Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:32:26 AM, on 10/29/2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\SOUNDMAN.EXE
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\CZX\Links\Downloads\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://pegasus2.pearsoned.com/Pegasus/frmLogin.aspx?s=3R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AoboBlocker] C:\Program Files\AoboBlocker\AoboBlocker.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\Alwil Software\Avast5\afwServ.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxba_device - - C:\Windows\system32\lxbacoms.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
G o o r e d F i x b y j p s h o r t s t u f f ( 0 3 . 0 7 . 1 0 . 1 )
L o g c r e a t e d a t 1 0 : 0 7 o n 2 9 / 1 0 / 2 0 1 0 ( C Z X )
F i r e f o x v e r s i o n 3 . 0 . 1 5 ( e n - U S )
= = = = = = = = = = G o o r e d S c a n = = = = = = = = = =
( n o n e )
= = = = = = = = = = G o o r e d L o g = = = = = = = = = =
C : \ P r o g r a m F i l e s \ M o z i l l a F i r e f o x \ e x t e n s i o n s \
s t a g e d - x p i s [ 0 4 : 5 0 1 6 / 1 2 / 2 0 0 9 ]
{ 9 7 2 c e 4 c 6 - 7 e 0 8 - 4 4 7 4 - a 2 8 5 - 3 2 0 8 1 9 8 c e 6 f d } [ 2 0 : 5 2 1 5 / 1 2 / 2 0 0 9 ]
{ C A F E E F A C - 0 0 1 6 - 0 0 0 0 - 0 0 0 7 - A B C D E F F E D C B A } [ 0 4 : 5 0 1 6 / 1 2 / 2 0 0 9 ]
{ C A F E E F A C - 0 0 1 6 - 0 0 0 0 - 0 0 1 5 - A B C D E F F E D C B A } [ 1 6 : 1 8 1 6 / 1 2 / 2 0 0 9 ]
{ C A F E E F A C - 0 0 1 6 - 0 0 0 0 - 0 0 1 7 - A B C D E F F E D C B A } [ 0 4 : 2 4 1 7 / 1 2 / 2 0 0 9 ]
C : \ U s e r s \ C Z X \ A p p l i c a t i o n D a t a \ M o z i l l a \ F i r e f o x \ P r o f i l e s \ j i 8 8 z o l h . d e f a u l t \ e x t e n s i o n s \
( n o n e )
C : \ U s e r s \ C Z X \ A p p l i c a t i o n D a t a \ M o z i l l a \ F i r e f o x \ P r o f i l e s \ n e a k 0 n n i . d e f a u l t \ e x t e n s i o n s \
a n a n d c s i n g h @ g m a i l . c o m [ 2 3 : 5 3 1 2 / 0 6 / 2 0 1 0 ]
a r c t i c g l o w - f f 3 - 3 0 @ g l o w p l u g . b i t a s y l u m . n e t [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
b o s s k n b @ t t t - j l . b l o g s p o t . c o m [ 0 4 : 3 2 1 1 / 0 2 / 2 0 1 0 ]
c h a c h a g u i d e b a r @ c h a c h a . c o m [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
d j z i g g y @ g m a i l . c o m [ 0 4 : 2 9 1 1 / 0 2 / 2 0 1 0 ]
e x p a n d u r l @ v o i z l e . c o m [ 2 2 : 2 7 1 8 / 0 7 / 2 0 1 0 ]
f o x f i l t e r @ i n s p i r e d e f f e c t . n e t [ 1 6 : 1 1 1 6 / 0 9 / 2 0 1 0 ]
g l a z e _ b l a c k @ w w w . t h e m e - o a s i s . o r g [ 0 4 : 2 5 1 1 / 0 2 / 2 0 1 0 ]
m a r t i n @ h o e r a n d l . c o m [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
O f f i c e 2 0 0 7 B l a c k @ J B B S [ 0 4 : 2 3 1 1 / 0 2 / 2 0 1 0 ]
o p t o u t @ d u b f i r e . n e t [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
p e r s o n a s @ c h r i s t o p h e r . b e a r d [ 0 1 : 4 6 2 1 / 0 7 / 2 0 1 0 ]
r s D o w n l o a d H e l p e r @ y e v g e n y a n d r o v . n e t [ 2 3 : 5 7 1 2 / 0 6 / 2 0 1 0 ]
S k i p S c r e e n @ S k i p S c r e e n [ 2 2 : 4 7 1 1 / 0 8 / 2 0 1 0 ]
T h e M e s s a g e B i b l e V e r s e T o o l b a r @ 2 b e l i e v e . n e t [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ 0 b 4 5 7 c A A - 6 0 2 d - 4 8 4 a - 8 f e 7 - c 1 d 8 9 4 a 0 1 1 b a } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ 1 3 9 a 1 2 0 b - c 2 e a - 4 1 d 2 - b f 7 0 - 5 4 2 d 9 f 0 6 3 d f d } [ 2 3 : 5 2 1 2 / 0 6 / 2 0 1 0 ]
{ 2 4 1 a a e 7 0 - 0 0 2 2 - 1 1 d e - 8 7 a f - 0 8 0 0 2 0 0 c 9 a 6 6 } [ 0 4 : 2 9 1 1 / 0 2 / 2 0 1 0 ]
{ 3 e 0 e 7 d 2 a - 0 7 0 f - 4 a 4 7 - b 0 1 9 - 9 1 f e 5 3 8 5 b a 7 9 } [ 1 8 : 5 6 0 6 / 0 9 / 2 0 1 0 ]
{ 4 6 3 F 6 C A 5 - E E 3 C - 4 b e 1 - B 7 E 6 - 7 F E E 1 1 9 5 3 3 7 4 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ 5 0 9 3 1 6 1 0 - 3 d 8 e - 1 1 d d - a e 1 6 - 0 8 0 0 2 0 0 c 9 a 6 6 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ 7 6 9 4 c 4 9 c - 9 f b d - 1 1 d c - 8 3 1 4 - 0 8 0 0 2 0 0 c 9 a 6 6 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ 9 8 9 e 9 3 8 2 - d 5 4 0 - 4 1 8 9 - 8 8 d 1 - f c 5 4 a 9 4 9 a 3 8 7 } [ 0 4 : 2 8 1 1 / 0 2 / 2 0 1 0 ]
{ 9 A 7 5 2 7 8 2 - D 7 0 6 - 4 7 9 b - 9 8 F 8 - 3 F 6 6 B F 9 2 1 6 9 2 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ b 9 d b 1 6 a 4 - 6 e d c - 4 7 e c - a 1 f 4 - b 8 6 2 9 2 e d 2 1 1 d } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ c d 6 1 7 3 7 5 - 6 7 4 3 - 4 e e 8 - b a c 4 - f b f 1 0 f 3 5 7 2 9 e } [ 2 2 : 5 9 2 5 / 0 9 / 2 0 1 0 ]
{ d 1 0 d 0 b f 8 - f 5 b 5 - c 8 b 4 - a 8 b 2 - 2 b 9 8 7 9 e 0 8 c 5 d } [ 2 3 : 3 8 0 8 / 0 1 / 2 0 1 0 ]
{ d 4 0 f 5 e 7 b - d 2 c f - 4 8 5 6 - b 4 4 1 - c c 6 1 3 e e f f b e 3 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ D 4 D D 6 3 F A - 0 1 E 4 - 4 6 a 7 - B 6 B 1 - E D A B 7 D 6 A D 3 8 9 } [ 2 2 : 5 9 2 5 / 0 9 / 2 0 1 0 ]
{ D D C 3 5 9 D 1 - 8 4 4 A - 4 2 a 7 - 9 A A 1 - 8 8 A 8 5 0 A 9 3 8 A 8 } [ 2 2 : 5 9 2 5 / 0 9 / 2 0 1 0 ]
{ e 2 c 5 8 1 5 0 - 9 d 7 2 - 1 1 d d - a d 8 b - 0 8 0 0 2 0 0 c 9 a 6 6 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ F C A B 6 F D D - 5 5 8 5 - 4 2 5 b - 9 5 C 1 - 5 E D 8 5 6 F 3 F D 0 8 } [ 0 5 : 5 5 1 7 / 1 2 / 2 0 0 9 ]
{ f e 0 2 5 8 a b - 4 f 7 4 - 4 3 a 1 - 8 7 8 1 - b c d f 3 4 0 f 9 e e 9 } [ 1 3 : 3 4 2 9 / 1 0 / 2 0 1 0 ]
[ H K E Y _ L O C A L _ M A C H I N E \ S o f t w a r e \ M o z i l l a \ F i r e f o x \ E x t e n s i o n s ]
" { 2 0 a 8 2 6 4 5 - c 0 9 5 - 4 6 e d - 8 0 e 3 - 0 8 8 2 5 7 6 0 5 3 4 b } " = " C : \ W i n d o w s \ M i c r o s o f t . N E T \ F r a m e w o r k \ v 3 . 5 \ W i n d o w s P r e s e n t a t i o n F o u n d a t i o n \ D o t N e t A s s i s t a n t E x t e n s i o n \ " [ 2 1 : 4 2 1 5 / 1 2 / 2 0 0 9 ]
G o o r e d F i x b y j p s h o r t s t u f f ( 0 3 . 0 7 . 1 0 . 1 )
L o g c r e a t e d a t 1 0 : 0 7 o n 2 9 / 1 0 / 2 0 1 0 ( C Z X )
F i r e f o x v e r s i o n 3 . 0 . 1 5 ( e n - U S )
= = = = = = = = = = G o o r e d S c a n = = = = = = = = = =
( n o n e )
= = = = = = = = = = G o o r e d L o g = = = = = = = = = =
C : \ P r o g r a m F i l e s \ M o z i l l a F i r e f o x \ e x t e n s i o n s \
s t a g e d - x p i s [ 0 4 : 5 0 1 6 / 1 2 / 2 0 0 9 ]
{ 9 7 2 c e 4 c 6 - 7 e 0 8 - 4 4 7 4 - a 2 8 5 - 3 2 0 8 1 9 8 c e 6 f d } [ 2 0 : 5 2 1 5 / 1 2 / 2 0 0 9 ]
{ C A F E E F A C - 0 0 1 6 - 0 0 0 0 - 0 0 0 7 - A B C D E F F E D C B A } [ 0 4 : 5 0 1 6 / 1 2 / 2 0 0 9 ]
{ C A F E E F A C - 0 0 1 6 - 0 0 0 0 - 0 0 1 5 - A B C D E F F E D C B A } [ 1 6 : 1 8 1 6 / 1 2 / 2 0 0 9 ]
{ C A F E E F A C - 0 0 1 6 - 0 0 0 0 - 0 0 1 7 - A B C D E F F E D C B A } [ 0 4 : 2 4 1 7 / 1 2 / 2 0 0 9 ]
C : \ U s e r s \ C Z X \ A p p l i c a t i o n D a t a \ M o z i l l a \ F i r e f o x \ P r o f i l e s \ j i 8 8 z o l h . d e f a u l t \ e x t e n s i o n s \
( n o n e )
C : \ U s e r s \ C Z X \ A p p l i c a t i o n D a t a \ M o z i l l a \ F i r e f o x \ P r o f i l e s \ n e a k 0 n n i . d e f a u l t \ e x t e n s i o n s \
a n a n d c s i n g h @ g m a i l . c o m [ 2 3 : 5 3 1 2 / 0 6 / 2 0 1 0 ]
a r c t i c g l o w - f f 3 - 3 0 @ g l o w p l u g . b i t a s y l u m . n e t [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
b o s s k n b @ t t t - j l . b l o g s p o t . c o m [ 0 4 : 3 2 1 1 / 0 2 / 2 0 1 0 ]
c h a c h a g u i d e b a r @ c h a c h a . c o m [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
d j z i g g y @ g m a i l . c o m [ 0 4 : 2 9 1 1 / 0 2 / 2 0 1 0 ]
e x p a n d u r l @ v o i z l e . c o m [ 2 2 : 2 7 1 8 / 0 7 / 2 0 1 0 ]
f o x f i l t e r @ i n s p i r e d e f f e c t . n e t [ 1 6 : 1 1 1 6 / 0 9 / 2 0 1 0 ]
g l a z e _ b l a c k @ w w w . t h e m e - o a s i s . o r g [ 0 4 : 2 5 1 1 / 0 2 / 2 0 1 0 ]
m a r t i n @ h o e r a n d l . c o m [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
O f f i c e 2 0 0 7 B l a c k @ J B B S [ 0 4 : 2 3 1 1 / 0 2 / 2 0 1 0 ]
o p t o u t @ d u b f i r e . n e t [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
p e r s o n a s @ c h r i s t o p h e r . b e a r d [ 0 1 : 4 6 2 1 / 0 7 / 2 0 1 0 ]
r s D o w n l o a d H e l p e r @ y e v g e n y a n d r o v . n e t [ 2 3 : 5 7 1 2 / 0 6 / 2 0 1 0 ]
S k i p S c r e e n @ S k i p S c r e e n [ 2 2 : 4 7 1 1 / 0 8 / 2 0 1 0 ]
T h e M e s s a g e B i b l e V e r s e T o o l b a r @ 2 b e l i e v e . n e t [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ 0 b 4 5 7 c A A - 6 0 2 d - 4 8 4 a - 8 f e 7 - c 1 d 8 9 4 a 0 1 1 b a } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ 1 3 9 a 1 2 0 b - c 2 e a - 4 1 d 2 - b f 7 0 - 5 4 2 d 9 f 0 6 3 d f d } [ 2 3 : 5 2 1 2 / 0 6 / 2 0 1 0 ]
{ 2 4 1 a a e 7 0 - 0 0 2 2 - 1 1 d e - 8 7 a f - 0 8 0 0 2 0 0 c 9 a 6 6 } [ 0 4 : 2 9 1 1 / 0 2 / 2 0 1 0 ]
{ 3 e 0 e 7 d 2 a - 0 7 0 f - 4 a 4 7 - b 0 1 9 - 9 1 f e 5 3 8 5 b a 7 9 } [ 1 8 : 5 6 0 6 / 0 9 / 2 0 1 0 ]
{ 4 6 3 F 6 C A 5 - E E 3 C - 4 b e 1 - B 7 E 6 - 7 F E E 1 1 9 5 3 3 7 4 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ 5 0 9 3 1 6 1 0 - 3 d 8 e - 1 1 d d - a e 1 6 - 0 8 0 0 2 0 0 c 9 a 6 6 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ 7 6 9 4 c 4 9 c - 9 f b d - 1 1 d c - 8 3 1 4 - 0 8 0 0 2 0 0 c 9 a 6 6 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ 9 8 9 e 9 3 8 2 - d 5 4 0 - 4 1 8 9 - 8 8 d 1 - f c 5 4 a 9 4 9 a 3 8 7 } [ 0 4 : 2 8 1 1 / 0 2 / 2 0 1 0 ]
{ 9 A 7 5 2 7 8 2 - D 7 0 6 - 4 7 9 b - 9 8 F 8 - 3 F 6 6 B F 9 2 1 6 9 2 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ b 9 d b 1 6 a 4 - 6 e d c - 4 7 e c - a 1 f 4 - b 8 6 2 9 2 e d 2 1 1 d } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ c d 6 1 7 3 7 5 - 6 7 4 3 - 4 e e 8 - b a c 4 - f b f 1 0 f 3 5 7 2 9 e } [ 2 2 : 5 9 2 5 / 0 9 / 2 0 1 0 ]
{ d 1 0 d 0 b f 8 - f 5 b 5 - c 8 b 4 - a 8 b 2 - 2 b 9 8 7 9 e 0 8 c 5 d } [ 2 3 : 3 8 0 8 / 0 1 / 2 0 1 0 ]
{ d 4 0 f 5 e 7 b - d 2 c f - 4 8 5 6 - b 4 4 1 - c c 6 1 3 e e f f b e 3 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ D 4 D D 6 3 F A - 0 1 E 4 - 4 6 a 7 - B 6 B 1 - E D A B 7 D 6 A D 3 8 9 } [ 2 2 : 5 9 2 5 / 0 9 / 2 0 1 0 ]
{ D D C 3 5 9 D 1 - 8 4 4 A - 4 2 a 7 - 9 A A 1 - 8 8 A 8 5 0 A 9 3 8 A 8 } [ 2 2 : 5 9 2 5 / 0 9 / 2 0 1 0 ]
{ e 2 c 5 8 1 5 0 - 9 d 7 2 - 1 1 d d - a d 8 b - 0 8 0 0 2 0 0 c 9 a 6 6 } [ 0 4 : 5 9 1 6 / 1 2 / 2 0 0 9 ]
{ F C A B 6 F D D - 5 5 8 5 - 4 2 5 b - 9 5 C 1 - 5 E D 8 5 6 F 3 F D 0 8 } [ 0 5 : 5 5 1 7 / 1 2 / 2 0 0 9 ]
{ f e 0 2 5 8 a b - 4 f 7 4 - 4 3 a 1 - 8 7 8 1 - b c d f 3 4 0 f 9 e e 9 } [ 1 3 : 3 4 2 9 / 1 0 / 2 0 1 0 ]
[ H K E Y _ L O C A L _ M A C H I N E \ S o f t w a r e \ M o z i l l a \ F i r e f o x \ E x t e n s i o n s ]
" { 2 0 a 8 2 6 4 5 - c 0 9 5 - 4 6 e d - 8 0 e 3 - 0 8 8 2 5 7 6 0 5 3 4 b } " = " C : \ W i n d o w s \ M i c r o s o f t . N E T \ F r a m e w o r k \ v 3 . 5 \ W i n d o w s P r e s e n t a t i o n F o u n d a t i o n \ D o t N e t A s s i s t a n t E x t e n s i o n \ " [ 2 1 : 4 2 1 5 / 1 2 / 2 0 0 9 ]