kso utworzono 1 sierpnia 2010 utworzono 1 sierpnia 2010 Wiele się naczytałem, że jest to jakiś robak itd itp że svchost.exe operacja zżera u mnie tego nie ma. Gdy odpalę dzieje się to gdy mam odpalone np. winampa i jakąś grę to pierwsze minuty gra chodzi normalnie potem nagle zaczyna się wszystko przycinać. Po 2 minutach zaczyna działać znowu normalnie na jakieś 2-3 minuty i znowu... Parametry: Procesor: AMD Turion X2-Dual-Core Mobile RM-72 2.10 Ghz RAM: 4GB Karta graficzna: Radeon 3200 System operacyjny: Windows 7 [log] [log] OTL logfile created on: 2010-08-01 22:54:40 - Run 1 OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\kso\Downloads 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 65,00% Memory free 7,00 Gb Paging File | 6,00 Gb Available in Paging File | 81,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 150,54 Gb Total Space | 93,70 Gb Free Space | 62,24% Space Free | Partition Type: NTFS Drive D: | 147,45 Gb Total Space | 126,07 Gb Free Space | 85,50% Space Free | Partition Type: NTFS Drive E: | 2,32 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: KSO-KOMPUTER Current User Name: kso Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Include 64bit Scans Company Name Whitelist: On Skip Microsoft Files: On File Age = 60 Days Output = Standard [color=#E56717]========== Processes (All) ==========[/color] PRC - [2010-08-01 22:52:56 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\kso\Downloads\OTL.exe PRC - [2010-07-25 11:17:21 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2010-07-18 10:02:22 | 002,937,528 | ---- | M] () -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe PRC - [2010-05-10 12:14:01 | 000,321,328 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe PRC - [2010-04-20 13:14:54 | 026,192,680 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe PRC - [2010-04-20 13:14:54 | 000,080,256 | R--- | M] (Skype Technologies) -- C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe PRC - [2010-04-01 11:16:20 | 000,357,696 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe PRC - [2010-03-24 20:17:47 | 000,952,768 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe PRC - [2010-03-12 00:14:00 | 011,792,992 | ---- | M] (GG Network S.A.) -- D:\Programy\Gadu-Gadu 10\gg.exe PRC - [2009-10-08 13:27:44 | 000,322,104 | ---- | M] ( Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe PRC - [2009-08-29 08:56:10 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe PRC - [2009-05-05 10:11:50 | 000,228,408 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe PRC - [2009-04-30 15:58:44 | 000,229,944 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe PRC - [2009-01-26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [color=#E56717]========== Modules (All) ==========[/color] MOD - [2010-08-01 22:52:56 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\kso\Downloads\OTL.exe MOD - [2010-03-24 08:37:04 | 001,289,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll MOD - [2010-02-18 09:34:01 | 012,867,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll MOD - [2009-12-11 09:39:06 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll MOD - [2009-12-11 09:36:33 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll MOD - [2009-07-14 03:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll MOD - [2009-07-14 03:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll MOD - [2009-07-14 03:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll MOD - [2009-07-14 03:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll MOD - [2009-07-14 03:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll MOD - [2009-07-14 03:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll MOD - [2009-07-14 03:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll MOD - [2009-07-14 03:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll MOD - [2009-07-14 03:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll MOD - [2009-07-14 03:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll MOD - [2009-07-14 03:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll MOD - [2009-07-14 03:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll MOD - [2009-07-14 03:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll MOD - [2009-07-14 03:16:12 | 001,412,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll MOD - [2009-07-14 03:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll MOD - [2009-07-14 03:16:12 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll MOD - [2009-07-14 03:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll MOD - [2009-07-14 03:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll MOD - [2009-07-14 03:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll MOD - [2009-07-14 03:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll MOD - [2009-07-14 03:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll MOD - [2009-07-14 03:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll MOD - [2009-07-14 03:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll MOD - [2009-07-14 03:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll MOD - [2009-07-14 03:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2009-07-14 03:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll MOD - [2009-07-14 03:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll MOD - [2009-07-14 03:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll MOD - [2009-07-14 03:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll MOD - [2009-07-14 03:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll MOD - [2009-07-14 03:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll MOD - [2009-07-14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009-07-14 03:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv MOD - [2009-07-14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll MOD - [2009-07-14 03:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll MOD - [2009-07-14 03:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll MOD - [2009-07-14 03:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll MOD - [2009-07-14 03:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll MOD - [2009-07-14 03:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll MOD - [2009-07-14 03:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll MOD - [2009-07-14 03:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll MOD - [2009-07-14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2010-05-05 04:15:10 | 000,202,752 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009-07-14 03:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService) SRV:[b]64bit:[/b] - [2009-07-14 03:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 03:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService) SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2008-08-27 15:52:02 | 000,028,464 | ---- | M] (Hewlett-Packard Corporation) [Auto | Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv) SRV - [2009-01-26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService) SRV - [2006-10-27 00:47:54 | 000,065,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\stwrt64.sys -- (STHDA) DRV:[b]64bit:[/b] - File not found [File_System | Boot | Stopped] -- C:\Windows\SysNative\DRIVERS\Lbd.sys -- (Lbd) DRV:[b]64bit:[/b] - [2010-06-23 13:54:13 | 000,034,032 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\seehcri.sys -- (seehcri) DRV:[b]64bit:[/b] - [2010-05-06 15:34:59 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010-05-05 04:47:08 | 006,789,632 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2010-05-05 04:47:08 | 006,789,632 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2010-05-05 03:23:24 | 000,221,184 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 01:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap) DRV:[b]64bit:[/b] - [2009-07-14 01:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID) DRV:[b]64bit:[/b] - [2009-07-14 01:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2009-07-14 01:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC) DRV:[b]64bit:[/b] - [2009-06-20 04:09:57 | 001,394,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009-06-10 23:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem) DRV:[b]64bit:[/b] - [2009-06-10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009-06-10 22:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-04-29 08:48:32 | 000,018,432 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV:[b]64bit:[/b] - [2008-08-27 15:52:02 | 000,040,240 | ---- | M] (Hewlett-Packard Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer) DRV:[b]64bit:[/b] - [2008-08-27 15:52:02 | 000,028,464 | ---- | M] (Hewlett-Packard Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt) DRV:[b]64bit:[/b] - [2008-07-21 18:53:04 | 000,145,496 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR) DRV:[b]64bit:[/b] - [2008-04-28 05:25:06 | 000,016,400 | ---- | M] (ATI Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) ATI PCI Express (3GIO) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3878016027-1207488190-2919645386-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=15161&l=dis IE - HKU\S-1-5-21-3878016027-1207488190-2919645386-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.ask.com?o=15161&l=dis" FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-07-25 11:17:24 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-07-25 11:17:24 | 000,000,000 | ---D | M] [2010-05-06 15:22:39 | 000,000,000 | ---D | M] -- C:\Users\kso\AppData\Roaming\mozilla\Extensions [2010-06-05 00:34:50 | 000,000,000 | ---D | M] -- C:\Users\kso\AppData\Roaming\mozilla\Firefox\Profiles\xlov9vay.default\extensions [2010-06-04 12:27:32 | 000,002,557 | ---- | M] () -- C:\Users\kso\AppData\Roaming\Mozilla\FireFox\Profiles\xlov9vay.default\searchplugins\askcom.xml [2010-05-06 15:35:13 | 000,002,059 | ---- | M] () -- C:\Users\kso\AppData\Roaming\Mozilla\FireFox\Profiles\xlov9vay.default\searchplugins\daemon-search.xml [2010-05-09 19:17:20 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions [2010-05-09 19:17:21 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2010-07-18 10:02:22 | 000,238,776 | ---- | M] (Pando Networks) -- C:\Program Files (x86)\mozilla firefox\plugins\npPandoWebInst.dll [2010-04-01 19:33:11 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2010-04-01 19:33:11 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2010-04-01 19:33:11 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2010-04-01 19:33:11 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2010-04-01 19:33:11 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2010-04-01 19:33:11 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation) O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3:[b]64bit:[/b] - HKU\S-1-5-21-3878016027-1207488190-2919645386-1001\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKU\S-1-5-21-3878016027-1207488190-2919645386-1001\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O4:[b]64bit:[/b] - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe File not found O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3878016027-1207488190-2919645386-1001..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-3878016027-1207488190-2919645386-1001..\Run: [Gadu-Gadu 10] D:\Programy\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-3878016027-1207488190-2919645386-1001..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe () O4 - HKU\S-1-5-21-3878016027-1207488190-2919645386-1001..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited) O4 - HKU\S-1-5-21-3878016027-1207488190-2919645386-1001..\Run: [UpdateMyDrivers] C:\Program Files (x86)\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe () O4 - HKU\S-1-5-21-3878016027-1207488190-2919645386-1001..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O4 - Startup: C:\Users\kso\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab (CKAVWebScan Object) O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class) O16 - DPF: {92ECE6FA-AC2E-4042-BFAE-0C8608E52A43} https://www.bph.pl/sezam/components/SignActivX.cab (SignActivX Control) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 217.172.224.160 89.228.6.83 O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-07-30 10:30:42 | 000,000,154 | R--- | M] () - E:\autorun.cfg -- [ UDF ] O32 - AutoRun File - [2008-11-27 14:02:24 | 000,214,280 | R--- | M] (Sports Interactive) - E:\autorun.exe -- [ UDF ] O32 - AutoRun File - [2006-09-11 15:26:42 | 000,000,027 | R--- | M] () - E:\autorun.inf -- [ UDF ] O33 - MountPoints2\{b2938eb8-590a-11df-9cc2-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{b2938eb8-590a-11df-9cc2-806e6f6e6963}\Shell\AutoRun\command - "" = E:\autorun.exe -- [2008-11-27 14:02:24 | 000,214,280 | R--- | M] (Sports Interactive) O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Base - Driver Group SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group SafeBootMin:[b]64bit:[/b] File system - Driver Group SafeBootMin:[b]64bit:[/b] Filter - Driver Group SafeBootMin:[b]64bit:[/b] HelpSvc - Service SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group SafeBootMin:[b]64bit:[/b] sacsvr - Service SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] vmms - Service SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Base - Driver Group SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group SafeBootNet:[b]64bit:[/b] File system - Driver Group SafeBootNet:[b]64bit:[/b] Filter - Driver Group SafeBootNet:[b]64bit:[/b] HelpSvc - Service SafeBootNet:[b]64bit:[/b] Messenger - Service SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group SafeBootNet:[b]64bit:[/b] Network - Driver Group SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group SafeBootNet:[b]64bit:[/b] rdsessmgr - Service SafeBootNet:[b]64bit:[/b] sacsvr - Service SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] TDI - Driver Group SafeBootNet:[b]64bit:[/b] vmms - Service SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2010-08-01 16:42:36 | 000,000,000 | ---D | C] -- C:\Download [2010-08-01 16:42:26 | 000,000,000 | ---D | C] -- C:\Users\kso\AppData\Local\Kamuse [2010-07-30 12:47:09 | 000,000,000 | ---D | C] -- C:\Users\kso\Desktop\lan [2010-07-30 12:29:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lavalys [2010-07-30 00:40:15 | 000,000,000 | -H-D | C] -- C:\ProgramData\{F1D98A8E-F124-4116-A85A-747FD598A3C2} [2010-07-30 00:40:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SmartTweak Software [2010-07-30 00:40:05 | 000,000,000 | ---D | C] -- C:\Users\kso\AppData\Local\PackageAware [2010-07-30 00:30:22 | 000,000,000 | ---D | C] -- C:\Users\kso\Desktop\motorola [2010-07-29 23:57:32 | 000,000,000 | ---D | C] -- C:\Program Files\SkanerOnline [2010-07-29 23:56:52 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Kaspersky Lab [2010-07-25 12:14:55 | 000,000,000 | ---D | C] -- C:\Users\kso\Desktop\Nowy folder [2010-07-21 01:21:47 | 000,000,000 | ---D | C] -- C:\Users\kso\Desktop\pento nawijka [2010-07-20 22:12:56 | 000,000,000 | ---D | C] -- C:\Users\kso\AppData\Roaming\Audacity [2010-07-20 22:12:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Audacity 1.3 Beta (Unicode) [2010-07-18 10:02:49 | 000,000,000 | ---D | C] -- C:\Users\kso\AppData\Local\GamersFirst LIVE! [2010-07-18 10:02:31 | 000,000,000 | ---D | C] -- C:\Users\kso\AppData\Local\PMB Files [2010-07-18 10:02:28 | 000,000,000 | ---D | C] -- C:\ProgramData\PMB Files [2010-07-18 10:02:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pando Networks [2010-07-18 10:02:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GamersFirst [2010-07-07 00:24:15 | 000,000,000 | ---D | C] -- C:\Users\kso\AppData\Roaming\Real [2010-06-26 20:25:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Nexon [2010-06-26 12:14:17 | 000,000,000 | ---D | C] -- C:\Users\kso\Desktop\Tede-Fuck_Tede_-_Glam_Rap-(WJN12)-2CD-PL-2010-211 [2010-06-26 11:09:47 | 000,000,000 | ---D | C] -- C:\Users\kso\Desktop\Eldo - Zapiski [2010-06-25 23:04:15 | 000,000,000 | ---D | C] -- C:\Users\kso\AppData\Local\Microsoft Games [2010-06-23 19:20:56 | 000,000,000 | ---D | C] -- C:\Users\kso\Documents\Two Worlds files [2010-06-23 19:19:58 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\AGEIA [2010-06-23 19:19:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies [2010-06-23 19:19:38 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\AGEIA [2010-06-23 19:18:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard [2010-06-23 13:54:13 | 000,034,032 | ---- | C] (Sony Ericsson Mobile Communications) -- C:\Windows\SysNative\drivers\seehcri.sys [2010-06-23 13:52:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony Ericsson [2010-06-23 13:47:53 | 000,000,000 | ---D | C] -- C:\Users\kso\Desktop\Jama_Zla-Poruchafszy-PL-2009 [2010-06-23 13:38:13 | 000,000,000 | ---D | C] -- C:\Users\kso\Desktop\k750i [2010-06-21 10:22:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2010-06-21 10:22:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy [2010-06-20 23:20:31 | 000,000,000 | ---D | C] -- C:\Users\kso\AppData\Roaming\hpqLog [2010-06-20 23:19:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hewlett-Packard [2010-06-20 21:35:05 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SRSLabs [2010-06-20 21:21:05 | 000,000,000 | ---D | C] -- C:\Windows\JMCR_DIR [2010-06-20 21:12:01 | 000,000,000 | ---D | C] -- C:\Users\kso\AppData\Roaming\NumusAutoDiskBuilder [2010-06-20 21:11:48 | 000,000,000 | ---D | C] -- C:\Windows\XSxS [2010-06-20 21:11:48 | 000,000,000 | ---D | C] -- C:\Users\kso\AppData\Local\Xenocode [2010-06-20 21:11:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Xenocode [2010-06-20 21:11:48 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\spool [2010-06-20 21:11:48 | 000,000,000 | ---D | C] -- C:\Windows\Driver Cache [2010-06-20 21:11:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Numus Auto Disk Builder and Burner [2010-06-20 20:58:16 | 000,000,000 | ---D | C] -- C:\Program Files\Hewlett-Packard [2010-06-20 20:52:15 | 000,000,000 | ---D | C] -- C:\SWSetup [2010-06-19 12:40:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight [2010-06-19 12:16:51 | 000,000,000 | ---D | C] -- C:\Users\kso\AppData\Roaming\Facebook [2010-06-08 17:07:27 | 000,000,000 | ---D | C] -- C:\Users\kso\AppData\Roaming\ATI [2010-06-08 17:07:27 | 000,000,000 | ---D | C] -- C:\Users\kso\AppData\Local\ATI [2010-06-08 17:07:27 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2010-06-08 17:06:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies [2010-06-08 17:05:50 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2010-06-08 17:05:49 | 000,000,000 | ---D | C] -- C:\Program Files\ATI [2010-06-08 17:05:03 | 000,000,000 | ---D | C] -- C:\ATI [2010-06-08 17:01:47 | 000,000,000 | ---D | C] -- C:\AMD [2010-06-08 07:04:36 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat [2010-06-08 07:04:36 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2010-08-01 22:56:49 | 001,835,008 | -HS- | M] () -- C:\Users\kso\ntuser.dat [2010-08-01 22:42:46 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TemppL1924.html [2010-08-01 22:42:46 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempBj1924.html [2010-08-01 22:33:59 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempUj1924.html [2010-08-01 22:33:59 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TemppM1924.html [2010-08-01 22:32:13 | 000,020,544 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010-08-01 22:32:13 | 000,020,544 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010-08-01 22:28:00 | 000,001,042 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010-08-01 22:27:15 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempWk3676.html [2010-08-01 22:02:32 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempUA2108.html [2010-08-01 20:48:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-08-01 14:03:29 | 000,001,038 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010-08-01 14:03:25 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-08-01 14:03:13 | 3018,194,944 | -HS- | M] () -- C:\hiberfil.sys [2010-08-01 12:39:28 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempNZ2096.html [2010-08-01 12:39:28 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempQe2096.html [2010-08-01 12:39:26 | 009,967,553 | -H-- | M] () -- C:\Users\kso\AppData\Local\IconCache.db [2010-08-01 01:09:48 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Temphb2184.html [2010-08-01 01:09:48 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempfc2184.html [2010-07-31 19:42:26 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempkw2160.html [2010-07-31 12:58:34 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempAE2136.html [2010-07-31 12:58:34 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TemplB2136.html [2010-07-30 16:51:50 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempiU2140.html [2010-07-30 16:51:50 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempwz2140.html [2010-07-30 13:28:54 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempXy2200.html [2010-07-30 13:28:54 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempSY2200.html [2010-07-30 12:29:42 | 000,001,106 | ---- | M] () -- C:\Users\kso\Desktop\EVEREST Home Edition.lnk [2010-07-30 00:55:50 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempVO2116.html [2010-07-30 00:55:50 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempjV2116.html [2010-07-30 00:40:15 | 000,001,283 | ---- | M] () -- C:\Users\Public\Desktop\UpdateMyDrivers.lnk [2010-07-29 17:07:53 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempys2088.html [2010-07-29 17:07:53 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempcH2088.html [2010-07-29 16:26:19 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempnK2096.html [2010-07-29 16:26:19 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempqT2096.html [2010-07-29 01:03:09 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempxx2128.html [2010-07-29 01:03:09 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempDP2128.html [2010-07-28 17:27:02 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempGg2080.html [2010-07-28 17:27:02 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempRx2080.html [2010-07-28 12:32:31 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TemppA2120.html [2010-07-28 12:32:31 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempRQ2120.html [2010-07-27 23:56:00 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempZE2136.html [2010-07-27 23:56:00 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempjS2136.html [2010-07-27 17:09:58 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempYF2128.html [2010-07-27 17:09:58 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempAJ2128.html [2010-07-27 11:46:24 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempqn2136.html [2010-07-27 11:46:24 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempzO2136.html [2010-07-27 00:28:41 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Temptf2216.html [2010-07-27 00:28:41 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempxZ2216.html [2010-07-27 00:28:23 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempor2216.html [2010-07-26 18:35:46 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempqN2096.html [2010-07-26 18:35:46 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempta2096.html [2010-07-26 17:04:29 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempnj2172.html [2010-07-26 17:04:29 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempMa2172.html [2010-07-26 17:04:29 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempva2172.html [2010-07-26 17:04:29 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempfe2172.html [2010-07-26 15:45:46 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempPb2124.html [2010-07-26 15:45:46 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TemphI2124.html [2010-07-26 15:14:39 | 001,523,412 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010-07-26 15:14:39 | 000,687,828 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2010-07-26 15:14:39 | 000,607,190 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010-07-26 15:14:39 | 000,131,382 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2010-07-26 15:14:39 | 000,103,568 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010-07-26 12:45:22 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempWo2120.html [2010-07-26 12:45:22 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempoA2120.html [2010-07-25 13:18:03 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Templo2136.html [2010-07-25 13:18:03 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempIW2136.html [2010-07-25 12:57:07 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempxO2140.html [2010-07-25 12:57:07 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempJZ2140.html [2010-07-25 12:15:00 | 000,899,743 | ---- | M] () -- C:\Users\kso\Desktop\IMG_0869.JPG [2010-07-25 12:14:58 | 000,920,126 | ---- | M] () -- C:\Users\kso\Desktop\IMG_0868.JPG [2010-07-25 11:21:25 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempMx2088.html [2010-07-25 11:21:25 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TemprQ2088.html [2010-07-24 17:20:18 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempuM4484.html [2010-07-24 17:20:18 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TemphV4484.html [2010-07-24 16:23:14 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempml2224.html [2010-07-24 16:23:08 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempdc2224.html [2010-07-24 11:15:54 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempVQ2212.html [2010-07-24 11:15:54 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempQv2212.html [2010-07-24 10:14:14 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempsm2136.html [2010-07-24 10:14:14 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempMO2136.html [2010-07-24 02:16:40 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempDP2068.html [2010-07-24 02:16:40 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempfk2068.html [2010-07-24 02:16:36 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempws2068.html [2010-07-24 01:56:09 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempBt2068.html [2010-07-23 17:34:10 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempRX2132.html [2010-07-23 16:21:14 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempif4776.html [2010-07-23 16:21:14 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempCz4776.html [2010-07-23 15:33:41 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempny2072.html [2010-07-23 11:42:01 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempFP2148.html [2010-07-23 11:42:01 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempEC2148.html [2010-07-23 01:42:59 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempKM2136.html [2010-07-23 01:42:59 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempuW2136.html [2010-07-22 15:59:39 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempPz2128.html [2010-07-22 15:59:39 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempMt2128.html [2010-07-22 14:37:27 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempIM2132.html [2010-07-22 14:37:27 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempUI2132.html [2010-07-22 03:45:55 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempep2056.html [2010-07-22 01:59:28 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Temppk2056.html [2010-07-21 22:04:33 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempNa2092.html [2010-07-21 22:04:33 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempUB2092.html [2010-07-21 11:48:54 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempQu1348.html [2010-07-21 11:48:54 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempno1348.html [2010-07-20 22:12:43 | 000,001,046 | ---- | M] () -- C:\Users\kso\Desktop\Audacity 1.3 Beta (Unicode).lnk [2010-07-20 21:14:55 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempre2128.html [2010-07-20 21:14:55 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempTW2128.html [2010-07-20 20:25:41 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempKF2116.html [2010-07-20 20:25:41 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempxW2116.html [2010-07-20 14:41:19 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempfn2132.html [2010-07-20 14:41:19 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempka2132.html [2010-07-20 07:26:33 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempBf2188.html [2010-07-20 07:26:33 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempoF2188.html [2010-07-19 20:21:35 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempzJ2052.html [2010-07-19 20:21:35 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempzI2052.html [2010-07-19 16:18:47 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempIT2232.html [2010-07-19 16:18:47 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempCv2232.html [2010-07-19 14:58:36 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempIy2148.html [2010-07-19 14:58:36 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempnB2148.html [2010-07-19 14:25:57 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempTj2128.html [2010-07-19 14:25:57 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempje2128.html [2010-07-18 12:56:47 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempoq2100.html [2010-07-18 12:56:47 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempfy2100.html [2010-07-18 11:54:07 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempoVg780.html [2010-07-18 11:54:07 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempqRt780.html [2010-07-18 10:33:33 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempeH2176.html [2010-07-18 10:31:02 | 000,000,760 | ---- | M] () -- C:\Users\Public\Desktop\War Rock.lnk [2010-07-18 10:02:17 | 000,001,164 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GamersFirst LIVE!.lnk [2010-07-18 10:02:16 | 000,001,130 | ---- | M] () -- C:\Users\Public\Desktop\GamersFirst LIVE!.lnk [2010-07-18 08:31:48 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Templl3096.html [2010-07-18 08:31:48 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempNk3096.html [2010-07-18 07:56:17 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempCf2176.html [2010-07-18 02:29:31 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempRS2240.html [2010-07-18 02:06:06 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempUO2140.html [2010-07-17 18:41:57 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempJq2116.html [2010-07-17 18:41:57 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempMC2116.html [2010-07-16 16:53:46 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempkH2164.html [2010-07-16 16:53:46 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempgr2164.html [2010-07-16 14:01:46 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempMS2164.html [2010-07-16 14:01:46 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempEC2164.html [2010-07-16 13:08:33 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempyi2248.html [2010-07-16 13:08:33 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempEE2248.html [2010-07-16 11:27:03 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempYv2236.html [2010-07-16 11:27:03 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempar2236.html [2010-07-16 02:44:52 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempMT2316.html [2010-07-15 20:37:02 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Temppn2216.html [2010-07-15 20:37:02 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempVr2216.html [2010-07-15 20:04:09 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempzZ2336.html [2010-07-15 20:04:09 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempfF2336.html [2010-07-15 16:41:13 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempDr2392.html [2010-07-15 16:41:13 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Temprw2392.html [2010-07-15 16:05:50 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempRh2628.html [2010-07-15 16:05:50 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempet2628.html [2010-07-15 14:55:40 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempKM2360.html [2010-07-15 14:27:27 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempYH2524.html [2010-07-15 14:27:27 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempji2524.html [2010-07-15 10:32:05 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempwy2572.html [2010-07-15 10:32:05 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempeh2572.html [2010-07-15 01:22:38 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempSz2820.html [2010-07-15 01:22:37 | 001,826,816 | ---- | M] () -- C:\Users\kso\Documents\_mysterious girl_ - peter andre.flv [2010-07-14 16:34:19 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempOS4912.html [2010-07-14 16:34:19 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempdY4912.html [2010-07-14 15:17:25 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempBd2500.html [2010-07-13 17:22:28 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempqe2460.html [2010-07-13 17:22:28 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempoY2460.html [2010-07-13 14:35:16 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempDj2508.html [2010-07-13 11:37:14 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempVI2644.html [2010-07-13 11:37:14 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempZP2644.html [2010-07-13 00:26:18 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempwK1688.html [2010-07-13 00:26:18 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempxr1688.html [2010-07-12 23:57:02 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempmM3440.html [2010-07-12 23:06:33 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempUa2348.html [2010-07-12 21:52:40 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempwF2468.html [2010-07-12 21:52:40 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempzU2468.html [2010-07-12 18:58:56 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempsv2508.html [2010-07-12 18:58:56 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempKq2508.html [2010-07-11 19:20:17 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempgR2484.html [2010-07-11 19:20:17 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempQr2484.html [2010-07-11 02:14:36 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempEa4204.html [2010-07-11 02:14:36 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempSc4204.html [2010-07-09 23:53:58 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempxU2468.html [2010-07-09 23:53:58 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Temprr2468.html [2010-07-09 20:54:31 | 000,524,288 | -HS- | M] () -- C:\Users\kso\ntuser.dat{d81c26b0-8b45-11df-ad77-00235a37e7fa}.TMContainer00000000000000000002.regtrans-ms [2010-07-09 20:54:31 | 000,524,288 | -HS- | M] () -- C:\Users\kso\ntuser.dat{d81c26b0-8b45-11df-ad77-00235a37e7fa}.TMContainer00000000000000000001.regtrans-ms [2010-07-09 20:54:31 | 000,065,536 | -HS- | M] () -- C:\Users\kso\ntuser.dat{d81c26b0-8b45-11df-ad77-00235a37e7fa}.TM.blf [2010-07-09 20:54:29 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TemprA2372.html [2010-07-09 20:54:29 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempnK2372.html [2010-07-08 23:12:25 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempJN2416.html [2010-07-08 23:12:25 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempYD2416.html [2010-07-06 01:03:18 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempuG2516.html [2010-07-05 17:23:49 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempue2136.html [2010-07-05 17:23:49 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempjG2136.html [2010-07-05 15:13:40 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempvx1664.html [2010-07-05 14:03:45 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempKD2520.html [2010-07-05 14:03:45 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempDk2520.html [2010-07-04 19:33:47 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempMy2452.html [2010-07-04 19:33:47 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempED2452.html [2010-07-04 13:31:38 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Templb2512.html [2010-07-03 12:44:53 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Temphs2452.html [2010-07-03 02:09:41 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempqD2452.html [2010-07-03 02:09:41 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempuI2452.html [2010-07-02 16:43:11 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempJR2520.html [2010-07-02 16:43:11 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Temppn2520.html [2010-07-02 13:22:35 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempTA2368.html [2010-07-02 13:22:35 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempvo2368.html [2010-07-02 00:48:49 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempax2480.html [2010-07-01 01:59:48 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempys2352.html [2010-06-30 16:31:36 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempjy2368.html [2010-06-30 14:13:59 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempix2368.html [2010-06-30 14:13:59 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempWG2368.html [2010-06-30 02:27:29 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempcQ3232.html [2010-06-30 02:26:31 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempLQ3276.html [2010-06-30 00:54:54 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempiL2192.html [2010-06-29 09:26:59 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempUV2572.html [2010-06-29 09:26:59 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempbA2572.html [2010-06-29 00:32:41 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempCg2352.html [2010-06-29 00:32:41 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempfD2352.html [2010-06-28 17:39:26 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempWWw420.html [2010-06-28 17:39:26 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempelG420.html [2010-06-28 16:39:52 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempKg2484.html [2010-06-28 00:28:21 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempdp2776.html [2010-06-27 23:53:25 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempCd2776.html [2010-06-27 10:27:12 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempKq2388.html [2010-06-27 10:27:12 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempQh2388.html [2010-06-26 23:43:15 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempRa4020.html [2010-06-26 20:54:43 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempdT2436.html [2010-06-26 18:18:42 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempte2364.html [2010-06-26 16:46:25 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempvg2340.html [2010-06-26 16:46:25 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempjS2340.html [2010-06-26 12:50:44 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempED1576.html [2010-06-26 12:50:44 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempIn1576.html [2010-06-26 00:26:37 | 002,012,003 | ---- | M] () -- C:\Users\kso\Desktop\dziwki.wma [2010-06-26 00:20:41 | 001,729,133 | ---- | M] () -- C:\Users\kso\Desktop\nrd.wma [2010-06-26 00:08:34 | 000,224,983 | ---- | M] () -- C:\Users\kso\Desktop\scds.wma [2010-06-26 00:04:04 | 001,172,373 | ---- | M] () -- C:\Users\kso\Desktop\dsds.wma [2010-06-25 23:56:43 | 002,959,393 | ---- | M] () -- C:\Users\kso\Desktop\chuj.wma [2010-06-25 23:39:25 | 000,503,363 | ---- | M] () -- C:\Users\kso\Desktop\swda.wma [2010-06-25 23:35:04 | 000,058,853 | ---- | M] () -- C:\Users\kso\Desktop\i[o.wma [2010-06-25 23:21:55 | 002,020,983 | ---- | M] () -- C:\Users\kso\Desktop\njmi.wma [2010-06-25 23:04:42 | 000,777,253 | ---- | M] () -- C:\Users\kso\Desktop\Bez_nazwy.wma [2010-06-25 18:05:56 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempJt2452.html [2010-06-25 14:34:46 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempty2480.html [2010-06-25 14:34:46 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempOe2480.html [2010-06-24 23:44:12 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempni1416.html [2010-06-24 23:44:12 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempFk1416.html [2010-06-24 13:59:34 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempXx2480.html [2010-06-24 00:36:17 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempsT2476.html [2010-06-23 23:01:31 | 004,706,670 | ---- | M] () -- C:\Users\kso\Documents\koniec swiata - oranzada.mp3 [2010-06-23 20:57:14 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempKA2632.html [2010-06-23 20:57:14 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TemplK2632.html [2010-06-23 19:44:23 | 000,000,848 | ---- | M] () -- C:\Users\Public\Desktop\Two Worlds.lnk [2010-06-23 13:54:48 | 000,001,249 | ---- | M] () -- C:\Users\kso\Desktop\Update Service.lnk [2010-06-23 13:54:13 | 000,034,032 | ---- | M] (Sony Ericsson Mobile Communications) -- C:\Windows\SysNative\drivers\seehcri.sys [2010-06-23 11:47:18 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempXd2856.html [2010-06-23 11:47:18 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempuN2856.html [2010-06-23 11:44:04 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempvG2476.html [2010-06-23 11:44:04 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempuE2476.html [2010-06-23 00:06:21 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TemplB2168.html [2010-06-23 00:06:21 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempgt2168.html [2010-06-22 14:05:25 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempHX2860.html [2010-06-22 14:05:25 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempPM2860.html [2010-06-21 16:22:43 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempjj2952.html [2010-06-21 12:10:45 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempkY4944.html [2010-06-21 12:10:45 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempAj4944.html [2010-06-21 11:00:15 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempHZ3032.html [2010-06-21 10:07:25 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempyD2860.html [2010-06-21 00:58:06 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempig2868.html [2010-06-21 00:58:06 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempPl2868.html [2010-06-20 23:21:33 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempuz3044.html [2010-06-20 23:21:33 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Templp3044.html [2010-06-20 23:21:33 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Temppk3044.html [2010-06-20 23:21:33 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempdP3044.html [2010-06-20 23:03:40 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempzg3044.html [2010-06-20 23:03:40 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempwk3044.html [2010-06-20 23:03:40 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempug3044.html [2010-06-20 23:03:40 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempoE3044.html [2010-06-20 22:55:42 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempJJ2988.html [2010-06-20 22:55:42 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempcW2988.html [2010-06-20 22:55:42 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TemprF2988.html [2010-06-20 22:55:42 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempJK2988.html [2010-06-20 22:25:54 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempvq2576.html [2010-06-20 22:25:54 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempPH2576.html [2010-06-20 22:25:54 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempzY2576.html [2010-06-20 22:25:54 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TemphO2576.html [2010-06-20 21:36:36 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Templr2844.html [2010-06-20 21:36:36 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Templg2844.html [2010-06-20 21:22:57 | 000,000,131 | ---- | M] () -- C:\Windows\xUninstall.bat [2010-06-20 20:58:51 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempSM2864.html [2010-06-20 20:58:51 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempJq2864.html [2010-06-20 01:41:53 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempPQ3444.html [2010-06-20 01:41:53 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempkp3444.html [2010-06-20 01:41:53 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempwF3444.html [2010-06-20 01:41:53 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempJC3444.html [2010-06-20 00:18:24 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempUS2736.html [2010-06-20 00:18:24 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempbV2736.html [2010-06-20 00:18:24 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempMZ2736.html [2010-06-20 00:18:24 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempEM2736.html [2010-06-19 17:02:54 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempXE1372.html [2010-06-19 17:02:54 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempSc1372.html [2010-06-19 13:53:58 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Temppl2712.html [2010-06-19 12:12:25 | 000,096,995 | ---- | M] () -- C:\Users\kso\Documents\100618_094824.jpg [2010-06-19 00:41:15 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempIzp388.html [2010-06-19 00:41:15 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempqNS388.html [2010-06-19 00:41:02 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempJCw388.html [2010-06-19 00:39:34 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempsy3076.html [2010-06-19 00:39:34 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempmE3076.html [2010-06-19 00:39:34 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempZQ3076.html [2010-06-19 00:39:34 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempVk3076.html [2010-06-18 14:22:00 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempzU2760.html [2010-06-18 00:28:12 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempwN2748.html [2010-06-18 00:28:12 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempjn2748.html [2010-06-17 07:42:23 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempKp3020.html [2010-06-17 07:42:23 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempcH3020.html [2010-06-17 00:21:36 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempfHK612.html [2010-06-17 00:21:36 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempLsQ612.html [2010-06-16 15:39:08 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempjs2796.html [2010-06-16 00:02:40 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempKz1732.html [2010-06-15 15:31:42 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempwe2800.html [2010-06-15 00:07:44 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempdI1776.html [2010-06-15 00:07:41 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempEi1776.html [2010-06-14 22:55:39 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempSd2540.html [2010-06-14 22:55:36 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempdQ2540.html [2010-06-14 18:23:31 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempvH1864.html [2010-06-14 16:48:27 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempZG3936.html [2010-06-14 16:19:58 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempPo2788.html [2010-06-14 08:33:23 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempZg3056.html [2010-06-14 08:33:23 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempNJ3056.html [2010-06-14 07:38:16 | 000,418,384 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010-06-13 23:49:05 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempFF5076.html [2010-06-13 23:49:05 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempAg5076.html [2010-06-13 22:11:46 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempar2768.html [2010-06-11 08:24:52 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempob2812.html [2010-06-11 08:24:52 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempUK2812.html [2010-06-11 00:02:29 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempnr1932.html [2010-06-11 00:02:29 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempeB1932.html [2010-06-10 21:16:52 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempGr2800.html [2010-06-10 21:16:46 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempvd2800.html [2010-06-10 20:26:34 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempTw3368.html [2010-06-10 20:26:34 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempib3368.html [2010-06-10 20:21:07 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempRM1064.html [2010-06-10 20:20:48 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Temptm1064.html [2010-06-10 19:56:30 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempwH3692.html [2010-06-10 19:56:24 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempEW3692.html [2010-06-10 18:48:21 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempfQ1196.html [2010-06-10 17:21:07 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempMn3324.html [2010-06-10 17:21:07 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempOO3324.html [2010-06-10 16:16:09 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempFw2856.html [2010-06-10 16:09:20 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempsg2856.html [2010-06-10 00:03:48 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempxC2744.html [2010-06-10 00:03:48 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempLU2744.html [2010-06-09 23:12:45 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempxS3020.html [2010-06-09 23:12:39 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempnZ3020.html [2010-06-09 21:25:33 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempXd3976.html [2010-06-09 21:25:33 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempFG3976.html [2010-06-09 21:25:33 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempKT3976.html [2010-06-09 21:25:33 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempdI3976.html [2010-06-09 20:06:05 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempUn2988.html [2010-06-09 18:44:28 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempfU2988.html [2010-06-09 07:40:00 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempCw2796.html [2010-06-08 23:49:21 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempKD2608.html [2010-06-08 23:49:21 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempAz2608.html [2010-06-08 23:39:09 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempBF3040.html [2010-06-08 23:38:53 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Temptr3040.html [2010-06-08 07:22:11 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempxsk892.html [2010-06-08 07:22:11 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempnFR892.html [2010-06-07 23:36:15 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempYH2864.html [2010-06-06 23:08:36 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempkq2768.html [2010-06-06 18:51:13 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempoT4092.html [2010-06-06 18:51:13 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TemprY4092.html [2010-06-06 17:35:24 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempTG2340.html [2010-06-05 00:54:00 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempdG2104.html [2010-06-05 00:54:00 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempaY2104.html [2010-06-05 00:18:39 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempDi2104.html [2010-06-04 01:29:34 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempgw1688.html [2010-06-04 01:29:34 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Temphj1688.html [2010-06-04 01:25:07 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TemplS1688.html [2010-06-03 21:53:44 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempDCl356.html [2010-06-03 21:53:44 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempSpA356.html [2010-06-03 21:53:33 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\Temphkk356.html [2010-06-03 21:38:22 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TemptV1604.html [2010-06-03 21:37:37 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempUd1604.html [2010-06-03 02:18:58 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempIj1556.html [2010-06-03 02:18:58 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\Tempck1556.html [2010-06-02 23:00:40 | 000,002,432 | ---- | M] () -- C:\Users\kso\AppData\Local\TempzW1796.html [2010-06-02 23:00:40 | 000,002,089 | ---- | M] () -- C:\Users\kso\AppData\Local\TempqQ1796.html [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-08-01 22:42:46 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TemppL1924.html [2010-08-01 22:42:46 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempBj1924.html [2010-08-01 22:33:59 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempUj1924.html [2010-08-01 22:33:59 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TemppM1924.html [2010-08-01 22:13:03 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempWk3676.html [2010-08-01 14:04:16 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempUA2108.html [2010-08-01 11:12:26 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempNZ2096.html [2010-08-01 11:12:26 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempQe2096.html [2010-08-01 00:58:41 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Temphb2184.html [2010-08-01 00:58:41 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempfc2184.html [2010-07-31 18:36:06 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempkw2160.html [2010-07-31 12:46:41 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempAE2136.html [2010-07-31 12:46:41 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TemplB2136.html [2010-07-30 14:05:25 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempiU2140.html [2010-07-30 14:05:25 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempwz2140.html [2010-07-30 12:29:42 | 000,001,106 | ---- | C] () -- C:\Users\kso\Desktop\EVEREST Home Edition.lnk [2010-07-30 11:23:37 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempXy2200.html [2010-07-30 11:23:37 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempSY2200.html [2010-07-30 00:40:15 | 000,001,283 | ---- | C] () -- C:\Users\Public\Desktop\UpdateMyDrivers.lnk [2010-07-29 20:03:09 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempVO2116.html [2010-07-29 20:03:09 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempjV2116.html [2010-07-29 16:44:42 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempys2088.html [2010-07-29 16:44:42 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempcH2088.html [2010-07-29 11:07:42 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempnK2096.html [2010-07-29 11:07:42 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempqT2096.html [2010-07-28 19:40:41 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempxx2128.html [2010-07-28 19:40:41 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempDP2128.html [2010-07-28 15:22:38 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempGg2080.html [2010-07-28 15:22:38 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempRx2080.html [2010-07-28 10:15:15 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TemppA2120.html [2010-07-28 10:15:15 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempRQ2120.html [2010-07-27 21:24:17 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempZE2136.html [2010-07-27 21:24:17 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempjS2136.html [2010-07-27 12:54:18 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempYF2128.html [2010-07-27 12:54:18 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempAJ2128.html [2010-07-27 10:56:49 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempqn2136.html [2010-07-27 10:56:49 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempzO2136.html [2010-07-26 22:08:02 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Temptf2216.html [2010-07-26 22:08:02 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempxZ2216.html [2010-07-26 22:07:47 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempor2216.html [2010-07-26 18:27:59 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempqN2096.html [2010-07-26 18:27:59 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempta2096.html [2010-07-26 17:02:40 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempMa2172.html [2010-07-26 17:02:40 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempfe2172.html [2010-07-26 16:22:17 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempnj2172.html [2010-07-26 16:22:17 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempva2172.html [2010-07-26 14:50:21 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempPb2124.html [2010-07-26 14:50:21 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TemphI2124.html [2010-07-25 23:16:47 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempWo2120.html [2010-07-25 23:16:47 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempoA2120.html [2010-07-25 13:08:26 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Templo2136.html [2010-07-25 13:08:26 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempIW2136.html [2010-07-25 12:14:58 | 000,899,743 | ---- | C] () -- C:\Users\kso\Desktop\IMG_0869.JPG [2010-07-25 12:14:57 | 000,920,126 | ---- | C] () -- C:\Users\kso\Desktop\IMG_0868.JPG [2010-07-25 12:12:28 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempxO2140.html [2010-07-25 12:12:28 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempJZ2140.html [2010-07-25 11:16:07 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempMx2088.html [2010-07-25 11:16:07 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TemprQ2088.html [2010-07-24 16:23:23 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempuM4484.html [2010-07-24 16:23:23 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TemphV4484.html [2010-07-24 12:55:24 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempdc2224.html [2010-07-24 12:37:10 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempml2224.html [2010-07-24 10:50:43 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempVQ2212.html [2010-07-24 10:50:43 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempQv2212.html [2010-07-24 09:10:31 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempsm2136.html [2010-07-24 09:10:31 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempMO2136.html [2010-07-24 02:14:02 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempws2068.html [2010-07-24 01:28:09 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempBt2068.html [2010-07-24 01:27:00 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempDP2068.html [2010-07-24 01:27:00 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempfk2068.html [2010-07-23 17:16:51 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempRX2132.html [2010-07-23 15:33:51 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempif4776.html [2010-07-23 15:33:51 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempCz4776.html [2010-07-23 15:19:56 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempny2072.html [2010-07-23 11:04:06 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempFP2148.html [2010-07-23 11:04:06 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempEC2148.html [2010-07-23 01:19:40 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempKM2136.html [2010-07-23 01:19:40 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempuW2136.html [2010-07-22 15:28:04 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempPz2128.html [2010-07-22 15:28:04 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempMt2128.html [2010-07-22 13:58:32 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempIM2132.html [2010-07-22 13:58:32 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempUI2132.html [2010-07-22 01:46:29 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Temppk2056.html [2010-07-22 01:45:30 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempep2056.html [2010-07-21 21:59:58 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempNa2092.html [2010-07-21 21:59:58 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempUB2092.html [2010-07-20 22:12:43 | 000,001,046 | ---- | C] () -- C:\Users\kso\Desktop\Audacity 1.3 Beta (Unicode).lnk [2010-07-20 21:47:02 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempQu1348.html [2010-07-20 21:47:02 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempno1348.html [2010-07-20 21:09:56 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempre2128.html [2010-07-20 21:09:56 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempTW2128.html [2010-07-20 19:56:14 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempKF2116.html [2010-07-20 19:56:14 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempxW2116.html [2010-07-20 12:23:11 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempfn2132.html [2010-07-20 12:23:11 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempka2132.html [2010-07-20 07:18:28 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempBf2188.html [2010-07-20 07:18:28 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempoF2188.html [2010-07-19 19:35:49 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempzJ2052.html [2010-07-19 19:35:49 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempzI2052.html [2010-07-19 15:26:16 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempIT2232.html [2010-07-19 15:26:16 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempCv2232.html [2010-07-19 14:28:33 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempIy2148.html [2010-07-19 14:28:33 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempnB2148.html [2010-07-19 14:21:16 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempTj2128.html [2010-07-19 14:21:16 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempje2128.html [2010-07-18 12:32:03 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempoq2100.html [2010-07-18 12:32:03 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempfy2100.html [2010-07-18 11:07:18 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempoVg780.html [2010-07-18 11:07:18 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempqRt780.html [2010-07-18 10:31:02 | 000,000,760 | ---- | C] () -- C:\Users\Public\Desktop\War Rock.lnk [2010-07-18 10:02:17 | 000,001,164 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GamersFirst LIVE!.lnk [2010-07-18 10:02:16 | 000,001,130 | ---- | C] () -- C:\Users\Public\Desktop\GamersFirst LIVE!.lnk [2010-07-18 09:13:40 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempeH2176.html [2010-07-18 08:23:06 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Templl3096.html [2010-07-18 08:23:06 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempNk3096.html [2010-07-18 07:53:31 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempCf2176.html [2010-07-18 02:29:03 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempRS2240.html [2010-07-18 01:30:53 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempUO2140.html [2010-07-17 17:15:14 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempJq2116.html [2010-07-17 17:15:14 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempMC2116.html [2010-07-16 15:32:39 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempkH2164.html [2010-07-16 15:32:39 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempgr2164.html [2010-07-16 13:25:43 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempMS2164.html [2010-07-16 13:25:43 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempEC2164.html [2010-07-16 12:32:00 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempyi2248.html [2010-07-16 12:32:00 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempEE2248.html [2010-07-16 10:13:39 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempYv2236.html [2010-07-16 10:13:39 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempar2236.html [2010-07-15 21:41:45 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempMT2316.html [2010-07-15 20:30:12 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Temppn2216.html [2010-07-15 20:30:12 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempVr2216.html [2010-07-15 19:50:27 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempzZ2336.html [2010-07-15 19:50:27 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempfF2336.html [2010-07-15 16:34:19 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempDr2392.html [2010-07-15 16:34:19 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Temprw2392.html [2010-07-15 15:52:15 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempRh2628.html [2010-07-15 15:52:15 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempet2628.html [2010-07-15 14:54:48 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempKM2360.html [2010-07-15 11:45:28 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempYH2524.html [2010-07-15 11:45:28 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempji2524.html [2010-07-15 09:05:30 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempwy2572.html [2010-07-15 09:05:30 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempeh2572.html [2010-07-15 01:18:50 | 001,826,816 | ---- | C] () -- C:\Users\kso\Documents\_mysterious girl_ - peter andre.flv [2010-07-14 21:37:43 | 2486,501,376 | ---- | C] () -- C:\Users\kso\Desktop\rld-fm10.iso [2010-07-14 17:07:08 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempSz2820.html [2010-07-14 16:04:21 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempOS4912.html [2010-07-14 16:04:21 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempdY4912.html [2010-07-14 11:07:31 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempBd2500.html [2010-07-13 15:40:22 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempqe2460.html [2010-07-13 15:40:22 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempoY2460.html [2010-07-13 12:08:57 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempDj2508.html [2010-07-13 09:30:51 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempVI2644.html [2010-07-13 09:30:51 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempZP2644.html [2010-07-13 00:26:18 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempwK1688.html [2010-07-13 00:26:18 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempxr1688.html [2010-07-12 23:06:41 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempmM3440.html [2010-07-12 22:18:39 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempUa2348.html [2010-07-12 21:32:25 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempwF2468.html [2010-07-12 21:32:25 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempzU2468.html [2010-07-11 19:31:28 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempsv2508.html [2010-07-11 19:31:28 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempKq2508.html [2010-07-11 02:47:57 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempgR2484.html [2010-07-11 02:47:57 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempQr2484.html [2010-07-10 23:40:46 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempEa4204.html [2010-07-10 23:40:46 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempSc4204.html [2010-07-09 23:06:50 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempxU2468.html [2010-07-09 23:06:50 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Temprr2468.html [2010-07-09 12:37:45 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TemprA2372.html [2010-07-09 12:37:45 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempnK2372.html [2010-07-09 12:36:54 | 000,524,288 | -HS- | C] () -- C:\Users\kso\ntuser.dat{d81c26b0-8b45-11df-ad77-00235a37e7fa}.TMContainer00000000000000000002.regtrans-ms [2010-07-09 12:36:54 | 000,524,288 | -HS- | C] () -- C:\Users\kso\ntuser.dat{d81c26b0-8b45-11df-ad77-00235a37e7fa}.TMContainer00000000000000000001.regtrans-ms [2010-07-09 12:36:54 | 000,065,536 | -HS- | C] () -- C:\Users\kso\ntuser.dat{d81c26b0-8b45-11df-ad77-00235a37e7fa}.TM.blf [2010-07-08 21:47:47 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempJN2416.html [2010-07-08 21:47:47 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempYD2416.html [2010-07-05 17:25:48 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempuG2516.html [2010-07-05 17:10:50 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempue2136.html [2010-07-05 17:10:50 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempjG2136.html [2010-07-05 14:04:25 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempvx1664.html [2010-07-05 09:42:27 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempDk2520.html [2010-07-05 09:42:26 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempKD2520.html [2010-07-04 14:41:42 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempMy2452.html [2010-07-04 14:41:42 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempED2452.html [2010-07-04 12:35:53 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Templb2512.html [2010-07-03 09:09:25 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Temphs2452.html [2010-07-02 16:44:46 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempqD2452.html [2010-07-02 16:44:46 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempuI2452.html [2010-07-02 13:46:10 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempJR2520.html [2010-07-02 13:46:10 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Temppn2520.html [2010-07-02 12:18:40 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempTA2368.html [2010-07-02 12:18:40 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempvo2368.html [2010-07-01 13:07:36 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempax2480.html [2010-06-30 22:53:35 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempys2352.html [2010-06-30 15:30:17 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempjy2368.html [2010-06-30 10:28:50 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempix2368.html [2010-06-30 10:28:50 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempWG2368.html [2010-06-30 02:26:43 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempcQ3232.html [2010-06-30 02:26:22 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempLQ3276.html [2010-06-29 10:13:28 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempiL2192.html [2010-06-29 09:26:59 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempUV2572.html [2010-06-29 09:26:59 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempbA2572.html [2010-06-28 20:38:44 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempCg2352.html [2010-06-28 20:38:44 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempfD2352.html [2010-06-28 16:55:49 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempWWw420.html [2010-06-28 16:55:49 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempelG420.html [2010-06-28 12:55:55 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempKg2484.html [2010-06-27 23:12:08 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempCd2776.html [2010-06-27 23:10:32 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempdp2776.html [2010-06-27 10:27:12 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempKq2388.html [2010-06-27 10:27:12 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempQh2388.html [2010-06-26 21:01:58 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempRa4020.html [2010-06-26 18:50:43 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempdT2436.html [2010-06-26 17:56:52 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempte2364.html [2010-06-26 15:27:03 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempvg2340.html [2010-06-26 15:27:03 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempjS2340.html [2010-06-26 10:39:20 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempED1576.html [2010-06-26 10:39:20 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempIn1576.html [2010-06-26 00:26:37 | 002,012,003 | ---- | C] () -- C:\Users\kso\Desktop\dziwki.wma [2010-06-26 00:20:41 | 001,729,133 | ---- | C] () -- C:\Users\kso\Desktop\nrd.wma [2010-06-26 00:08:34 | 000,224,983 | ---- | C] () -- C:\Users\kso\Desktop\scds.wma [2010-06-26 00:04:04 | 001,172,373 | ---- | C] () -- C:\Users\kso\Desktop\dsds.wma [2010-06-25 23:56:43 | 002,959,393 | ---- | C] () -- C:\Users\kso\Desktop\chuj.wma [2010-06-25 23:39:25 | 000,503,363 | ---- | C] () -- C:\Users\kso\Desktop\swda.wma [2010-06-25 23:35:03 | 000,058,853 | ---- | C] () -- C:\Users\kso\Desktop\i[o.wma [2010-06-25 23:21:55 | 002,020,983 | ---- | C] () -- C:\Users\kso\Desktop\njmi.wma [2010-06-25 23:03:29 | 000,777,253 | ---- | C] () -- C:\Users\kso\Desktop\Bez_nazwy.wma [2010-06-25 17:30:12 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempJt2452.html [2010-06-25 11:06:14 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempty2480.html [2010-06-25 11:06:14 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempOe2480.html [2010-06-24 21:43:01 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempni1416.html [2010-06-24 21:43:01 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempFk1416.html [2010-06-24 10:11:42 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempXx2480.html [2010-06-23 23:00:15 | 004,706,670 | ---- | C] () -- C:\Users\kso\Documents\koniec swiata - oranzada.mp3 [2010-06-23 21:05:14 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempsT2476.html [2010-06-23 19:49:10 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempKA2632.html [2010-06-23 19:49:10 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TemplK2632.html [2010-06-23 19:44:23 | 000,000,848 | ---- | C] () -- C:\Users\Public\Desktop\Two Worlds.lnk [2010-06-23 13:54:48 | 000,001,249 | ---- | C] () -- C:\Users\kso\Desktop\Update Service.lnk [2010-06-23 11:47:18 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempXd2856.html [2010-06-23 11:47:18 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempuN2856.html [2010-06-23 11:07:14 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempvG2476.html [2010-06-23 11:07:14 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempuE2476.html [2010-06-22 14:08:26 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TemplB2168.html [2010-06-22 14:08:26 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempgt2168.html [2010-06-22 09:46:27 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempHX2860.html [2010-06-22 09:46:27 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempPM2860.html [2010-06-21 12:15:32 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempjj2952.html [2010-06-21 11:15:03 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempkY4944.html [2010-06-21 11:15:03 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempAj4944.html [2010-06-21 10:09:33 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempHZ3032.html [2010-06-21 09:29:11 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempyD2860.html [2010-06-20 23:24:27 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempig2868.html [2010-06-20 23:24:27 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempPl2868.html [2010-06-20 23:23:45 | 000,000,000 | ---- | C] () -- C:\Users\kso\AppData\Local\QSwitch.txt [2010-06-20 23:23:45 | 000,000,000 | ---- | C] () -- C:\Users\kso\AppData\Local\DSwitch.txt [2010-06-20 23:23:45 | 000,000,000 | ---- | C] () -- C:\Users\kso\AppData\Local\AtStart.txt [2010-06-20 23:06:13 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Templp3044.html [2010-06-20 23:06:13 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempdP3044.html [2010-06-20 23:05:55 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempuz3044.html [2010-06-20 23:05:55 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Temppk3044.html [2010-06-20 22:58:40 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempzg3044.html [2010-06-20 22:58:40 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempoE3044.html [2010-06-20 22:58:24 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempwk3044.html [2010-06-20 22:58:24 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempug3044.html [2010-06-20 22:28:24 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempcW2988.html [2010-06-20 22:28:24 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TemprF2988.html [2010-06-20 22:28:14 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempJJ2988.html [2010-06-20 22:28:14 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempJK2988.html [2010-06-20 22:24:08 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempPH2576.html [2010-06-20 22:24:08 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempzY2576.html [2010-06-20 21:39:08 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempvq2576.html [2010-06-20 21:39:08 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TemphO2576.html [2010-06-20 21:35:07 | 000,015,222 | ---- | C] () -- C:\Windows\SysNative\nbspkrs.ico [2010-06-20 21:35:07 | 000,003,774 | ---- | C] () -- C:\Windows\SysNative\bltinmic.ico [2010-06-20 21:35:07 | 000,003,774 | ---- | C] () -- C:\Windows\SysNative\2hps.ico [2010-06-20 21:22:57 | 000,000,131 | ---- | C] () -- C:\Windows\xUninstall.bat [2010-06-20 21:02:03 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Templr2844.html [2010-06-20 21:02:03 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Templg2844.html [2010-06-20 10:30:34 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempSM2864.html [2010-06-20 10:30:34 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempJq2864.html [2010-06-20 01:41:11 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempPQ3444.html [2010-06-20 01:41:11 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempwF3444.html [2010-06-20 00:18:35 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempkp3444.html [2010-06-20 00:18:35 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempJC3444.html [2010-06-19 22:38:36 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempbV2736.html [2010-06-19 22:38:36 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempEM2736.html [2010-06-19 19:37:35 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempUS2736.html [2010-06-19 19:37:35 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempMZ2736.html [2010-06-19 16:31:15 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempXE1372.html [2010-06-19 16:31:15 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempSc1372.html [2010-06-19 12:12:15 | 000,096,995 | ---- | C] () -- C:\Users\kso\Documents\100618_094824.jpg [2010-06-19 11:58:58 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Temppl2712.html [2010-06-19 00:39:56 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempJCw388.html [2010-06-19 00:39:50 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempIzp388.html [2010-06-19 00:39:50 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempqNS388.html [2010-06-18 22:20:11 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempsy3076.html [2010-06-18 22:20:11 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempVk3076.html [2010-06-18 14:31:32 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempmE3076.html [2010-06-18 14:31:32 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempZQ3076.html [2010-06-18 14:07:59 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempzU2760.html [2010-06-17 15:34:40 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempwN2748.html [2010-06-17 15:34:40 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempjn2748.html [2010-06-17 07:05:52 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempKp3020.html [2010-06-17 07:05:52 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempcH3020.html [2010-06-16 16:39:30 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempfHK612.html [2010-06-16 16:39:30 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempLsQ612.html [2010-06-16 15:25:37 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempjs2796.html [2010-06-15 16:13:17 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempKz1732.html [2010-06-15 14:57:57 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempwe2800.html [2010-06-14 22:55:50 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempEi1776.html [2010-06-14 22:55:50 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempdI1776.html [2010-06-14 22:23:38 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempSd2540.html [2010-06-14 19:02:56 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempdQ2540.html [2010-06-14 18:04:55 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempvH1864.html [2010-06-14 16:28:57 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempZG3936.html [2010-06-14 15:21:19 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempPo2788.html [2010-06-14 07:38:58 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempZg3056.html [2010-06-14 07:38:58 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempNJ3056.html [2010-06-13 22:37:50 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempFF5076.html [2010-06-13 22:37:50 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempAg5076.html [2010-06-13 11:53:46 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempar2768.html [2010-06-11 07:25:21 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempob2812.html [2010-06-11 07:25:21 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempUK2812.html [2010-06-10 21:16:59 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempnr1932.html [2010-06-10 21:16:59 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempeB1932.html [2010-06-10 21:15:56 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempvd2800.html [2010-06-10 21:14:24 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempGr2800.html [2010-06-10 20:21:14 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempTw3368.html [2010-06-10 20:21:14 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempib3368.html [2010-06-10 20:13:02 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Temptm1064.html [2010-06-10 19:56:36 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempRM1064.html [2010-06-10 19:41:18 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempEW3692.html [2010-06-10 19:25:31 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempwH3692.html [2010-06-10 18:47:12 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempfQ1196.html [2010-06-10 17:11:09 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempMn3324.html [2010-06-10 17:11:09 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempOO3324.html [2010-06-10 16:04:31 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempsg2856.html [2010-06-10 15:32:51 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempFw2856.html [2010-06-09 23:12:51 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempxC2744.html [2010-06-09 23:12:51 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempLU2744.html [2010-06-09 21:30:05 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempnZ3020.html [2010-06-09 21:29:47 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempxS3020.html [2010-06-09 20:54:31 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempFG3976.html [2010-06-09 20:54:31 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempKT3976.html [2010-06-09 20:54:14 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempXd3976.html [2010-06-09 20:54:14 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempdI3976.html [2010-06-09 15:41:55 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempUn2988.html [2010-06-09 15:04:23 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempfU2988.html [2010-06-09 07:32:35 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempCw2796.html [2010-06-08 23:39:19 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempKD2608.html [2010-06-08 23:39:19 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempAz2608.html [2010-06-08 15:45:00 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Temptr3040.html [2010-06-08 14:59:04 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempBF3040.html [2010-06-08 07:08:25 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempxsk892.html [2010-06-08 07:08:25 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempnFR892.html [2010-06-07 15:04:51 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempYH2864.html [2010-06-06 21:09:42 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempkq2768.html [2010-06-06 17:44:27 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempoT4092.html [2010-06-06 17:44:27 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TemprY4092.html [2010-06-05 05:10:03 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempTG2340.html [2010-06-04 23:57:42 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempDi2104.html [2010-06-04 09:23:47 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempdG2104.html [2010-06-04 09:23:47 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempaY2104.html [2010-06-03 23:33:08 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TemplS1688.html [2010-06-03 23:29:23 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempgw1688.html [2010-06-03 23:29:23 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Temphj1688.html [2010-06-03 21:38:46 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\Temphkk356.html [2010-06-03 21:38:36 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempDCl356.html [2010-06-03 21:38:36 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\TempSpA356.html [2010-06-03 21:38:13 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TemptV1604.html [2010-06-03 06:30:43 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempUd1604.html [2010-06-03 01:21:24 | 000,002,432 | ---- | C] () -- C:\Users\kso\AppData\Local\TempIj1556.html [2010-06-03 01:21:24 | 000,002,089 | ---- | C] () -- C:\Users\kso\AppData\Local\Tempck1556.html [2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2007-02-20 13:59:08 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll [2007-02-20 13:59:06 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll [2007-02-20 13:59:06 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll [2007-02-20 13:59:06 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll [2007-02-20 13:59:06 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll [2007-02-20 13:59:06 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll [2007-02-20 13:59:06 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll [2007-02-20 13:59:06 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll [2007-02-20 13:59:04 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll [2007-02-20 12:24:46 | 000,071,208 | ---- | C] () -- C:\Windows\SysWow64\PhysXLoader.dll [color=#E56717]========== LOP Check ==========[/color] [2010-08-01 12:10:17 | 000,000,000 | ---D | M] -- C:\Users\kso\AppData\Roaming\AIMP [2010-07-21 22:02:57 | 000,000,000 | ---D | M] -- C:\Users\kso\AppData\Roaming\Audacity [2010-05-10 12:44:56 | 000,000,000 | ---D | M] -- C:\Users\kso\AppData\Roaming\DAEMON Tools Lite [2010-06-19 12:16:53 | 000,000,000 | ---D | M] -- C:\Users\kso\AppData\Roaming\Facebook [2010-06-14 22:23:38 | 000,000,000 | ---D | M] -- C:\Users\kso\AppData\Roaming\Gadu-Gadu 10 [2010-06-20 21:12:01 | 000,000,000 | ---D | M] -- C:\Users\kso\AppData\Roaming\NumusAutoDiskBuilder [2010-05-11 23:04:26 | 000,000,000 | ---D | M] -- C:\Users\kso\AppData\Roaming\OpenFM [2010-06-17 21:09:46 | 000,000,000 | ---D | M] -- C:\Users\kso\AppData\Roaming\Sports Interactive [2010-08-01 22:48:55 | 000,000,000 | ---D | M] -- C:\Users\kso\AppData\Roaming\uTorrent [2010-07-15 19:49:53 | 000,032,592 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%\*.* >[/color] [2010-06-21 09:27:54 | 000,016,796 | ---- | M] () -- C:\aaw7boot.log [2010-08-01 14:03:13 | 3018,194,944 | -HS- | M] () -- C:\hiberfil.sys [2010-08-01 14:03:22 | 4024,262,656 | -HS- | M] () -- C:\pagefile.sys [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys [2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys [2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2009-07-14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysWow64\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys [2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2009-07-14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2009-07-14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe [2009-10-28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe [2009-10-28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe [color=#E56717]========== Files - Unicode (All) ==========[/color] [2010-06-26 20:25:16 | 000,000,000 | ---D | M](C:\Users\kso\Documents\?? ???) -- C:\Users\kso\Documents\넥슨 플러그 [2010-06-26 20:25:16 | 000,000,000 | ---D | C](C:\Users\kso\Documents\?? ???) -- C:\Users\kso\Documents\넥슨 플러그 < End of report >[/log ][/log]
Makaveli_ns komentarz 1 sierpnia 2010 komentarz 1 sierpnia 2010 Mam dokladnie taki sam problem tylko u mnie dzieje sie to z czestotliwoscia 10sek nic nie moge zrobic :/ [color="#FF0000"]Proszę nie wcinać się w wątki tylko założyć swój !!! //Tomek01[/color]
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.