Klaudia91 utworzono 5 sierpnia 2010 utworzono 5 sierpnia 2010 (edytowane) Witam. Mam taki sam problem. [log]OTL logfile created on: 2010-08-05 23:37:19 - Run 1 OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\Ici\Downloads 64bit-Windows Vista Ultimate Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 7.0.6001.18000) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 54,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 72,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 40,00 Gb Total Space | 15,83 Gb Free Space | 39,58% Space Free | Partition Type: NTFS Drive D: | 100,42 Gb Total Space | 62,37 Gb Free Space | 62,11% Space Free | Partition Type: NTFS Drive E: | 8,63 Gb Total Space | 2,71 Gb Free Space | 31,43% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded Drive I: | 3,69 Gb Total Space | 3,35 Gb Free Space | 90,82% Space Free | Partition Type: FAT32 Computer Name: ICI-PC Current User Name: Ici Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Include 64bit Scans Company Name Whitelist: On Skip Microsoft Files: On File Age = 60 Days Output = Standard [color=#E56717]========== Processes (All) ==========[/color] PRC - [2010-08-05 23:18:06 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Ici\Downloads\OTL.exe PRC - [2010-07-24 20:45:13 | 000,014,808 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe PRC - [2010-07-24 20:45:12 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2010-07-15 21:32:20 | 000,322,352 | ---- | M] (BitTorrent, Inc.) -- D:\Program Files (x86)\uTorrent\uTorrent.exe PRC - [2010-06-30 13:40:14 | 012,374,624 | ---- | M] (GG Network S.A.) -- C:\Program Files (x86)\Gadu-Gadu 10\gg.exe PRC - [2010-06-28 22:57:18 | 002,837,864 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2010-06-28 22:57:15 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2010-05-13 16:12:40 | 026,192,168 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe PRC - [2008-12-29 12:40:30 | 000,687,560 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe PRC - [2008-08-01 16:14:02 | 000,202,032 | ---- | M] ( Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe PRC - [2008-05-01 16:25:56 | 000,165,192 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe PRC - [2008-04-03 11:33:26 | 000,193,840 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe PRC - [2006-11-02 11:45:00 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ctfmon.exe [color=#E56717]========== Modules (All) ==========[/color] MOD - [2010-08-05 23:18:06 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Ici\Downloads\OTL.exe MOD - [2008-01-21 04:51:12 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll MOD - [2008-01-21 04:51:12 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll MOD - [2008-01-21 04:50:17 | 011,580,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll MOD - [2008-01-21 04:50:09 | 000,234,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll MOD - [2008-01-21 04:50:08 | 001,315,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll MOD - [2008-01-21 04:50:05 | 000,806,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll MOD - [2008-01-21 04:50:01 | 001,165,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll MOD - [2008-01-21 04:50:01 | 000,563,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll MOD - [2008-01-21 04:49:34 | 001,590,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll MOD - [2008-01-21 04:49:09 | 000,450,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2008-01-21 04:49:08 | 000,351,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll MOD - [2008-01-21 04:49:08 | 000,183,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\xmllite.dll MOD - [2008-01-21 04:49:08 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2008-01-21 04:49:03 | 000,680,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll MOD - [2008-01-21 04:48:54 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll MOD - [2008-01-21 04:48:48 | 000,798,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll MOD - [2008-01-21 04:48:45 | 001,076,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll MOD - [2008-01-21 04:48:45 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll MOD - [2008-01-21 04:48:40 | 000,523,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll MOD - [2008-01-21 04:48:36 | 000,079,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\authz.dll MOD - [2008-01-21 04:48:30 | 000,116,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll MOD - [2008-01-21 04:48:20 | 000,648,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll MOD - [2008-01-21 04:48:20 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll MOD - [2008-01-21 04:48:19 | 000,501,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll MOD - [2008-01-21 04:48:18 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mpr.dll MOD - [2008-01-21 04:48:12 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll MOD - [2008-01-21 04:48:09 | 000,108,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\userenv.dll MOD - [2008-01-21 04:48:08 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll MOD - [2008-01-21 04:48:07 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll MOD - [2008-01-21 04:48:00 | 000,855,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll MOD - [2008-01-21 04:47:54 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll MOD - [2008-01-21 04:47:53 | 000,302,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll MOD - [2008-01-21 04:47:49 | 000,677,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll MOD - [2008-01-21 04:47:46 | 000,750,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll MOD - [2008-01-21 04:47:26 | 000,258,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv MOD - [2008-01-21 04:47:18 | 001,067,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll MOD - [2008-01-21 04:47:14 | 001,684,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll MOD - [2008-01-21 04:47:09 | 000,088,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll MOD - [2008-01-21 04:47:08 | 000,466,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netapi32.dll MOD - [2006-11-02 11:46:12 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2010-08-04 21:20:18 | 006,719,872 | ---- | M] (Prevx) [Auto | Running] -- C:\Program Files\Prevx\prevx.exe -- (CSIScanner) SRV:[b]64bit:[/b] - [2010-06-28 22:57:15 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner) SRV:[b]64bit:[/b] - [2010-06-28 22:57:15 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner) SRV:[b]64bit:[/b] - [2010-06-28 22:57:15 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2008-01-21 04:51:22 | 000,252,928 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService) SRV:[b]64bit:[/b] - [2008-01-21 04:51:03 | 000,598,016 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService) SRV:[b]64bit:[/b] - [2008-01-21 04:50:23 | 000,195,584 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2008-01-21 04:46:39 | 000,383,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2006-10-27 00:47:54 | 000,065,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ipinip.sys -- (IpInIp) DRV:[b]64bit:[/b] - [2010-08-04 21:20:19 | 000,056,320 | ---- | M] () [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\pxrts.sys -- (pxrts) DRV:[b]64bit:[/b] - [2010-08-04 21:20:19 | 000,034,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pxscan.sys -- (pxscan) DRV:[b]64bit:[/b] - [2010-08-04 21:20:18 | 000,022,336 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pxkbf.sys -- (pxkbf) DRV:[b]64bit:[/b] - [2010-07-17 10:56:42 | 000,868,848 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010-06-28 22:33:00 | 000,061,008 | ---- | M] () [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2009-02-25 06:31:39 | 000,006,144 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\Axtmvflt.sys -- (Axtmvflt) DRV:[b]64bit:[/b] - [2009-02-25 06:31:37 | 000,052,224 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\Axtmvprt.sys -- (Axtmvprt) DRV:[b]64bit:[/b] - [2009-02-25 06:31:26 | 000,054,272 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\Axtmvmdm.sys -- (Axtmvmdm) DRV:[b]64bit:[/b] - [2008-04-27 11:09:18 | 001,133,568 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2008-03-04 10:32:46 | 000,222,720 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService) DRV:[b]64bit:[/b] - [2008-01-21 04:51:03 | 000,460,800 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC) DRV:[b]64bit:[/b] - [2008-01-21 04:46:02 | 000,111,104 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2007-07-11 10:30:34 | 000,009,088 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\HpqRemHid.sys -- (HpqRemHid) DRV:[b]64bit:[/b] - [2007-06-18 17:13:12 | 000,018,432 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\HpqKbFiltr.sys -- (HpqKbFiltr) DRV:[b]64bit:[/b] - [2006-09-18 23:36:24 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\Wbem\ntfs.mof -- (Ntfs) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1123888075-993420022-2315263779-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=15510&l=dis IE - HKU\S-1-5-21-1123888075-993420022-2315263779-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) IE - HKU\S-1-5-21-1123888075-993420022-2315263779-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "google.pl" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.1 FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=PTF&o=15507&locale=en_US&apn_uid=AF94EBC8-1948-4C61-B931-54C04C081287&apn_ptnrs=LJ&apn_sauid=40F9CD04-A65F-4A54-8063-DC3CE5661134&apn_dtid=YYYYYYYYPL&q=" FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-07-27 17:04:46 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-07-27 18:59:53 | 000,000,000 | ---D | M] [2010-07-01 11:09:12 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\mozilla\Extensions [2010-08-05 21:29:47 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\mozilla\Firefox\Profiles\lxj15s6h.default\extensions [2010-07-21 22:14:41 | 000,000,000 | ---D | M] (Web Developer) -- C:\Users\Ici\AppData\Roaming\mozilla\Firefox\Profiles\lxj15s6h.default\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12} [2010-07-27 21:03:02 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Ici\AppData\Roaming\mozilla\Firefox\Profiles\lxj15s6h.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010-07-17 12:00:30 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\mozilla\Firefox\Profiles\lxj15s6h.default\extensions\DTToolbar@toolbarnet.com [2010-07-10 19:39:41 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\mozilla\Firefox\Profiles\lxj15s6h.default\extensions\toolbar@ask.com [2010-07-21 21:26:28 | 000,002,565 | ---- | M] () -- C:\Users\Ici\AppData\Roaming\Mozilla\FireFox\Profiles\lxj15s6h.default\searchplugins\askcom.xml [2010-08-05 21:29:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions [2010-07-06 11:53:56 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2010-06-26 09:59:22 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2010-06-26 09:59:22 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2010-06-26 09:59:22 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2010-06-26 09:59:22 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2010-06-26 09:59:22 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2010-06-26 09:59:22 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2006-09-18 23:37:24 | 000,000,761 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GRA8E1~1.DLL (Microsoft Corporation) O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3:[b]64bit:[/b] - HKU\S-1-5-21-1123888075-993420022-2315263779-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.DLL () O4:[b]64bit:[/b] - HKLM..\Run: [NvMediaCenter] C:\Windows\SysNative\NvMcTray.DLL () O4:[b]64bit:[/b] - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software) O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000..\Run: [Gadu-Gadu 10] C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000..\Run: [kaiez] C:\Users\Ici\kaiez.exe File not found O4 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000..\Run: [mhrih] C:\Users\Ici\mhrih.exe File not found O4 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000..\Run: [uTorrent] D:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GR99D3~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Ici\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\Ici\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GRA8E1~1.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2005-09-11 17:18:54 | 000,000,340 | -HS- | M] () - E:\AUTOMODE -- [ NTFS ] O32 - AutoRun File - [2010-07-10 18:56:16 | 000,000,134 | RHS- | M] () - I:\autorun.inf -- [ FAT32 ] O33 - MountPoints2\{87117487-9249-11df-a218-001e681aa37d}\Shell - "" = AutoRun O33 - MountPoints2\{87117487-9249-11df-a218-001e681aa37d}\Shell\AutoRun\command - "" = H:\SETUP.EXE -- File not found O33 - MountPoints2\{87117487-9249-11df-a218-001e681aa37d}\Shell\configure\command - "" = H:\SETUP.EXE -- File not found O33 - MountPoints2\{87117487-9249-11df-a218-001e681aa37d}\Shell\install\command - "" = H:\SETUP.EXE -- File not found O33 - MountPoints2\{89aef67b-9189-11df-b113-001e681aa37d}\Shell - "" = AutoRun O33 - MountPoints2\{89aef67b-9189-11df-b113-001e681aa37d}\Shell\AutoRun\command - "" = G:\Borderlands.exe -- File not found O33 - MountPoints2\{d880e424-8428-11df-b70a-001e681aa37d}\Shell - "" = Autorun O33 - MountPoints2\{d880e424-8428-11df-b70a-001e681aa37d}\Shell\verb\command - "" = C:\Windows\SysWow64\explorer.exe -- [2008-01-21 04:48:30 | 002,927,104 | ---- | M] (Microsoft Corporation) O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll () SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll () SafeBootMin:[b]64bit:[/b] Base - Driver Group SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group SafeBootMin:[b]64bit:[/b] File system - Driver Group SafeBootMin:[b]64bit:[/b] Filter - Driver Group SafeBootMin:[b]64bit:[/b] HelpSvc - Service SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootMin:[b]64bit:[/b] PEVSystemStart - Service SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group SafeBootMin:[b]64bit:[/b] procexp90.Sys - Driver SafeBootMin:[b]64bit:[/b] sacsvr - Service SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PEVSystemStart - Service SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: procexp90.Sys - Driver SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll () SafeBootNet:[b]64bit:[/b] Base - Driver Group SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group SafeBootNet:[b]64bit:[/b] File system - Driver Group SafeBootNet:[b]64bit:[/b] Filter - Driver Group SafeBootNet:[b]64bit:[/b] HelpSvc - Service SafeBootNet:[b]64bit:[/b] Messenger - Service SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group SafeBootNet:[b]64bit:[/b] Network - Driver Group SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootNet:[b]64bit:[/b] PEVSystemStart - Service SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group SafeBootNet:[b]64bit:[/b] procexp90.Sys - Driver SafeBootNet:[b]64bit:[/b] rdsessmgr - Service SafeBootNet:[b]64bit:[/b] sacsvr - Service SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] TDI - Driver Group SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PEVSystemStart - Service SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: procexp90.Sys - Driver SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2010-08-05 23:24:16 | 000,000,000 | ---D | C] -- C:\_OTL [2010-08-05 22:45:39 | 000,000,000 | ---D | C] -- C:\Users\Ici\Desktop\The Prodigy - Invaders Must Die (2009) 320Kbps [Electr0] [2010-08-05 22:19:15 | 004,368,952 | ---- | C] (Prevx) -- C:\Users\Ici\Desktop\prevx 3.0.exe [2010-08-04 22:07:48 | 000,000,000 | ---D | C] -- C:\32788R22FWJFW [2010-08-04 21:20:20 | 000,060,928 | ---- | C] (Prevx) -- C:\Windows\SysWow64\PxSecure.dll [2010-08-04 21:20:18 | 000,000,000 | ---D | C] -- C:\Program Files\Prevx [2010-08-04 21:18:34 | 000,000,000 | ---D | C] -- C:\Users\Ici\Desktop\PREVX 3.0 - WWW.TOPFORUM.COM [2010-08-04 20:49:38 | 000,000,000 | ---D | C] -- C:\ProgramData\PrevxCSI [2010-08-04 20:32:11 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\AryxSoft [2010-08-04 20:30:06 | 000,000,000 | ---D | C] -- C:\Users\Ici\Documents\My ULK Files [2010-08-04 20:29:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AryxSoft [2010-08-04 19:57:51 | 000,000,000 | ---D | C] -- C:\ProgramData\UAB [2010-08-04 19:57:41 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\PC_Drivers_Headquarters [2010-08-04 19:57:27 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Drivers HeadQuarters Inc [2010-08-04 19:49:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PC Drivers HeadQuarters [2010-08-04 19:41:10 | 000,000,000 | ---D | C] -- C:\Users\Ici\Desktop\Downloads [2010-08-04 19:41:08 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\GetRightToGo [2010-08-03 23:11:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MGrenda [2010-08-03 21:43:09 | 000,000,000 | ---D | C] -- C:\Users\Ici\Desktop\Muza [2010-07-27 18:59:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works [2010-07-27 18:59:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio [2010-07-27 18:59:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER [2010-07-27 18:58:07 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2010-07-27 18:58:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET [2010-07-27 18:54:58 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office [2010-07-27 18:54:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8 [2010-07-27 18:52:48 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\Microsoft Help [2010-07-27 18:52:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office [2010-07-27 18:52:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help [2010-07-27 18:51:47 | 000,000,000 | RH-D | C] -- C:\MSOCache [2010-07-17 22:22:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies [2010-07-17 22:22:50 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\AGEIA [2010-07-17 22:22:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard [2010-07-17 22:09:41 | 000,000,000 | ---D | C] -- C:\BDS [2010-07-17 16:19:09 | 000,038,848 | ---- | C] (ALWIL Software) -- C:\Windows\avastSS.scr [2010-07-17 16:19:08 | 000,165,032 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe [2010-07-17 16:18:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Alwil Software [2010-07-17 16:18:51 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software [2010-07-17 13:10:38 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\DAEMON Tools Pro [2010-07-17 13:10:38 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\DAEMON Tools [2010-07-17 13:07:11 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite [2010-07-17 11:59:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Toolbar [2010-07-17 11:58:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite [2010-07-17 11:14:09 | 000,000,000 | ---D | C] -- C:\Users\Ici\Documents\My Games [2010-07-17 11:14:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Age of Empires 3 [2010-07-17 10:56:23 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\DAEMON Tools Lite [2010-07-16 23:28:09 | 000,000,000 | ---D | C] -- C:\Users\Ici\.gstreamer-0.10 [2010-07-16 23:27:51 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\OpenFM [2010-07-16 23:27:51 | 000,000,000 | ---D | C] -- C:\ProgramData\OpenFM [2010-07-15 21:31:42 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\uTorrent [2010-07-14 22:15:25 | 000,000,000 | ---D | C] -- C:\Windows\Kswiat [2010-07-12 15:26:24 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\Microsoft Games [2010-07-10 19:13:27 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\PhotoFiltre [2010-07-10 19:13:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ask.com [2010-07-10 19:12:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PhotoFiltre [2010-07-10 18:56:08 | 000,130,560 | ---- | C] (ApexDC++ Development Team) -- C:\Users\Ici\1.exe [2010-07-06 19:26:43 | 000,004,682 | ---- | C] (INCA Internet Co., Ltd.) -- C:\Windows\SysWow64\npptNT2.sys [2010-07-06 12:00:27 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\skypePM [2010-07-06 11:57:43 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\Skype [2010-07-06 11:53:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [2010-07-06 11:53:14 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype [2010-07-06 11:53:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2010-07-04 16:01:09 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2010-07-02 15:50:40 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\WinRAR [2010-07-02 15:50:33 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR [2010-07-01 18:24:48 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\nn-NO [2010-07-01 18:23:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco [2010-07-01 18:23:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Atheros [2010-07-01 18:23:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Atheros [2010-07-01 11:09:07 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\Mozilla [2010-07-01 11:09:07 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\Mozilla [2010-07-01 11:09:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2010-06-30 17:17:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SubEdit-Player [2010-06-30 17:11:15 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\Adobe [2010-06-30 17:11:13 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\Macromedia [2010-06-30 17:11:13 | 000,000,000 | ---D | C] -- C:\Gadu-Gadu 10 [2010-06-30 17:11:13 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\cache [2010-06-30 17:10:20 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\Gadu-Gadu 10 [2010-06-30 17:10:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Gadu-Gadu 10 [2010-06-30 17:10:06 | 000,000,000 | -HSD | C] -- C:\Windows\SysWow64\Macromed [2010-06-30 17:09:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gadu-Gadu 10 [2010-06-30 11:32:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Axesstel [2010-06-29 23:52:29 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA [2010-06-29 23:31:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek [2010-06-29 23:31:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield [2010-06-29 23:29:39 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information [2010-06-29 23:28:37 | 000,000,000 | ---D | C] -- C:\Program Files\CONEXANT [2010-06-29 23:24:28 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\no-NO [2010-06-29 23:24:19 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\InstallShield [2010-06-29 23:21:25 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt [2010-06-29 23:15:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hewlett-Packard [2010-06-29 23:14:48 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2010-06-29 23:14:47 | 000,000,000 | ---D | C] -- C:\SWSetup [2010-06-29 20:09:41 | 000,000,000 | R--D | C] -- C:\Users\Ici\Searches [2010-06-29 20:09:30 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\Identities [2010-06-29 20:09:25 | 000,000,000 | R--D | C] -- C:\Users\Ici\Contacts [2010-06-29 20:09:24 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\VirtualStore [2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Ustawienia lokalne [2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\AppData\Local\Temporary Internet Files [2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Szablony [2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\SendTo [2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Recent [2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\PrintHood [2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\NetHood [2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Documents\Moje wideo [2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Documents\Moje obrazy [2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Moje dokumenty [2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Documents\Moja muzyka [2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Menu Start [2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\AppData\Local\Historia [2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Dane aplikacji [2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\AppData\Local\Dane aplikacji [2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Cookies [2010-06-29 20:09:12 | 000,000,000 | --SD | C] -- C:\Users\Ici\AppData\Roaming\Microsoft [2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Videos [2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Saved Games [2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Pictures [2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Music [2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Links [2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Favorites [2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Downloads [2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Documents [2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Desktop [2010-06-29 20:09:12 | 000,000,000 | -H-D | C] -- C:\Users\Ici\AppData [2010-06-29 20:09:12 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\Temp [2010-06-29 20:09:12 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\Microsoft [2010-06-29 20:09:12 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\Media Center Programs [2010-06-29 20:07:02 | 000,000,000 | ---D | C] -- C:\Windows\Panther [2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\ProgramData\Ulubione [2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\ProgramData\Szablony [2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\ProgramData\Pulpit [2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo [2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy [2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka [2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Start [2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty [2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji [2010-06-29 20:03:51 | 000,000,000 | ---D | C] -- C:\Windows\Debug [2010-06-29 19:16:23 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2010-06-29 19:14:11 | 000,000,000 | ---D | C] -- C:\Windows\CSC [2010-06-29 19:11:48 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2010-06-29 19:11:31 | 000,000,000 | -HSD | C] -- C:\System Volume Information [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2010-08-05 23:33:43 | 001,572,864 | -HS- | M] () -- C:\Users\Ici\NTUSER.DAT [2010-08-05 23:32:31 | 001,469,036 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010-08-05 23:32:31 | 000,662,112 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2010-08-05 23:32:31 | 000,587,178 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010-08-05 23:32:31 | 000,126,908 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2010-08-05 23:32:31 | 000,101,250 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010-08-05 23:30:15 | 000,027,649 | ---- | M] () -- C:\ProgramData\nvModes.dat [2010-08-05 23:30:15 | 000,027,649 | ---- | M] () -- C:\ProgramData\nvModes.001 [2010-08-05 23:28:56 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMt3596.html [2010-08-05 23:28:56 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGQ3596.html [2010-08-05 23:28:03 | 000,004,928 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2010-08-05 23:28:03 | 000,004,928 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2010-08-05 23:28:01 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-08-05 23:27:54 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-08-05 23:27:50 | 2146,418,688 | -HS- | M] () -- C:\hiberfil.sys [2010-08-05 23:25:54 | 000,524,288 | -HS- | M] () -- C:\Users\Ici\NTUSER.DAT{a7bdf3ed-6a85-11db-b5ae-f1534be43d84}.TMContainer00000000000000000001.regtrans-ms [2010-08-05 23:25:54 | 000,065,536 | -HS- | M] () -- C:\Users\Ici\NTUSER.DAT{a7bdf3ed-6a85-11db-b5ae-f1534be43d84}.TM.blf [2010-08-05 23:25:28 | 002,155,873 | -H-- | M] () -- C:\Users\Ici\AppData\Local\IconCache.db [2010-08-05 23:24:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempKu1364.html [2010-08-05 23:24:16 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaJ1364.html [2010-08-04 23:34:59 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZk1160.html [2010-08-04 23:34:59 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemplU1160.html [2010-08-04 22:07:36 | 003,750,054 | ---- | M] () -- C:\Users\Ici\Desktop\ComboFix(2).exe [2010-08-04 21:20:20 | 000,060,928 | ---- | M] (Prevx) -- C:\Windows\SysWow64\PxSecure.dll [2010-08-04 21:20:19 | 000,056,320 | ---- | M] () -- C:\Windows\SysNative\drivers\pxrts.sys [2010-08-04 21:20:19 | 000,034,696 | ---- | M] () -- C:\Windows\SysNative\drivers\pxscan.sys [2010-08-04 21:20:18 | 000,022,336 | ---- | M] () -- C:\Windows\SysNative\drivers\pxkbf.sys [2010-08-04 21:20:11 | 000,000,048 | ---- | M] () -- C:\Windows\wininit.ini [2010-08-04 19:56:44 | 000,002,380 | ---- | M] () -- C:\Users\Public\Desktop\Driver Detective.lnk [2010-08-04 11:38:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempnk2940.html [2010-08-04 11:38:21 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHR2940.html [2010-08-04 00:18:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFa1892.html [2010-08-03 23:19:53 | 000,046,104 | ---- | M] () -- C:\20100803__23_11_59.mp3 [2010-08-03 23:11:25 | 000,001,838 | ---- | M] () -- C:\Users\Ici\Rzeźnik MPEG'ów .lnk [2010-08-03 21:43:46 | 000,026,624 | ---- | M] () -- C:\Users\Ici\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-08-03 21:10:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZn2780.html [2010-08-03 17:43:35 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGn1132.html [2010-08-03 17:43:22 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempoY1132.html [2010-08-03 11:32:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcV2732.html [2010-08-03 11:32:41 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDv2732.html [2010-08-02 23:18:18 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFeG700.html [2010-08-02 20:18:23 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempro2728.html [2010-08-02 20:17:31 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempAl2728.html [2010-08-02 20:17:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQB3468.html [2010-08-02 20:02:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUT2844.html [2010-08-02 19:27:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempOo2844.html [2010-08-02 18:39:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempwWK948.html [2010-08-01 22:16:53 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempsQ1992.html [2010-08-01 22:16:53 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDZ1992.html [2010-07-31 19:18:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempndm328.html [2010-07-31 19:18:10 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvRv328.html [2010-07-31 17:16:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDb3096.html [2010-07-31 13:23:39 | 000,000,882 | ---- | M] () -- C:\Users\Ici\PhotoFiltre.lnk [2010-07-31 13:21:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNO2680.html [2010-07-31 13:21:16 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempkF2680.html [2010-07-31 11:09:44 | 000,001,460 | ---- | M] () -- C:\Users\Ici\AppData\Local\d3d9caps64.dat [2010-07-30 22:35:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZU3648.html [2010-07-30 22:35:47 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgz3648.html [2010-07-30 20:05:33 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZi2964.html [2010-07-30 19:24:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempLx2964.html [2010-07-30 16:52:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIi3100.html [2010-07-30 16:52:29 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPl3100.html [2010-07-30 10:45:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRel972.html [2010-07-30 08:40:31 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempToK972.html [2010-07-30 01:31:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGG1160.html [2010-07-30 01:31:04 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempcc1160.html [2010-07-29 18:12:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRI2712.html [2010-07-29 17:15:52 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempqU3940.html [2010-07-29 14:00:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZy3940.html [2010-07-29 13:01:28 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXS3120.html [2010-07-29 13:01:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempqB3120.html [2010-07-29 00:07:22 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBf3020.html [2010-07-29 00:07:22 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempbU3020.html [2010-07-28 20:47:59 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHZ3020.html [2010-07-28 18:37:04 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQV4000.html [2010-07-28 18:24:09 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempdM4000.html [2010-07-28 15:28:35 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempKk3212.html [2010-07-28 15:12:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempTf3212.html [2010-07-28 12:18:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempuC3100.html [2010-07-28 10:56:27 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJp3100.html [2010-07-27 22:26:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempqB2768.html [2010-07-27 21:45:06 | 000,379,088 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010-07-27 21:05:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQZO800.html [2010-07-27 21:05:21 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempsGm800.html [2010-07-27 19:40:44 | 000,000,694 | ---- | M] () -- C:\Users\Ici\age3.lnk [2010-07-27 19:11:00 | 000,101,120 | ---- | M] () -- C:\Users\Ici\AppData\Local\GDIPFONTCACHEV1.DAT [2010-07-27 18:53:55 | 000,000,219 | ---- | M] () -- C:\Windows\win.ini [2010-07-27 18:50:14 | 000,013,778 | -HS- | M] () -- C:\Users\Ici\Desktop\Folder.jpg [2010-07-27 18:50:14 | 000,013,778 | -HS- | M] () -- C:\Users\Ici\Desktop\AlbumArt_{C2D3E460-7720-4D10-8342-9C75587D5071}_Large.jpg [2010-07-27 18:50:14 | 000,002,814 | -HS- | M] () -- C:\Users\Ici\Desktop\AlbumArtSmall.jpg [2010-07-27 18:50:14 | 000,002,814 | -HS- | M] () -- C:\Users\Ici\Desktop\AlbumArt_{C2D3E460-7720-4D10-8342-9C75587D5071}_Small.jpg [2010-07-27 16:42:35 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXqd800.html [2010-07-27 14:43:58 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFzI800.html [2010-07-27 12:58:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempTI2788.html [2010-07-27 12:56:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXw2788.html [2010-07-26 23:02:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBJ1732.html [2010-07-26 23:02:17 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempjP1732.html [2010-07-26 19:05:57 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaQ3984.html [2010-07-26 19:05:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBD3948.html [2010-07-26 17:13:14 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIV3948.html [2010-07-26 16:52:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempkN3116.html [2010-07-26 15:55:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempwx3116.html [2010-07-26 15:16:50 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Templi3116.html [2010-07-25 23:06:52 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZK2164.html [2010-07-25 23:06:52 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxK2164.html [2010-07-25 18:09:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBN2448.html [2010-07-25 18:09:36 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphI2448.html [2010-07-25 16:03:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphG3348.html [2010-07-25 14:18:27 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFn3348.html [2010-07-25 12:13:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvY3348.html [2010-07-25 10:47:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphS3348.html [2010-07-25 10:00:20 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempuU3348.html [2010-07-24 23:26:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZR3108.html [2010-07-24 23:26:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempeg3108.html [2010-07-24 23:07:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempwo3108.html [2010-07-24 22:45:49 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\P140710_13.19.jpg [2010-07-24 16:47:14 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempzW2736.html [2010-07-24 16:47:14 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNl2736.html [2010-07-24 14:45:04 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempio2892.html [2010-07-24 13:40:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempYb2892.html [2010-07-23 21:43:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFi3060.html [2010-07-23 12:58:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempnh3060.html [2010-07-23 12:58:00 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIb3060.html [2010-07-22 17:26:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDPY412.html [2010-07-22 14:34:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemppjW412.html [2010-07-22 12:58:53 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempdp1996.html [2010-07-21 22:02:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempyO2872.html [2010-07-21 22:02:38 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHV2872.html [2010-07-21 21:48:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempInl732.html [2010-07-21 21:25:12 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempApN732.html [2010-07-21 18:21:40 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempqw2084.html [2010-07-21 18:21:40 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJL2084.html [2010-07-21 18:17:45 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempzy2696.html [2010-07-21 18:17:45 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgn2696.html [2010-07-21 16:52:11 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temprl1320.html [2010-07-21 16:52:11 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBm1320.html [2010-07-21 13:58:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxE3176.html [2010-07-21 13:20:04 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgt3744.html [2010-07-21 12:40:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFx3744.html [2010-07-21 12:38:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempfS3568.html [2010-07-21 11:41:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcW3568.html [2010-07-21 11:25:48 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempwC2908.html [2010-07-21 11:08:08 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGE2908.html [2010-07-20 16:07:08 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempxn3096.html [2010-07-20 16:00:15 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempka1360.html [2010-07-20 16:00:15 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempvj1360.html [2010-07-20 15:48:14 | 000,000,640 | ---- | M] () -- C:\Users\Ici\Garena.lnk [2010-07-20 10:59:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempid2992.html [2010-07-20 10:59:17 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempqn2992.html [2010-07-20 10:52:46 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempfx2832.html [2010-07-20 10:52:46 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempxz2832.html [2010-07-20 01:16:22 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFi1612.html [2010-07-19 12:43:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempzq2596.html [2010-07-19 12:43:36 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temple2596.html [2010-07-19 02:31:57 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFl2480.html [2010-07-18 15:36:09 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempax3092.html [2010-07-18 15:36:09 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempbh3092.html [2010-07-17 23:24:30 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJD2440.html [2010-07-17 23:24:30 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temppk2440.html [2010-07-17 22:10:57 | 000,000,911 | ---- | M] () -- C:\Users\Ici\Borderlands-MCE.lnk [2010-07-17 18:04:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJxD788.html [2010-07-17 18:04:40 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEKZ788.html [2010-07-17 17:00:39 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSZ3008.html [2010-07-17 17:00:39 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemppU3008.html [2010-07-17 16:20:13 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt [2010-07-17 15:44:16 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempWw2944.html [2010-07-17 15:44:16 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcS2944.html [2010-07-17 15:34:14 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJB2944.html [2010-07-17 15:34:14 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBr2944.html [2010-07-17 14:05:15 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempzg2928.html [2010-07-17 14:05:15 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGa2928.html [2010-07-17 13:10:44 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempyT2932.html [2010-07-17 13:10:44 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHi2932.html [2010-07-17 13:07:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCw3004.html [2010-07-17 13:07:51 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temphz3004.html [2010-07-17 10:56:42 | 000,868,848 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys [2010-07-17 08:55:22 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQY2924.html [2010-07-17 08:55:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNk2924.html [2010-07-17 02:12:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCq2896.html [2010-07-15 21:50:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNl2944.html [2010-07-15 21:32:20 | 000,000,596 | ---- | M] () -- C:\Users\Ici\µTorrent.lnk [2010-07-15 17:30:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempsv2924.html [2010-07-15 17:30:29 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempLK2924.html [2010-07-15 12:38:35 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRt2848.html [2010-07-15 12:38:35 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPI2848.html [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\zh-TW.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\zh-HK.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\zh-CN.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\XPSViewer.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\winrm.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\WCN.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\wbem.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\uk-UA.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\tr-TR.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\th-TH.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Tasks.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\sysprep.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\sv-SE.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\sr-Latn-CS.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Speech.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\SLUI.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\sl-SI.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\slmgr.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\sk-SK.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\setup.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\ru-RU.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\ro-RO.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\restore.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\ras.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\pt-PT.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\pt-BR.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Printing_Admin_Scripts.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\pl-PL.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\pl.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\oobe.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\nl-NL.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\networklist.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\NDF.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\nb-NO.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\MUI.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Msdtc.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\migwiz.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\migration.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\manifeststore.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Macromed.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\lv-LV.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\lt-LT.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\LogFiles.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\licensing.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\ko-KR.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\ja-JP.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\it-IT.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\InstallShield.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\inetsrv.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\IME.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\icsxml.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\ias.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\hu-HU.lnk [2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\hr-HR.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\he-IL.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\GroupPolicyUsers.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\GroupPolicy.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\FxsTmp.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\fr-FR.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\fi-FI.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\et-EE.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\es-ES.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\en-US.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\en.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\el-GR.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\driverstore.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\drivers.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\de-DE.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\da-DK.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\cs-CZ.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\config.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\com.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Branding.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\bg-BG.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\ar-SA.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\AdvancedInstallers.lnk [2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\0409.lnk [2010-07-14 23:03:26 | 000,000,236 | ---- | M] () -- C:\Windows\SysWow64\...lnk [2010-07-14 22:20:55 | 000,000,960 | ---- | M] () -- C:\Windows\unins000.dat [2010-07-14 22:17:01 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Video.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Pictures.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Passwords.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\New Folder.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Music.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Documents.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\..lnk [2010-07-14 21:30:49 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPN2848.html [2010-07-14 21:20:38 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUA2848.html [2010-07-14 17:52:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempbF2244.html [2010-07-14 15:26:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempAy2244.html [2010-07-14 14:59:30 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempzO3656.html [2010-07-14 12:58:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNg3656.html [2010-07-14 10:57:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempcb2828.html [2010-07-14 10:57:24 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempyq2828.html [2010-07-13 23:54:12 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempmC3972.html [2010-07-13 23:54:12 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempdb3972.html [2010-07-13 23:30:11 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Templo3884.html [2010-07-13 23:28:20 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempOV3884.html [2010-07-13 21:35:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHd2864.html [2010-07-13 19:41:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempwx2864.html [2010-07-13 18:42:37 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNN2864.html [2010-07-13 16:04:39 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempuA2864.html [2010-07-13 15:45:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempWx2796.html [2010-07-13 13:28:31 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempmV2912.html [2010-07-13 13:24:59 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempzW2912.html [2010-07-13 13:24:37 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPk2828.html [2010-07-13 13:16:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNB2828.html [2010-07-13 11:51:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempfC2672.html [2010-07-13 11:45:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEe2672.html [2010-07-13 10:15:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGI2804.html [2010-07-12 23:43:20 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempVC3032.html [2010-07-12 21:49:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temptv3172.html [2010-07-12 19:14:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcX3172.html [2010-07-12 18:32:48 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxJ2756.html [2010-07-12 17:53:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempTp2756.html [2010-07-12 16:56:33 | 000,000,717 | ---- | M] () -- C:\Users\Ici\Desktop\Testy B 2010a.lnk [2010-07-12 15:43:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIC3940.html [2010-07-12 14:52:58 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempag2880.html [2010-07-12 14:31:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempjx2880.html [2010-07-12 12:52:38 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXR2836.html [2010-07-12 12:33:14 | 000,000,307 | ---- | M] () -- C:\Users\Ici\Desktop\DCIM.lnk [2010-07-12 12:26:06 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempLN2836.html [2010-07-12 12:14:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPL2264.html [2010-07-12 11:36:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempoo2784.html [2010-07-12 11:06:11 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMH2784.html [2010-07-12 10:39:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHx3872.html [2010-07-12 10:37:09 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempiv3872.html [2010-07-12 00:17:37 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvL2852.html [2010-07-12 00:17:37 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgn2852.html [2010-07-11 20:19:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaX2800.html [2010-07-11 20:13:30 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIo2800.html [2010-07-11 11:43:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemppE3656.html [2010-07-11 11:31:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMj3656.html [2010-07-11 11:18:23 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSY2820.html [2010-07-11 11:04:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRp2820.html [2010-07-11 10:27:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempwVB356.html [2010-07-11 10:21:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaI2760.html [2010-07-11 10:06:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUh2760.html [2010-07-10 21:39:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRZ2580.html [2010-07-10 21:31:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSe2580.html [2010-07-10 21:30:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSJ3296.html [2010-07-10 20:36:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPX3296.html [2010-07-10 19:40:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempzN2484.html [2010-07-10 19:38:11 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphP2484.html [2010-07-10 19:37:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempdB2824.html [2010-07-10 18:54:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphC2824.html [2010-07-10 18:08:33 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphB3704.html [2010-07-10 18:08:33 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGL3704.html [2010-07-10 16:39:22 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgj3704.html [2010-07-10 15:30:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHI2896.html [2010-07-10 15:07:28 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempYg2896.html [2010-07-10 15:00:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempit2808.html [2010-07-10 12:48:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempVt2808.html [2010-07-10 06:18:49 | 000,130,560 | ---- | M] (ApexDC++ Development Team) -- C:\Users\Ici\1.exe [2010-07-09 23:48:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMFF792.html [2010-07-09 23:48:06 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxWo792.html [2010-07-09 23:43:28 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEli472.html [2010-07-09 23:20:49 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSte472.html [2010-07-09 23:15:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempVB3620.html [2010-07-09 22:21:45 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxG3620.html [2010-07-09 18:12:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempsj3620.html [2010-07-09 17:00:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemprK3620.html [2010-07-09 14:37:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDq3620.html [2010-07-09 13:26:28 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempup3620.html [2010-07-09 11:44:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaK2780.html [2010-07-09 11:15:08 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemplP2780.html [2010-07-08 22:50:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPw3016.html [2010-07-08 20:39:31 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNIV176.html [2010-07-08 19:18:33 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGvQ176.html [2010-07-08 18:43:46 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCrR472.html [2010-07-08 18:10:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCbD472.html [2010-07-08 17:58:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempdi3888.html [2010-07-08 17:12:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempKv3888.html [2010-07-08 16:04:52 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXS2872.html [2010-07-08 12:59:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaU2872.html [2010-07-07 23:38:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempjW1852.html [2010-07-07 23:09:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMQ1852.html [2010-07-07 23:03:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempjK2380.html [2010-07-07 22:24:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempum2872.html [2010-07-07 22:03:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempVt2872.html [2010-07-07 13:23:46 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempno3468.html [2010-07-07 13:22:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Templw3468.html [2010-07-07 12:53:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempeH2892.html [2010-07-07 11:34:05 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQr2892.html [2010-07-07 10:47:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempeG3292.html [2010-07-07 10:47:55 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempAA3292.html [2010-07-07 10:31:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIL3292.html [2010-07-07 10:21:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempAW2884.html [2010-07-07 10:21:07 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemppJ2884.html [2010-07-06 21:58:48 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempdc2720.html [2010-07-06 21:58:48 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCz2720.html [2010-07-06 20:38:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJI2132.html [2010-07-06 18:29:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempxj2932.html [2010-07-06 17:41:23 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcI2932.html [2010-07-06 16:07:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSE3340.html [2010-07-06 16:04:35 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGd2520.html [2010-07-06 14:54:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempwB2520.html [2010-07-06 12:55:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvT1476.html [2010-07-06 12:00:28 | 000,000,056 | -H-- | M] () -- C:\Windows\SysWow64\ezsidmv.dat [2010-07-06 11:48:39 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempuz1476.html [2010-07-06 10:36:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempnb2976.html [2010-07-06 10:23:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDl2976.html [2010-07-06 00:01:56 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempfz3736.html [2010-07-05 22:25:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempWg3736.html [2010-07-05 22:22:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempxn2392.html [2010-07-05 22:05:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemprO2940.html [2010-07-05 20:30:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCG2940.html [2010-07-05 18:35:50 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPO2996.html [2010-07-05 15:45:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempWE2996.html [2010-07-05 12:47:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCz2864.html [2010-07-04 23:40:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemptI1984.html [2010-07-04 23:39:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempnn1984.html [2010-07-04 20:35:57 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempil4056.html [2010-07-04 20:20:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempul4056.html [2010-07-04 20:18:57 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEd3532.html [2010-07-04 20:03:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temphq3532.html [2010-07-04 17:16:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJw2100.html [2010-07-04 17:02:18 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempkk2100.html [2010-07-04 16:41:02 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDH2900.html [2010-07-04 16:02:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcH2900.html [2010-07-04 16:01:09 | 224,458,260 | ---- | M] () -- C:\Windows\MEMORY.DMP [2010-07-04 13:58:15 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempjB3376.html [2010-07-04 13:55:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMh3376.html [2010-07-04 13:47:56 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEF2864.html [2010-07-04 09:34:58 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemprR1904.html [2010-07-04 08:34:59 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEv1904.html [2010-07-04 08:34:48 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQA1904.html [2010-07-04 08:17:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXA2720.html [2010-07-04 00:25:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPC2908.html [2010-07-03 22:40:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNy2908.html [2010-07-03 16:11:02 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUi2908.html [2010-07-03 14:11:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempub2908.html [2010-07-02 23:48:18 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNd3880.html [2010-07-02 23:48:18 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemptX3880.html [2010-07-02 21:03:02 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvT3880.html [2010-07-02 20:18:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempmX3232.html [2010-07-02 19:59:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempLx3232.html [2010-07-02 19:57:58 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMG3232.html [2010-07-02 16:45:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempob2808.html [2010-07-02 14:41:39 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxC4024.html [2010-07-02 14:41:39 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDu4024.html [2010-07-02 14:18:03 | 000,000,134 | RHS- | M] () -- C:\Windows\SysWow64\autorun.inf [2010-07-02 14:11:52 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempwx3592.html [2010-07-02 11:48:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempvv3592.html [2010-07-02 11:34:37 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHr2836.html [2010-07-02 00:36:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempft3696.html [2010-07-01 23:15:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNz2324.html [2010-07-01 21:14:50 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCa1672.html [2010-07-01 20:11:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemprM2444.html [2010-07-01 18:57:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Templn2728.html [2010-07-01 18:57:08 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHA2728.html [2010-07-01 18:56:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIE2728.html [2010-07-01 16:43:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempff2600.html [2010-07-01 15:19:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempsI3856.html [2010-07-01 15:19:54 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempty3856.html [2010-07-01 13:12:14 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRr1116.html [2010-07-01 13:12:14 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJz1116.html [2010-07-01 12:46:44 | 000,080,896 | ---- | M] () -- C:\Users\Ici\msnmsgr.exe [2010-07-01 12:33:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempOS1116.html [2010-07-01 11:09:08 | 000,000,000 | ---- | M] () -- C:\Windows\nsreg.dat [2010-07-01 11:09:04 | 000,001,778 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010-07-01 10:26:33 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUU2384.html [2010-07-01 10:23:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaU2704.html [2010-06-30 17:24:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempES3936.html [2010-06-30 17:17:51 | 000,000,961 | ---- | M] () -- C:\Users\Ici\SubEdit-Player.lnk [2010-06-30 17:10:17 | 000,000,871 | ---- | M] () -- C:\Users\Ici\OpenFM.lnk [2010-06-29 23:13:08 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_00_00.Wdf [2010-06-29 20:10:32 | 000,524,288 | -HS- | M] () -- C:\Users\Ici\NTUSER.DAT{a7bdf3ed-6a85-11db-b5ae-f1534be43d84}.TMContainer00000000000000000002.regtrans-ms [2010-06-29 20:09:13 | 000,000,020 | -HS- | M] () -- C:\Users\Ici\ntuser.ini [2010-06-29 19:18:31 | 000,075,596 | ---- | M] () -- C:\Windows\SysNative\license.rtf [2010-06-28 22:57:33 | 000,038,848 | ---- | M] (ALWIL Software) -- C:\Windows\avastSS.scr [2010-06-28 22:57:12 | 000,165,032 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe [2010-06-28 22:39:49 | 000,432,720 | ---- | M] () -- C:\Windows\SysNative\drivers\aswSnx.sys [2010-06-28 22:37:56 | 000,051,280 | ---- | M] () -- C:\Windows\SysNative\drivers\aswTdi.sys [2010-06-28 22:37:36 | 000,121,936 | ---- | M] () -- C:\Windows\SysNative\drivers\aswSP.sys [2010-06-28 22:33:17 | 000,028,752 | ---- | M] () -- C:\Windows\SysNative\drivers\aswRdr.sys [2010-06-28 22:33:00 | 000,061,008 | ---- | M] () -- C:\Windows\SysNative\drivers\aswMonFlt.sys [2010-06-28 22:32:36 | 000,020,048 | ---- | M] () -- C:\Windows\SysNative\drivers\aswFsBlk.sys [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-08-05 23:28:56 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempMt3596.html [2010-08-05 23:28:56 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGQ3596.html [2010-08-05 22:59:02 | 000,000,307 | ---- | C] () -- C:\Users\Ici\Desktop\DCIM.lnk [2010-08-05 21:20:34 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempKu1364.html [2010-08-05 21:20:34 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempaJ1364.html [2010-08-04 22:06:21 | 003,750,054 | ---- | C] () -- C:\Users\Ici\Desktop\ComboFix(2).exe [2010-08-04 21:25:24 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempZk1160.html [2010-08-04 21:25:24 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemplU1160.html [2010-08-04 21:20:19 | 000,056,320 | ---- | C] () -- C:\Windows\SysNative\drivers\pxrts.sys [2010-08-04 21:20:19 | 000,034,696 | ---- | C] () -- C:\Windows\SysNative\drivers\pxscan.sys [2010-08-04 21:20:18 | 000,022,336 | ---- | C] () -- C:\Windows\SysNative\drivers\pxkbf.sys [2010-08-04 20:00:26 | 000,000,048 | ---- | C] () -- C:\Windows\wininit.ini [2010-08-04 19:56:44 | 000,002,380 | ---- | C] () -- C:\Users\Public\Desktop\Driver Detective.lnk [2010-08-04 10:41:32 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempnk2940.html [2010-08-04 10:41:32 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHR2940.html [2010-08-03 23:16:09 | 000,046,104 | ---- | C] () -- C:\20100803__23_11_59.mp3 [2010-08-03 23:11:25 | 000,001,838 | ---- | C] () -- C:\Users\Ici\Rzeźnik MPEG'ów .lnk [2010-08-03 23:05:15 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempFa1892.html [2010-08-03 18:00:47 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempZn2780.html [2010-08-03 17:43:18 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGn1132.html [2010-08-03 16:04:40 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempoY1132.html [2010-08-03 08:58:19 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempcV2732.html [2010-08-03 08:58:19 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempDv2732.html [2010-08-02 21:21:27 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempFeG700.html [2010-08-02 20:17:28 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempro2728.html [2010-08-02 20:17:23 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempAl2728.html [2010-08-02 20:17:04 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempQB3468.html [2010-08-02 19:27:37 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempUT2844.html [2010-08-02 19:21:29 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempOo2844.html [2010-08-02 14:56:19 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempwWK948.html [2010-08-01 10:46:46 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempsQ1992.html [2010-08-01 10:46:46 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempDZ1992.html [2010-07-31 17:49:39 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempndm328.html [2010-07-31 17:49:39 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempvRv328.html [2010-07-31 17:16:31 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempDb3096.html [2010-07-31 17:13:31 | 2146,418,688 | -HS- | C] () -- C:\hiberfil.sys [2010-07-31 13:21:16 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNO2680.html [2010-07-31 13:21:16 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempkF2680.html [2010-07-30 21:26:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempZU3648.html [2010-07-30 21:26:52 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempgz3648.html [2010-07-30 19:24:32 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempZi2964.html [2010-07-30 16:57:07 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempLx2964.html [2010-07-30 11:41:26 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempIi3100.html [2010-07-30 11:41:26 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPl3100.html [2010-07-30 08:40:19 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempRel972.html [2010-07-30 08:38:30 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempToK972.html [2010-07-29 23:04:16 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempcc1160.html [2010-07-29 21:16:25 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGG1160.html [2010-07-29 17:27:51 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempRI2712.html [2010-07-29 14:00:50 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempqU3940.html [2010-07-29 14:00:45 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempZy3940.html [2010-07-29 12:35:33 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempqB3120.html [2010-07-29 11:14:12 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempXS3120.html [2010-07-28 19:01:24 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHZ3020.html [2010-07-28 19:01:02 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempBf3020.html [2010-07-28 19:01:02 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempbU3020.html [2010-07-28 18:24:02 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempQV4000.html [2010-07-28 18:23:57 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempdM4000.html [2010-07-28 12:51:18 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempTf3212.html [2010-07-28 12:51:13 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempKk3212.html [2010-07-28 12:50:38 | 000,000,882 | ---- | C] () -- C:\Users\Ici\PhotoFiltre.lnk [2010-07-28 10:56:24 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempuC3100.html [2010-07-28 10:25:02 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempJp3100.html [2010-07-27 21:46:32 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempqB2768.html [2010-07-27 19:40:32 | 000,000,694 | ---- | C] () -- C:\Users\Ici\age3.lnk [2010-07-27 18:49:57 | 000,013,778 | -HS- | C] () -- C:\Users\Ici\Desktop\Folder.jpg [2010-07-27 18:49:57 | 000,013,778 | -HS- | C] () -- C:\Users\Ici\Desktop\AlbumArt_{C2D3E460-7720-4D10-8342-9C75587D5071}_Large.jpg [2010-07-27 18:49:57 | 000,002,814 | -HS- | C] () -- C:\Users\Ici\Desktop\AlbumArtSmall.jpg [2010-07-27 18:49:57 | 000,002,814 | -HS- | C] () -- C:\Users\Ici\Desktop\AlbumArt_{C2D3E460-7720-4D10-8342-9C75587D5071}_Small.jpg [2010-07-27 14:46:10 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempXqd800.html [2010-07-27 14:43:27 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempFzI800.html [2010-07-27 14:43:11 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempQZO800.html [2010-07-27 14:43:11 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempsGm800.html [2010-07-27 12:56:17 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempTI2788.html [2010-07-27 12:45:17 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempXw2788.html [2010-07-26 23:02:17 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempBJ1732.html [2010-07-26 23:02:17 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempjP1732.html [2010-07-26 19:05:43 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempaQ3984.html [2010-07-26 17:13:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempBD3948.html [2010-07-26 17:13:03 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempIV3948.html [2010-07-26 15:19:05 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempwx3116.html [2010-07-26 13:03:07 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Templi3116.html [2010-07-26 11:49:58 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempkN3116.html [2010-07-25 20:37:31 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempZK2164.html [2010-07-25 20:37:31 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempxK2164.html [2010-07-25 16:08:34 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempBN2448.html [2010-07-25 16:08:34 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemphI2448.html [2010-07-25 13:14:59 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemphG3348.html [2010-07-25 11:16:01 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempvY3348.html [2010-07-25 09:59:39 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempuU3348.html [2010-07-25 09:59:19 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemphS3348.html [2010-07-25 09:58:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempFn3348.html [2010-07-24 22:45:49 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\P140710_13.19.jpg [2010-07-24 21:30:22 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempZR3108.html [2010-07-24 21:00:42 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempeg3108.html [2010-07-24 20:44:34 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempwo3108.html [2010-07-24 14:56:30 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempzW2736.html [2010-07-24 14:56:30 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNl2736.html [2010-07-24 13:40:40 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempio2892.html [2010-07-24 13:40:26 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempYb2892.html [2010-07-23 18:54:21 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempFi3060.html [2010-07-23 12:58:00 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempnh3060.html [2010-07-23 12:58:00 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempIb3060.html [2010-07-22 14:34:14 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempDPY412.html [2010-07-22 14:33:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemppjW412.html [2010-07-22 12:58:43 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempdp1996.html [2010-07-21 22:00:33 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHV2872.html [2010-07-21 22:00:27 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempyO2872.html [2010-07-21 21:25:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempInl732.html [2010-07-21 21:24:23 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempApN732.html [2010-07-21 18:31:43 | 000,000,911 | ---- | C] () -- C:\Users\Ici\Borderlands-MCE.lnk [2010-07-21 18:21:40 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempqw2084.html [2010-07-21 18:21:40 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempJL2084.html [2010-07-21 18:17:45 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempzy2696.html [2010-07-21 18:17:45 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempgn2696.html [2010-07-21 16:41:05 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Temprl1320.html [2010-07-21 16:41:05 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempBm1320.html [2010-07-21 13:58:11 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempxE3176.html [2010-07-21 12:40:37 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempgt3744.html [2010-07-21 12:40:23 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempFx3744.html [2010-07-21 11:40:56 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempfS3568.html [2010-07-21 11:40:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempcW3568.html [2010-07-21 11:07:50 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempwC2908.html [2010-07-21 10:59:25 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGE2908.html [2010-07-20 16:02:28 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempxn3096.html [2010-07-20 15:48:14 | 000,000,640 | ---- | C] () -- C:\Users\Ici\Garena.lnk [2010-07-20 13:22:39 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempka1360.html [2010-07-20 13:22:39 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempvj1360.html [2010-07-20 10:56:43 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempid2992.html [2010-07-20 10:56:43 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempqn2992.html [2010-07-20 09:32:36 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempfx2832.html [2010-07-20 09:32:36 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempxz2832.html [2010-07-19 14:39:42 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempFi1612.html [2010-07-19 11:15:42 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempzq2596.html [2010-07-19 11:15:42 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Temple2596.html [2010-07-18 15:57:00 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempFl2480.html [2010-07-18 10:51:46 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempax3092.html [2010-07-18 10:51:46 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempbh3092.html [2010-07-17 22:25:21 | 002,430,312 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_41.dll [2010-07-17 22:25:21 | 000,520,544 | ---- | C] () -- C:\Windows\SysNative\d3dx10_41.dll [2010-07-17 22:25:20 | 005,425,496 | ---- | C] () -- C:\Windows\SysNative\D3DX9_41.dll [2010-07-17 22:25:19 | 000,521,560 | ---- | C] () -- C:\Windows\SysNative\XAudio2_4.dll [2010-07-17 22:25:19 | 000,073,544 | ---- | C] () -- C:\Windows\SysNative\XAPOFX1_3.dll [2010-07-17 22:25:18 | 000,174,936 | ---- | C] () -- C:\Windows\SysNative\xactengine3_4.dll [2010-07-17 22:25:17 | 000,024,920 | ---- | C] () -- C:\Windows\SysNative\X3DAudio1_6.dll [2010-07-17 22:25:16 | 002,605,920 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_40.dll [2010-07-17 22:25:16 | 000,519,000 | ---- | C] () -- C:\Windows\SysNative\d3dx10_40.dll [2010-07-17 22:25:15 | 005,631,312 | ---- | C] () -- C:\Windows\SysNative\D3DX9_40.dll [2010-07-17 22:25:14 | 000,518,480 | ---- | C] () -- C:\Windows\SysNative\XAudio2_3.dll [2010-07-17 22:25:14 | 000,074,576 | ---- | C] () -- C:\Windows\SysNative\XAPOFX1_2.dll [2010-07-17 22:25:13 | 000,175,440 | ---- | C] () -- C:\Windows\SysNative\xactengine3_3.dll [2010-07-17 22:25:12 | 000,025,936 | ---- | C] () -- C:\Windows\SysNative\X3DAudio1_5.dll [2010-07-17 22:25:11 | 000,513,544 | ---- | C] () -- C:\Windows\SysNative\XAudio2_2.dll [2010-07-17 22:25:11 | 000,072,200 | ---- | C] () -- C:\Windows\SysNative\XAPOFX1_1.dll [2010-07-17 22:25:10 | 000,177,672 | ---- | C] () -- C:\Windows\SysNative\xactengine3_2.dll [2010-07-17 22:25:09 | 001,942,552 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_39.dll [2010-07-17 22:25:09 | 000,540,688 | ---- | C] () -- C:\Windows\SysNative\d3dx10_39.dll [2010-07-17 22:25:08 | 004,992,520 | ---- | C] () -- C:\Windows\SysNative\D3DX9_39.dll [2010-07-17 22:25:07 | 000,511,496 | ---- | C] () -- C:\Windows\SysNative\XAudio2_1.dll [2010-07-17 22:25:07 | 000,068,104 | ---- | C] () -- C:\Windows\SysNative\XAPOFX1_0.dll [2010-07-17 22:25:06 | 000,177,672 | ---- | C] () -- C:\Windows\SysNative\xactengine3_1.dll [2010-07-17 22:25:06 | 000,028,168 | ---- | C] () -- C:\Windows\SysNative\X3DAudio1_4.dll [2010-07-17 22:25:04 | 001,941,528 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_38.dll [2010-07-17 22:25:04 | 000,540,688 | ---- | C] () -- C:\Windows\SysNative\d3dx10_38.dll [2010-07-17 22:25:03 | 004,991,496 | ---- | C] () -- C:\Windows\SysNative\D3DX9_38.dll [2010-07-17 22:25:02 | 000,489,480 | ---- | C] () -- C:\Windows\SysNative\XAudio2_0.dll [2010-07-17 22:25:01 | 000,177,672 | ---- | C] () -- C:\Windows\SysNative\xactengine3_0.dll [2010-07-17 22:25:00 | 000,028,168 | ---- | C] () -- C:\Windows\SysNative\X3DAudio1_3.dll [2010-07-17 22:24:59 | 001,860,120 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_37.dll [2010-07-17 22:24:59 | 000,529,424 | ---- | C] () -- C:\Windows\SysNative\d3dx10_37.dll [2010-07-17 22:24:58 | 004,910,088 | ---- | C] () -- C:\Windows\SysNative\D3DX9_37.dll [2010-07-17 22:24:57 | 000,411,656 | ---- | C] () -- C:\Windows\SysNative\xactengine2_10.dll [2010-07-17 22:24:55 | 000,508,264 | ---- | C] () -- C:\Windows\SysNative\d3dx10_36.dll [2010-07-17 22:24:54 | 002,006,552 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_36.dll [2010-07-17 22:24:53 | 005,081,608 | ---- | C] () -- C:\Windows\SysNative\d3dx9_36.dll [2010-07-17 22:24:51 | 000,411,496 | ---- | C] () -- C:\Windows\SysNative\xactengine2_9.dll [2010-07-17 22:24:50 | 001,985,904 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_35.dll [2010-07-17 22:24:50 | 000,508,264 | ---- | C] () -- C:\Windows\SysNative\d3dx10_35.dll [2010-07-17 22:24:49 | 005,073,256 | ---- | C] () -- C:\Windows\SysNative\d3dx9_35.dll [2010-07-17 22:24:48 | 000,409,960 | ---- | C] () -- C:\Windows\SysNative\xactengine2_8.dll [2010-07-17 22:24:48 | 000,021,000 | ---- | C] () -- C:\Windows\SysNative\X3DAudio1_2.dll [2010-07-17 22:24:47 | 001,401,200 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_34.dll [2010-07-17 22:24:47 | 000,506,728 | ---- | C] () -- C:\Windows\SysNative\d3dx10_34.dll [2010-07-17 22:24:46 | 004,496,232 | ---- | C] () -- C:\Windows\SysNative\d3dx9_34.dll [2010-07-17 22:24:45 | 000,403,304 | ---- | C] () -- C:\Windows\SysNative\xactengine2_7.dll [2010-07-17 22:24:45 | 000,107,368 | ---- | C] () -- C:\Windows\SysNative\xinput1_3.dll [2010-07-17 22:24:44 | 001,400,176 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_33.dll [2010-07-17 22:24:44 | 000,506,728 | ---- | C] () -- C:\Windows\SysNative\d3dx10_33.dll [2010-07-17 22:24:43 | 004,494,184 | ---- | C] () -- C:\Windows\SysNative\d3dx9_33.dll [2010-07-17 22:24:41 | 000,393,576 | ---- | C] () -- C:\Windows\SysNative\xactengine2_6.dll [2010-07-17 22:24:40 | 000,390,424 | ---- | C] () -- C:\Windows\SysNative\xactengine2_5.dll [2010-07-17 22:24:39 | 000,469,264 | ---- | C] () -- C:\Windows\SysNative\d3dx10.dll [2010-07-17 22:24:38 | 004,398,360 | ---- | C] () -- C:\Windows\SysNative\d3dx9_32.dll [2010-07-17 22:24:36 | 000,364,824 | ---- | C] () -- C:\Windows\SysNative\xactengine2_4.dll [2010-07-17 22:24:36 | 000,017,688 | ---- | C] () -- C:\Windows\SysNative\x3daudio1_1.dll [2010-07-17 22:24:35 | 003,977,496 | ---- | C] () -- C:\Windows\SysNative\d3dx9_31.dll [2010-07-17 22:24:34 | 000,363,288 | ---- | C] () -- C:\Windows\SysNative\xactengine2_3.dll [2010-07-17 22:24:33 | 000,083,736 | ---- | C] () -- C:\Windows\SysNative\xinput1_2.dll [2010-07-17 22:24:31 | 000,354,072 | ---- | C] () -- C:\Windows\SysNative\xactengine2_2.dll [2010-07-17 22:24:30 | 000,083,664 | ---- | C] () -- C:\Windows\SysNative\xinput1_1.dll [2010-07-17 22:24:28 | 000,352,464 | ---- | C] () -- C:\Windows\SysNative\xactengine2_1.dll [2010-07-17 22:24:08 | 003,927,248 | ---- | C] () -- C:\Windows\SysNative\d3dx9_30.dll [2010-07-17 22:24:06 | 000,355,536 | ---- | C] () -- C:\Windows\SysNative\xactengine2_0.dll [2010-07-17 22:24:06 | 000,016,592 | ---- | C] () -- C:\Windows\SysNative\x3daudio1_0.dll [2010-07-17 22:24:05 | 003,830,992 | ---- | C] () -- C:\Windows\SysNative\d3dx9_29.dll [2010-07-17 22:24:04 | 003,815,120 | ---- | C] () -- C:\Windows\SysNative\d3dx9_28.dll [2010-07-17 22:24:03 | 003,807,440 | ---- | C] () -- C:\Windows\SysNative\d3dx9_27.dll [2010-07-17 22:23:59 | 003,544,272 | ---- | C] () -- C:\Windows\SysNative\d3dx9_24.dll [2010-07-17 22:21:54 | 000,417,280 | ---- | C] () -- C:\Users\Ici\AppData\Local\dd_vcredistMSI5A82.txt [2010-07-17 22:21:54 | 000,011,470 | ---- | C] () -- C:\Users\Ici\AppData\Local\dd_vcredistUI5A82.txt [2010-07-17 21:33:31 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Temppk2440.html [2010-07-17 21:33:30 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempJD2440.html [2010-07-17 18:04:40 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempJxD788.html [2010-07-17 18:04:40 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempEKZ788.html [2010-07-17 16:20:22 | 000,020,048 | ---- | C] () -- C:\Windows\SysNative\drivers\aswFsBlk.sys [2010-07-17 16:20:21 | 000,121,936 | ---- | C] () -- C:\Windows\SysNative\drivers\aswSP.sys [2010-07-17 16:20:20 | 000,432,720 | ---- | C] () -- C:\Windows\SysNative\drivers\aswSnx.sys [2010-07-17 16:20:19 | 000,028,752 | ---- | C] () -- C:\Windows\SysNative\drivers\aswRdr.sys [2010-07-17 16:20:17 | 000,051,280 | ---- | C] () -- C:\Windows\SysNative\drivers\aswTdi.sys [2010-07-17 16:20:13 | 000,061,008 | ---- | C] () -- C:\Windows\SysNative\drivers\aswMonFlt.sys [2010-07-17 16:20:13 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt [2010-07-17 16:19:14 | 000,422,634 | ---- | C] () -- C:\Users\Ici\AppData\Local\dd_vcredistMSI44EC.txt [2010-07-17 16:19:13 | 000,011,812 | ---- | C] () -- C:\Users\Ici\AppData\Local\dd_vcredistUI44EC.txt [2010-07-17 15:59:14 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempSZ3008.html [2010-07-17 15:59:14 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemppU3008.html [2010-07-17 15:44:16 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempWw2944.html [2010-07-17 15:44:16 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempcS2944.html [2010-07-17 15:34:14 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempJB2944.html [2010-07-17 15:34:14 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempBr2944.html [2010-07-17 14:05:15 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempzg2928.html [2010-07-17 14:05:15 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGa2928.html [2010-07-17 13:10:44 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempyT2932.html [2010-07-17 13:10:44 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHi2932.html [2010-07-17 11:57:14 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempCw3004.html [2010-07-17 11:57:14 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Temphz3004.html [2010-07-17 11:09:59 | 003,767,504 | ---- | C] () -- C:\Windows\SysNative\d3dx9_26.dll [2010-07-17 11:09:56 | 003,823,312 | ---- | C] () -- C:\Windows\SysNative\d3dx9_25.dll [2010-07-17 10:56:42 | 000,868,848 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys [2010-07-17 08:55:22 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempQY2924.html [2010-07-17 08:55:21 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNk2924.html [2010-07-16 09:14:36 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempCq2896.html [2010-07-15 21:32:20 | 000,000,596 | ---- | C] () -- C:\Users\Ici\µTorrent.lnk [2010-07-15 21:08:36 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNl2944.html [2010-07-15 16:43:16 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempsv2924.html [2010-07-15 16:43:16 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempLK2924.html [2010-07-15 12:38:35 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempRt2848.html [2010-07-15 12:38:35 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPI2848.html [2010-07-14 22:17:11 | 000,000,960 | ---- | C] () -- C:\Windows\unins000.dat [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\zh-TW.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\zh-HK.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\zh-CN.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\XPSViewer.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\winrm.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\WCN.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\wbem.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\uk-UA.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\tr-TR.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\th-TH.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Tasks.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\sysprep.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\sv-SE.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\sr-Latn-CS.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Speech.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\SLUI.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\sl-SI.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\slmgr.lnk [2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\sk-SK.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\setup.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\ru-RU.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\ro-RO.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\restore.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\ras.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\pt-PT.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\pt-BR.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Printing_Admin_Scripts.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\pl-PL.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\pl.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\oobe.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\nl-NL.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\networklist.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\NDF.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\nb-NO.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\MUI.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Msdtc.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\migwiz.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\migration.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\manifeststore.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Macromed.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\lv-LV.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\lt-LT.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\LogFiles.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\licensing.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\ko-KR.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\ja-JP.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\it-IT.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\InstallShield.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\inetsrv.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\IME.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\icsxml.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\ias.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\hu-HU.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\hr-HR.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\he-IL.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\GroupPolicyUsers.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\GroupPolicy.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\FxsTmp.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\fr-FR.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\fi-FI.lnk [2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\et-EE.lnk [2010-07-14 21:20:35 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPN2848.html [2010-07-14 21:19:14 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempUA2848.html [2010-07-14 15:26:18 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempbF2244.html [2010-07-14 15:26:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempAy2244.html [2010-07-14 12:58:16 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempzO3656.html [2010-07-14 12:58:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNg3656.html [2010-07-14 10:40:45 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempcb2828.html [2010-07-14 10:40:45 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempyq2828.html [2010-07-13 23:31:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempmC3972.html [2010-07-13 23:31:09 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempdb3972.html [2010-07-13 23:28:14 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Templo3884.html [2010-07-13 23:28:02 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempOV3884.html [2010-07-13 18:42:49 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHd2864.html [2010-07-13 18:37:42 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempwx2864.html [2010-07-13 16:04:34 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNN2864.html [2010-07-13 16:02:31 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempuA2864.html [2010-07-13 15:41:40 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempWx2796.html [2010-07-13 13:24:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempmV2912.html [2010-07-13 13:24:48 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempzW2912.html [2010-07-13 13:16:16 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPk2828.html [2010-07-13 13:15:53 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNB2828.html [2010-07-13 11:12:18 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempEe2672.html [2010-07-13 11:12:11 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempfC2672.html [2010-07-13 10:14:08 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGI2804.html [2010-07-12 21:51:16 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempVC3032.html [2010-07-12 19:14:05 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Temptv3172.html [2010-07-12 19:13:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempcX3172.html [2010-07-12 17:53:07 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempxJ2756.html [2010-07-12 17:52:45 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempTp2756.html [2010-07-12 17:25:22 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\es-ES.lnk [2010-07-12 17:25:20 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\en-US.lnk [2010-07-12 17:25:19 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\en.lnk [2010-07-12 17:25:18 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\el-GR.lnk [2010-07-12 17:25:17 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\driverstore.lnk [2010-07-12 17:25:15 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\drivers.lnk [2010-07-12 17:25:14 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\de-DE.lnk [2010-07-12 17:04:59 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\da-DK.lnk [2010-07-12 17:04:58 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\cs-CZ.lnk [2010-07-12 17:04:56 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\config.lnk [2010-07-12 17:04:54 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\com.lnk [2010-07-12 17:04:51 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Branding.lnk [2010-07-12 17:04:49 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\bg-BG.lnk [2010-07-12 17:04:39 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\ar-SA.lnk [2010-07-12 16:56:33 | 000,000,717 | ---- | C] () -- C:\Users\Ici\Desktop\Testy B 2010a.lnk [2010-07-12 16:55:49 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\AdvancedInstallers.lnk [2010-07-12 16:55:46 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\0409.lnk [2010-07-12 16:55:43 | 000,000,236 | ---- | C] () -- C:\Windows\SysWow64\...lnk [2010-07-12 16:55:38 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\..lnk [2010-07-12 14:56:44 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempIC3940.html [2010-07-12 14:31:22 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempag2880.html [2010-07-12 14:30:57 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempjx2880.html [2010-07-12 12:26:03 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempXR2836.html [2010-07-12 12:25:22 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempLN2836.html [2010-07-12 12:02:25 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPL2264.html [2010-07-12 11:06:08 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempoo2784.html [2010-07-12 11:06:03 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempMH2784.html [2010-07-12 10:37:06 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHx3872.html [2010-07-12 10:37:01 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempiv3872.html [2010-07-11 21:48:20 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempvL2852.html [2010-07-11 21:48:20 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempgn2852.html [2010-07-11 20:13:26 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempaX2800.html [2010-07-11 20:10:33 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempIo2800.html [2010-07-11 11:30:57 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemppE3656.html [2010-07-11 11:30:36 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempMj3656.html [2010-07-11 11:03:56 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempSY2820.html [2010-07-11 11:03:23 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempRp2820.html [2010-07-11 10:25:11 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempwVB356.html [2010-07-11 10:06:28 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempaI2760.html [2010-07-11 10:06:18 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempUh2760.html [2010-07-10 21:31:29 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempRZ2580.html [2010-07-10 21:31:24 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempSe2580.html [2010-07-10 20:36:21 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempSJ3296.html [2010-07-10 20:36:11 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPX3296.html [2010-07-10 19:38:08 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempzN2484.html [2010-07-10 19:38:01 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemphP2484.html [2010-07-10 18:54:11 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempdB2824.html [2010-07-10 18:50:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemphC2824.html [2010-07-10 15:32:36 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempgj3704.html [2010-07-10 15:32:31 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemphB3704.html [2010-07-10 15:32:31 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGL3704.html [2010-07-10 15:07:25 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHI2896.html [2010-07-10 15:07:20 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempYg2896.html [2010-07-10 12:48:29 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempit2808.html [2010-07-10 12:22:03 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempVt2808.html [2010-07-09 23:47:30 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempxWo792.html [2010-07-09 23:47:25 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempMFF792.html [2010-07-09 23:20:35 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempEli472.html [2010-07-09 23:20:29 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempSte472.html [2010-07-09 19:04:34 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempxG3620.html [2010-07-09 18:11:58 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempsj3620.html [2010-07-09 14:37:18 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemprK3620.html [2010-07-09 13:28:41 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempDq3620.html [2010-07-09 12:42:33 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempup3620.html [2010-07-09 11:50:19 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempVB3620.html [2010-07-09 11:15:05 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempaK2780.html [2010-07-09 11:10:15 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemplP2780.html [2010-07-08 21:15:48 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPw3016.html [2010-07-08 19:18:29 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNIV176.html [2010-07-08 19:18:23 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGvQ176.html [2010-07-08 18:10:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempCrR472.html [2010-07-08 18:10:05 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempCbD472.html [2010-07-08 17:12:39 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempdi3888.html [2010-07-08 17:12:32 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempKv3888.html [2010-07-08 12:59:22 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempXS2872.html [2010-07-08 12:58:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempaU2872.html [2010-07-07 23:09:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempjW1852.html [2010-07-07 23:09:47 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempMQ1852.html [2010-07-07 22:26:05 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempjK2380.html [2010-07-07 22:02:58 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempum2872.html [2010-07-07 21:45:10 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempVt2872.html [2010-07-07 13:19:50 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempno3468.html [2010-07-07 13:19:45 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Templw3468.html [2010-07-07 11:33:07 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempeH2892.html [2010-07-07 11:32:31 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempQr2892.html [2010-07-07 10:21:38 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempIL3292.html [2010-07-07 10:21:15 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempeG3292.html [2010-07-07 10:21:15 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempAA3292.html [2010-07-07 10:20:14 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempAW2884.html [2010-07-07 10:20:14 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemppJ2884.html [2010-07-06 20:49:04 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempdc2720.html [2010-07-06 20:49:04 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempCz2720.html [2010-07-06 20:17:59 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempJI2132.html [2010-07-06 19:26:43 | 000,005,174 | ---- | C] () -- C:\Windows\SysWow64\nppt9x.vxd [2010-07-06 17:41:15 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempxj2932.html [2010-07-06 17:40:55 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempcI2932.html [2010-07-06 16:05:39 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempSE3340.html [2010-07-06 14:54:21 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGd2520.html [2010-07-06 14:54:10 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempwB2520.html [2010-07-06 12:00:28 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat [2010-07-06 11:19:41 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempvT1476.html [2010-07-06 11:19:31 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempuz1476.html [2010-07-06 10:23:38 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempnb2976.html [2010-07-06 10:23:20 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempDl2976.html [2010-07-05 22:25:37 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempfz3736.html [2010-07-05 22:25:33 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempWg3736.html [2010-07-05 22:12:13 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempxn2392.html [2010-07-05 20:30:21 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemprO2940.html [2010-07-05 20:23:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempCG2940.html [2010-07-05 15:45:12 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPO2996.html [2010-07-05 12:49:24 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempWE2996.html [2010-07-05 11:26:58 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempCz2864.html [2010-07-04 23:39:38 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemptI1984.html [2010-07-04 23:39:28 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempnn1984.html [2010-07-04 20:20:38 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempil4056.html [2010-07-04 20:20:35 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempul4056.html [2010-07-04 20:03:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempEd3532.html [2010-07-04 20:03:04 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Temphq3532.html [2010-07-04 17:02:19 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempJw2100.html [2010-07-04 17:02:03 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempkk2100.html [2010-07-04 16:02:15 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempDH2900.html [2010-07-04 16:02:04 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempcH2900.html [2010-07-04 16:00:50 | 224,458,260 | ---- | C] () -- C:\Windows\MEMORY.DMP [2010-07-04 13:55:48 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempjB3376.html [2010-07-04 13:55:43 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempMh3376.html [2010-07-04 13:45:25 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempEF2864.html [2010-07-04 08:34:53 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempEv1904.html [2010-07-04 08:34:08 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemprR1904.html [2010-07-04 08:34:00 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempQA1904.html [2010-07-04 08:17:19 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempXA2720.html [2010-07-03 21:26:18 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNy2908.html [2010-07-03 14:38:34 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPC2908.html [2010-07-03 13:52:39 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempUi2908.html [2010-07-03 12:56:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempub2908.html [2010-07-02 20:23:58 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempvT3880.html [2010-07-02 20:23:53 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNd3880.html [2010-07-02 20:23:53 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemptX3880.html [2010-07-02 19:59:33 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempmX3232.html [2010-07-02 16:53:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempMG3232.html [2010-07-02 16:53:47 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempLx3232.html [2010-07-02 15:20:02 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempob2808.html [2010-07-02 14:18:03 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Video.lnk [2010-07-02 14:18:03 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Pictures.lnk [2010-07-02 14:18:03 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Passwords.lnk [2010-07-02 14:18:03 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\New Folder.lnk [2010-07-02 14:18:03 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Music.lnk [2010-07-02 14:18:03 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Documents.lnk [2010-07-02 14:18:03 | 000,000,134 | RHS- | C] () -- C:\Windows\SysWow64\autorun.inf [2010-07-02 14:16:30 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempxC4024.html [2010-07-02 14:16:30 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempDu4024.html [2010-07-02 11:48:41 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempwx3592.html [2010-07-02 11:48:36 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempvv3592.html [2010-07-02 11:29:26 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHr2836.html [2010-07-01 23:44:43 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempft3696.html [2010-07-01 22:01:03 | 000,080,896 | ---- | C] () -- C:\Users\Ici\msnmsgr.exe [2010-07-01 21:26:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNz2324.html [2010-07-01 20:23:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempCa1672.html [2010-07-01 19:53:47 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemprM2444.html [2010-07-01 18:56:58 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Templn2728.html [2010-07-01 18:38:19 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempIE2728.html [2010-07-01 18:24:48 | 001,133,568 | ---- | C] () -- C:\Windows\SysNative\drivers\athrx.sys [2010-07-01 18:24:48 | 000,546,816 | ---- | C] () -- C:\Windows\SysNative\S64CPA.exe [2010-07-01 18:24:48 | 000,430,080 | ---- | C] () -- C:\Windows\SysNative\athihvs.dll [2010-07-01 18:24:48 | 000,054,784 | ---- | C] () -- C:\Windows\SysNative\athihvui.dll [2010-07-01 18:11:16 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHA2728.html [2010-07-01 16:22:21 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempff2600.html [2010-07-01 15:08:17 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempsI3856.html [2010-07-01 15:08:17 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempty3856.html [2010-07-01 12:36:40 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempRr1116.html [2010-07-01 12:24:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempOS1116.html [2010-07-01 11:09:08 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2010-07-01 11:09:04 | 000,001,778 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010-07-01 10:26:40 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempJz1116.html [2010-07-01 10:24:27 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempUU2384.html [2010-07-01 10:08:41 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempaU2704.html [2010-06-30 17:17:51 | 000,000,961 | ---- | C] () -- C:\Users\Ici\SubEdit-Player.lnk [2010-06-30 17:15:07 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempES3936.html [2010-06-30 17:10:17 | 000,000,871 | ---- | C] () -- C:\Users\Ici\OpenFM.lnk [2010-06-30 17:00:51 | 000,026,624 | ---- | C] () -- C:\Users\Ici\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-06-30 11:36:11 | 000,054,272 | ---- | C] () -- C:\Windows\SysNative\drivers\Axtmvmdm.sys [2010-06-30 11:30:09 | 000,052,224 | ---- | C] () -- C:\Windows\SysNative\drivers\Axtmvprt.sys [2010-06-30 11:30:09 | 000,006,144 | ---- | C] () -- C:\Windows\SysNative\drivers\Axtmvflt.sys [2010-06-30 09:15:35 | 000,003,903 | ---- | C] () -- C:\Windows\SysNative\nvnrm.nvu [2010-06-30 09:15:31 | 000,001,732 | ---- | C] () -- C:\Windows\SysNative\drivers\nvphy.bin [2010-06-30 09:15:13 | 000,371,200 | ---- | C] () -- C:\Windows\SysNative\nvusmu.exe [2010-06-30 09:15:13 | 000,000,528 | ---- | C] () -- C:\Windows\SysNative\nvsmu.nvu [2010-06-30 09:14:56 | 000,369,152 | ---- | C] () -- C:\Windows\SysNative\nvusmb.exe [2010-06-30 09:14:55 | 000,001,864 | ---- | C] () -- C:\Windows\SysNative\nvsmb.nvu [2010-06-30 00:06:07 | 000,027,649 | ---- | C] () -- C:\ProgramData\nvModes.001 [2010-06-29 23:52:29 | 000,027,649 | ---- | C] () -- C:\ProgramData\nvModes.dat [2010-06-29 23:50:24 | 002,089,504 | ---- | C] () -- C:\Windows\SysNative\nvcplui.exe [2010-06-29 23:50:24 | 001,071,136 | ---- | C] () -- C:\Windows\SysNative\nvcpluir.dll [2010-06-29 23:50:24 | 000,410,656 | ---- | C] () -- C:\Windows\SysNative\nvcpl.cpl [2010-06-29 23:50:24 | 000,388,640 | ---- | C] () -- C:\Windows\SysNative\nvexpbar.dll [2010-06-29 23:49:32 | 000,500,768 | ---- | C] () -- C:\Windows\SysNative\NVUNINST.EXE [2010-06-29 23:39:35 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\QSwitch.txt [2010-06-29 23:39:35 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\DSwitch.txt [2010-06-29 23:39:35 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\AtStart.txt [2010-06-29 23:31:40 | 000,000,553 | ---- | C] () -- C:\Windows\USetup.iss [2010-06-29 23:29:41 | 001,919,968 | ---- | C] () -- C:\Windows\SysNative\drivers\wdfcoinstaller01005.dll [2010-06-29 23:29:41 | 000,018,432 | ---- | C] () -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys [2010-06-29 23:29:40 | 000,009,088 | ---- | C] () -- C:\Windows\SysNative\drivers\HpqRemHid.sys [2010-06-29 23:27:31 | 000,346,112 | ---- | C] () -- C:\Windows\SysNative\UCI64A27.dll [2010-06-29 23:27:30 | 002,177,536 | ---- | C] () -- C:\Windows\SysNative\CnxtAp64.dll [2010-06-29 23:27:30 | 000,222,720 | ---- | C] () -- C:\Windows\SysNative\drivers\CHDRT64.sys [2010-06-29 23:13:08 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_00_00.Wdf [2010-06-29 20:09:15 | 000,001,460 | ---- | C] () -- C:\Users\Ici\AppData\Local\d3d9caps64.dat [2010-06-29 20:09:13 | 000,000,020 | -HS- | C] () -- C:\Users\Ici\ntuser.ini [2010-06-29 20:09:12 | 001,572,864 | -HS- | C] () -- C:\Users\Ici\NTUSER.DAT [2010-06-29 20:09:12 | 000,524,288 | -HS- | C] () -- C:\Users\Ici\NTUSER.DAT{a7bdf3ed-6a85-11db-b5ae-f1534be43d84}.TMContainer00000000000000000002.regtrans-ms [2010-06-29 20:09:12 | 000,524,288 | -HS- | C] () -- C:\Users\Ici\NTUSER.DAT{a7bdf3ed-6a85-11db-b5ae-f1534be43d84}.TMContainer00000000000000000001.regtrans-ms [2010-06-29 20:09:12 | 000,262,144 | -H-- | C] () -- C:\Users\Ici\ntuser.dat.LOG1 [2010-06-29 20:09:12 | 000,065,536 | -HS- | C] () -- C:\Users\Ici\NTUSER.DAT{a7bdf3ed-6a85-11db-b5ae-f1534be43d84}.TM.blf [2010-06-29 20:09:12 | 000,000,000 | -H-- | C] () -- C:\Users\Ici\ntuser.dat.LOG2 [2008-10-07 09:13:30 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll [2008-10-07 09:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll [2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll [2008-01-21 04:49:10 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini [2008-01-21 04:48:56 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [color=#E56717]========== LOP Check ==========[/color] [2010-07-17 13:10:38 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\DAEMON Tools [2010-07-17 22:09:25 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\DAEMON Tools Lite [2010-07-17 13:10:38 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\DAEMON Tools Pro [2010-07-25 10:00:20 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\Gadu-Gadu 10 [2010-08-04 19:44:00 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\GetRightToGo [2010-07-16 23:27:51 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\OpenFM [2010-07-10 19:22:04 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\PhotoFiltre [2010-08-05 23:38:40 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\uTorrent [2010-08-05 23:25:37 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%\*.* >[/color] [2010-08-03 23:19:53 | 000,046,104 | ---- | M] () -- C:\20100803__23_11_59.mp3 [2010-06-29 23:36:42 | 000,000,086 | ---- | M] () -- C:\bcmwl6.log [2010-07-05 14:00:03 | 000,000,216 | ---- | M] () -- C:\DebugTrace-RockallDLL.log [2010-08-05 23:27:50 | 2146,418,688 | -HS- | M] () -- C:\hiberfil.sys [2010-08-05 23:27:49 | 2460,139,520 | -HS- | M] () -- C:\pagefile.sys [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2008-01-21 04:45:58 | 000,064,568 | ---- | M] (Microsoft Corporation) MD5=F6F6793B7F17B550ECFDBD3B229173F7 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_163188bf770e4ab0\AGP440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2008-01-21 04:45:58 | 000,022,584 | ---- | M] (Microsoft Corporation) MD5=1898FAE8E07D97F2F6C2D5326C633FAC -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_3956c39dd9e73fd2\atapi.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2008-01-21 04:46:02 | 000,079,872 | ---- | M] (Microsoft Corporation) MD5=3B2FB35363423ED60C8FBF15FC8680BD -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.0.6001.18000_none_bbc7f7665c24db80\cdrom.sys [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2008-01-21 04:49:41 | 000,739,384 | ---- | M] (Microsoft Corporation) MD5=2A2EE457AF36C5C9A6808C768BD3A12B -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.0.6001.18000_none_03e5c74ad46c7e4e\ndis.sys [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2008-01-21 04:48:54 | 000,406,016 | ---- | M] (Microsoft Corporation) MD5=856491FCED98093D824B9EB2892F564A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_cbe19c9a8d4eed2b\winlogon.exe [2008-01-21 04:49:41 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\SysWOW64\winlogon.exe [2008-01-21 04:49:41 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\SysWOW64\winlogon.exe [2008-01-21 04:49:41 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe < End of report >[/log] [log]OTL Extras logfile created on: 2010-08-05 23:37:19 - Run 1 OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\Ici\Downloads 64bit-Windows Vista Ultimate Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 7.0.6001.18000) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 54,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 72,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 40,00 Gb Total Space | 15,83 Gb Free Space | 39,58% Space Free | Partition Type: NTFS Drive D: | 100,42 Gb Total Space | 62,37 Gb Free Space | 62,11% Space Free | Partition Type: NTFS Drive E: | 8,63 Gb Total Space | 2,71 Gb Free Space | 31,43% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded Drive I: | 3,69 Gb Total Space | 3,35 Gb Free Space | 90,82% Space Free | Partition Type: FAT32 Computer Name: ICI-PC Current User Name: Ici Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Include 64bit Scans Company Name Whitelist: On Skip Microsoft Files: On File Age = 60 Days Output = Standard [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-1123888075-993420022-2315263779-1000\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" () piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l () scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [cmd] -- cmd.exe /s /k pushd "%V" () Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" File not found Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" File not found Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = C2 FE 8D 6A DC 5B C8 01 [binary data] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "oobe_av" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0BB53618-6481-42EF-8121-6274551A5663}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{3293A086-D973-47DB-B099-1BBB868F673F}" = lport=137 | protocol=17 | dir=in | app=system | "{4A1A3D4B-9979-4EC2-8CC5-F9DDF57E04A7}" = lport=138 | protocol=17 | dir=in | app=system | "{4EE2E4E1-B678-43B2-AF0B-82456E367379}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{6079E450-1A06-466E-A64D-FEBF0B80D259}" = rport=139 | protocol=6 | dir=out | app=system | "{724E0F85-4AE9-4419-A568-B6F6494033DD}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe | "{78B64453-92A8-487B-AE4D-C57966023528}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{89D8AA55-E190-413B-B954-CB7B5F11D55C}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{90306FCD-A22F-4E5C-9655-539C2018A113}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{99EE6B57-3FD4-48AF-B2E2-354FC15CFA12}" = lport=445 | protocol=6 | dir=in | app=system | "{AC4FB3E3-1C8B-4E07-8949-1C2A09A3806F}" = rport=137 | protocol=17 | dir=out | app=system | "{B66E4A58-77FE-4836-9434-E1BEC74A01F5}" = lport=139 | protocol=6 | dir=in | app=system | "{B8601D5D-83C8-41F0-A96C-34045B9E0141}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{BCD9788C-0876-4704-9F66-05AF9A10DDC9}" = rport=445 | protocol=6 | dir=out | app=system | "{CC820B1D-B620-48E9-AAEF-2526BB1AE384}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{D104E5C5-2892-4EC4-BD00-B07ACA96C1E9}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{D816AB97-4B89-4A1F-8E2F-3E8C919CEE48}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{F938EC92-967E-4E8F-8417-05E06E14F41F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{FE7850AA-19A1-490E-B241-59396805A3DF}" = rport=138 | protocol=17 | dir=out | app=system | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{04A63FBA-539A-4D05-9225-44A2A5BFD53D}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe | "{07F7E21E-DF86-4DAA-8F84-37B25B474289}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{0880A45A-C597-4385-BF6D-6C179ABAEEBB}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{0B63F228-0EFC-4727-82AA-6DEBB1CAE7E0}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{19DBD02E-79D0-4578-B159-67DA76A344F9}" = protocol=17 | dir=in | app=d:\program files (x86)\utorrent\utorrent.exe | "{1A8E1098-D689-4A88-9282-EA49FDB5FF29}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{2069D4D6-BE80-4CA0-9A20-F36567337D77}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{2229CC0D-F355-4F42-B428-D9893A6B9B76}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{24C84CB5-E7F4-49BF-A49D-6B1075A9D475}" = dir=in | app=c:\program files (x86)\skype\plugin manager\skypepm.exe | "{266A0793-B8D6-4C87-803D-2FDF937216E5}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{2707FE8D-E0A2-44DE-ACD3-A043A42FC34E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{27ED25A8-69CA-4751-B278-7CBB853ABB6F}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{2BD2BB70-7401-475F-B5FD-4A0F6DE9B555}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{4454898F-834F-48D5-B3EF-AA217DDC5A48}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{45542BC0-40AB-4C79-86CE-7977633D41F5}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{4633EE94-2735-405E-B110-54B8A0152DC7}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{46777491-7FC9-455C-8E6E-700460986678}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{47138CCF-7DA7-41C7-9AD3-ED1AE9EEF1A5}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{49C95022-FE44-4AA4-9200-DC1E704C2446}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{4B21B124-5D05-4A71-AFE1-827DD0C66EB8}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{500A87B1-C56C-44B3-911E-0EADE911576A}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{50887876-A4DF-4E11-8A6D-2FDA28F3B743}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{51B98862-F867-434A-B098-8B46E077369C}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{5BD0FA89-6388-4283-84E3-B71CE27D555B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{60C3242B-5123-4765-99C9-E06DC4CF6064}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{693B04B4-D4CC-4437-A8C3-FA13AAE90C9B}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe | "{6AD71C36-0530-453F-B2F9-8117403EEE4E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{76105BFB-3757-416C-9D59-39A34C763C97}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{78A6D17A-FC2D-4C5F-81D6-F903194EAD93}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{7BB4ED35-263B-4072-A684-2220B839028D}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{7EA4F62A-38B2-4D6C-9B28-6FFD9D8F8B31}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{7F0719FE-6F77-46A1-9BD5-78F5E607B041}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{89476CEB-BA6D-4C2D-B74A-F22FE5FAF568}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{9D14033B-DCAD-41E7-9069-157EEAD1DA8B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{AD2F1B88-2E2A-4F12-8257-445EFE9AD9D3}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | "{B0916CB3-8211-4743-A142-BB1FF3955963}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{B5E0E1A2-D5B5-47F6-AD2C-D9DE50C29E62}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{C9AA1670-3127-49FF-BBDD-45D8F8D1D780}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{CDCAE0AC-3200-4C5C-82C7-8DA5BE9DB448}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{CF7483F3-23B2-499A-BCD4-817433BB3B2B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{D3407686-95F5-451D-935C-C3A09CB25D70}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{D47E59DB-6C44-4260-9B74-39051EF1532E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{D757E356-FB12-412C-B9C6-C2B183311349}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{DB817A5B-8C5E-4817-AE06-2F899200F880}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{DF2187D7-A525-4787-A208-4759B45A524F}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | "{E2640950-3746-4DDD-B314-8F7B9E297FAB}" = protocol=6 | dir=in | app=d:\program files (x86)\utorrent\utorrent.exe | "{E8D89ECD-A52C-440B-8D6C-6969FEA99219}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{EC5F686E-BA9D-4510-B420-B8A37B64E9B0}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{EDFB27BC-A2AB-4153-B6D0-F5CFF1796DB9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{F6405186-5DA0-4597-AABF-636B40C6B075}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "TCP Query User{1F45D2B3-429C-4F2A-899F-5D963DC7173B}D:\program files (x86)\garena\garena.exe" = protocol=6 | dir=in | app=d:\program files (x86)\garena\garena.exe | "TCP Query User{453E9F16-A216-4D1D-B0A0-A4E6F7FF43A7}C:\program files (x86)\axesstel\axessmanager\axessmanager.exe" = protocol=6 | dir=in | app=c:\program files (x86)\axesstel\axessmanager\axessmanager.exe | "TCP Query User{5C66F08E-946E-415B-8DD6-15F40FAF35F9}D:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe" = protocol=6 | dir=in | app=d:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe | "TCP Query User{5CE0534E-F310-483B-B7B0-0D7F9562B58E}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | "TCP Query User{658F1C8B-11A5-4828-85CD-87A1CC896954}D:\program files (x86)\garena\garena.exe" = protocol=6 | dir=in | app=d:\program files (x86)\garena\garena.exe | "TCP Query User{67509906-4A68-410F-B644-99AA26199DD4}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | "TCP Query User{B7E2DA26-2366-440F-8423-CD17033FD76F}D:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe" = protocol=6 | dir=in | app=d:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe | "UDP Query User{1998E567-30F1-4058-87FE-77519FC08736}D:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe" = protocol=17 | dir=in | app=d:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe | "UDP Query User{57A2F6F6-A068-4925-9575-2CD63008B996}D:\program files (x86)\garena\garena.exe" = protocol=17 | dir=in | app=d:\program files (x86)\garena\garena.exe | "UDP Query User{6E1240CA-FD2B-48C9-93FB-FDBF4267115B}C:\program files (x86)\axesstel\axessmanager\axessmanager.exe" = protocol=17 | dir=in | app=c:\program files (x86)\axesstel\axessmanager\axessmanager.exe | "UDP Query User{6F6C0564-BED7-4F18-A3F5-192823D236A9}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | "UDP Query User{8F1A20F4-AFD1-4162-A68A-8F98B47B1A96}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe | "UDP Query User{AC0BAD8E-CE5C-4127-B89F-1F2C1C1F662D}D:\program files (x86)\garena\garena.exe" = protocol=17 | dir=in | app=d:\program files (x86)\garena\garena.exe | "UDP Query User{ADA957D9-D9B3-45F1-A0AF-F28BA5209FB6}D:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe" = protocol=17 | dir=in | app=d:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007 "{90120000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2007 "CNXT_AUDIO_HDA" = Conexant HD Audio "NVIDIA Drivers" = NVIDIA Drivers "PCSI" = Prevx "WinRAR archiver" = Archiwizator WinRAR [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{076A6FD8-EE45-4A83-B3C9-C7C34E7CAFDD}" = Lineage II "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F61E0B1-1AB8-F15E-07C4-46D100A1D3F7}" = Borderlands "{23D51AF4-E674-4F4C-A937-F98E458A37AB}_is1" = Testy B 2010a "{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons 6.40 H2 "{40DB1A09-646F-4F68-8524-4DEB27790E23}" = Under Lock and Key "{415B2719-AD3A-4944-B404-C472DB6085B3}" = Cisco EAP-FAST Module "{4640FDE1-B83A-4376-84ED-86F86BEE2D41}" = Driver Detective "{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}" = Cisco PEAP Module "{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III "{83770D14-21B9-44B3-8689-F7B523F94560}" = Cisco LEAP Module "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169, 8168, 8101E and 8102E Ethernet Network Card Driver for Windows Vista "{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007 "{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007 "{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007 "{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007 "{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007 "{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007 "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007 "{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007 "{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007 "{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007 "{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{B52D7A21-03E5-4C0C-82FA-FD8EB4C92149}" = AxessManager "{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Atheros Driver Installation Program "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 "{D56B0E27-4A3E-46C9-B5C1-D93D580C099C}" = NVIDIA PhysX v8.10.29 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "avast5" = avast! Pro Antivirus "DAEMON Tools Toolbar" = DAEMON Tools Toolbar "ENTERPRISE" = Microsoft Office Enterprise 2007 "Foxit Reader" = Foxit Reader "Gadu-Gadu 10" = Gadu-Gadu 10 "Garena" = Garena 2010 "InstallShield_{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III "Mozilla Firefox (3.6.8)" = Mozilla Firefox (3.6.8) "Niezbędnik CD_is1" = Niezbędnik CD "Rzeźnik MPEGów 1.1.99_is1" = Rzeźnik MPEGów 1.1.99 "ST5UNST #1" = Twój Niezbednik "SubEdit-Player_is1" = SubEdit-Player "uTorrent" = µTorrent [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1123888075-993420022-2315263779-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "PhotoFiltre" = PhotoFiltre [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2010-08-04 14:04:04 | Computer Name = Ici-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083 Description = Error - 2010-08-04 14:04:04 | Computer Name = Ici-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083 Description = Error - 2010-08-04 14:04:04 | Computer Name = Ici-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083 Description = Error - 2010-08-04 14:04:05 | Computer Name = Ici-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083 Description = Error - 2010-08-04 14:04:05 | Computer Name = Ici-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083 Description = Error - 2010-08-04 14:04:05 | Computer Name = Ici-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083 Description = Error - 2010-08-04 14:04:06 | Computer Name = Ici-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083 Description = Error - 2010-08-05 15:19:38 | Computer Name = Ici-PC | Source = WinMgmt | ID = 10 Description = Error - 2010-08-05 17:23:45 | Computer Name = Ici-PC | Source = Application Hang | ID = 1002 Description = Program OTL.exe w wersji 3.2.9.1 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania raportami i rozwiązaniami problemów. Identyfikator procesu: be0 Godzina rozpoczęcia: 01cb34e3b6135560 Godzina zakończenia: 11 Error - 2010-08-05 17:28:45 | Computer Name = Ici-PC | Source = WinMgmt | ID = 10 Description = [color=#E56717]========== Last 10 Event Log Errors ==========[/color] Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt! < End of report >[/log] [color="#FF0000"]//Co też nie znaczy że wcinamy się komuś w wątek. //Wydzielam //Tomek01[/color]
Sohei komentarz 9 sierpnia 2010 komentarz 9 sierpnia 2010 [code]:Processes Explorer.exe :OTL :files O4 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000..\Run: [kaiez] C:\Users\Ici\kaiez.exe File not found O4 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000..\Run: [mhrih] C:\Users\Ici\mhrih.exe File not found O33 - MountPoints2\{87117487-9249-11df-a218-001e681aa37d}\Shell - "" = AutoRun O33 - MountPoints2\{87117487-9249-11df-a218-001e681aa37d}\Shell\AutoRun\command - "" = H:\SETUP.EXE -- File not found O33 - MountPoints2\{87117487-9249-11df-a218-001e681aa37d}\Shell\configure\command - "" = H:\SETUP.EXE -- File not found O33 - MountPoints2\{87117487-9249-11df-a218-001e681aa37d}\Shell\install\command - "" = H:\SETUP.EXE -- File not found O33 - MountPoints2\{89aef67b-9189-11df-b113-001e681aa37d}\Shell - "" = AutoRun O33 - MountPoints2\{89aef67b-9189-11df-b113-001e681aa37d}\Shell\AutoRun\command - "" = G:\Borderlands.exe -- File not found O33 - MountPoints2\{d880e424-8428-11df-b70a-001e681aa37d}\Shell - "" = Autorun [2010-08-05 23:28:56 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMt3596.html [2010-08-05 23:28:56 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGQ3596.html [2010-08-05 23:24:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempKu1364.html [2010-08-05 23:24:16 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaJ1364.html [2010-08-04 23:34:59 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZk1160.html [2010-08-04 23:34:59 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemplU1160.html [2010-08-04 11:38:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempnk2940.html [2010-08-04 11:38:21 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHR2940.html [2010-08-04 00:18:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFa1892.html [2010-08-03 21:10:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZn2780.html [2010-08-03 17:43:35 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGn1132.html [2010-08-03 17:43:22 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempoY1132.html [2010-08-03 11:32:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcV2732.html [2010-08-03 11:32:41 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDv2732.html [2010-08-02 23:18:18 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFeG700.html [2010-08-02 20:18:23 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempro2728.html [2010-08-02 20:17:31 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempAl2728.html [2010-08-02 20:17:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQB3468.html [2010-08-02 20:02:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUT2844.html [2010-08-02 19:27:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempOo2844.html [2010-08-02 18:39:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempwWK948.html [2010-08-01 22:16:53 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempsQ1992.html [2010-08-01 22:16:53 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDZ1992.html [2010-07-31 19:18:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempndm328.html [2010-07-31 19:18:10 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvRv328.html [2010-07-31 17:16:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDb3096.html [2010-07-31 13:21:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNO2680.html [2010-07-31 13:21:16 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempkF2680.html [2010-07-30 22:35:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZU3648.html [2010-07-30 22:35:47 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgz3648.html [2010-07-30 20:05:33 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZi2964.html [2010-07-30 19:24:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempLx2964.html [2010-07-30 16:52:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIi3100.html [2010-07-30 16:52:29 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPl3100.html [2010-07-30 10:45:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRel972.html [2010-07-30 08:40:31 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempToK972.html [2010-07-30 01:31:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGG1160.html [2010-07-30 01:31:04 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempcc1160.html [2010-07-29 18:12:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRI2712.html [2010-07-29 17:15:52 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempqU3940.html [2010-07-29 14:00:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZy3940.html [2010-07-29 13:01:28 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXS3120.html [2010-07-29 13:01:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempqB3120.html [2010-07-29 00:07:22 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBf3020.html [2010-07-29 00:07:22 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempbU3020.html [2010-07-28 20:47:59 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHZ3020.html [2010-07-28 18:37:04 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQV4000.html [2010-07-28 18:24:09 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempdM4000.html [2010-07-28 15:28:35 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempKk3212.html [2010-07-28 15:12:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempTf3212.html [2010-07-28 12:18:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempuC3100.html [2010-07-28 10:56:27 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJp3100.html [2010-07-27 22:26:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempqB2768.html [2010-07-27 21:05:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQZO800.html [2010-07-27 21:05:21 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempsGm800.html [2010-07-27 16:42:35 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXqd800.html [2010-07-27 14:43:58 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFzI800.html [2010-07-27 12:58:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempTI2788.html [2010-07-27 12:56:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXw2788.html [2010-07-26 23:02:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBJ1732.html [2010-07-26 23:02:17 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempjP1732.html [2010-07-26 19:05:57 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaQ3984.html [2010-07-26 19:05:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBD3948.html [2010-07-26 17:13:14 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIV3948.html [2010-07-26 16:52:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempkN3116.html [2010-07-26 15:55:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempwx3116.html [2010-07-26 15:16:50 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Templi3116.html [2010-07-25 23:06:52 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZK2164.html [2010-07-25 23:06:52 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxK2164.html [2010-07-25 18:09:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBN2448.html [2010-07-25 18:09:36 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphI2448.html [2010-07-25 16:03:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphG3348.html [2010-07-25 14:18:27 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFn3348.html [2010-07-25 12:13:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvY3348.html [2010-07-25 10:47:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphS3348.html [2010-07-25 10:00:20 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempuU3348.html [2010-07-24 23:26:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZR3108.html [2010-07-24 23:26:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempeg3108.html [2010-07-24 23:07:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempwo3108.html [2010-07-24 16:47:14 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempzW2736.html [2010-07-24 16:47:14 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNl2736.html [2010-07-24 14:45:04 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempio2892.html [2010-07-24 13:40:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempYb2892.html [2010-07-23 21:43:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFi3060.html [2010-07-23 12:58:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempnh3060.html [2010-07-23 12:58:00 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIb3060.html [2010-07-22 17:26:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDPY412.html [2010-07-22 14:34:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemppjW412.html [2010-07-22 12:58:53 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempdp1996.html [2010-07-21 22:02:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempyO2872.html [2010-07-21 22:02:38 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHV2872.html [2010-07-21 21:48:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempInl732.html [2010-07-21 21:25:12 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempApN732.html [2010-07-21 18:21:40 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempqw2084.html [2010-07-21 18:21:40 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJL2084.html [2010-07-21 18:17:45 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempzy2696.html [2010-07-21 18:17:45 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgn2696.html [2010-07-21 16:52:11 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temprl1320.html [2010-07-21 16:52:11 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBm1320.html [2010-07-21 13:58:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxE3176.html [2010-07-21 13:20:04 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgt3744.html [2010-07-21 12:40:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFx3744.html [2010-07-21 12:38:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempfS3568.html [2010-07-21 11:41:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcW3568.html [2010-07-21 11:25:48 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempwC2908.html [2010-07-21 11:08:08 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGE2908.html [2010-07-20 16:07:08 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempxn3096.html [2010-07-20 16:00:15 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempka1360.html [2010-07-20 16:00:15 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempvj1360.html [2010-07-20 10:59:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempid2992.html [2010-07-20 10:59:17 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempqn2992.html [2010-07-20 10:52:46 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempfx2832.html [2010-07-20 10:52:46 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempxz2832.html [2010-07-20 01:16:22 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFi1612.html [2010-07-19 12:43:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempzq2596.html [2010-07-19 12:43:36 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temple2596.html [2010-07-19 02:31:57 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFl2480.html [2010-07-18 15:36:09 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempax3092.html [2010-07-18 15:36:09 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempbh3092.html [2010-07-17 23:24:30 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJD2440.html [2010-07-17 23:24:30 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temppk2440.html [2010-07-17 18:04:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJxD788.html [2010-07-17 18:04:40 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEKZ788.html [2010-07-17 17:00:39 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSZ3008.html [2010-07-17 17:00:39 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemppU3008.html [2010-07-17 15:44:16 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempWw2944.html [2010-07-17 15:44:16 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcS2944.html [2010-07-17 15:34:14 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJB2944.html [2010-07-17 15:34:14 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBr2944.html [2010-07-17 14:05:15 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempzg2928.html [2010-07-17 14:05:15 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGa2928.html [2010-07-17 13:10:44 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempyT2932.html [2010-07-17 13:10:44 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHi2932.html [2010-07-17 13:07:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCw3004.html [2010-07-17 13:07:51 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temphz3004.html [2010-07-17 08:55:22 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQY2924.html [2010-07-17 08:55:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNk2924.html [2010-07-17 02:12:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCq2896.html [2010-07-15 21:50:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNl2944.html [2010-07-15 17:30:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempsv2924.html [2010-07-15 17:30:29 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempLK2924.html [2010-07-15 12:38:35 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRt2848.html [2010-07-15 12:38:35 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPI2848.html [2010-07-12 15:43:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIC3940.html [2010-07-12 14:52:58 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempag2880.html [2010-07-12 14:31:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempjx2880.html [2010-07-12 12:52:38 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXR2836.html 010-07-14 21:30:49 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPN2848.html [2010-07-14 21:20:38 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUA2848.html [2010-07-14 17:52:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempbF2244.html [2010-07-14 15:26:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempAy2244.html [2010-07-14 14:59:30 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempzO3656.html [2010-07-14 12:58:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNg3656.html [2010-07-14 10:57:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempcb2828.html [2010-07-14 10:57:24 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempyq2828.html [2010-07-13 23:54:12 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempmC3972.html [2010-07-13 23:54:12 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempdb3972.html [2010-07-13 23:30:11 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Templo3884.html [2010-07-13 23:28:20 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempOV3884.html [2010-07-13 21:35:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHd2864.html [2010-07-13 19:41:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempwx2864.html [2010-07-13 18:42:37 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNN2864.html [2010-07-13 16:04:39 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempuA2864.html [2010-07-13 15:45:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempWx2796.html [2010-07-13 13:28:31 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempmV2912.html [2010-07-13 13:24:59 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempzW2912.html [2010-07-13 13:24:37 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPk2828.html [2010-07-13 13:16:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNB2828.html [2010-07-13 11:51:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempfC2672.html [2010-07-13 11:45:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEe2672.html [2010-07-13 10:15:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGI2804.html [2010-07-12 23:43:20 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempVC3032.html [2010-07-12 21:49:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temptv3172.html [2010-07-12 19:14:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcX3172.html [2010-07-12 18:32:48 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxJ2756.html [2010-07-12 17:53:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempTp2756.html [2010-07-12 12:26:06 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempLN2836.html [2010-07-12 12:14:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPL2264.html [2010-07-12 11:36:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempoo2784.html [2010-07-12 11:06:11 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMH2784.html [2010-07-12 10:39:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHx3872.html [2010-07-12 10:37:09 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempiv3872.html [2010-07-12 00:17:37 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvL2852.html [2010-07-12 00:17:37 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgn2852.html [2010-07-11 20:19:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaX2800.html [2010-07-11 20:13:30 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIo2800.html [2010-07-11 11:43:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemppE3656.html [2010-07-11 11:31:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMj3656.html [2010-07-11 11:18:23 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSY2820.html [2010-07-11 11:04:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRp2820.html [2010-07-11 10:27:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempwVB356.html [2010-07-11 10:21:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaI2760.html [2010-07-11 10:06:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUh2760.html [2010-07-10 21:39:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRZ2580.html [2010-07-10 21:31:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSe2580.html [2010-07-10 21:30:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSJ3296.html [2010-07-10 20:36:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPX3296.html [2010-07-10 19:40:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempzN2484.html [2010-07-10 19:38:11 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphP2484.html [2010-07-10 19:37:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempdB2824.html [2010-07-10 18:54:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphC2824.html [2010-07-10 18:08:33 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphB3704.html [2010-07-10 18:08:33 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGL3704.html [2010-07-10 16:39:22 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgj3704.html [2010-07-10 15:30:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHI2896.html [2010-07-10 15:07:28 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempYg2896.html [2010-07-10 15:00:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempit2808.html [2010-07-10 12:48:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempVt2808.html [2010-07-09 23:48:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMFF792.html [2010-07-09 23:48:06 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxWo792.html [2010-07-09 23:43:28 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEli472.html [2010-07-09 23:20:49 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSte472.html [2010-07-09 23:15:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempVB3620.html [2010-07-09 22:21:45 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxG3620.html [2010-07-09 18:12:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempsj3620.html [2010-07-09 17:00:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemprK3620.html [2010-07-09 14:37:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDq3620.html [2010-07-09 13:26:28 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempup3620.html [2010-07-09 11:44:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaK2780.html [2010-07-09 11:15:08 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemplP2780.html [2010-07-08 22:50:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPw3016.html [2010-07-08 20:39:31 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNIV176.html [2010-07-08 19:18:33 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGvQ176.html [2010-07-08 18:43:46 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCrR472.html [2010-07-08 18:10:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCbD472.html [2010-07-08 17:58:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempdi3888.html [2010-07-08 17:12:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempKv3888.html [2010-07-08 16:04:52 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXS2872.html [2010-07-08 12:59:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaU2872.html [2010-07-07 23:38:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempjW1852.html [2010-07-07 23:09:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMQ1852.html [2010-07-07 23:03:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempjK2380.html [2010-07-07 22:24:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempum2872.html [2010-07-07 22:03:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempVt2872.html [2010-07-07 13:23:46 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempno3468.html [2010-07-07 13:22:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Templw3468.html [2010-07-07 12:53:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempeH2892.html [2010-07-07 11:34:05 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQr2892.html [2010-07-07 10:47:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempeG3292.html [2010-07-07 10:47:55 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempAA3292.html [2010-07-07 10:31:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIL3292.html [2010-07-07 10:21:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempAW2884.html [2010-07-07 10:21:07 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemppJ2884.html [2010-07-06 21:58:48 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempdc2720.html [2010-07-06 21:58:48 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCz2720.html [2010-07-06 20:38:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJI2132.html [2010-07-06 18:29:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempxj2932.html [2010-07-06 17:41:23 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcI2932.html [2010-07-06 16:07:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSE3340.html [2010-07-06 16:04:35 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGd2520.html [2010-07-06 14:54:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempwB2520.html [2010-07-06 12:55:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvT1476.html [2010-07-06 11:48:39 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempuz1476.html [2010-07-06 10:36:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempnb2976.html [2010-07-06 10:23:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDl2976.html [2010-07-06 00:01:56 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempfz3736.html [2010-07-05 22:25:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempWg3736.html [2010-07-05 22:22:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempxn2392.html [2010-07-05 22:05:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemprO2940.html [2010-07-05 20:30:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCG2940.html [2010-07-05 18:35:50 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPO2996.html [2010-07-05 15:45:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempWE2996.html [2010-07-05 12:47:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCz2864.html [2010-07-04 23:40:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemptI1984.html [2010-07-04 23:39:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempnn1984.html [2010-07-04 20:35:57 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempil4056.html [2010-07-04 20:20:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempul4056.html [2010-07-04 20:18:57 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEd3532.html [2010-07-04 20:03:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temphq3532.html [2010-07-04 17:16:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJw2100.html [2010-07-04 17:02:18 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempkk2100.html [2010-07-04 16:41:02 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDH2900.html [2010-07-04 16:02:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcH2900.html [2010-07-04 13:58:15 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempjB3376.html [2010-07-04 13:55:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMh3376.html [2010-07-04 13:47:56 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEF2864.html [2010-07-04 09:34:58 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemprR1904.html [2010-07-04 08:34:59 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEv1904.html [2010-07-04 08:34:48 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQA1904.html [2010-07-04 08:17:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXA2720.html [2010-07-04 00:25:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPC2908.html [2010-07-03 22:40:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNy2908.html [2010-07-03 16:11:02 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUi2908.html [2010-07-03 14:11:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempub2908.html [2010-07-02 23:48:18 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNd3880.html [2010-07-02 23:48:18 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemptX3880.html [2010-07-02 21:03:02 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvT3880.html [2010-07-02 20:18:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempmX3232.html [2010-07-02 19:59:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempLx3232.html [2010-07-02 19:57:58 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMG3232.html [2010-07-02 16:45:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempob2808.html [2010-07-02 14:41:39 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxC4024.html [2010-07-02 14:41:39 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDu4024.html [2010-07-02 14:18:03 | 000,000,134 | RHS- | M] () -- C:\Windows\SysWow64\autorun.inf [2010-07-02 14:11:52 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempwx3592.html [2010-07-02 11:48:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempvv3592.html [2010-07-02 11:34:37 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHr2836.html [2010-07-02 00:36:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempft3696.html [2010-07-01 23:15:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNz2324.html [2010-07-01 21:14:50 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCa1672.html [2010-07-01 20:11:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemprM2444.html [2010-07-01 18:57:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Templn2728.html [2010-07-01 18:57:08 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHA2728.html [2010-07-01 18:56:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIE2728.html [2010-07-01 16:43:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempff2600.html [2010-07-01 15:19:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempsI3856.html [2010-07-01 15:19:54 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempty3856.html [2010-07-01 13:12:14 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRr1116.html [2010-07-01 13:12:14 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJz1116.html [2010-07-01 12:33:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempOS1116.html [2010-07-01 10:26:33 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUU2384.html [2010-07-01 10:23:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaU2704.html [2010-06-30 17:24:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempES3936.html :Commands [emptytemp] [start explorer] [Reboot][/code] Wklejasz to do OTL w białe okienko i klikasz run fix. Wykonaj pełny skan [url=http://dobreprogramy.pl/index.php?dz=2&id=1998][b]DR WEB CureIt[/b][/url] Wykonaj pełny skan[url=http://www.dobreprogramy.pl/Malwarebytes-AntiMalware,Program,Windows,13117.html][b]MBAM[/b][/url] Co znajda usun po czym daj logi z usuwania + nowy log OTL
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.