3.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_menu4.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\settings_style.css
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\tabswelcome.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\tabswelcome_button.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\tabswelcome_button_hilight.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\tabswelcome_buttonHilight.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\tabswelcome_ie7header.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\tabswelcome_poweredByBlank.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\tabswelcome_poweredByYahoo.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\tbapi.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\toolbarprotector_window.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\updater_error.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\updater_ok.gif
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\html\updater_processing.htm
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\htmlwindow.xul
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\imageButton.xml
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\Languages\en.ini
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\Languages\languages.cfg
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\bubbles.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\cache.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\chevron.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\cookie.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\directory.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\dns.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\dom.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\dragdrop.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\file.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\include.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\include_lite.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\loader.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\log.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\mutex.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\newtab.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\pass.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\prefs.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\privacy.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\refreshControl.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\registry.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\resources.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\searches.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\searchplugin.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\searchProvs.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\settings.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\splitter.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\stats.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\tabs.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\translation.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\update.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\updatecontrol.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\updateext.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\updater.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\updates.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\usefulbuttons.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\utils.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\visibility.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\wrapper.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\xml.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\xmlconfig.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libs\xmlitems.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libsex\mail.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libsex\mime.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libsex\pop3.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libsex\rss.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libsex\ticker.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\libsex\xmlitemsex.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\overlay.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\overlay.xul
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\content\searchProviders.xml
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\icons\default\htmlwindow.ico
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\chevron.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\contexthtml.css
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\dragdrop.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\gripper.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoAbout.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoAVGInfo.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoGoButtonBG.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoHomepage.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoIdentityGuard.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoNoProtection.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoOptions.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoProtection.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoProtectionLimited.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoRSS.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoRSSBlue.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoRSSGray.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoRSSGreen.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoTrash.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoUBAccess.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoUBCalc.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoUBExcel.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoUBExplorer.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoUBMediaPlayer.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoUBNotepad.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoUBOutlook.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoUBOutlookExpress.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoUBPaint.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoUBPowerPoint.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoUBWord.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\icoUpdate.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\logo.ico
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\logo.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\overlay.css
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\rssreader_!icoRead.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\rssreader_!icoUnread.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\Search_provider_drop.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\searchProvider.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\settings_icon.ico
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\slider.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\spImages.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\spLocal.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\spShopping.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\spVideo.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\spWiki.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\spYahoo.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\spYahooBG.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\spYahooBG_small.png
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\chr ome\skin\toolbarprotector_icon.ico
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\com ponents\autocomplete.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\com ponents\avgapi.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\com ponents\IGeared_tavgp_xputils.xpt
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\com ponents\IGeared_tavgp_xputils2.dll
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\com ponents\IGeared_tavgp_xputils3.dll
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\com ponents\IGeared_tavgp_xputils35.dll
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\com ponents\notifications.js
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\com ponents\xpavgdatabaseversion.xpt
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\com ponents\xpavgprogramversion.xpt
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\com ponents\xpavgsearchratingsconfig.xpt
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\com ponents\xpavgtbapi.dll
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\com ponents\xpavgtbapi.xpt
c:\program files\AVG\AVG8\Toolbar.old\Firefox\avg@igeared\ins tall.rdf
c:\program files\AVG\AVG8\Toolbar.old\Firefox\sp.xml
c:\program files\AVG\AVG8\Toolbar.old\IE8Lib.dll
c:\program files\AVG\AVG8\Toolbar.old\IEToolbar.dll
c:\program files\AVG\AVG8\Toolbar.old\IEToolbar.dll.dmp
c:\program files\AVG\AVG8\Toolbar.old\ToolbarBroker.exe
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\23_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\26_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\27_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\29_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\38_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\39_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\40_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\41_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\42_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\43_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\44_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\45_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\46_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\48_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\49_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\50_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\56_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\57_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\58_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\59_sp.x ml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\channel s.dat
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome. manifest
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\26_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\27_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\29_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\38_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\39_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\40_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\41_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\42_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\43_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\44_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\45_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\46_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\48_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\49_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\50_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\56_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\57_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\58_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\59_config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\autocomplete-popup.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\config.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\contexthtml.xul
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\custom.js
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\26_tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\27_tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\29_tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\38_tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\41_tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\42_tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\43_tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\44_tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\45_tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\46_tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\49_tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\50_tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\56_tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\58_tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\59_tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\about.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bg_arr.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bg_body.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bg_main-heading.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bg_rule-overlay.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bg_rule.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bg_tab.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_AB.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_ABSearch.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_arrow.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_bottom_shadow.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_confirm.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_confirmAVGSafe.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_confirmEmail.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_confirmFacebook.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_confirmIco_fb.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_confirmIco_notifier.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_confirmIco_weather.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_confirmTbr.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_confirmWeather.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_egs.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_general.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_IDV1.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_IDV2.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_logo.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_protection.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_search.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_searchSearchBox.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_searchSearchBoxBaidu.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_searchSearchBoxBlank.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_SPupdate.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_SPupdateSearchBox.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_style.css
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_top_shadow.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\bubble_update.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\deletehistory_processing.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_config.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifier.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierBackground.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierBullet.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierClose.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierDown.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierDownActive.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierDownDisabled.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierIco.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierNext.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierNextActive.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierNextDisabled.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierPrevious.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierPreviousActive.g if
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierPreviousDisabled .gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierScrollbar.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierSettings.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierUp.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierUpActive.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\emailchecker_notifierUpDisabled.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\Facebook_config.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\Facebook_error.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\facebook_logo.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\Facebook_notifier.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\Facebook_notifierIco.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\Facebook_status.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\facebook_style.css
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\facebook_textbox.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\Facebook_user.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\icoUBAccess.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\icoUBCalc.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\icoUBExcel.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\icoUBExplorer.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\icoUBMediaPlayer.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\icoUBNotepad.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\icoUBOutlook.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\icoUBOutlookExpress.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\icoUBPaint.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\icoUBPowerPoint.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\icoUBSkype.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\icoUBWord.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_!backgroundGrey.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_!backgroundRed.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_!bullet.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_!close.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_!icoiDNES.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_!icoRead.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_!icoRSS.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_!icoSimple.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_!icoUnread.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_!logo.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_!settings.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_!tabHilighted.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_advanced.css
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_advanced.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_bullet-1.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_config.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\rssreader_simple.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_askdialog.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_background.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_checkboxdialog.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_closedialog.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_closedialog.htm.old
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_closedialog_bg1.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_closedialog_bg2.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_icohelp.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_icohelp.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_icoQuest.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_icoRisk.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_icoSafe.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_icoUnkn.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_loading.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_logo.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_main.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_menu1.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_menu2.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_menu3.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_menu4.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\settings_style.css
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_arrow_gray.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_arrow_green.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_arrow_orange.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_arrow_red.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_arrow_yellow.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_background_middle_gray.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_background_middle_green.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_background_middle_orange.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_background_middle_red.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_background_middle_yellow.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_background_top_gray.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_background_top_green.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_background_top_orange.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_background_top_red.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_background_top_yellow.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_blocked.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_border_bottom_gray.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_border_bottom_green.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_border_bottom_orange.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_border_bottom_red.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_border_bottom_yellow.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_border_top_gray.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_border_top_green.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_border_top_orange.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_border_top_red.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_border_top_yellow.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_caution.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_dangerous.html
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_icons_blocked.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_icons_caution.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_icons_close.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_icons_safe.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_icons_unknown.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_icons_warning.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_LS_Logo_Results.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_questionable.html
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_risky.html
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_safe.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_safe.html
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_unknown.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_unknown.html
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_waiting.html
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\ssb_warning.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\tabswelcome.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\tabswelcome_button.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\tabswelcome_button_hilight.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\tabswelcome_buttonHilight.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\tabswelcome_ie7footer.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\tabswelcome_ie7header.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\tabswelcome_poweredByBlank.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\tabswelcome_poweredByYahoo.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\tbapi.js
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\toolbarprotector_window.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\updater_error.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\updater_ok.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\updater_processing.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\weather_bg.gif
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\weather_error.htm
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\weather_img.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\html\weather_x.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\htmlwindow.xul
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\imageButton.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\26_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\38_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\39_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\40_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\41_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\42_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\43_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\44_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\45_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\46_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\48_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\49_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\50_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\56_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\57_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\58_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\59_en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\en.ini
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\Languages\languages.cfg
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\libs\include.js
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\libs\include_lite.js
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\marquee.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\overlay.js
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\overlay.xul
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ content\searchProviders.xml
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ icons\default\htmlwindow.ico
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\38_searchProvider.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\38_spBaidu.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\39_spGeneralSearch.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\40_searchProvider.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\40_spYandex.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\41_searchProvider.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\41_spYandex.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\42_spGeneralSearch.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\43_searchProvider.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\43_spYandex.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\44_spGeneralSearch.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\45_searchProvider.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\45_spYandex.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\46_spGeneralSearch.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\48_searchProvider.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\48_spBaidu.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\49_searchProvider.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\49_spBaidu.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\50_searchProvider.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\50_spBaidu.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\56_spYahoo.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\57_spYahoo.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\58_spYahoo.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\59_spYahoo.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\chevron.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\contexthtml.css
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\dragdrop.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\emailchecker_icoEmail.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\emailchecker_icoEmailNew.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\gripper.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoAbout.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoAVGInfo.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoFacebook_facebook.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoFacebook_FriendReq.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoFacebook_messages.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoFacebook_pokes.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoGoButtonBG.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoHomepage.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoIdentityGuard.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoOptions.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoProtection.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoProtectionLimited.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoRSS.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoRSSBlue.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoRSSGray.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoRSSGreen.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoShieldButtonBG_D.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoShieldButtonBG_Q.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoShieldButtonBG_R.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoShieldButtonBG_S.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoShieldButtonBG_U.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoShieldButtonBG_W.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoTrash.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoUBAccess.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoUBCalc.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoUBExcel.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoUBExplorer.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoUBMediaPlayer.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoUBNotepad.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoUBOutlook.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoUBOutlookExpress.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoUBPaint.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoUBPowerPoint.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoUBSkype.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoUBWord.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoUpdate.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\icoWeather.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\logo.ico
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\logo.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\overlay.css
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\rssreader_!icoRead.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\rssreader_!icoUnread.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\Search_provider_drop.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\searchProvider.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\settings_icon.ico
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\slider.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\spImages.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\spLocal.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\spSearch.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\spShopping.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\spVideo.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\spWiki.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\spYahooBG.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\spYahooBG_small.png
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\chrome\ skin\toolbarprotector_icon.ico
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\compone nts\autocomplete.js
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\compone nts\avgapi.js
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\compone nts\facebook.js
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\compone nts\IGeared_tavgp_xputils.xpt
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\compone nts\IGeared_tavgp_xputils2.dll
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\compone nts\IGeared_tavgp_xputils3.dll
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\compone nts\IGeared_tavgp_xputils35.dll
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\compone nts\notifications.js
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\compone nts\sp.js
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\compone nts\xpavgdatabaseversion.xpt
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\compone nts\xpavgprogramversion.xpt
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\compone nts\xpavgsearchratingsconfig.xpt
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\compone nts\xpavgtbapi.dll
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\compone nts\xpavgtbapi.xpt
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\compone nts\xpavgverdicts.xpt
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\install .rdf
c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\xpfunc. dll
c:\program files\AVG\AVG8\Toolbar\Firefox\sp.xml
c:\program files\AVG\AVG8\Toolbar\IE8Lib.dll
c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll
c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll_1294094318232 81250.exh
c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll_1294094318232 81250_f.dmp
c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll_1294094318232 81250_m.dmp
c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll_1294094878367 18750.exh
c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll_1294094878367 18750_f.dmp
c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll_1294094878367 18750_m.dmp
c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll_1294097838355 21930.exh
c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll_1294097838355 21930_f.dmp
c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll_1294097838355 21930_m.dmp
c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll_1294106335365 62500.exh
c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll_1294106335365 62500_f.dmp
c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll_1294106335365 62500_m.dmp
c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll_1294106582190 62500.exh
c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll_1294106582190 62500_f.dmp
c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll_1294106582190 62500_m.dmp
c:\program files\AVG\AVG8\Toolbar\ToolbarBroker.exe
c:\program files\AVG\AVG8\updatecomps.bak
c:\windows\system32\config\systemprofile\duote.exe
c:\windows\system32\drivers\AVG
c:\windows\system32\drivers\AVG\avi7.avg
c:\windows\system32\drivers\AVG\incavi.avm
c:\windows\system32\drivers\AVG\microavi.avg
c:\windows\system32\drivers\AVG\miniavi.avg
c:\windows\system32\drivers\avgldx86.sys
c:\windows\system32\drivers\avgmfx86.sys
c:\windows\system32\drivers\avgrkx86.sys
c:\windows\system32\drivers\avgtdix.sys
c:\windows\system32\drivers\ozrfswmz.sys

.
\\.\PhysicalDrive0 - Bootkit TDL4 was found and disinfected
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_AVGLDX86
-------\Legacy_AVGMFX86
-------\Legacy_AVGRKX86
-------\Legacy_AVGTDIX
-------\Service_AVG
-------\Service_AvgLdx86
-------\Service_AvgMfx86
-------\Service_AvgRkx86
-------\Service_AvgTdiX
-------\Service_AVG Security Toolbar Service
-------\Service_AVG Security Toolbar Service


(((((((((((((((((((( Bestanden Gemaakt van 2011-01-05 to 2011-02-05 ))))))))))))))))))))))))))))))
.

2011-02-05 19:05 . 2011-02-05 19:07 -------- d-----w- C:\32788R22FWJFW
2011-02-01 22:26 . 2011-02-01 22:26 388096 ----a-r- c:\documents and settings\Martina\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-02-01 21:26 . 2004-08-03 23:56 116224 -c--a-w- c:\windows\system32\dllcache\xrxwiadr.dll
2011-02-01 21:26 . 2001-08-17 21:36 23040 -c--a-w- c:\windows\system32\dllcache\xrxwbtmp.dll
2011-02-01 21:26 . 2001-08-17 21:36 17408 -c--a-w- c:\windows\system32\dllcache\xrxscnui.dll
2011-02-01 21:26 . 2001-08-17 21:37 27648 -c--a-w- c:\windows\system32\dllcache\xrxftplt.exe
2011-02-01 21:26 . 2001-08-17 21:37 4608 -c--a-w- c:\windows\system32\dllcache\xrxflnch.exe
2011-02-01 21:24 . 2001-08-17 21:37 99865 -c--a-w- c:\windows\system32\dllcache\xlog.exe
2011-02-01 21:24 . 2001-08-17 11:11 16970 -c--a-w- c:\windows\system32\dllcache\xem336n5.sys
2011-02-01 21:24 . 2004-08-03 21:29 19455 -c--a-w- c:\windows\system32\dllcache\wvchntxx.sys
2011-02-01 21:24 . 2004-08-03 22:10 19328 -c--a-w- c:\windows\system32\dllcache\wstcodec.sys
2011-02-01 21:24 . 2004-08-03 21:29 12063 -c--a-w- c:\windows\system32\dllcache\wsiintxx.sys
2011-02-01 21:24 . 2004-08-03 23:56 8192 -c--a-w- c:\windows\system32\dllcache\wshirda.dll
2011-02-01 21:24 . 2004-08-03 22:07 8832 -c--a-w- c:\windows\system32\dllcache\wmiacpi.sys
2011-02-01 21:24 . 2004-08-03 21:31 154624 -c--a-w- c:\windows\system32\dllcache\wlluc48.sys
2011-02-01 21:24 . 2001-08-17 11:12 34890 -c--a-w- c:\windows\system32\dllcache\wlandrv2.sys
2011-02-01 21:22 . 2001-08-17 12:28 604253 -c--a-w- c:\windows\system32\dllcache\vmodem.sys
2011-02-01 21:21 . 2004-08-03 22:04 12672 -c--a-w- c:\windows\system32\dllcache\usb8023x.sys
2011-02-01 21:20 . 2001-08-17 21:36 525568 -c--a-w- c:\windows\system32\dllcache\tridxp.dll
2011-02-01 21:19 . 2001-08-17 11:51 138528 -c--a-w- c:\windows\system32\dllcache\tgiulnt5.sys
2011-02-01 21:18 . 2001-08-17 13:02 3968 -c--a-w- c:\windows\system32\dllcache\swusbflt.sys
2011-02-01 21:17 . 2001-08-17 13:07 19072 -c--a-w- c:\windows\system32\dllcache\sparrow.sys
2011-02-01 21:16 . 2001-08-17 21:36 45568 -c--a-w- c:\windows\system32\dllcache\smb3w.dll
2011-02-01 21:15 . 2004-08-03 23:56 3901 -c--a-w- c:\windows\system32\dllcache\siint5.dll
2011-02-01 21:14 . 2001-08-17 12:51 23936 -c--a-w- c:\windows\system32\dllcache\sccmn50m.sys
2011-02-01 21:13 . 2001-08-17 21:36 26624 -c--a-w- c:\windows\system32\dllcache\rw450ext.dll
2011-02-01 21:12 . 2001-08-17 12:53 3328 -c--a-w- c:\windows\system32\dllcache\qv2kux.sys
2011-02-01 21:11 . 2001-08-17 12:53 7168 -c--a-w- c:\windows\system32\dllcache\pnrmc.sys
2011-02-01 21:10 . 2001-08-17 11:12 30495 -c--a-w- c:\windows\system32\dllcache\pc100nds.sys
2011-02-01 21:09 . 2004-08-03 21:29 1897408 -c--a-w- c:\windows\system32\dllcache\nv4_mini.sys
2011-02-01 21:08 . 2001-08-17 11:50 39264 -c--a-w- c:\windows\system32\dllcache\neo20xx.sys
2011-02-01 21:07 . 2004-08-03 21:41 1309184 -c--a-w- c:\windows\system32\dllcache\mtlstrm.sys
2011-02-01 21:07 . 2004-08-03 21:41 126686 -c--a-w- c:\windows\system32\dllcache\mtlmnt5.sys
2011-02-01 21:07 . 2004-08-03 21:58 5504 -c--a-w- c:\windows\system32\dllcache\mstee.sys
2011-02-01 21:07 . 2004-08-03 22:10 49024 -c--a-w- c:\windows\system32\dllcache\mstape.sys
2011-02-01 21:07 . 2001-08-17 12:48 12416 -c--a-w- c:\windows\system32\dllcache\msriffwv.sys
2011-02-01 21:07 . 2001-08-17 13:00 2944 -c--a-w- c:\windows\system32\dllcache\msmpu401.sys
2011-02-01 21:07 . 2004-08-03 22:00 22016 -c--a-w- c:\windows\system32\dllcache\msircomm.sys
2011-02-01 21:07 . 2001-08-17 13:02 35200 -c--a-w- c:\windows\system32\dllcache\msgame.sys
2011-02-01 21:07 . 2001-08-17 12:48 6016 -c--a-w- c:\windows\system32\dllcache\msfsio.sys
2011-02-01 21:07 . 2004-08-03 22:10 51328 -c--a-w- c:\windows\system32\dllcache\msdv.sys
2011-02-01 21:07 . 2001-08-17 12:52 17280 -c--a-w- c:\windows\system32\dllcache\mraid35x.sys
2011-02-01 21:07 . 2004-08-03 22:10 15360 -c--a-w- c:\windows\system32\dllcache\mpe.sys
2011-02-01 21:07 . 2001-08-17 12:57 16128 -c--a-w- c:\windows\system32\dllcache\modemcsa.sys
2011-02-01 21:05 . 2001-08-17 12:28 727786 -c--a-w- c:\windows\system32\dllcache\ltck000c.sys
2011-02-01 21:04 . 2004-08-03 21:58 14848 -c--a-w- c:\windows\system32\dllcache\kbdhid.sys
2011-02-01 21:03 . 2001-08-17 21:36 372824 -c--a-w- c:\windows\system32\dllcache\iconf32.dll
2011-02-01 21:02 . 2001-08-17 11:49 58592 -c--a-w- c:\windows\system32\dllcache\i740nt5.sys
2011-02-01 21:01 . 2001-08-17 12:28 199711 -c--a-w- c:\windows\system32\dllcache\hsf_faxx.sys
2011-02-01 21:00 . 2001-08-17 13:02 8576 -c--a-w- c:\windows\system32\dllcache\hidgame.sys
2011-02-01 20:59 . 2001-08-17 21:36 71680 -c--a-w- c:\windows\system32\dllcache\fnfilter.dll
2011-02-01 20:58 . 2001-08-17 21:36 53248 -c--a-w- c:\windows\system32\dllcache\eqndiag.exe
2011-02-01 20:57 . 2001-08-17 12:47 8704 -c--a-w- c:\windows\system32\dllcache\dot4scan.sys
2011-02-01 20:56 . 2001-08-17 12:52 14720 -c--a-w- c:\windows\system32\dllcache\dac960nt.sys
2011-02-01 20:55 . 2001-08-17 11:13 980034 -c--a-w- c:\windows\system32\dllcache\cicap.sys
2011-02-01 20:54 . 2001-08-17 12:12 12160 -c--a-w- c:\windows\system32\dllcache\brfiltlo.sys
2011-02-01 20:53 . 2001-08-17 12:51 14848 -c--a-w- c:\windows\system32\dllcache\asc3550.sys
2011-02-01 20:52 . 2001-08-17 13:56 66048 -c--a-w- c:\windows\system32\dllcache\s3legacy.dll
2011-02-01 20:52 . 2004-08-03 22:18 2148352 -c--a-w- c:\windows\system32\dllcache\ntkrnlmp.exe
2011-01-31 22:57 . 2011-01-31 22:57 -------- d-s---w- c:\documents and settings\LocalService\UserData
2011-01-31 21:07 . 2011-01-31 21:07 727040 ----a-w- c:\windows\system32\yidlqnug.dll
2011-01-31 16:31 . 2011-01-31 16:31 -------- d-----w- c:\windows\system32\wbem\Repository
2011-01-31 12:32 . 2011-01-31 12:32 -------- d-----w- c:\windows\system32\NtmsData
2011-01-31 10:16 . 2011-01-31 17:09 -------- d-s---w- c:\documents and settings\NetworkService\UserData
2011-01-31 08:18 . 2011-01-31 08:18 -------- d-----w- C:\_OTM
2011-01-23 17:31 . 2011-01-23 17:31 -------- d-----w- c:\program files\MSECache
2011-01-16 15:50 . 2001-08-17 12:48 12160 -c--a-w- c:\windows\system32\dllcache\mouhid.sys
2011-01-16 15:50 . 2001-08-17 12:48 12160 ----a-w- c:\windows\system32\drivers\mouhid.sys
2011-01-16 15:50 . 2001-08-17 13:02 9600 -c--a-w- c:\windows\system32\dllcache\hidusb.sys
2011-01-16 15:50 . 2001-08-17 13:02 9600 ----a-w- c:\windows\system32\drivers\hidusb.sys

.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2010-12-20 17:09 . 2009-09-25 18:21 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 17:08 . 2009-09-25 18:21 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))) )
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A77CB536-A261-AD23-5DD7-7232D11C0452}]
2011-01-31 21:07 727040 ----a-w- c:\windows\system32\yidlqnug.dll

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-08-01 15:32 11952 ----a-w- c:\windows\system32\avgrsstx.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^NETGEAR WG111v3 Smart Wizard.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\NETGEAR WG111v3 Smart Wizard.lnk
backup=c:\windows\pss\NETGEAR WG111v3 Smart Wizard.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Martina^Start Menu^Programs^Startup^LimeWire On Startup.lnk]
path=c:\documents and settings\Martina\Start Menu\Programs\Startup\LimeWire On Startup.lnk
backup=c:\windows\pss\LimeWire On Startup.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-06-12 01:38 34672 ----a-w- e:\adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2004-08-04 12:00 15360 ----a-w- c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DrvLsnr]
2003-05-08 09:34 69632 ------w- c:\program files\Analog Devices\SoundMAX\DrvLsnr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeRAM XP]
2006-03-22 23:13 1591808 ----a-w- e:\freeram xp pro\FreeRAM XP Pro.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
2005-06-21 14:44 126976 ----a-w- c:\windows\system32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
2005-06-21 14:48 155648 ----a-w- c:\windows\system32\igfxtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Smapp]
2003-05-05 06:57 143360 ----a-w- c:\program files\Analog Devices\SoundMAX\SMTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2008-03-25 02:28 144784 ----a-w- c:\program files\Java\jre1.6.0_06\bin\jusched.exe

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"e:\\SiSoftware\\SiSoftware Sandra Professional Business XII.SP1\\Win32\\RpcDataSrv.exe"=
"e:\\SiSoftware\\SiSoftware Sandra Professional Business XII.SP1\\RpcSandraSrv.exe"=
"c:\\Documents and Settings\\Martina\\My Documents\\LimeWire\\LimeWire.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

S0 qikclnld;qikclnld;c:\windows\system32\drivers\qikc lnld.sys --> c:\windows\system32\drivers\qikclnld.sys [?]
S2 avg8emc;AVG8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe --> c:\progra~1\AVG\AVG8\avgemc.exe [?]
S2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe --> c:\progra~1\AVG\AVG8\avgwdsvc.exe [?]
S2 EAPPkt;Realtek EAPPkt Protocol;c:\windows\system32\drivers\EAPPkt.sys [9-10-2007 13:13 38144]
S2 lftcoqmw;Disk Controller;c:\windows\System32\svchost.exe -k netsvcs [4-8-2004 13:00 14336]
S3 RTL8187B;NETGEAR WG111v3 Wireless-G USB Adapter Vista Driver;c:\windows\system32\drivers\wg111v3.sys [31-7-2009 15:12 341504]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
lftcoqmw
.
Inhoud van de 'Gedeelde Taken' map

2011-01-31 c:\windows\Tasks\At1.job
- c:\windows\system32\yidlqnug.dll [2011-01-31 21:07]
.
.
------- Bijkomende Scan -------
.
IE: E&xporteren naar Microsoft Excel - e:\micros~1\OFFICE11\EXCEL.EXE/3000
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} -
FF - ProfilePath - c:\documents and settings\Martina\Application Data\Mozilla\Firefox\Profiles\0oub8ftr.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo! Search
FF - prefs.js: browser.startup.homepage -
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}
.
- - - - ORPHANS VERWIJDERD - - - -

URLSearchHooks-{A3BC75A2-1F87-4686-AA43-5347D756017C} - c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll
BHO-{A3BC75A2-1F87-4686-AA43-5347D756017C} - c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll
MSConfigStartUp-AVG8_TRAY - c:\progra~1\AVG\AVG8\avgtray.exe
AddRemove-AVG8Uninstall - c:\program files\AVG\AVG8\setup.exe



************************************************** ************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-05 20:23
Windows 5.1.2600 Service Pack 2 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond
verborgen bestanden: 0

************************************************** ************************
.
Voltooingstijd: 2011-02-05 20:27:16 - machine werd herstart
ComboFix-quarantined-files.txt 2011-02-05 19:27

Pre-Run: 3.967.856.640 bytes free
Post-Run: 3.896.516.608 bytes free

- - End Of File - - EDA38DF5E9756D7CE5E86EAC83D21B22


Met vriendelijke groet,

Dogegg

We gaan nog een keer ComboFix uitvoeren.
Laat ComboFix nu ook de Recovery Console installeren.

Open een kladblok kopieer en plak de onderstaande code:


File::
c:\windows\system32\yidlqnug.dll

SecCenter::
{17DDD097-36FF-435F-9E1B-52D74245D6BF}

Driver::
lftcoqmw
avg8wd
avg8emc

NetSvc::
lftcoqmw

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A77CB536-A261-AD23-5DD7-7232D11C0452}]

Atjob::


Sla dit op op je Bureaublad als CFScript.txt.
Sleep CFScript.txt in ComboFix.exe zoals getoond in onderstaand voorbeeld :
http://crew.nucia.eu/smeenk/CFScript.gif
Dit zal ComboFix doen herstarten, post het nieuwe Combofix logje in je volgende antwoord.


Succes,
Eveline. :)

Hoi Eveline,

Hierbij de nieuwe ComboFix log:

ComboFix 11-02-06.02 - Martina 07-02-2011 19:49:07.2.1 - x86
Microsoft Windows XP Professional 5.1.2600.2.1252.31.1033.18.1271.818 [GMT 1:00]
Gestart vanuit: c:\documents and settings\Martina\Desktop\ComboFix.exe
gebruikte Opdracht switches :: c:\documents and settings\Martina\Desktop\CFScript.txt
* Nieuw herstelpunt werd aangemaakt

FILE ::
"c:\windows\system32\yidlqnug.dll"
.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\dcbmjwcg.dll
c:\windows\system32\drivers\ozrfswmz.sys
c:\windows\system32\drivers\qikclnld.sys
c:\windows\system32\yidlqnug.dll
c:\windows\Tasks\At1.job

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_AVG8EMC
-------\Legacy_AVG8WD
-------\Legacy_LFTCOQMW
-------\Legacy_QIKCLNLD
-------\Service_avg8emc
-------\Service_avg8wd
-------\Service_lftcoqmw
-------\Service_qikclnld


(((((((((((((((((((( Bestanden Gemaakt van 2011-01-07 to 2011-02-07 ))))))))))))))))))))))))))))))
.

2011-02-01 22:26 . 2011-02-01 22:26 388096 ----a-r- c:\documents and settings\Martina\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-02-01 21:26 . 2004-08-03 23:56 116224 -c--a-w- c:\windows\system32\dllcache\xrxwiadr.dll
2011-02-01 21:26 . 2001-08-17 21:36 23040 -c--a-w- c:\windows\system32\dllcache\xrxwbtmp.dll
2011-02-01 21:26 . 2001-08-17 21:36 17408 -c--a-w- c:\windows\system32\dllcache\xrxscnui.dll
2011-02-01 21:26 . 2001-08-17 21:37 27648 -c--a-w- c:\windows\system32\dllcache\xrxftplt.exe
2011-02-01 21:26 . 2001-08-17 21:37 4608 -c--a-w- c:\windows\system32\dllcache\xrxflnch.exe
2011-02-01 21:24 . 2001-08-17 21:37 99865 -c--a-w- c:\windows\system32\dllcache\xlog.exe
2011-02-01 21:24 . 2001-08-17 11:11 16970 -c--a-w- c:\windows\system32\dllcache\xem336n5.sys
2011-02-01 21:24 . 2004-08-03 21:29 19455 -c--a-w- c:\windows\system32\dllcache\wvchntxx.sys
2011-02-01 21:24 . 2004-08-03 22:10 19328 -c--a-w- c:\windows\system32\dllcache\wstcodec.sys
2011-02-01 21:24 . 2004-08-03 21:29 12063 -c--a-w- c:\windows\system32\dllcache\wsiintxx.sys
2011-02-01 21:24 . 2004-08-03 23:56 8192 -c--a-w- c:\windows\system32\dllcache\wshirda.dll
2011-02-01 21:24 . 2004-08-03 22:07 8832 -c--a-w- c:\windows\system32\dllcache\wmiacpi.sys
2011-02-01 21:24 . 2004-08-03 21:31 154624 -c--a-w- c:\windows\system32\dllcache\wlluc48.sys
2011-02-01 21:24 . 2001-08-17 11:12 34890 -c--a-w- c:\windows\system32\dllcache\wlandrv2.sys
2011-02-01 21:22 . 2001-08-17 12:28 604253 -c--a-w- c:\windows\system32\dllcache\vmodem.sys
2011-02-01 21:21 . 2004-08-03 22:04 12672 -c--a-w- c:\windows\system32\dllcache\usb8023x.sys
2011-02-01 21:20 . 2001-08-17 21:36 525568 -c--a-w- c:\windows\system32\dllcache\tridxp.dll
2011-02-01 21:19 . 2001-08-17 11:51 138528 -c--a-w- c:\windows\system32\dllcache\tgiulnt5.sys
2011-02-01 21:18 . 2001-08-17 13:02 3968 -c--a-w- c:\windows\system32\dllcache\swusbflt.sys
2011-02-01 21:17 . 2001-08-17 13:07 19072 -c--a-w- c:\windows\system32\dllcache\sparrow.sys
2011-02-01 21:16 . 2001-08-17 21:36 45568 -c--a-w- c:\windows\system32\dllcache\smb3w.dll
2011-02-01 21:15 . 2004-08-03 23:56 3901 -c--a-w- c:\windows\system32\dllcache\siint5.dll
2011-02-01 21:14 . 2001-08-17 12:51 23936 -c--a-w- c:\windows\system32\dllcache\sccmn50m.sys
2011-02-01 21:13 . 2001-08-17 21:36 26624 -c--a-w- c:\windows\system32\dllcache\rw450ext.dll
2011-02-01 21:12 . 2001-08-17 12:53 3328 -c--a-w- c:\windows\system32\dllcache\qv2kux.sys
2011-02-01 21:11 . 2001-08-17 12:53 7168 -c--a-w- c:\windows\system32\dllcache\pnrmc.sys
2011-02-01 21:10 . 2001-08-17 11:12 30495 -c--a-w- c:\windows\system32\dllcache\pc100nds.sys
2011-02-01 21:09 . 2004-08-03 21:29 1897408 -c--a-w- c:\windows\system32\dllcache\nv4_mini.sys
2011-02-01 21:08 . 2001-08-17 11:50 39264 -c--a-w- c:\windows\system32\dllcache\neo20xx.sys
2011-02-01 21:07 . 2004-08-03 21:41 1309184 -c--a-w- c:\windows\system32\dllcache\mtlstrm.sys
2011-02-01 21:07 . 2004-08-03 21:41 126686 -c--a-w- c:\windows\system32\dllcache\mtlmnt5.sys
2011-02-01 21:07 . 2004-08-03 21:58 5504 -c--a-w- c:\windows\system32\dllcache\mstee.sys
2011-02-01 21:07 . 2004-08-03 22:10 49024 -c--a-w- c:\windows\system32\dllcache\mstape.sys
2011-02-01 21:07 . 2001-08-17 12:48 12416 -c--a-w- c:\windows\system32\dllcache\msriffwv.sys
2011-02-01 21:07 . 2001-08-17 13:00 2944 -c--a-w- c:\windows\system32\dllcache\msmpu401.sys
2011-02-01 21:07 . 2004-08-03 22:00 22016 -c--a-w- c:\windows\system32\dllcache\msircomm.sys
2011-02-01 21:07 . 2001-08-17 13:02 35200 -c--a-w- c:\windows\system32\dllcache\msgame.sys
2011-02-01 21:07 . 2001-08-17 12:48 6016 -c--a-w- c:\windows\system32\dllcache\msfsio.sys
2011-02-01 21:07 . 2004-08-03 22:10 51328 -c--a-w- c:\windows\system32\dllcache\msdv.sys
2011-02-01 21:07 . 2001-08-17 12:52 17280 -c--a-w- c:\windows\system32\dllcache\mraid35x.sys
2011-02-01 21:07 . 2004-08-03 22:10 15360 -c--a-w- c:\windows\system32\dllcache\mpe.sys
2011-02-01 21:07 . 2001-08-17 12:57 16128 -c--a-w- c:\windows\system32\dllcache\modemcsa.sys
2011-02-01 21:05 . 2001-08-17 12:28 727786 -c--a-w- c:\windows\system32\dllcache\ltck000c.sys
2011-02-01 21:04 . 2004-08-03 21:58 14848 -c--a-w- c:\windows\system32\dllcache\kbdhid.sys
2011-02-01 21:03 . 2001-08-17 21:36 372824 -c--a-w- c:\windows\system32\dllcache\iconf32.dll
2011-02-01 21:02 . 2001-08-17 11:49 58592 -c--a-w- c:\windows\system32\dllcache\i740nt5.sys
2011-02-01 21:01 . 2001-08-17 12:28 199711 -c--a-w- c:\windows\system32\dllcache\hsf_faxx.sys
2011-02-01 21:00 . 2001-08-17 13:02 8576 -c--a-w- c:\windows\system32\dllcache\hidgame.sys
2011-02-01 20:59 . 2001-08-17 21:36 71680 -c--a-w- c:\windows\system32\dllcache\fnfilter.dll
2011-02-01 20:58 . 2001-08-17 21:36 53248 -c--a-w- c:\windows\system32\dllcache\eqndiag.exe
2011-02-01 20:57 . 2001-08-17 12:47 8704 -c--a-w- c:\windows\system32\dllcache\dot4scan.sys
2011-02-01 20:56 . 2001-08-17 12:52 14720 -c--a-w- c:\windows\system32\dllcache\dac960nt.sys
2011-02-01 20:55 . 2001-08-17 11:13 980034 -c--a-w- c:\windows\system32\dllcache\cicap.sys
2011-02-01 20:54 . 2001-08-17 12:12 12160 -c--a-w- c:\windows\system32\dllcache\brfiltlo.sys
2011-02-01 20:53 . 2001-08-17 12:51 14848 -c--a-w- c:\windows\system32\dllcache\asc3550.sys
2011-02-01 20:52 . 2001-08-17 13:56 66048 -c--a-w- c:\windows\system32\dllcache\s3legacy.dll
2011-02-01 20:52 . 2004-08-03 22:18 2148352 -c--a-w- c:\windows\system32\dllcache\ntkrnlmp.exe
2011-01-31 22:57 . 2011-01-31 22:57 -------- d-s---w- c:\documents and settings\LocalService\UserData
2011-01-31 16:31 . 2011-01-31 16:31 -------- d-----w- c:\windows\system32\wbem\Repository
2011-01-31 12:32 . 2011-01-31 12:32 -------- d-----w- c:\windows\system32\NtmsData
2011-01-31 10:16 . 2011-01-31 17:09 -------- d-s---w- c:\documents and settings\NetworkService\UserData
2011-01-31 08:18 . 2011-01-31 08:18 -------- d-----w- C:\_OTM
2011-01-23 17:31 . 2011-01-23 17:31 -------- d-----w- c:\program files\MSECache
2011-01-16 15:50 . 2001-08-17 12:48 12160 -c--a-w- c:\windows\system32\dllcache\mouhid.sys
2011-01-16 15:50 . 2001-08-17 12:48 12160 ----a-w- c:\windows\system32\drivers\mouhid.sys
2011-01-16 15:50 . 2001-08-17 13:02 9600 -c--a-w- c:\windows\system32\dllcache\hidusb.sys
2011-01-16 15:50 . 2001-08-17 13:02 9600 ----a-w- c:\windows\system32\drivers\hidusb.sys

.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2010-12-20 17:09 . 2009-09-25 18:21 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 17:08 . 2009-09-25 18:21 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))) )
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
NETGEAR WG111v3 Smart Wizard.lnk - c:\program files\NETGEAR\WG111v3\WG111v3.exe [2009-12-23 2330624]

[HKLM\~\startupfolder\C:^Documents and Settings^Martina^Start Menu^Programs^Startup^LimeWire On Startup.lnk]
path=c:\documents and settings\Martina\Start Menu\Programs\Startup\LimeWire On Startup.lnk
backup=c:\windows\pss\LimeWire On Startup.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-06-12 01:38 34672 ----a-w- e:\adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2004-08-04 12:00 15360 ----a-w- c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DrvLsnr]
2003-05-08 09:34 69632 ------w- c:\program files\Analog Devices\SoundMAX\DrvLsnr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeRAM XP]
2006-03-22 23:13 1591808 ----a-w- e:\freeram xp pro\FreeRAM XP Pro.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
2005-06-21 14:44 126976 ----a-w- c:\windows\system32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
2005-06-21 14:48 155648 ----a-w- c:\windows\system32\igfxtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Smapp]
2003-05-05 06:57 143360 ----a-w- c:\program files\Analog Devices\SoundMAX\SMTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2008-03-25 02:28 144784 ----a-w- c:\program files\Java\jre1.6.0_06\bin\jusched.exe

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"e:\\SiSoftware\\SiSoftware Sandra Professional Business XII.SP1\\Win32\\RpcDataSrv.exe"=
"e:\\SiSoftware\\SiSoftware Sandra Professional Business XII.SP1\\RpcSandraSrv.exe"=
"c:\\Documents and Settings\\Martina\\My Documents\\LimeWire\\LimeWire.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R2 EAPPkt;Realtek EAPPkt Protocol;c:\windows\system32\drivers\EAPPkt.sys [9-10-2007 13:13 38144]
S3 RTL8187B;NETGEAR WG111v3 Wireless-G USB Adapter Vista Driver;c:\windows\system32\drivers\wg111v3.sys [31-7-2009 15:12 341504]

--- Andere Services/Drivers In Geheugen ---

*NewlyCreated* - QIKCLNLD
*Deregistered* - qikclnld
.
.
------- Bijkomende Scan -------
.
IE: E&xporteren naar Microsoft Excel - e:\micros~1\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Martina\Application Data\Mozilla\Firefox\Profiles\0oub8ftr.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo! Search
FF - prefs.js: browser.startup.homepage -
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}
.

************************************************** ************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-07 19:53
Windows 5.1.2600 Service Pack 2 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond
verborgen bestanden: 0

************************************************** ************************
.
------------------------ Andere Aktieve Processen ------------------------
.
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Analog Devices\SoundMAX\SMAgent.exe
c:\windows\system32\wscntfy.exe
.
************************************************** ************************
.
Voltooingstijd: 2011-02-07 19:55:54 - machine werd herstart
ComboFix-quarantined-files.txt 2011-02-07 18:55
ComboFix2.txt 2011-02-05 19:27

Pre-Run: 3.832.258.560 bytes free
Post-Run: 3.859.828.736 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-NLD.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOW S
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 95A0A2515FEEC5E3148159B0E7E6AC1E


Met vriendelijke groet,

Dogegg

Hoe gaat het inmiddels?

1.
Installeer een antivirus programma:

Avast (http://www.avast.com/eng/download-avast-home.html)
Antivir Avira (http://www.free-av.com/)
Microsoft Security Essentials (http://www.microsoft.com/Security_Essentials/)

2.

Ga naar de site van de ESET Online Scanner (http://www.eset.com/onlinescan/)

Klik op de knop ESET Online Scanner
Zet een vinkje bij YES, I accept the Terms of Use
Klik op Start
Sta het ActiveX control toe om te installeren.
Klik op "Advanced settings"
Zet een vinkje bij de volgende opties:

Scan archives
Scan for potentially unwanted applications
Scan for potentially unsafe applications
Enable Anti-Stealth technology

Klik op Start
De computer wordt nu gescand. Dit kan best lang duren, heb dus geduld.
Je mag het venster sluiten wanneer de scan klaar is.
Gebruik Kladblok om het logje te openen. Dit logje vind je op de locatie C:\Program Files\EsetOnlineScanner\log.txt
Kopieer en plak de inhoud van dit logje in je volgende bericht.

Hoi Eveline,

Nog wel wat probleempjes:
- draadloze internet verbinding werkt nog steeds niet,
- bij afsluiten blijft Windows Explorer 'hangen'; deze moet handmatig worden afgesloten,
- ComboFix gaf nog steeds een melding dat AVG nog actief was (ik had het idee dat die helemaal verwijderd was; inmiddels met CCleaner nog wat verwijzingen in het register gevonden en deze verwijderd).

Avast nu geïnstalleerd.

ESET Online Scanner uitgevoerd.

Hierbij het log bestand van ESET:

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6419
# api_version=3.0.2
# EOSSerial=b73efcfe2855e4468bcb9326bc46a8bb
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2011-02-08 11:09:11
# local_time=2011-02-09 12:09:11 (+0100, W. Europe Standard Time)
# country="Netherlands"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=768 16777215 100 0 0 0 0 0
# compatibility_mode=8192 67108863 100 0 3783 3783 0 0
# scanned=32217
# found=2
# cleaned=2
# scan_time=1894
C:\Qoobox\Quarantine\C\WINDOWS\system32\config\sys temprofile\duote.exe.vir Win32/AutoRun.VB.AAH worm (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\Qoobox\Quarantine\C\WINDOWS\system32\Drivers\_q ikclnld_.sys.zip Win32/BHO.EXT trojan (deleted - quarantined) 00000000000000000000000000000000 C


Met vriendelijke groet,

Dogegg

Er zijn nu geen actieve infecties meer aanwezig. Het is nu nog even opruimen. :)

1.
Ga naar Start - Uitvoeren/nieuwe zoekopdracht
Kopieer en plak: Combofix /Uninstall
Druk daarna op OK.
Als het goed is krijg je dan een melding dat Combofix verwijderd werd.
Voorbeeld:
http://home.kpn.nl/stefsmeenk/CFUninstall.PNG

2.
Voor de mogelijke restjes van AVG kan je het beste even de removal tool laten runnen:
Download de AVG removal tool naar je bureaublad:
http://download.avg.com/filedir/util/support/avg_remover_stf_x86_2011_1184.exe
Wacht nog even met het uitvoeren van de tool.

Start de computer op in veilige modus: http://users.telenet.be/marcvn/spyware/1378056.htm

Dubbelklik daarna op de Removal Tool en wacht tot deze klaar is.

Herstart de computer.

3.
Ga naar start -> Uitvoeren.
Typ hier Cmd en druk op enter.
Typ vervolgens ipconfig /flushdns (let op de spatie!) en druk daarna wederom op enter.

Herstart de computer en check of je weer draadloos kan verbinden. Gaat dit niet dan zou je toch even je modem/router moeten resetten.

4.
Download en installeer op zijn minst SP3 voor Windows XP: http://www.microsoft.com/downloads/nl-nl/details.aspx?displaylang=nl&FamilyID=5b33b5a8-5e76-401f-be08-1e1555d4f3d4


Reguliere Windows Update uitvoeren


Ga naar de Windows update site (http://windowsupdate.microsoft.com/).

Sta toe als er gevraagd wordt een ActiveX-element te installeren. Ga hierna door met Windows Update.
Klik vervolgens op de optie Aangepast.
Windows Update zal je systeem nakijken op missende updates. Hierna zal het de resultaten presenteren.
Vink nu alle vakjes aan op de pagina die wordt weergegeven. Zorg ervoor dat je dit bij alle categorieën doet (links in het menu staan er drie categorieën: Essentieel, Software (optioneel) en Hardware (optioneel).
Klik vervolgens links in het menu op Updates installeren en dan op de knop Updates installeren.
Windows Update zal nu alle updates installeren. Dit kan enkele minuten tot enkele uren duren (afhankelijk van het aantal te installeren updates).
Windows Update zal het aangeven als alle updates geïnstalleerd zijn. Indien er een herstart van het systeem benodigd is, zal Windows Update dit ook aangeven. Indien een herstart nodig is, sta dit dan direct toe.
5.
Meer informatie over het op to date houden van uw software en tips om herinfectie te voorkomen vind u oa hier:
http://www.malwareinfo.nl/handigetips/updates.html en hier: http://users.telenet.be/marcvn/spyware/1564073.htm
Voorkomen is immers beter dan genezen.


Hoe gaat het nu?

Succes,
Eveline.;)

Hoi Eveline,

Alles lijkt weer prima te werken.

Ik heb alle updates geïnstalleerd en Avast als virusscanner geïnstalleerd (ik hoop dat deze meer tegen houdt dan AVG).

Heel erg bedankt voor de begeleiding.

Met vriendelijke groet,

Dogegg

Ik gebruik zelf ook Avast ben er zeer tevreden over. Avira is ook goed deze heb ik ook een tijdje gebruikt. Over AVG ben ik eigenlijk nooit echt enthousiast geweest. Hopelijk ben je nu weer voorlopig van de problemen af. :)

Ik zet een slotje op dit onderwerp.