x-kom hosting

Problem z wyskakującym oknem

Klaudia91
utworzono
utworzono (edytowane)

Witam. Mam taki sam problem.

[log]OTL logfile created on: 2010-08-05 23:37:19 - Run 1
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\Ici\Downloads
64bit-Windows Vista Ultimate Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 54,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 72,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 40,00 Gb Total Space | 15,83 Gb Free Space | 39,58% Space Free | Partition Type: NTFS
Drive D: | 100,42 Gb Total Space | 62,37 Gb Free Space | 62,11% Space Free | Partition Type: NTFS
Drive E: | 8,63 Gb Total Space | 2,71 Gb Free Space | 31,43% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
Drive I: | 3,69 Gb Total Space | 3,35 Gb Free Space | 90,82% Space Free | Partition Type: FAT32

Computer Name: ICI-PC
Current User Name: Ici
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 60 Days
Output = Standard

[color=#E56717]========== Processes (All) ==========[/color]

PRC - [2010-08-05 23:18:06 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Ici\Downloads\OTL.exe
PRC - [2010-07-24 20:45:13 | 000,014,808 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
PRC - [2010-07-24 20:45:12 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2010-07-15 21:32:20 | 000,322,352 | ---- | M] (BitTorrent, Inc.) -- D:\Program Files (x86)\uTorrent\uTorrent.exe
PRC - [2010-06-30 13:40:14 | 012,374,624 | ---- | M] (GG Network S.A.) -- C:\Program Files (x86)\Gadu-Gadu 10\gg.exe
PRC - [2010-06-28 22:57:18 | 002,837,864 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010-06-28 22:57:15 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010-05-13 16:12:40 | 026,192,168 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
PRC - [2008-12-29 12:40:30 | 000,687,560 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe
PRC - [2008-08-01 16:14:02 | 000,202,032 | ---- | M] ( Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
PRC - [2008-05-01 16:25:56 | 000,165,192 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
PRC - [2008-04-03 11:33:26 | 000,193,840 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
PRC - [2006-11-02 11:45:00 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ctfmon.exe


[color=#E56717]========== Modules (All) ==========[/color]

MOD - [2010-08-05 23:18:06 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Ici\Downloads\OTL.exe
MOD - [2008-01-21 04:51:12 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll
MOD - [2008-01-21 04:51:12 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll
MOD - [2008-01-21 04:50:17 | 011,580,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll
MOD - [2008-01-21 04:50:09 | 000,234,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll
MOD - [2008-01-21 04:50:08 | 001,315,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll
MOD - [2008-01-21 04:50:05 | 000,806,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll
MOD - [2008-01-21 04:50:01 | 001,165,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll
MOD - [2008-01-21 04:50:01 | 000,563,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll
MOD - [2008-01-21 04:49:34 | 001,590,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll
MOD - [2008-01-21 04:49:09 | 000,450,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll
MOD - [2008-01-21 04:49:08 | 000,351,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll
MOD - [2008-01-21 04:49:08 | 000,183,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\xmllite.dll
MOD - [2008-01-21 04:49:08 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
MOD - [2008-01-21 04:49:03 | 000,680,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll
MOD - [2008-01-21 04:48:54 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll
MOD - [2008-01-21 04:48:48 | 000,798,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll
MOD - [2008-01-21 04:48:45 | 001,076,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll
MOD - [2008-01-21 04:48:45 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll
MOD - [2008-01-21 04:48:40 | 000,523,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll
MOD - [2008-01-21 04:48:36 | 000,079,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\authz.dll
MOD - [2008-01-21 04:48:30 | 000,116,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll
MOD - [2008-01-21 04:48:20 | 000,648,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll
MOD - [2008-01-21 04:48:20 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll
MOD - [2008-01-21 04:48:19 | 000,501,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll
MOD - [2008-01-21 04:48:18 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mpr.dll
MOD - [2008-01-21 04:48:12 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll
MOD - [2008-01-21 04:48:09 | 000,108,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\userenv.dll
MOD - [2008-01-21 04:48:08 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll
MOD - [2008-01-21 04:48:07 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll
MOD - [2008-01-21 04:48:00 | 000,855,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll
MOD - [2008-01-21 04:47:54 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll
MOD - [2008-01-21 04:47:53 | 000,302,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll
MOD - [2008-01-21 04:47:49 | 000,677,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll
MOD - [2008-01-21 04:47:46 | 000,750,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll
MOD - [2008-01-21 04:47:26 | 000,258,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv
MOD - [2008-01-21 04:47:18 | 001,067,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll
MOD - [2008-01-21 04:47:14 | 001,684,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll
MOD - [2008-01-21 04:47:09 | 000,088,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll
MOD - [2008-01-21 04:47:08 | 000,466,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netapi32.dll
MOD - [2006-11-02 11:46:12 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2010-08-04 21:20:18 | 006,719,872 | ---- | M] (Prevx) [Auto | Running] -- C:\Program Files\Prevx\prevx.exe -- (CSIScanner)
SRV:[b]64bit:[/b] - [2010-06-28 22:57:15 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV:[b]64bit:[/b] - [2010-06-28 22:57:15 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV:[b]64bit:[/b] - [2010-06-28 22:57:15 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV:[b]64bit:[/b] - [2008-01-21 04:51:22 | 000,252,928 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService)
SRV:[b]64bit:[/b] - [2008-01-21 04:51:03 | 000,598,016 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService)
SRV:[b]64bit:[/b] - [2008-01-21 04:50:23 | 000,195,584 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:[b]64bit:[/b] - [2008-01-21 04:46:39 | 000,383,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2006-10-27 00:47:54 | 000,065,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ipinip.sys -- (IpInIp)
DRV:[b]64bit:[/b] - [2010-08-04 21:20:19 | 000,056,320 | ---- | M] () [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\pxrts.sys -- (pxrts)
DRV:[b]64bit:[/b] - [2010-08-04 21:20:19 | 000,034,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pxscan.sys -- (pxscan)
DRV:[b]64bit:[/b] - [2010-08-04 21:20:18 | 000,022,336 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pxkbf.sys -- (pxkbf)
DRV:[b]64bit:[/b] - [2010-07-17 10:56:42 | 000,868,848 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2010-06-28 22:33:00 | 000,061,008 | ---- | M] () [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:[b]64bit:[/b] - [2009-02-25 06:31:39 | 000,006,144 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\Axtmvflt.sys -- (Axtmvflt)
DRV:[b]64bit:[/b] - [2009-02-25 06:31:37 | 000,052,224 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\Axtmvprt.sys -- (Axtmvprt)
DRV:[b]64bit:[/b] - [2009-02-25 06:31:26 | 000,054,272 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\Axtmvmdm.sys -- (Axtmvmdm)
DRV:[b]64bit:[/b] - [2008-04-27 11:09:18 | 001,133,568 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\athrx.sys -- (athr)
DRV:[b]64bit:[/b] - [2008-03-04 10:32:46 | 000,222,720 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
DRV:[b]64bit:[/b] - [2008-01-21 04:51:03 | 000,460,800 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC)
DRV:[b]64bit:[/b] - [2008-01-21 04:46:02 | 000,111,104 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2007-07-11 10:30:34 | 000,009,088 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\HpqRemHid.sys -- (HpqRemHid)
DRV:[b]64bit:[/b] - [2007-06-18 17:13:12 | 000,018,432 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV:[b]64bit:[/b] - [2006-09-18 23:36:24 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\Wbem\ntfs.mof -- (Ntfs)

[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1123888075-993420022-2315263779-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=15510&l=dis
IE - HKU\S-1-5-21-1123888075-993420022-2315263779-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-1123888075-993420022-2315263779-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "google.pl"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.1
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=PTF&o=15507&locale=en_US&apn_uid=AF94EBC8-1948-4C61-B931-54C04C081287&apn_ptnrs=LJ&apn_sauid=40F9CD04-A65F-4A54-8063-DC3CE5661134&apn_dtid=YYYYYYYYPL&q="

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-07-27 17:04:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-07-27 18:59:53 | 000,000,000 | ---D | M]

[2010-07-01 11:09:12 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\mozilla\Extensions
[2010-08-05 21:29:47 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\mozilla\Firefox\Profiles\lxj15s6h.default\extensions
[2010-07-21 22:14:41 | 000,000,000 | ---D | M] (Web Developer) -- C:\Users\Ici\AppData\Roaming\mozilla\Firefox\Profiles\lxj15s6h.default\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}
[2010-07-27 21:03:02 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Ici\AppData\Roaming\mozilla\Firefox\Profiles\lxj15s6h.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010-07-17 12:00:30 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\mozilla\Firefox\Profiles\lxj15s6h.default\extensions\DTToolbar@toolbarnet.com
[2010-07-10 19:39:41 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\mozilla\Firefox\Profiles\lxj15s6h.default\extensions\toolbar@ask.com
[2010-07-21 21:26:28 | 000,002,565 | ---- | M] () -- C:\Users\Ici\AppData\Roaming\Mozilla\FireFox\Profiles\lxj15s6h.default\searchplugins\askcom.xml
[2010-08-05 21:29:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions
[2010-07-06 11:53:56 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010-06-26 09:59:22 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2010-06-26 09:59:22 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2010-06-26 09:59:22 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2010-06-26 09:59:22 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2010-06-26 09:59:22 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2010-06-26 09:59:22 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml

O1 HOSTS File: ([2006-09-18 23:37:24 | 000,000,761 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GRA8E1~1.DLL (Microsoft Corporation)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3:[b]64bit:[/b] - HKU\S-1-5-21-1123888075-993420022-2315263779-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.DLL ()
O4:[b]64bit:[/b] - HKLM..\Run: [NvMediaCenter] C:\Windows\SysNative\NvMcTray.DLL ()
O4:[b]64bit:[/b] - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000..\Run: [Gadu-Gadu 10] C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O4 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000..\Run: [kaiez] C:\Users\Ici\kaiez.exe File not found
O4 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000..\Run: [mhrih] C:\Users\Ici\mhrih.exe File not found
O4 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000..\Run: [uTorrent] D:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GR99D3~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Ici\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\Ici\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GRA8E1~1.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005-09-11 17:18:54 | 000,000,340 | -HS- | M] () - E:\AUTOMODE -- [ NTFS ]
O32 - AutoRun File - [2010-07-10 18:56:16 | 000,000,134 | RHS- | M] () - I:\autorun.inf -- [ FAT32 ]
O33 - MountPoints2\{87117487-9249-11df-a218-001e681aa37d}\Shell - "" = AutoRun
O33 - MountPoints2\{87117487-9249-11df-a218-001e681aa37d}\Shell\AutoRun\command - "" = H:\SETUP.EXE -- File not found
O33 - MountPoints2\{87117487-9249-11df-a218-001e681aa37d}\Shell\configure\command - "" = H:\SETUP.EXE -- File not found
O33 - MountPoints2\{87117487-9249-11df-a218-001e681aa37d}\Shell\install\command - "" = H:\SETUP.EXE -- File not found
O33 - MountPoints2\{89aef67b-9189-11df-b113-001e681aa37d}\Shell - "" = AutoRun
O33 - MountPoints2\{89aef67b-9189-11df-b113-001e681aa37d}\Shell\AutoRun\command - "" = G:\Borderlands.exe -- File not found
O33 - MountPoints2\{d880e424-8428-11df-b70a-001e681aa37d}\Shell - "" = Autorun
O33 - MountPoints2\{d880e424-8428-11df-b70a-001e681aa37d}\Shell\verb\command - "" = C:\Windows\SysWow64\explorer.exe -- [2008-01-21 04:48:30 | 002,927,104 | ---- | M] (Microsoft Corporation)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll ()


SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll ()
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PEVSystemStart - Service
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] procexp90.Sys - Driver
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PEVSystemStart - Service
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: procexp90.Sys - Driver
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll ()
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PEVSystemStart - Service
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] procexp90.Sys - Driver
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PEVSystemStart - Service
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: procexp90.Sys - Driver
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

[color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color]

[2010-08-05 23:24:16 | 000,000,000 | ---D | C] -- C:\_OTL
[2010-08-05 22:45:39 | 000,000,000 | ---D | C] -- C:\Users\Ici\Desktop\The Prodigy - Invaders Must Die (2009) 320Kbps [Electr0]
[2010-08-05 22:19:15 | 004,368,952 | ---- | C] (Prevx) -- C:\Users\Ici\Desktop\prevx 3.0.exe
[2010-08-04 22:07:48 | 000,000,000 | ---D | C] -- C:\32788R22FWJFW
[2010-08-04 21:20:20 | 000,060,928 | ---- | C] (Prevx) -- C:\Windows\SysWow64\PxSecure.dll
[2010-08-04 21:20:18 | 000,000,000 | ---D | C] -- C:\Program Files\Prevx
[2010-08-04 21:18:34 | 000,000,000 | ---D | C] -- C:\Users\Ici\Desktop\PREVX 3.0 - WWW.TOPFORUM.COM
[2010-08-04 20:49:38 | 000,000,000 | ---D | C] -- C:\ProgramData\PrevxCSI
[2010-08-04 20:32:11 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\AryxSoft
[2010-08-04 20:30:06 | 000,000,000 | ---D | C] -- C:\Users\Ici\Documents\My ULK Files
[2010-08-04 20:29:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AryxSoft
[2010-08-04 19:57:51 | 000,000,000 | ---D | C] -- C:\ProgramData\UAB
[2010-08-04 19:57:41 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\PC_Drivers_Headquarters
[2010-08-04 19:57:27 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Drivers HeadQuarters Inc
[2010-08-04 19:49:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PC Drivers HeadQuarters
[2010-08-04 19:41:10 | 000,000,000 | ---D | C] -- C:\Users\Ici\Desktop\Downloads
[2010-08-04 19:41:08 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\GetRightToGo
[2010-08-03 23:11:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MGrenda
[2010-08-03 21:43:09 | 000,000,000 | ---D | C] -- C:\Users\Ici\Desktop\Muza
[2010-07-27 18:59:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works
[2010-07-27 18:59:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio
[2010-07-27 18:59:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2010-07-27 18:58:07 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2010-07-27 18:58:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2010-07-27 18:54:58 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2010-07-27 18:54:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2010-07-27 18:52:48 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\Microsoft Help
[2010-07-27 18:52:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2010-07-27 18:52:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2010-07-27 18:51:47 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2010-07-17 22:22:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
[2010-07-17 22:22:50 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\AGEIA
[2010-07-17 22:22:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2010-07-17 22:09:41 | 000,000,000 | ---D | C] -- C:\BDS
[2010-07-17 16:19:09 | 000,038,848 | ---- | C] (ALWIL Software) -- C:\Windows\avastSS.scr
[2010-07-17 16:19:08 | 000,165,032 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2010-07-17 16:18:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Alwil Software
[2010-07-17 16:18:51 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2010-07-17 13:10:38 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\DAEMON Tools Pro
[2010-07-17 13:10:38 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\DAEMON Tools
[2010-07-17 13:07:11 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2010-07-17 11:59:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Toolbar
[2010-07-17 11:58:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite
[2010-07-17 11:14:09 | 000,000,000 | ---D | C] -- C:\Users\Ici\Documents\My Games
[2010-07-17 11:14:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Age of Empires 3
[2010-07-17 10:56:23 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\DAEMON Tools Lite
[2010-07-16 23:28:09 | 000,000,000 | ---D | C] -- C:\Users\Ici\.gstreamer-0.10
[2010-07-16 23:27:51 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\OpenFM
[2010-07-16 23:27:51 | 000,000,000 | ---D | C] -- C:\ProgramData\OpenFM
[2010-07-15 21:31:42 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\uTorrent
[2010-07-14 22:15:25 | 000,000,000 | ---D | C] -- C:\Windows\Kswiat
[2010-07-12 15:26:24 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\Microsoft Games
[2010-07-10 19:13:27 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\PhotoFiltre
[2010-07-10 19:13:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ask.com
[2010-07-10 19:12:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PhotoFiltre
[2010-07-10 18:56:08 | 000,130,560 | ---- | C] (ApexDC++ Development Team) -- C:\Users\Ici\1.exe
[2010-07-06 19:26:43 | 000,004,682 | ---- | C] (INCA Internet Co., Ltd.) -- C:\Windows\SysWow64\npptNT2.sys
[2010-07-06 12:00:27 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\skypePM
[2010-07-06 11:57:43 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\Skype
[2010-07-06 11:53:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2010-07-06 11:53:14 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2010-07-06 11:53:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2010-07-04 16:01:09 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2010-07-02 15:50:40 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\WinRAR
[2010-07-02 15:50:33 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2010-07-01 18:24:48 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\nn-NO
[2010-07-01 18:23:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco
[2010-07-01 18:23:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Atheros
[2010-07-01 18:23:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Atheros
[2010-07-01 11:09:07 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\Mozilla
[2010-07-01 11:09:07 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\Mozilla
[2010-07-01 11:09:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2010-06-30 17:17:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SubEdit-Player
[2010-06-30 17:11:15 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\Adobe
[2010-06-30 17:11:13 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\Macromedia
[2010-06-30 17:11:13 | 000,000,000 | ---D | C] -- C:\Gadu-Gadu 10
[2010-06-30 17:11:13 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\cache
[2010-06-30 17:10:20 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\Gadu-Gadu 10
[2010-06-30 17:10:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Gadu-Gadu 10
[2010-06-30 17:10:06 | 000,000,000 | -HSD | C] -- C:\Windows\SysWow64\Macromed
[2010-06-30 17:09:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gadu-Gadu 10
[2010-06-30 11:32:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Axesstel
[2010-06-29 23:52:29 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2010-06-29 23:31:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2010-06-29 23:31:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2010-06-29 23:29:39 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2010-06-29 23:28:37 | 000,000,000 | ---D | C] -- C:\Program Files\CONEXANT
[2010-06-29 23:24:28 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\no-NO
[2010-06-29 23:24:19 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\InstallShield
[2010-06-29 23:21:25 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2010-06-29 23:15:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hewlett-Packard
[2010-06-29 23:14:48 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2010-06-29 23:14:47 | 000,000,000 | ---D | C] -- C:\SWSetup
[2010-06-29 20:09:41 | 000,000,000 | R--D | C] -- C:\Users\Ici\Searches
[2010-06-29 20:09:30 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\Identities
[2010-06-29 20:09:25 | 000,000,000 | R--D | C] -- C:\Users\Ici\Contacts
[2010-06-29 20:09:24 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\VirtualStore
[2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Ustawienia lokalne
[2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\AppData\Local\Temporary Internet Files
[2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Szablony
[2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\SendTo
[2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Recent
[2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\PrintHood
[2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\NetHood
[2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Documents\Moje wideo
[2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Documents\Moje obrazy
[2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Moje dokumenty
[2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Documents\Moja muzyka
[2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Menu Start
[2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\AppData\Local\Historia
[2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Dane aplikacji
[2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\AppData\Local\Dane aplikacji
[2010-06-29 20:09:13 | 000,000,000 | -HSD | C] -- C:\Users\Ici\Cookies
[2010-06-29 20:09:12 | 000,000,000 | --SD | C] -- C:\Users\Ici\AppData\Roaming\Microsoft
[2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Videos
[2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Saved Games
[2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Pictures
[2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Music
[2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Links
[2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Favorites
[2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Downloads
[2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Documents
[2010-06-29 20:09:12 | 000,000,000 | R--D | C] -- C:\Users\Ici\Desktop
[2010-06-29 20:09:12 | 000,000,000 | -H-D | C] -- C:\Users\Ici\AppData
[2010-06-29 20:09:12 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\Temp
[2010-06-29 20:09:12 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Local\Microsoft
[2010-06-29 20:09:12 | 000,000,000 | ---D | C] -- C:\Users\Ici\AppData\Roaming\Media Center Programs
[2010-06-29 20:07:02 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\ProgramData\Ulubione
[2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\ProgramData\Szablony
[2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\ProgramData\Pulpit
[2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo
[2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy
[2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka
[2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Start
[2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2010-06-29 20:04:18 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji
[2010-06-29 20:03:51 | 000,000,000 | ---D | C] -- C:\Windows\Debug
[2010-06-29 19:16:23 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2010-06-29 19:14:11 | 000,000,000 | ---D | C] -- C:\Windows\CSC
[2010-06-29 19:11:48 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2010-06-29 19:11:31 | 000,000,000 | -HSD | C] -- C:\System Volume Information

[color=#E56717]========== Files - Modified Within 60 Days ==========[/color]

[2010-08-05 23:33:43 | 001,572,864 | -HS- | M] () -- C:\Users\Ici\NTUSER.DAT
[2010-08-05 23:32:31 | 001,469,036 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010-08-05 23:32:31 | 000,662,112 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2010-08-05 23:32:31 | 000,587,178 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010-08-05 23:32:31 | 000,126,908 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2010-08-05 23:32:31 | 000,101,250 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010-08-05 23:30:15 | 000,027,649 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2010-08-05 23:30:15 | 000,027,649 | ---- | M] () -- C:\ProgramData\nvModes.001
[2010-08-05 23:28:56 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMt3596.html
[2010-08-05 23:28:56 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGQ3596.html
[2010-08-05 23:28:03 | 000,004,928 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010-08-05 23:28:03 | 000,004,928 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010-08-05 23:28:01 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010-08-05 23:27:54 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010-08-05 23:27:50 | 2146,418,688 | -HS- | M] () -- C:\hiberfil.sys
[2010-08-05 23:25:54 | 000,524,288 | -HS- | M] () -- C:\Users\Ici\NTUSER.DAT{a7bdf3ed-6a85-11db-b5ae-f1534be43d84}.TMContainer00000000000000000001.regtrans-ms
[2010-08-05 23:25:54 | 000,065,536 | -HS- | M] () -- C:\Users\Ici\NTUSER.DAT{a7bdf3ed-6a85-11db-b5ae-f1534be43d84}.TM.blf
[2010-08-05 23:25:28 | 002,155,873 | -H-- | M] () -- C:\Users\Ici\AppData\Local\IconCache.db
[2010-08-05 23:24:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempKu1364.html
[2010-08-05 23:24:16 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaJ1364.html
[2010-08-04 23:34:59 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZk1160.html
[2010-08-04 23:34:59 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemplU1160.html
[2010-08-04 22:07:36 | 003,750,054 | ---- | M] () -- C:\Users\Ici\Desktop\ComboFix(2).exe
[2010-08-04 21:20:20 | 000,060,928 | ---- | M] (Prevx) -- C:\Windows\SysWow64\PxSecure.dll
[2010-08-04 21:20:19 | 000,056,320 | ---- | M] () -- C:\Windows\SysNative\drivers\pxrts.sys
[2010-08-04 21:20:19 | 000,034,696 | ---- | M] () -- C:\Windows\SysNative\drivers\pxscan.sys
[2010-08-04 21:20:18 | 000,022,336 | ---- | M] () -- C:\Windows\SysNative\drivers\pxkbf.sys
[2010-08-04 21:20:11 | 000,000,048 | ---- | M] () -- C:\Windows\wininit.ini
[2010-08-04 19:56:44 | 000,002,380 | ---- | M] () -- C:\Users\Public\Desktop\Driver Detective.lnk
[2010-08-04 11:38:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempnk2940.html
[2010-08-04 11:38:21 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHR2940.html
[2010-08-04 00:18:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFa1892.html
[2010-08-03 23:19:53 | 000,046,104 | ---- | M] () -- C:\20100803__23_11_59.mp3
[2010-08-03 23:11:25 | 000,001,838 | ---- | M] () -- C:\Users\Ici\Rzeźnik MPEG'ów .lnk
[2010-08-03 21:43:46 | 000,026,624 | ---- | M] () -- C:\Users\Ici\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-08-03 21:10:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZn2780.html
[2010-08-03 17:43:35 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGn1132.html
[2010-08-03 17:43:22 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempoY1132.html
[2010-08-03 11:32:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcV2732.html
[2010-08-03 11:32:41 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDv2732.html
[2010-08-02 23:18:18 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFeG700.html
[2010-08-02 20:18:23 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempro2728.html
[2010-08-02 20:17:31 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempAl2728.html
[2010-08-02 20:17:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQB3468.html
[2010-08-02 20:02:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUT2844.html
[2010-08-02 19:27:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempOo2844.html
[2010-08-02 18:39:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempwWK948.html
[2010-08-01 22:16:53 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempsQ1992.html
[2010-08-01 22:16:53 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDZ1992.html
[2010-07-31 19:18:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempndm328.html
[2010-07-31 19:18:10 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvRv328.html
[2010-07-31 17:16:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDb3096.html
[2010-07-31 13:23:39 | 000,000,882 | ---- | M] () -- C:\Users\Ici\PhotoFiltre.lnk
[2010-07-31 13:21:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNO2680.html
[2010-07-31 13:21:16 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempkF2680.html
[2010-07-31 11:09:44 | 000,001,460 | ---- | M] () -- C:\Users\Ici\AppData\Local\d3d9caps64.dat
[2010-07-30 22:35:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZU3648.html
[2010-07-30 22:35:47 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgz3648.html
[2010-07-30 20:05:33 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZi2964.html
[2010-07-30 19:24:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempLx2964.html
[2010-07-30 16:52:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIi3100.html
[2010-07-30 16:52:29 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPl3100.html
[2010-07-30 10:45:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRel972.html
[2010-07-30 08:40:31 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempToK972.html
[2010-07-30 01:31:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGG1160.html
[2010-07-30 01:31:04 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempcc1160.html
[2010-07-29 18:12:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRI2712.html
[2010-07-29 17:15:52 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempqU3940.html
[2010-07-29 14:00:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZy3940.html
[2010-07-29 13:01:28 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXS3120.html
[2010-07-29 13:01:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempqB3120.html
[2010-07-29 00:07:22 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBf3020.html
[2010-07-29 00:07:22 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempbU3020.html
[2010-07-28 20:47:59 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHZ3020.html
[2010-07-28 18:37:04 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQV4000.html
[2010-07-28 18:24:09 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempdM4000.html
[2010-07-28 15:28:35 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempKk3212.html
[2010-07-28 15:12:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempTf3212.html
[2010-07-28 12:18:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempuC3100.html
[2010-07-28 10:56:27 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJp3100.html
[2010-07-27 22:26:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempqB2768.html
[2010-07-27 21:45:06 | 000,379,088 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010-07-27 21:05:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQZO800.html
[2010-07-27 21:05:21 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempsGm800.html
[2010-07-27 19:40:44 | 000,000,694 | ---- | M] () -- C:\Users\Ici\age3.lnk
[2010-07-27 19:11:00 | 000,101,120 | ---- | M] () -- C:\Users\Ici\AppData\Local\GDIPFONTCACHEV1.DAT
[2010-07-27 18:53:55 | 000,000,219 | ---- | M] () -- C:\Windows\win.ini
[2010-07-27 18:50:14 | 000,013,778 | -HS- | M] () -- C:\Users\Ici\Desktop\Folder.jpg
[2010-07-27 18:50:14 | 000,013,778 | -HS- | M] () -- C:\Users\Ici\Desktop\AlbumArt_{C2D3E460-7720-4D10-8342-9C75587D5071}_Large.jpg
[2010-07-27 18:50:14 | 000,002,814 | -HS- | M] () -- C:\Users\Ici\Desktop\AlbumArtSmall.jpg
[2010-07-27 18:50:14 | 000,002,814 | -HS- | M] () -- C:\Users\Ici\Desktop\AlbumArt_{C2D3E460-7720-4D10-8342-9C75587D5071}_Small.jpg
[2010-07-27 16:42:35 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXqd800.html
[2010-07-27 14:43:58 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFzI800.html
[2010-07-27 12:58:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempTI2788.html
[2010-07-27 12:56:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXw2788.html
[2010-07-26 23:02:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBJ1732.html
[2010-07-26 23:02:17 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempjP1732.html
[2010-07-26 19:05:57 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaQ3984.html
[2010-07-26 19:05:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBD3948.html
[2010-07-26 17:13:14 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIV3948.html
[2010-07-26 16:52:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempkN3116.html
[2010-07-26 15:55:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempwx3116.html
[2010-07-26 15:16:50 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Templi3116.html
[2010-07-25 23:06:52 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZK2164.html
[2010-07-25 23:06:52 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxK2164.html
[2010-07-25 18:09:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBN2448.html
[2010-07-25 18:09:36 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphI2448.html
[2010-07-25 16:03:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphG3348.html
[2010-07-25 14:18:27 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFn3348.html
[2010-07-25 12:13:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvY3348.html
[2010-07-25 10:47:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphS3348.html
[2010-07-25 10:00:20 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempuU3348.html
[2010-07-24 23:26:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZR3108.html
[2010-07-24 23:26:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempeg3108.html
[2010-07-24 23:07:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempwo3108.html
[2010-07-24 22:45:49 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\P140710_13.19.jpg
[2010-07-24 16:47:14 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempzW2736.html
[2010-07-24 16:47:14 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNl2736.html
[2010-07-24 14:45:04 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempio2892.html
[2010-07-24 13:40:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempYb2892.html
[2010-07-23 21:43:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFi3060.html
[2010-07-23 12:58:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempnh3060.html
[2010-07-23 12:58:00 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIb3060.html
[2010-07-22 17:26:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDPY412.html
[2010-07-22 14:34:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemppjW412.html
[2010-07-22 12:58:53 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempdp1996.html
[2010-07-21 22:02:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempyO2872.html
[2010-07-21 22:02:38 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHV2872.html
[2010-07-21 21:48:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempInl732.html
[2010-07-21 21:25:12 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempApN732.html
[2010-07-21 18:21:40 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempqw2084.html
[2010-07-21 18:21:40 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJL2084.html
[2010-07-21 18:17:45 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempzy2696.html
[2010-07-21 18:17:45 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgn2696.html
[2010-07-21 16:52:11 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temprl1320.html
[2010-07-21 16:52:11 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBm1320.html
[2010-07-21 13:58:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxE3176.html
[2010-07-21 13:20:04 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgt3744.html
[2010-07-21 12:40:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFx3744.html
[2010-07-21 12:38:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempfS3568.html
[2010-07-21 11:41:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcW3568.html
[2010-07-21 11:25:48 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempwC2908.html
[2010-07-21 11:08:08 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGE2908.html
[2010-07-20 16:07:08 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempxn3096.html
[2010-07-20 16:00:15 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempka1360.html
[2010-07-20 16:00:15 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempvj1360.html
[2010-07-20 15:48:14 | 000,000,640 | ---- | M] () -- C:\Users\Ici\Garena.lnk
[2010-07-20 10:59:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempid2992.html
[2010-07-20 10:59:17 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempqn2992.html
[2010-07-20 10:52:46 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempfx2832.html
[2010-07-20 10:52:46 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempxz2832.html
[2010-07-20 01:16:22 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFi1612.html
[2010-07-19 12:43:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempzq2596.html
[2010-07-19 12:43:36 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temple2596.html
[2010-07-19 02:31:57 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFl2480.html
[2010-07-18 15:36:09 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempax3092.html
[2010-07-18 15:36:09 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempbh3092.html
[2010-07-17 23:24:30 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJD2440.html
[2010-07-17 23:24:30 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temppk2440.html
[2010-07-17 22:10:57 | 000,000,911 | ---- | M] () -- C:\Users\Ici\Borderlands-MCE.lnk
[2010-07-17 18:04:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJxD788.html
[2010-07-17 18:04:40 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEKZ788.html
[2010-07-17 17:00:39 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSZ3008.html
[2010-07-17 17:00:39 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemppU3008.html
[2010-07-17 16:20:13 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2010-07-17 15:44:16 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempWw2944.html
[2010-07-17 15:44:16 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcS2944.html
[2010-07-17 15:34:14 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJB2944.html
[2010-07-17 15:34:14 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBr2944.html
[2010-07-17 14:05:15 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempzg2928.html
[2010-07-17 14:05:15 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGa2928.html
[2010-07-17 13:10:44 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempyT2932.html
[2010-07-17 13:10:44 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHi2932.html
[2010-07-17 13:07:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCw3004.html
[2010-07-17 13:07:51 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temphz3004.html
[2010-07-17 10:56:42 | 000,868,848 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys
[2010-07-17 08:55:22 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQY2924.html
[2010-07-17 08:55:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNk2924.html
[2010-07-17 02:12:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCq2896.html
[2010-07-15 21:50:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNl2944.html
[2010-07-15 21:32:20 | 000,000,596 | ---- | M] () -- C:\Users\Ici\µTorrent.lnk
[2010-07-15 17:30:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempsv2924.html
[2010-07-15 17:30:29 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempLK2924.html
[2010-07-15 12:38:35 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRt2848.html
[2010-07-15 12:38:35 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPI2848.html
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\zh-TW.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\zh-HK.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\zh-CN.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\XPSViewer.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\winrm.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\WCN.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\wbem.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\uk-UA.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\tr-TR.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\th-TH.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Tasks.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\sysprep.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\sv-SE.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\sr-Latn-CS.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Speech.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\SLUI.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\sl-SI.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\slmgr.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\sk-SK.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\setup.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\ru-RU.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\ro-RO.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\restore.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\ras.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\pt-PT.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\pt-BR.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Printing_Admin_Scripts.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\pl-PL.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\pl.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\oobe.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\nl-NL.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\networklist.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\NDF.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\nb-NO.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\MUI.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Msdtc.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\migwiz.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\migration.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\manifeststore.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Macromed.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\lv-LV.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\lt-LT.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\LogFiles.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\licensing.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\ko-KR.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\ja-JP.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\it-IT.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\InstallShield.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\inetsrv.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\IME.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\icsxml.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\ias.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\hu-HU.lnk
[2010-07-14 23:03:27 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\hr-HR.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\he-IL.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\GroupPolicyUsers.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\GroupPolicy.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\FxsTmp.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\fr-FR.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\fi-FI.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\et-EE.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\es-ES.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\en-US.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\en.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\el-GR.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\driverstore.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\drivers.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\de-DE.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\da-DK.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\cs-CZ.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\config.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\com.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Branding.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\bg-BG.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\ar-SA.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\AdvancedInstallers.lnk
[2010-07-14 23:03:26 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\0409.lnk
[2010-07-14 23:03:26 | 000,000,236 | ---- | M] () -- C:\Windows\SysWow64\...lnk
[2010-07-14 22:20:55 | 000,000,960 | ---- | M] () -- C:\Windows\unins000.dat
[2010-07-14 22:17:01 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Video.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Pictures.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Passwords.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\New Folder.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Music.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\Documents.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | M] () -- C:\Windows\SysWow64\..lnk
[2010-07-14 21:30:49 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPN2848.html
[2010-07-14 21:20:38 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUA2848.html
[2010-07-14 17:52:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempbF2244.html
[2010-07-14 15:26:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempAy2244.html
[2010-07-14 14:59:30 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempzO3656.html
[2010-07-14 12:58:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNg3656.html
[2010-07-14 10:57:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempcb2828.html
[2010-07-14 10:57:24 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempyq2828.html
[2010-07-13 23:54:12 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempmC3972.html
[2010-07-13 23:54:12 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempdb3972.html
[2010-07-13 23:30:11 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Templo3884.html
[2010-07-13 23:28:20 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempOV3884.html
[2010-07-13 21:35:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHd2864.html
[2010-07-13 19:41:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempwx2864.html
[2010-07-13 18:42:37 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNN2864.html
[2010-07-13 16:04:39 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempuA2864.html
[2010-07-13 15:45:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempWx2796.html
[2010-07-13 13:28:31 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempmV2912.html
[2010-07-13 13:24:59 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempzW2912.html
[2010-07-13 13:24:37 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPk2828.html
[2010-07-13 13:16:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNB2828.html
[2010-07-13 11:51:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempfC2672.html
[2010-07-13 11:45:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEe2672.html
[2010-07-13 10:15:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGI2804.html
[2010-07-12 23:43:20 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempVC3032.html
[2010-07-12 21:49:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temptv3172.html
[2010-07-12 19:14:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcX3172.html
[2010-07-12 18:32:48 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxJ2756.html
[2010-07-12 17:53:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempTp2756.html
[2010-07-12 16:56:33 | 000,000,717 | ---- | M] () -- C:\Users\Ici\Desktop\Testy B 2010a.lnk
[2010-07-12 15:43:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIC3940.html
[2010-07-12 14:52:58 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempag2880.html
[2010-07-12 14:31:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempjx2880.html
[2010-07-12 12:52:38 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXR2836.html
[2010-07-12 12:33:14 | 000,000,307 | ---- | M] () -- C:\Users\Ici\Desktop\DCIM.lnk
[2010-07-12 12:26:06 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempLN2836.html
[2010-07-12 12:14:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPL2264.html
[2010-07-12 11:36:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempoo2784.html
[2010-07-12 11:06:11 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMH2784.html
[2010-07-12 10:39:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHx3872.html
[2010-07-12 10:37:09 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempiv3872.html
[2010-07-12 00:17:37 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvL2852.html
[2010-07-12 00:17:37 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgn2852.html
[2010-07-11 20:19:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaX2800.html
[2010-07-11 20:13:30 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIo2800.html
[2010-07-11 11:43:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemppE3656.html
[2010-07-11 11:31:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMj3656.html
[2010-07-11 11:18:23 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSY2820.html
[2010-07-11 11:04:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRp2820.html
[2010-07-11 10:27:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempwVB356.html
[2010-07-11 10:21:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaI2760.html
[2010-07-11 10:06:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUh2760.html
[2010-07-10 21:39:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRZ2580.html
[2010-07-10 21:31:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSe2580.html
[2010-07-10 21:30:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSJ3296.html
[2010-07-10 20:36:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPX3296.html
[2010-07-10 19:40:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempzN2484.html
[2010-07-10 19:38:11 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphP2484.html
[2010-07-10 19:37:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempdB2824.html
[2010-07-10 18:54:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphC2824.html
[2010-07-10 18:08:33 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphB3704.html
[2010-07-10 18:08:33 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGL3704.html
[2010-07-10 16:39:22 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgj3704.html
[2010-07-10 15:30:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHI2896.html
[2010-07-10 15:07:28 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempYg2896.html
[2010-07-10 15:00:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempit2808.html
[2010-07-10 12:48:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempVt2808.html
[2010-07-10 06:18:49 | 000,130,560 | ---- | M] (ApexDC++ Development Team) -- C:\Users\Ici\1.exe
[2010-07-09 23:48:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMFF792.html
[2010-07-09 23:48:06 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxWo792.html
[2010-07-09 23:43:28 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEli472.html
[2010-07-09 23:20:49 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSte472.html
[2010-07-09 23:15:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempVB3620.html
[2010-07-09 22:21:45 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxG3620.html
[2010-07-09 18:12:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempsj3620.html
[2010-07-09 17:00:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemprK3620.html
[2010-07-09 14:37:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDq3620.html
[2010-07-09 13:26:28 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempup3620.html
[2010-07-09 11:44:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaK2780.html
[2010-07-09 11:15:08 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemplP2780.html
[2010-07-08 22:50:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPw3016.html
[2010-07-08 20:39:31 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNIV176.html
[2010-07-08 19:18:33 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGvQ176.html
[2010-07-08 18:43:46 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCrR472.html
[2010-07-08 18:10:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCbD472.html
[2010-07-08 17:58:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempdi3888.html
[2010-07-08 17:12:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempKv3888.html
[2010-07-08 16:04:52 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXS2872.html
[2010-07-08 12:59:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaU2872.html
[2010-07-07 23:38:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempjW1852.html
[2010-07-07 23:09:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMQ1852.html
[2010-07-07 23:03:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempjK2380.html
[2010-07-07 22:24:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempum2872.html
[2010-07-07 22:03:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempVt2872.html
[2010-07-07 13:23:46 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempno3468.html
[2010-07-07 13:22:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Templw3468.html
[2010-07-07 12:53:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempeH2892.html
[2010-07-07 11:34:05 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQr2892.html
[2010-07-07 10:47:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempeG3292.html
[2010-07-07 10:47:55 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempAA3292.html
[2010-07-07 10:31:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIL3292.html
[2010-07-07 10:21:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempAW2884.html
[2010-07-07 10:21:07 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemppJ2884.html
[2010-07-06 21:58:48 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempdc2720.html
[2010-07-06 21:58:48 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCz2720.html
[2010-07-06 20:38:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJI2132.html
[2010-07-06 18:29:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempxj2932.html
[2010-07-06 17:41:23 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcI2932.html
[2010-07-06 16:07:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSE3340.html
[2010-07-06 16:04:35 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGd2520.html
[2010-07-06 14:54:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempwB2520.html
[2010-07-06 12:55:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvT1476.html
[2010-07-06 12:00:28 | 000,000,056 | -H-- | M] () -- C:\Windows\SysWow64\ezsidmv.dat
[2010-07-06 11:48:39 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempuz1476.html
[2010-07-06 10:36:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempnb2976.html
[2010-07-06 10:23:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDl2976.html
[2010-07-06 00:01:56 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempfz3736.html
[2010-07-05 22:25:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempWg3736.html
[2010-07-05 22:22:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempxn2392.html
[2010-07-05 22:05:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemprO2940.html
[2010-07-05 20:30:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCG2940.html
[2010-07-05 18:35:50 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPO2996.html
[2010-07-05 15:45:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempWE2996.html
[2010-07-05 12:47:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCz2864.html
[2010-07-04 23:40:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemptI1984.html
[2010-07-04 23:39:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempnn1984.html
[2010-07-04 20:35:57 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempil4056.html
[2010-07-04 20:20:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempul4056.html
[2010-07-04 20:18:57 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEd3532.html
[2010-07-04 20:03:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temphq3532.html
[2010-07-04 17:16:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJw2100.html
[2010-07-04 17:02:18 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempkk2100.html
[2010-07-04 16:41:02 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDH2900.html
[2010-07-04 16:02:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcH2900.html
[2010-07-04 16:01:09 | 224,458,260 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2010-07-04 13:58:15 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempjB3376.html
[2010-07-04 13:55:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMh3376.html
[2010-07-04 13:47:56 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEF2864.html
[2010-07-04 09:34:58 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemprR1904.html
[2010-07-04 08:34:59 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEv1904.html
[2010-07-04 08:34:48 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQA1904.html
[2010-07-04 08:17:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXA2720.html
[2010-07-04 00:25:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPC2908.html
[2010-07-03 22:40:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNy2908.html
[2010-07-03 16:11:02 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUi2908.html
[2010-07-03 14:11:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempub2908.html
[2010-07-02 23:48:18 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNd3880.html
[2010-07-02 23:48:18 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemptX3880.html
[2010-07-02 21:03:02 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvT3880.html
[2010-07-02 20:18:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempmX3232.html
[2010-07-02 19:59:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempLx3232.html
[2010-07-02 19:57:58 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMG3232.html
[2010-07-02 16:45:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempob2808.html
[2010-07-02 14:41:39 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxC4024.html
[2010-07-02 14:41:39 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDu4024.html
[2010-07-02 14:18:03 | 000,000,134 | RHS- | M] () -- C:\Windows\SysWow64\autorun.inf
[2010-07-02 14:11:52 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempwx3592.html
[2010-07-02 11:48:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempvv3592.html
[2010-07-02 11:34:37 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHr2836.html
[2010-07-02 00:36:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempft3696.html
[2010-07-01 23:15:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNz2324.html
[2010-07-01 21:14:50 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCa1672.html
[2010-07-01 20:11:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemprM2444.html
[2010-07-01 18:57:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Templn2728.html
[2010-07-01 18:57:08 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHA2728.html
[2010-07-01 18:56:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIE2728.html
[2010-07-01 16:43:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempff2600.html
[2010-07-01 15:19:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempsI3856.html
[2010-07-01 15:19:54 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempty3856.html
[2010-07-01 13:12:14 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRr1116.html
[2010-07-01 13:12:14 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJz1116.html
[2010-07-01 12:46:44 | 000,080,896 | ---- | M] () -- C:\Users\Ici\msnmsgr.exe
[2010-07-01 12:33:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempOS1116.html
[2010-07-01 11:09:08 | 000,000,000 | ---- | M] () -- C:\Windows\nsreg.dat
[2010-07-01 11:09:04 | 000,001,778 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010-07-01 10:26:33 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUU2384.html
[2010-07-01 10:23:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaU2704.html
[2010-06-30 17:24:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempES3936.html
[2010-06-30 17:17:51 | 000,000,961 | ---- | M] () -- C:\Users\Ici\SubEdit-Player.lnk
[2010-06-30 17:10:17 | 000,000,871 | ---- | M] () -- C:\Users\Ici\OpenFM.lnk
[2010-06-29 23:13:08 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_00_00.Wdf
[2010-06-29 20:10:32 | 000,524,288 | -HS- | M] () -- C:\Users\Ici\NTUSER.DAT{a7bdf3ed-6a85-11db-b5ae-f1534be43d84}.TMContainer00000000000000000002.regtrans-ms
[2010-06-29 20:09:13 | 000,000,020 | -HS- | M] () -- C:\Users\Ici\ntuser.ini
[2010-06-29 19:18:31 | 000,075,596 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2010-06-28 22:57:33 | 000,038,848 | ---- | M] (ALWIL Software) -- C:\Windows\avastSS.scr
[2010-06-28 22:57:12 | 000,165,032 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2010-06-28 22:39:49 | 000,432,720 | ---- | M] () -- C:\Windows\SysNative\drivers\aswSnx.sys
[2010-06-28 22:37:56 | 000,051,280 | ---- | M] () -- C:\Windows\SysNative\drivers\aswTdi.sys
[2010-06-28 22:37:36 | 000,121,936 | ---- | M] () -- C:\Windows\SysNative\drivers\aswSP.sys
[2010-06-28 22:33:17 | 000,028,752 | ---- | M] () -- C:\Windows\SysNative\drivers\aswRdr.sys
[2010-06-28 22:33:00 | 000,061,008 | ---- | M] () -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2010-06-28 22:32:36 | 000,020,048 | ---- | M] () -- C:\Windows\SysNative\drivers\aswFsBlk.sys

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010-08-05 23:28:56 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempMt3596.html
[2010-08-05 23:28:56 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGQ3596.html
[2010-08-05 22:59:02 | 000,000,307 | ---- | C] () -- C:\Users\Ici\Desktop\DCIM.lnk
[2010-08-05 21:20:34 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempKu1364.html
[2010-08-05 21:20:34 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempaJ1364.html
[2010-08-04 22:06:21 | 003,750,054 | ---- | C] () -- C:\Users\Ici\Desktop\ComboFix(2).exe
[2010-08-04 21:25:24 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempZk1160.html
[2010-08-04 21:25:24 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemplU1160.html
[2010-08-04 21:20:19 | 000,056,320 | ---- | C] () -- C:\Windows\SysNative\drivers\pxrts.sys
[2010-08-04 21:20:19 | 000,034,696 | ---- | C] () -- C:\Windows\SysNative\drivers\pxscan.sys
[2010-08-04 21:20:18 | 000,022,336 | ---- | C] () -- C:\Windows\SysNative\drivers\pxkbf.sys
[2010-08-04 20:00:26 | 000,000,048 | ---- | C] () -- C:\Windows\wininit.ini
[2010-08-04 19:56:44 | 000,002,380 | ---- | C] () -- C:\Users\Public\Desktop\Driver Detective.lnk
[2010-08-04 10:41:32 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempnk2940.html
[2010-08-04 10:41:32 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHR2940.html
[2010-08-03 23:16:09 | 000,046,104 | ---- | C] () -- C:\20100803__23_11_59.mp3
[2010-08-03 23:11:25 | 000,001,838 | ---- | C] () -- C:\Users\Ici\Rzeźnik MPEG'ów .lnk
[2010-08-03 23:05:15 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempFa1892.html
[2010-08-03 18:00:47 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempZn2780.html
[2010-08-03 17:43:18 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGn1132.html
[2010-08-03 16:04:40 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempoY1132.html
[2010-08-03 08:58:19 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempcV2732.html
[2010-08-03 08:58:19 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempDv2732.html
[2010-08-02 21:21:27 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempFeG700.html
[2010-08-02 20:17:28 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempro2728.html
[2010-08-02 20:17:23 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempAl2728.html
[2010-08-02 20:17:04 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempQB3468.html
[2010-08-02 19:27:37 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempUT2844.html
[2010-08-02 19:21:29 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempOo2844.html
[2010-08-02 14:56:19 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempwWK948.html
[2010-08-01 10:46:46 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempsQ1992.html
[2010-08-01 10:46:46 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempDZ1992.html
[2010-07-31 17:49:39 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempndm328.html
[2010-07-31 17:49:39 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempvRv328.html
[2010-07-31 17:16:31 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempDb3096.html
[2010-07-31 17:13:31 | 2146,418,688 | -HS- | C] () -- C:\hiberfil.sys
[2010-07-31 13:21:16 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNO2680.html
[2010-07-31 13:21:16 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempkF2680.html
[2010-07-30 21:26:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempZU3648.html
[2010-07-30 21:26:52 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempgz3648.html
[2010-07-30 19:24:32 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempZi2964.html
[2010-07-30 16:57:07 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempLx2964.html
[2010-07-30 11:41:26 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempIi3100.html
[2010-07-30 11:41:26 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPl3100.html
[2010-07-30 08:40:19 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempRel972.html
[2010-07-30 08:38:30 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempToK972.html
[2010-07-29 23:04:16 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempcc1160.html
[2010-07-29 21:16:25 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGG1160.html
[2010-07-29 17:27:51 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempRI2712.html
[2010-07-29 14:00:50 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempqU3940.html
[2010-07-29 14:00:45 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempZy3940.html
[2010-07-29 12:35:33 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempqB3120.html
[2010-07-29 11:14:12 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempXS3120.html
[2010-07-28 19:01:24 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHZ3020.html
[2010-07-28 19:01:02 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempBf3020.html
[2010-07-28 19:01:02 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempbU3020.html
[2010-07-28 18:24:02 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempQV4000.html
[2010-07-28 18:23:57 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempdM4000.html
[2010-07-28 12:51:18 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempTf3212.html
[2010-07-28 12:51:13 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempKk3212.html
[2010-07-28 12:50:38 | 000,000,882 | ---- | C] () -- C:\Users\Ici\PhotoFiltre.lnk
[2010-07-28 10:56:24 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempuC3100.html
[2010-07-28 10:25:02 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempJp3100.html
[2010-07-27 21:46:32 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempqB2768.html
[2010-07-27 19:40:32 | 000,000,694 | ---- | C] () -- C:\Users\Ici\age3.lnk
[2010-07-27 18:49:57 | 000,013,778 | -HS- | C] () -- C:\Users\Ici\Desktop\Folder.jpg
[2010-07-27 18:49:57 | 000,013,778 | -HS- | C] () -- C:\Users\Ici\Desktop\AlbumArt_{C2D3E460-7720-4D10-8342-9C75587D5071}_Large.jpg
[2010-07-27 18:49:57 | 000,002,814 | -HS- | C] () -- C:\Users\Ici\Desktop\AlbumArtSmall.jpg
[2010-07-27 18:49:57 | 000,002,814 | -HS- | C] () -- C:\Users\Ici\Desktop\AlbumArt_{C2D3E460-7720-4D10-8342-9C75587D5071}_Small.jpg
[2010-07-27 14:46:10 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempXqd800.html
[2010-07-27 14:43:27 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempFzI800.html
[2010-07-27 14:43:11 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempQZO800.html
[2010-07-27 14:43:11 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempsGm800.html
[2010-07-27 12:56:17 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempTI2788.html
[2010-07-27 12:45:17 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempXw2788.html
[2010-07-26 23:02:17 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempBJ1732.html
[2010-07-26 23:02:17 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempjP1732.html
[2010-07-26 19:05:43 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempaQ3984.html
[2010-07-26 17:13:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempBD3948.html
[2010-07-26 17:13:03 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempIV3948.html
[2010-07-26 15:19:05 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempwx3116.html
[2010-07-26 13:03:07 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Templi3116.html
[2010-07-26 11:49:58 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempkN3116.html
[2010-07-25 20:37:31 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempZK2164.html
[2010-07-25 20:37:31 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempxK2164.html
[2010-07-25 16:08:34 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempBN2448.html
[2010-07-25 16:08:34 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemphI2448.html
[2010-07-25 13:14:59 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemphG3348.html
[2010-07-25 11:16:01 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempvY3348.html
[2010-07-25 09:59:39 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempuU3348.html
[2010-07-25 09:59:19 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemphS3348.html
[2010-07-25 09:58:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempFn3348.html
[2010-07-24 22:45:49 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\P140710_13.19.jpg
[2010-07-24 21:30:22 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempZR3108.html
[2010-07-24 21:00:42 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempeg3108.html
[2010-07-24 20:44:34 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempwo3108.html
[2010-07-24 14:56:30 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempzW2736.html
[2010-07-24 14:56:30 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNl2736.html
[2010-07-24 13:40:40 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempio2892.html
[2010-07-24 13:40:26 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempYb2892.html
[2010-07-23 18:54:21 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempFi3060.html
[2010-07-23 12:58:00 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempnh3060.html
[2010-07-23 12:58:00 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempIb3060.html
[2010-07-22 14:34:14 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempDPY412.html
[2010-07-22 14:33:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemppjW412.html
[2010-07-22 12:58:43 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempdp1996.html
[2010-07-21 22:00:33 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHV2872.html
[2010-07-21 22:00:27 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempyO2872.html
[2010-07-21 21:25:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempInl732.html
[2010-07-21 21:24:23 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempApN732.html
[2010-07-21 18:31:43 | 000,000,911 | ---- | C] () -- C:\Users\Ici\Borderlands-MCE.lnk
[2010-07-21 18:21:40 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempqw2084.html
[2010-07-21 18:21:40 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempJL2084.html
[2010-07-21 18:17:45 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempzy2696.html
[2010-07-21 18:17:45 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempgn2696.html
[2010-07-21 16:41:05 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Temprl1320.html
[2010-07-21 16:41:05 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempBm1320.html
[2010-07-21 13:58:11 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempxE3176.html
[2010-07-21 12:40:37 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempgt3744.html
[2010-07-21 12:40:23 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempFx3744.html
[2010-07-21 11:40:56 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempfS3568.html
[2010-07-21 11:40:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempcW3568.html
[2010-07-21 11:07:50 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempwC2908.html
[2010-07-21 10:59:25 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGE2908.html
[2010-07-20 16:02:28 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempxn3096.html
[2010-07-20 15:48:14 | 000,000,640 | ---- | C] () -- C:\Users\Ici\Garena.lnk
[2010-07-20 13:22:39 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempka1360.html
[2010-07-20 13:22:39 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempvj1360.html
[2010-07-20 10:56:43 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempid2992.html
[2010-07-20 10:56:43 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempqn2992.html
[2010-07-20 09:32:36 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempfx2832.html
[2010-07-20 09:32:36 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempxz2832.html
[2010-07-19 14:39:42 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempFi1612.html
[2010-07-19 11:15:42 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempzq2596.html
[2010-07-19 11:15:42 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Temple2596.html
[2010-07-18 15:57:00 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempFl2480.html
[2010-07-18 10:51:46 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempax3092.html
[2010-07-18 10:51:46 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempbh3092.html
[2010-07-17 22:25:21 | 002,430,312 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_41.dll
[2010-07-17 22:25:21 | 000,520,544 | ---- | C] () -- C:\Windows\SysNative\d3dx10_41.dll
[2010-07-17 22:25:20 | 005,425,496 | ---- | C] () -- C:\Windows\SysNative\D3DX9_41.dll
[2010-07-17 22:25:19 | 000,521,560 | ---- | C] () -- C:\Windows\SysNative\XAudio2_4.dll
[2010-07-17 22:25:19 | 000,073,544 | ---- | C] () -- C:\Windows\SysNative\XAPOFX1_3.dll
[2010-07-17 22:25:18 | 000,174,936 | ---- | C] () -- C:\Windows\SysNative\xactengine3_4.dll
[2010-07-17 22:25:17 | 000,024,920 | ---- | C] () -- C:\Windows\SysNative\X3DAudio1_6.dll
[2010-07-17 22:25:16 | 002,605,920 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_40.dll
[2010-07-17 22:25:16 | 000,519,000 | ---- | C] () -- C:\Windows\SysNative\d3dx10_40.dll
[2010-07-17 22:25:15 | 005,631,312 | ---- | C] () -- C:\Windows\SysNative\D3DX9_40.dll
[2010-07-17 22:25:14 | 000,518,480 | ---- | C] () -- C:\Windows\SysNative\XAudio2_3.dll
[2010-07-17 22:25:14 | 000,074,576 | ---- | C] () -- C:\Windows\SysNative\XAPOFX1_2.dll
[2010-07-17 22:25:13 | 000,175,440 | ---- | C] () -- C:\Windows\SysNative\xactengine3_3.dll
[2010-07-17 22:25:12 | 000,025,936 | ---- | C] () -- C:\Windows\SysNative\X3DAudio1_5.dll
[2010-07-17 22:25:11 | 000,513,544 | ---- | C] () -- C:\Windows\SysNative\XAudio2_2.dll
[2010-07-17 22:25:11 | 000,072,200 | ---- | C] () -- C:\Windows\SysNative\XAPOFX1_1.dll
[2010-07-17 22:25:10 | 000,177,672 | ---- | C] () -- C:\Windows\SysNative\xactengine3_2.dll
[2010-07-17 22:25:09 | 001,942,552 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_39.dll
[2010-07-17 22:25:09 | 000,540,688 | ---- | C] () -- C:\Windows\SysNative\d3dx10_39.dll
[2010-07-17 22:25:08 | 004,992,520 | ---- | C] () -- C:\Windows\SysNative\D3DX9_39.dll
[2010-07-17 22:25:07 | 000,511,496 | ---- | C] () -- C:\Windows\SysNative\XAudio2_1.dll
[2010-07-17 22:25:07 | 000,068,104 | ---- | C] () -- C:\Windows\SysNative\XAPOFX1_0.dll
[2010-07-17 22:25:06 | 000,177,672 | ---- | C] () -- C:\Windows\SysNative\xactengine3_1.dll
[2010-07-17 22:25:06 | 000,028,168 | ---- | C] () -- C:\Windows\SysNative\X3DAudio1_4.dll
[2010-07-17 22:25:04 | 001,941,528 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_38.dll
[2010-07-17 22:25:04 | 000,540,688 | ---- | C] () -- C:\Windows\SysNative\d3dx10_38.dll
[2010-07-17 22:25:03 | 004,991,496 | ---- | C] () -- C:\Windows\SysNative\D3DX9_38.dll
[2010-07-17 22:25:02 | 000,489,480 | ---- | C] () -- C:\Windows\SysNative\XAudio2_0.dll
[2010-07-17 22:25:01 | 000,177,672 | ---- | C] () -- C:\Windows\SysNative\xactengine3_0.dll
[2010-07-17 22:25:00 | 000,028,168 | ---- | C] () -- C:\Windows\SysNative\X3DAudio1_3.dll
[2010-07-17 22:24:59 | 001,860,120 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_37.dll
[2010-07-17 22:24:59 | 000,529,424 | ---- | C] () -- C:\Windows\SysNative\d3dx10_37.dll
[2010-07-17 22:24:58 | 004,910,088 | ---- | C] () -- C:\Windows\SysNative\D3DX9_37.dll
[2010-07-17 22:24:57 | 000,411,656 | ---- | C] () -- C:\Windows\SysNative\xactengine2_10.dll
[2010-07-17 22:24:55 | 000,508,264 | ---- | C] () -- C:\Windows\SysNative\d3dx10_36.dll
[2010-07-17 22:24:54 | 002,006,552 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_36.dll
[2010-07-17 22:24:53 | 005,081,608 | ---- | C] () -- C:\Windows\SysNative\d3dx9_36.dll
[2010-07-17 22:24:51 | 000,411,496 | ---- | C] () -- C:\Windows\SysNative\xactengine2_9.dll
[2010-07-17 22:24:50 | 001,985,904 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_35.dll
[2010-07-17 22:24:50 | 000,508,264 | ---- | C] () -- C:\Windows\SysNative\d3dx10_35.dll
[2010-07-17 22:24:49 | 005,073,256 | ---- | C] () -- C:\Windows\SysNative\d3dx9_35.dll
[2010-07-17 22:24:48 | 000,409,960 | ---- | C] () -- C:\Windows\SysNative\xactengine2_8.dll
[2010-07-17 22:24:48 | 000,021,000 | ---- | C] () -- C:\Windows\SysNative\X3DAudio1_2.dll
[2010-07-17 22:24:47 | 001,401,200 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_34.dll
[2010-07-17 22:24:47 | 000,506,728 | ---- | C] () -- C:\Windows\SysNative\d3dx10_34.dll
[2010-07-17 22:24:46 | 004,496,232 | ---- | C] () -- C:\Windows\SysNative\d3dx9_34.dll
[2010-07-17 22:24:45 | 000,403,304 | ---- | C] () -- C:\Windows\SysNative\xactengine2_7.dll
[2010-07-17 22:24:45 | 000,107,368 | ---- | C] () -- C:\Windows\SysNative\xinput1_3.dll
[2010-07-17 22:24:44 | 001,400,176 | ---- | C] () -- C:\Windows\SysNative\D3DCompiler_33.dll
[2010-07-17 22:24:44 | 000,506,728 | ---- | C] () -- C:\Windows\SysNative\d3dx10_33.dll
[2010-07-17 22:24:43 | 004,494,184 | ---- | C] () -- C:\Windows\SysNative\d3dx9_33.dll
[2010-07-17 22:24:41 | 000,393,576 | ---- | C] () -- C:\Windows\SysNative\xactengine2_6.dll
[2010-07-17 22:24:40 | 000,390,424 | ---- | C] () -- C:\Windows\SysNative\xactengine2_5.dll
[2010-07-17 22:24:39 | 000,469,264 | ---- | C] () -- C:\Windows\SysNative\d3dx10.dll
[2010-07-17 22:24:38 | 004,398,360 | ---- | C] () -- C:\Windows\SysNative\d3dx9_32.dll
[2010-07-17 22:24:36 | 000,364,824 | ---- | C] () -- C:\Windows\SysNative\xactengine2_4.dll
[2010-07-17 22:24:36 | 000,017,688 | ---- | C] () -- C:\Windows\SysNative\x3daudio1_1.dll
[2010-07-17 22:24:35 | 003,977,496 | ---- | C] () -- C:\Windows\SysNative\d3dx9_31.dll
[2010-07-17 22:24:34 | 000,363,288 | ---- | C] () -- C:\Windows\SysNative\xactengine2_3.dll
[2010-07-17 22:24:33 | 000,083,736 | ---- | C] () -- C:\Windows\SysNative\xinput1_2.dll
[2010-07-17 22:24:31 | 000,354,072 | ---- | C] () -- C:\Windows\SysNative\xactengine2_2.dll
[2010-07-17 22:24:30 | 000,083,664 | ---- | C] () -- C:\Windows\SysNative\xinput1_1.dll
[2010-07-17 22:24:28 | 000,352,464 | ---- | C] () -- C:\Windows\SysNative\xactengine2_1.dll
[2010-07-17 22:24:08 | 003,927,248 | ---- | C] () -- C:\Windows\SysNative\d3dx9_30.dll
[2010-07-17 22:24:06 | 000,355,536 | ---- | C] () -- C:\Windows\SysNative\xactengine2_0.dll
[2010-07-17 22:24:06 | 000,016,592 | ---- | C] () -- C:\Windows\SysNative\x3daudio1_0.dll
[2010-07-17 22:24:05 | 003,830,992 | ---- | C] () -- C:\Windows\SysNative\d3dx9_29.dll
[2010-07-17 22:24:04 | 003,815,120 | ---- | C] () -- C:\Windows\SysNative\d3dx9_28.dll
[2010-07-17 22:24:03 | 003,807,440 | ---- | C] () -- C:\Windows\SysNative\d3dx9_27.dll
[2010-07-17 22:23:59 | 003,544,272 | ---- | C] () -- C:\Windows\SysNative\d3dx9_24.dll
[2010-07-17 22:21:54 | 000,417,280 | ---- | C] () -- C:\Users\Ici\AppData\Local\dd_vcredistMSI5A82.txt
[2010-07-17 22:21:54 | 000,011,470 | ---- | C] () -- C:\Users\Ici\AppData\Local\dd_vcredistUI5A82.txt
[2010-07-17 21:33:31 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Temppk2440.html
[2010-07-17 21:33:30 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempJD2440.html
[2010-07-17 18:04:40 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempJxD788.html
[2010-07-17 18:04:40 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempEKZ788.html
[2010-07-17 16:20:22 | 000,020,048 | ---- | C] () -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2010-07-17 16:20:21 | 000,121,936 | ---- | C] () -- C:\Windows\SysNative\drivers\aswSP.sys
[2010-07-17 16:20:20 | 000,432,720 | ---- | C] () -- C:\Windows\SysNative\drivers\aswSnx.sys
[2010-07-17 16:20:19 | 000,028,752 | ---- | C] () -- C:\Windows\SysNative\drivers\aswRdr.sys
[2010-07-17 16:20:17 | 000,051,280 | ---- | C] () -- C:\Windows\SysNative\drivers\aswTdi.sys
[2010-07-17 16:20:13 | 000,061,008 | ---- | C] () -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2010-07-17 16:20:13 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
[2010-07-17 16:19:14 | 000,422,634 | ---- | C] () -- C:\Users\Ici\AppData\Local\dd_vcredistMSI44EC.txt
[2010-07-17 16:19:13 | 000,011,812 | ---- | C] () -- C:\Users\Ici\AppData\Local\dd_vcredistUI44EC.txt
[2010-07-17 15:59:14 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempSZ3008.html
[2010-07-17 15:59:14 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemppU3008.html
[2010-07-17 15:44:16 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempWw2944.html
[2010-07-17 15:44:16 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempcS2944.html
[2010-07-17 15:34:14 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempJB2944.html
[2010-07-17 15:34:14 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempBr2944.html
[2010-07-17 14:05:15 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempzg2928.html
[2010-07-17 14:05:15 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGa2928.html
[2010-07-17 13:10:44 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempyT2932.html
[2010-07-17 13:10:44 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHi2932.html
[2010-07-17 11:57:14 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempCw3004.html
[2010-07-17 11:57:14 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Temphz3004.html
[2010-07-17 11:09:59 | 003,767,504 | ---- | C] () -- C:\Windows\SysNative\d3dx9_26.dll
[2010-07-17 11:09:56 | 003,823,312 | ---- | C] () -- C:\Windows\SysNative\d3dx9_25.dll
[2010-07-17 10:56:42 | 000,868,848 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys
[2010-07-17 08:55:22 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempQY2924.html
[2010-07-17 08:55:21 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNk2924.html
[2010-07-16 09:14:36 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempCq2896.html
[2010-07-15 21:32:20 | 000,000,596 | ---- | C] () -- C:\Users\Ici\µTorrent.lnk
[2010-07-15 21:08:36 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNl2944.html
[2010-07-15 16:43:16 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempsv2924.html
[2010-07-15 16:43:16 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempLK2924.html
[2010-07-15 12:38:35 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempRt2848.html
[2010-07-15 12:38:35 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPI2848.html
[2010-07-14 22:17:11 | 000,000,960 | ---- | C] () -- C:\Windows\unins000.dat
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\zh-TW.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\zh-HK.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\zh-CN.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\XPSViewer.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\winrm.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\WCN.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\wbem.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\uk-UA.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\tr-TR.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\th-TH.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Tasks.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\sysprep.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\sv-SE.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\sr-Latn-CS.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Speech.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\SLUI.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\sl-SI.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\slmgr.lnk
[2010-07-14 22:17:02 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\sk-SK.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\setup.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\ru-RU.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\ro-RO.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\restore.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\ras.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\pt-PT.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\pt-BR.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Printing_Admin_Scripts.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\pl-PL.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\pl.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\oobe.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\nl-NL.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\networklist.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\NDF.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\nb-NO.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\MUI.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Msdtc.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\migwiz.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\migration.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\manifeststore.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Macromed.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\lv-LV.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\lt-LT.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\LogFiles.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\licensing.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\ko-KR.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\ja-JP.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\it-IT.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\InstallShield.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\inetsrv.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\IME.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\icsxml.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\ias.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\hu-HU.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\hr-HR.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\he-IL.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\GroupPolicyUsers.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\GroupPolicy.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\FxsTmp.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\fr-FR.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\fi-FI.lnk
[2010-07-14 22:17:01 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\et-EE.lnk
[2010-07-14 21:20:35 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPN2848.html
[2010-07-14 21:19:14 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempUA2848.html
[2010-07-14 15:26:18 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempbF2244.html
[2010-07-14 15:26:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempAy2244.html
[2010-07-14 12:58:16 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempzO3656.html
[2010-07-14 12:58:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNg3656.html
[2010-07-14 10:40:45 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempcb2828.html
[2010-07-14 10:40:45 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempyq2828.html
[2010-07-13 23:31:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempmC3972.html
[2010-07-13 23:31:09 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempdb3972.html
[2010-07-13 23:28:14 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Templo3884.html
[2010-07-13 23:28:02 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempOV3884.html
[2010-07-13 18:42:49 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHd2864.html
[2010-07-13 18:37:42 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempwx2864.html
[2010-07-13 16:04:34 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNN2864.html
[2010-07-13 16:02:31 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempuA2864.html
[2010-07-13 15:41:40 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempWx2796.html
[2010-07-13 13:24:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempmV2912.html
[2010-07-13 13:24:48 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempzW2912.html
[2010-07-13 13:16:16 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPk2828.html
[2010-07-13 13:15:53 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNB2828.html
[2010-07-13 11:12:18 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempEe2672.html
[2010-07-13 11:12:11 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempfC2672.html
[2010-07-13 10:14:08 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGI2804.html
[2010-07-12 21:51:16 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempVC3032.html
[2010-07-12 19:14:05 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Temptv3172.html
[2010-07-12 19:13:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempcX3172.html
[2010-07-12 17:53:07 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempxJ2756.html
[2010-07-12 17:52:45 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempTp2756.html
[2010-07-12 17:25:22 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\es-ES.lnk
[2010-07-12 17:25:20 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\en-US.lnk
[2010-07-12 17:25:19 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\en.lnk
[2010-07-12 17:25:18 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\el-GR.lnk
[2010-07-12 17:25:17 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\driverstore.lnk
[2010-07-12 17:25:15 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\drivers.lnk
[2010-07-12 17:25:14 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\de-DE.lnk
[2010-07-12 17:04:59 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\da-DK.lnk
[2010-07-12 17:04:58 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\cs-CZ.lnk
[2010-07-12 17:04:56 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\config.lnk
[2010-07-12 17:04:54 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\com.lnk
[2010-07-12 17:04:51 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Branding.lnk
[2010-07-12 17:04:49 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\bg-BG.lnk
[2010-07-12 17:04:39 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\ar-SA.lnk
[2010-07-12 16:56:33 | 000,000,717 | ---- | C] () -- C:\Users\Ici\Desktop\Testy B 2010a.lnk
[2010-07-12 16:55:49 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\AdvancedInstallers.lnk
[2010-07-12 16:55:46 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\0409.lnk
[2010-07-12 16:55:43 | 000,000,236 | ---- | C] () -- C:\Windows\SysWow64\...lnk
[2010-07-12 16:55:38 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\..lnk
[2010-07-12 14:56:44 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempIC3940.html
[2010-07-12 14:31:22 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempag2880.html
[2010-07-12 14:30:57 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempjx2880.html
[2010-07-12 12:26:03 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempXR2836.html
[2010-07-12 12:25:22 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempLN2836.html
[2010-07-12 12:02:25 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPL2264.html
[2010-07-12 11:06:08 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempoo2784.html
[2010-07-12 11:06:03 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempMH2784.html
[2010-07-12 10:37:06 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHx3872.html
[2010-07-12 10:37:01 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempiv3872.html
[2010-07-11 21:48:20 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempvL2852.html
[2010-07-11 21:48:20 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempgn2852.html
[2010-07-11 20:13:26 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempaX2800.html
[2010-07-11 20:10:33 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempIo2800.html
[2010-07-11 11:30:57 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemppE3656.html
[2010-07-11 11:30:36 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempMj3656.html
[2010-07-11 11:03:56 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempSY2820.html
[2010-07-11 11:03:23 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempRp2820.html
[2010-07-11 10:25:11 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempwVB356.html
[2010-07-11 10:06:28 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempaI2760.html
[2010-07-11 10:06:18 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempUh2760.html
[2010-07-10 21:31:29 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempRZ2580.html
[2010-07-10 21:31:24 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempSe2580.html
[2010-07-10 20:36:21 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempSJ3296.html
[2010-07-10 20:36:11 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPX3296.html
[2010-07-10 19:38:08 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempzN2484.html
[2010-07-10 19:38:01 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemphP2484.html
[2010-07-10 18:54:11 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempdB2824.html
[2010-07-10 18:50:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemphC2824.html
[2010-07-10 15:32:36 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempgj3704.html
[2010-07-10 15:32:31 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemphB3704.html
[2010-07-10 15:32:31 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGL3704.html
[2010-07-10 15:07:25 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHI2896.html
[2010-07-10 15:07:20 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempYg2896.html
[2010-07-10 12:48:29 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempit2808.html
[2010-07-10 12:22:03 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempVt2808.html
[2010-07-09 23:47:30 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempxWo792.html
[2010-07-09 23:47:25 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempMFF792.html
[2010-07-09 23:20:35 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempEli472.html
[2010-07-09 23:20:29 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempSte472.html
[2010-07-09 19:04:34 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempxG3620.html
[2010-07-09 18:11:58 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempsj3620.html
[2010-07-09 14:37:18 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemprK3620.html
[2010-07-09 13:28:41 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempDq3620.html
[2010-07-09 12:42:33 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempup3620.html
[2010-07-09 11:50:19 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempVB3620.html
[2010-07-09 11:15:05 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempaK2780.html
[2010-07-09 11:10:15 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemplP2780.html
[2010-07-08 21:15:48 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPw3016.html
[2010-07-08 19:18:29 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNIV176.html
[2010-07-08 19:18:23 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGvQ176.html
[2010-07-08 18:10:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempCrR472.html
[2010-07-08 18:10:05 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempCbD472.html
[2010-07-08 17:12:39 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempdi3888.html
[2010-07-08 17:12:32 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempKv3888.html
[2010-07-08 12:59:22 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempXS2872.html
[2010-07-08 12:58:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempaU2872.html
[2010-07-07 23:09:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempjW1852.html
[2010-07-07 23:09:47 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempMQ1852.html
[2010-07-07 22:26:05 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempjK2380.html
[2010-07-07 22:02:58 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempum2872.html
[2010-07-07 21:45:10 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempVt2872.html
[2010-07-07 13:19:50 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempno3468.html
[2010-07-07 13:19:45 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Templw3468.html
[2010-07-07 11:33:07 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempeH2892.html
[2010-07-07 11:32:31 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempQr2892.html
[2010-07-07 10:21:38 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempIL3292.html
[2010-07-07 10:21:15 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempeG3292.html
[2010-07-07 10:21:15 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempAA3292.html
[2010-07-07 10:20:14 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempAW2884.html
[2010-07-07 10:20:14 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemppJ2884.html
[2010-07-06 20:49:04 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempdc2720.html
[2010-07-06 20:49:04 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempCz2720.html
[2010-07-06 20:17:59 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempJI2132.html
[2010-07-06 19:26:43 | 000,005,174 | ---- | C] () -- C:\Windows\SysWow64\nppt9x.vxd
[2010-07-06 17:41:15 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempxj2932.html
[2010-07-06 17:40:55 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempcI2932.html
[2010-07-06 16:05:39 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempSE3340.html
[2010-07-06 14:54:21 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempGd2520.html
[2010-07-06 14:54:10 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempwB2520.html
[2010-07-06 12:00:28 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2010-07-06 11:19:41 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempvT1476.html
[2010-07-06 11:19:31 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempuz1476.html
[2010-07-06 10:23:38 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempnb2976.html
[2010-07-06 10:23:20 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempDl2976.html
[2010-07-05 22:25:37 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempfz3736.html
[2010-07-05 22:25:33 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempWg3736.html
[2010-07-05 22:12:13 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempxn2392.html
[2010-07-05 20:30:21 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemprO2940.html
[2010-07-05 20:23:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempCG2940.html
[2010-07-05 15:45:12 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPO2996.html
[2010-07-05 12:49:24 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempWE2996.html
[2010-07-05 11:26:58 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempCz2864.html
[2010-07-04 23:39:38 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemptI1984.html
[2010-07-04 23:39:28 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempnn1984.html
[2010-07-04 20:20:38 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempil4056.html
[2010-07-04 20:20:35 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempul4056.html
[2010-07-04 20:03:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempEd3532.html
[2010-07-04 20:03:04 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Temphq3532.html
[2010-07-04 17:02:19 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempJw2100.html
[2010-07-04 17:02:03 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempkk2100.html
[2010-07-04 16:02:15 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempDH2900.html
[2010-07-04 16:02:04 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempcH2900.html
[2010-07-04 16:00:50 | 224,458,260 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2010-07-04 13:55:48 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempjB3376.html
[2010-07-04 13:55:43 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempMh3376.html
[2010-07-04 13:45:25 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempEF2864.html
[2010-07-04 08:34:53 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempEv1904.html
[2010-07-04 08:34:08 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemprR1904.html
[2010-07-04 08:34:00 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempQA1904.html
[2010-07-04 08:17:19 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempXA2720.html
[2010-07-03 21:26:18 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNy2908.html
[2010-07-03 14:38:34 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempPC2908.html
[2010-07-03 13:52:39 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempUi2908.html
[2010-07-03 12:56:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempub2908.html
[2010-07-02 20:23:58 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempvT3880.html
[2010-07-02 20:23:53 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNd3880.html
[2010-07-02 20:23:53 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemptX3880.html
[2010-07-02 19:59:33 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempmX3232.html
[2010-07-02 16:53:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempMG3232.html
[2010-07-02 16:53:47 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempLx3232.html
[2010-07-02 15:20:02 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempob2808.html
[2010-07-02 14:18:03 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Video.lnk
[2010-07-02 14:18:03 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Pictures.lnk
[2010-07-02 14:18:03 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Passwords.lnk
[2010-07-02 14:18:03 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\New Folder.lnk
[2010-07-02 14:18:03 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Music.lnk
[2010-07-02 14:18:03 | 000,000,485 | ---- | C] () -- C:\Windows\SysWow64\Documents.lnk
[2010-07-02 14:18:03 | 000,000,134 | RHS- | C] () -- C:\Windows\SysWow64\autorun.inf
[2010-07-02 14:16:30 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempxC4024.html
[2010-07-02 14:16:30 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempDu4024.html
[2010-07-02 11:48:41 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempwx3592.html
[2010-07-02 11:48:36 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempvv3592.html
[2010-07-02 11:29:26 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHr2836.html
[2010-07-01 23:44:43 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempft3696.html
[2010-07-01 22:01:03 | 000,080,896 | ---- | C] () -- C:\Users\Ici\msnmsgr.exe
[2010-07-01 21:26:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempNz2324.html
[2010-07-01 20:23:09 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempCa1672.html
[2010-07-01 19:53:47 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TemprM2444.html
[2010-07-01 18:56:58 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Templn2728.html
[2010-07-01 18:38:19 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempIE2728.html
[2010-07-01 18:24:48 | 001,133,568 | ---- | C] () -- C:\Windows\SysNative\drivers\athrx.sys
[2010-07-01 18:24:48 | 000,546,816 | ---- | C] () -- C:\Windows\SysNative\S64CPA.exe
[2010-07-01 18:24:48 | 000,430,080 | ---- | C] () -- C:\Windows\SysNative\athihvs.dll
[2010-07-01 18:24:48 | 000,054,784 | ---- | C] () -- C:\Windows\SysNative\athihvui.dll
[2010-07-01 18:11:16 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempHA2728.html
[2010-07-01 16:22:21 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempff2600.html
[2010-07-01 15:08:17 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempsI3856.html
[2010-07-01 15:08:17 | 000,002,089 | ---- | C] () -- C:\Users\Ici\AppData\Local\Tempty3856.html
[2010-07-01 12:36:40 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempRr1116.html
[2010-07-01 12:24:52 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempOS1116.html
[2010-07-01 11:09:08 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2010-07-01 11:09:04 | 000,001,778 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010-07-01 10:26:40 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempJz1116.html
[2010-07-01 10:24:27 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempUU2384.html
[2010-07-01 10:08:41 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempaU2704.html
[2010-06-30 17:17:51 | 000,000,961 | ---- | C] () -- C:\Users\Ici\SubEdit-Player.lnk
[2010-06-30 17:15:07 | 000,002,432 | ---- | C] () -- C:\Users\Ici\AppData\Local\TempES3936.html
[2010-06-30 17:10:17 | 000,000,871 | ---- | C] () -- C:\Users\Ici\OpenFM.lnk
[2010-06-30 17:00:51 | 000,026,624 | ---- | C] () -- C:\Users\Ici\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-06-30 11:36:11 | 000,054,272 | ---- | C] () -- C:\Windows\SysNative\drivers\Axtmvmdm.sys
[2010-06-30 11:30:09 | 000,052,224 | ---- | C] () -- C:\Windows\SysNative\drivers\Axtmvprt.sys
[2010-06-30 11:30:09 | 000,006,144 | ---- | C] () -- C:\Windows\SysNative\drivers\Axtmvflt.sys
[2010-06-30 09:15:35 | 000,003,903 | ---- | C] () -- C:\Windows\SysNative\nvnrm.nvu
[2010-06-30 09:15:31 | 000,001,732 | ---- | C] () -- C:\Windows\SysNative\drivers\nvphy.bin
[2010-06-30 09:15:13 | 000,371,200 | ---- | C] () -- C:\Windows\SysNative\nvusmu.exe
[2010-06-30 09:15:13 | 000,000,528 | ---- | C] () -- C:\Windows\SysNative\nvsmu.nvu
[2010-06-30 09:14:56 | 000,369,152 | ---- | C] () -- C:\Windows\SysNative\nvusmb.exe
[2010-06-30 09:14:55 | 000,001,864 | ---- | C] () -- C:\Windows\SysNative\nvsmb.nvu
[2010-06-30 00:06:07 | 000,027,649 | ---- | C] () -- C:\ProgramData\nvModes.001
[2010-06-29 23:52:29 | 000,027,649 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2010-06-29 23:50:24 | 002,089,504 | ---- | C] () -- C:\Windows\SysNative\nvcplui.exe
[2010-06-29 23:50:24 | 001,071,136 | ---- | C] () -- C:\Windows\SysNative\nvcpluir.dll
[2010-06-29 23:50:24 | 000,410,656 | ---- | C] () -- C:\Windows\SysNative\nvcpl.cpl
[2010-06-29 23:50:24 | 000,388,640 | ---- | C] () -- C:\Windows\SysNative\nvexpbar.dll
[2010-06-29 23:49:32 | 000,500,768 | ---- | C] () -- C:\Windows\SysNative\NVUNINST.EXE
[2010-06-29 23:39:35 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\QSwitch.txt
[2010-06-29 23:39:35 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\DSwitch.txt
[2010-06-29 23:39:35 | 000,000,000 | ---- | C] () -- C:\Users\Ici\AppData\Local\AtStart.txt
[2010-06-29 23:31:40 | 000,000,553 | ---- | C] () -- C:\Windows\USetup.iss
[2010-06-29 23:29:41 | 001,919,968 | ---- | C] () -- C:\Windows\SysNative\drivers\wdfcoinstaller01005.dll
[2010-06-29 23:29:41 | 000,018,432 | ---- | C] () -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys
[2010-06-29 23:29:40 | 000,009,088 | ---- | C] () -- C:\Windows\SysNative\drivers\HpqRemHid.sys
[2010-06-29 23:27:31 | 000,346,112 | ---- | C] () -- C:\Windows\SysNative\UCI64A27.dll
[2010-06-29 23:27:30 | 002,177,536 | ---- | C] () -- C:\Windows\SysNative\CnxtAp64.dll
[2010-06-29 23:27:30 | 000,222,720 | ---- | C] () -- C:\Windows\SysNative\drivers\CHDRT64.sys
[2010-06-29 23:13:08 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_00_00.Wdf
[2010-06-29 20:09:15 | 000,001,460 | ---- | C] () -- C:\Users\Ici\AppData\Local\d3d9caps64.dat
[2010-06-29 20:09:13 | 000,000,020 | -HS- | C] () -- C:\Users\Ici\ntuser.ini
[2010-06-29 20:09:12 | 001,572,864 | -HS- | C] () -- C:\Users\Ici\NTUSER.DAT
[2010-06-29 20:09:12 | 000,524,288 | -HS- | C] () -- C:\Users\Ici\NTUSER.DAT{a7bdf3ed-6a85-11db-b5ae-f1534be43d84}.TMContainer00000000000000000002.regtrans-ms
[2010-06-29 20:09:12 | 000,524,288 | -HS- | C] () -- C:\Users\Ici\NTUSER.DAT{a7bdf3ed-6a85-11db-b5ae-f1534be43d84}.TMContainer00000000000000000001.regtrans-ms
[2010-06-29 20:09:12 | 000,262,144 | -H-- | C] () -- C:\Users\Ici\ntuser.dat.LOG1
[2010-06-29 20:09:12 | 000,065,536 | -HS- | C] () -- C:\Users\Ici\NTUSER.DAT{a7bdf3ed-6a85-11db-b5ae-f1534be43d84}.TM.blf
[2010-06-29 20:09:12 | 000,000,000 | -H-- | C] () -- C:\Users\Ici\ntuser.dat.LOG2
[2008-10-07 09:13:30 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll
[2008-10-07 09:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
[2008-01-21 04:49:10 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini
[2008-01-21 04:48:56 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll

[color=#E56717]========== LOP Check ==========[/color]

[2010-07-17 13:10:38 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\DAEMON Tools
[2010-07-17 22:09:25 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\DAEMON Tools Lite
[2010-07-17 13:10:38 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\DAEMON Tools Pro
[2010-07-25 10:00:20 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\Gadu-Gadu 10
[2010-08-04 19:44:00 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\GetRightToGo
[2010-07-16 23:27:51 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\OpenFM
[2010-07-10 19:22:04 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\PhotoFiltre
[2010-08-05 23:38:40 | 000,000,000 | ---D | M] -- C:\Users\Ici\AppData\Roaming\uTorrent
[2010-08-05 23:25:37 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]


[color=#A23BEC]< %systemdrive%\*.* >[/color]
[2010-08-03 23:19:53 | 000,046,104 | ---- | M] () -- C:\20100803__23_11_59.mp3
[2010-06-29 23:36:42 | 000,000,086 | ---- | M] () -- C:\bcmwl6.log
[2010-07-05 14:00:03 | 000,000,216 | ---- | M] () -- C:\DebugTrace-RockallDLL.log
[2010-08-05 23:27:50 | 2146,418,688 | -HS- | M] () -- C:\hiberfil.sys
[2010-08-05 23:27:49 | 2460,139,520 | -HS- | M] () -- C:\pagefile.sys


[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2008-01-21 04:45:58 | 000,064,568 | ---- | M] (Microsoft Corporation) MD5=F6F6793B7F17B550ECFDBD3B229173F7 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_163188bf770e4ab0\AGP440.sys

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2008-01-21 04:45:58 | 000,022,584 | ---- | M] (Microsoft Corporation) MD5=1898FAE8E07D97F2F6C2D5326C633FAC -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_3956c39dd9e73fd2\atapi.sys

[color=#A23BEC]< MD5 for: CDROM.SYS >[/color]
[2008-01-21 04:46:02 | 000,079,872 | ---- | M] (Microsoft Corporation) MD5=3B2FB35363423ED60C8FBF15FC8680BD -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.0.6001.18000_none_bbc7f7665c24db80\cdrom.sys

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2008-01-21 04:49:41 | 000,739,384 | ---- | M] (Microsoft Corporation) MD5=2A2EE457AF36C5C9A6808C768BD3A12B -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.0.6001.18000_none_03e5c74ad46c7e4e\ndis.sys

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2008-01-21 04:48:54 | 000,406,016 | ---- | M] (Microsoft Corporation) MD5=856491FCED98093D824B9EB2892F564A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_cbe19c9a8d4eed2b\winlogon.exe
[2008-01-21 04:49:41 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\SysWOW64\winlogon.exe
[2008-01-21 04:49:41 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\SysWOW64\winlogon.exe
[2008-01-21 04:49:41 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
< End of report >[/log]
[log]OTL Extras logfile created on: 2010-08-05 23:37:19 - Run 1
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\Ici\Downloads
64bit-Windows Vista Ultimate Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 54,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 72,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 40,00 Gb Total Space | 15,83 Gb Free Space | 39,58% Space Free | Partition Type: NTFS
Drive D: | 100,42 Gb Total Space | 62,37 Gb Free Space | 62,11% Space Free | Partition Type: NTFS
Drive E: | 8,63 Gb Total Space | 2,71 Gb Free Space | 31,43% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
Drive I: | 3,69 Gb Total Space | 3,35 Gb Free Space | 90,82% Space Free | Partition Type: FAT32

Computer Name: ICI-PC
Current User Name: Ici
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 60 Days
Output = Standard

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-1123888075-993420022-2315263779-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[color=#E56717]========== Shell Spawning ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" ()
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l ()
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" File not found
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" File not found
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = C2 FE 8D 6A DC 5B C8 01 [binary data]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[color=#E56717]========== Authorized Applications List ==========[/color]


[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0BB53618-6481-42EF-8121-6274551A5663}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{3293A086-D973-47DB-B099-1BBB868F673F}" = lport=137 | protocol=17 | dir=in | app=system |
"{4A1A3D4B-9979-4EC2-8CC5-F9DDF57E04A7}" = lport=138 | protocol=17 | dir=in | app=system |
"{4EE2E4E1-B678-43B2-AF0B-82456E367379}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{6079E450-1A06-466E-A64D-FEBF0B80D259}" = rport=139 | protocol=6 | dir=out | app=system |
"{724E0F85-4AE9-4419-A568-B6F6494033DD}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{78B64453-92A8-487B-AE4D-C57966023528}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{89D8AA55-E190-413B-B954-CB7B5F11D55C}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{90306FCD-A22F-4E5C-9655-539C2018A113}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{99EE6B57-3FD4-48AF-B2E2-354FC15CFA12}" = lport=445 | protocol=6 | dir=in | app=system |
"{AC4FB3E3-1C8B-4E07-8949-1C2A09A3806F}" = rport=137 | protocol=17 | dir=out | app=system |
"{B66E4A58-77FE-4836-9434-E1BEC74A01F5}" = lport=139 | protocol=6 | dir=in | app=system |
"{B8601D5D-83C8-41F0-A96C-34045B9E0141}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{BCD9788C-0876-4704-9F66-05AF9A10DDC9}" = rport=445 | protocol=6 | dir=out | app=system |
"{CC820B1D-B620-48E9-AAEF-2526BB1AE384}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{D104E5C5-2892-4EC4-BD00-B07ACA96C1E9}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{D816AB97-4B89-4A1F-8E2F-3E8C919CEE48}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{F938EC92-967E-4E8F-8417-05E06E14F41F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{FE7850AA-19A1-490E-B241-59396805A3DF}" = rport=138 | protocol=17 | dir=out | app=system |

[color=#E56717]========== Vista Active Application Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{04A63FBA-539A-4D05-9225-44A2A5BFD53D}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{07F7E21E-DF86-4DAA-8F84-37B25B474289}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{0880A45A-C597-4385-BF6D-6C179ABAEEBB}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{0B63F228-0EFC-4727-82AA-6DEBB1CAE7E0}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{19DBD02E-79D0-4578-B159-67DA76A344F9}" = protocol=17 | dir=in | app=d:\program files (x86)\utorrent\utorrent.exe |
"{1A8E1098-D689-4A88-9282-EA49FDB5FF29}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{2069D4D6-BE80-4CA0-9A20-F36567337D77}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{2229CC0D-F355-4F42-B428-D9893A6B9B76}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{24C84CB5-E7F4-49BF-A49D-6B1075A9D475}" = dir=in | app=c:\program files (x86)\skype\plugin manager\skypepm.exe |
"{266A0793-B8D6-4C87-803D-2FDF937216E5}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{2707FE8D-E0A2-44DE-ACD3-A043A42FC34E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{27ED25A8-69CA-4751-B278-7CBB853ABB6F}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{2BD2BB70-7401-475F-B5FD-4A0F6DE9B555}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{4454898F-834F-48D5-B3EF-AA217DDC5A48}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{45542BC0-40AB-4C79-86CE-7977633D41F5}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{4633EE94-2735-405E-B110-54B8A0152DC7}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{46777491-7FC9-455C-8E6E-700460986678}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{47138CCF-7DA7-41C7-9AD3-ED1AE9EEF1A5}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{49C95022-FE44-4AA4-9200-DC1E704C2446}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{4B21B124-5D05-4A71-AFE1-827DD0C66EB8}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{500A87B1-C56C-44B3-911E-0EADE911576A}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{50887876-A4DF-4E11-8A6D-2FDA28F3B743}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{51B98862-F867-434A-B098-8B46E077369C}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{5BD0FA89-6388-4283-84E3-B71CE27D555B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{60C3242B-5123-4765-99C9-E06DC4CF6064}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{693B04B4-D4CC-4437-A8C3-FA13AAE90C9B}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{6AD71C36-0530-453F-B2F9-8117403EEE4E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{76105BFB-3757-416C-9D59-39A34C763C97}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{78A6D17A-FC2D-4C5F-81D6-F903194EAD93}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{7BB4ED35-263B-4072-A684-2220B839028D}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{7EA4F62A-38B2-4D6C-9B28-6FFD9D8F8B31}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{7F0719FE-6F77-46A1-9BD5-78F5E607B041}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{89476CEB-BA6D-4C2D-B74A-F22FE5FAF568}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{9D14033B-DCAD-41E7-9069-157EEAD1DA8B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{AD2F1B88-2E2A-4F12-8257-445EFE9AD9D3}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{B0916CB3-8211-4743-A142-BB1FF3955963}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{B5E0E1A2-D5B5-47F6-AD2C-D9DE50C29E62}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{C9AA1670-3127-49FF-BBDD-45D8F8D1D780}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{CDCAE0AC-3200-4C5C-82C7-8DA5BE9DB448}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{CF7483F3-23B2-499A-BCD4-817433BB3B2B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{D3407686-95F5-451D-935C-C3A09CB25D70}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{D47E59DB-6C44-4260-9B74-39051EF1532E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{D757E356-FB12-412C-B9C6-C2B183311349}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{DB817A5B-8C5E-4817-AE06-2F899200F880}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{DF2187D7-A525-4787-A208-4759B45A524F}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{E2640950-3746-4DDD-B314-8F7B9E297FAB}" = protocol=6 | dir=in | app=d:\program files (x86)\utorrent\utorrent.exe |
"{E8D89ECD-A52C-440B-8D6C-6969FEA99219}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{EC5F686E-BA9D-4510-B420-B8A37B64E9B0}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{EDFB27BC-A2AB-4153-B6D0-F5CFF1796DB9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{F6405186-5DA0-4597-AABF-636B40C6B075}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"TCP Query User{1F45D2B3-429C-4F2A-899F-5D963DC7173B}D:\program files (x86)\garena\garena.exe" = protocol=6 | dir=in | app=d:\program files (x86)\garena\garena.exe |
"TCP Query User{453E9F16-A216-4D1D-B0A0-A4E6F7FF43A7}C:\program files (x86)\axesstel\axessmanager\axessmanager.exe" = protocol=6 | dir=in | app=c:\program files (x86)\axesstel\axessmanager\axessmanager.exe |
"TCP Query User{5C66F08E-946E-415B-8DD6-15F40FAF35F9}D:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe" = protocol=6 | dir=in | app=d:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe |
"TCP Query User{5CE0534E-F310-483B-B7B0-0D7F9562B58E}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe |
"TCP Query User{658F1C8B-11A5-4828-85CD-87A1CC896954}D:\program files (x86)\garena\garena.exe" = protocol=6 | dir=in | app=d:\program files (x86)\garena\garena.exe |
"TCP Query User{67509906-4A68-410F-B644-99AA26199DD4}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe |
"TCP Query User{B7E2DA26-2366-440F-8423-CD17033FD76F}D:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe" = protocol=6 | dir=in | app=d:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe |
"UDP Query User{1998E567-30F1-4058-87FE-77519FC08736}D:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe" = protocol=17 | dir=in | app=d:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe |
"UDP Query User{57A2F6F6-A068-4925-9575-2CD63008B996}D:\program files (x86)\garena\garena.exe" = protocol=17 | dir=in | app=d:\program files (x86)\garena\garena.exe |
"UDP Query User{6E1240CA-FD2B-48C9-93FB-FDBF4267115B}C:\program files (x86)\axesstel\axessmanager\axessmanager.exe" = protocol=17 | dir=in | app=c:\program files (x86)\axesstel\axessmanager\axessmanager.exe |
"UDP Query User{6F6C0564-BED7-4F18-A3F5-192823D236A9}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe |
"UDP Query User{8F1A20F4-AFD1-4162-A68A-8F98B47B1A96}C:\program files (x86)\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files (x86)\gadu-gadu 10\gg.exe |
"UDP Query User{AC0BAD8E-CE5C-4127-B89F-1F2C1C1F662D}D:\program files (x86)\garena\garena.exe" = protocol=17 | dir=in | app=d:\program files (x86)\garena\garena.exe |
"UDP Query User{ADA957D9-D9B3-45F1-A0AF-F28BA5209FB6}D:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe" = protocol=17 | dir=in | app=d:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe |

[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2007
"CNXT_AUDIO_HDA" = Conexant HD Audio
"NVIDIA Drivers" = NVIDIA Drivers
"PCSI" = Prevx
"WinRAR archiver" = Archiwizator WinRAR

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{076A6FD8-EE45-4A83-B3C9-C7C34E7CAFDD}" = Lineage II
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F61E0B1-1AB8-F15E-07C4-46D100A1D3F7}" = Borderlands
"{23D51AF4-E674-4F4C-A937-F98E458A37AB}_is1" = Testy B 2010a
"{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons 6.40 H2
"{40DB1A09-646F-4F68-8524-4DEB27790E23}" = Under Lock and Key
"{415B2719-AD3A-4944-B404-C472DB6085B3}" = Cisco EAP-FAST Module
"{4640FDE1-B83A-4376-84ED-86F86BEE2D41}" = Driver Detective
"{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}" = Cisco PEAP Module
"{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III
"{83770D14-21B9-44B3-8689-F7B523F94560}" = Cisco LEAP Module
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169, 8168, 8101E and 8102E Ethernet Network Card Driver for Windows Vista
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{B52D7A21-03E5-4C0C-82FA-FD8EB4C92149}" = AxessManager
"{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Atheros Driver Installation Program
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D56B0E27-4A3E-46C9-B5C1-D93D580C099C}" = NVIDIA PhysX v8.10.29
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"avast5" = avast! Pro Antivirus
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Foxit Reader" = Foxit Reader
"Gadu-Gadu 10" = Gadu-Gadu 10
"Garena" = Garena 2010
"InstallShield_{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III
"Mozilla Firefox (3.6.8)" = Mozilla Firefox (3.6.8)
"Niezbędnik CD_is1" = Niezbędnik CD
"Rzeźnik MPEGów 1.1.99_is1" = Rzeźnik MPEGów 1.1.99
"ST5UNST #1" = Twój Niezbednik
"SubEdit-Player_is1" = SubEdit-Player
"uTorrent" = µTorrent

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-21-1123888075-993420022-2315263779-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"PhotoFiltre" = PhotoFiltre

[color=#E56717]========== Last 10 Event Log Errors ==========[/color]

[ Application Events ]
Error - 2010-08-04 14:04:04 | Computer Name = Ici-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 2010-08-04 14:04:04 | Computer Name = Ici-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 2010-08-04 14:04:04 | Computer Name = Ici-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 2010-08-04 14:04:05 | Computer Name = Ici-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 2010-08-04 14:04:05 | Computer Name = Ici-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 2010-08-04 14:04:05 | Computer Name = Ici-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 2010-08-04 14:04:06 | Computer Name = Ici-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 2010-08-05 15:19:38 | Computer Name = Ici-PC | Source = WinMgmt | ID = 10
Description =

Error - 2010-08-05 17:23:45 | Computer Name = Ici-PC | Source = Application Hang | ID = 1002
Description = Program OTL.exe w wersji 3.2.9.1 zatrzymał interakcję z systemem Windows
i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących
tego problemu, sprawdź historię problemu w panelu sterowania raportami i rozwiązaniami
problemów. Identyfikator procesu: be0 Godzina rozpoczęcia: 01cb34e3b6135560 Godzina
zakończenia: 11

Error - 2010-08-05 17:28:45 | Computer Name = Ici-PC | Source = WinMgmt | ID = 10
Description =


[color=#E56717]========== Last 10 Event Log Errors ==========[/color]

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >[/log]


[color="#FF0000"]//Co też nie znaczy że wcinamy się komuś w wątek. :)
//Wydzielam
//Tomek01[/color]

Sohei
komentarz
komentarz

[code]:Processes
Explorer.exe



:OTL




:files
O4 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000..\Run: [kaiez] C:\Users\Ici\kaiez.exe File not found
O4 - HKU\S-1-5-21-1123888075-993420022-2315263779-1000..\Run: [mhrih] C:\Users\Ici\mhrih.exe File not found
O33 - MountPoints2\{87117487-9249-11df-a218-001e681aa37d}\Shell - "" = AutoRun
O33 - MountPoints2\{87117487-9249-11df-a218-001e681aa37d}\Shell\AutoRun\command - "" = H:\SETUP.EXE -- File not found
O33 - MountPoints2\{87117487-9249-11df-a218-001e681aa37d}\Shell\configure\command - "" = H:\SETUP.EXE -- File not found
O33 - MountPoints2\{87117487-9249-11df-a218-001e681aa37d}\Shell\install\command - "" = H:\SETUP.EXE -- File not found
O33 - MountPoints2\{89aef67b-9189-11df-b113-001e681aa37d}\Shell - "" = AutoRun
O33 - MountPoints2\{89aef67b-9189-11df-b113-001e681aa37d}\Shell\AutoRun\command - "" = G:\Borderlands.exe -- File not found
O33 - MountPoints2\{d880e424-8428-11df-b70a-001e681aa37d}\Shell - "" = Autorun
[2010-08-05 23:28:56 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMt3596.html
[2010-08-05 23:28:56 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGQ3596.html
[2010-08-05 23:24:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempKu1364.html
[2010-08-05 23:24:16 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaJ1364.html
[2010-08-04 23:34:59 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZk1160.html
[2010-08-04 23:34:59 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemplU1160.html
[2010-08-04 11:38:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempnk2940.html
[2010-08-04 11:38:21 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHR2940.html
[2010-08-04 00:18:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFa1892.html
[2010-08-03 21:10:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZn2780.html
[2010-08-03 17:43:35 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGn1132.html
[2010-08-03 17:43:22 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempoY1132.html
[2010-08-03 11:32:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcV2732.html
[2010-08-03 11:32:41 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDv2732.html
[2010-08-02 23:18:18 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFeG700.html
[2010-08-02 20:18:23 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempro2728.html
[2010-08-02 20:17:31 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempAl2728.html
[2010-08-02 20:17:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQB3468.html
[2010-08-02 20:02:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUT2844.html
[2010-08-02 19:27:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempOo2844.html
[2010-08-02 18:39:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempwWK948.html
[2010-08-01 22:16:53 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempsQ1992.html
[2010-08-01 22:16:53 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDZ1992.html
[2010-07-31 19:18:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempndm328.html
[2010-07-31 19:18:10 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvRv328.html
[2010-07-31 17:16:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDb3096.html
[2010-07-31 13:21:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNO2680.html
[2010-07-31 13:21:16 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempkF2680.html

[2010-07-30 22:35:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZU3648.html
[2010-07-30 22:35:47 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgz3648.html
[2010-07-30 20:05:33 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZi2964.html
[2010-07-30 19:24:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempLx2964.html
[2010-07-30 16:52:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIi3100.html
[2010-07-30 16:52:29 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPl3100.html
[2010-07-30 10:45:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRel972.html
[2010-07-30 08:40:31 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempToK972.html
[2010-07-30 01:31:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGG1160.html
[2010-07-30 01:31:04 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempcc1160.html
[2010-07-29 18:12:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRI2712.html
[2010-07-29 17:15:52 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempqU3940.html
[2010-07-29 14:00:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZy3940.html
[2010-07-29 13:01:28 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXS3120.html
[2010-07-29 13:01:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempqB3120.html
[2010-07-29 00:07:22 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBf3020.html
[2010-07-29 00:07:22 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempbU3020.html
[2010-07-28 20:47:59 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHZ3020.html
[2010-07-28 18:37:04 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQV4000.html
[2010-07-28 18:24:09 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempdM4000.html
[2010-07-28 15:28:35 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempKk3212.html
[2010-07-28 15:12:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempTf3212.html
[2010-07-28 12:18:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempuC3100.html
[2010-07-28 10:56:27 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJp3100.html
[2010-07-27 22:26:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempqB2768.html

[2010-07-27 21:05:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQZO800.html
[2010-07-27 21:05:21 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempsGm800.html

[2010-07-27 16:42:35 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXqd800.html
[2010-07-27 14:43:58 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFzI800.html
[2010-07-27 12:58:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempTI2788.html
[2010-07-27 12:56:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXw2788.html
[2010-07-26 23:02:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBJ1732.html
[2010-07-26 23:02:17 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempjP1732.html
[2010-07-26 19:05:57 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaQ3984.html
[2010-07-26 19:05:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBD3948.html
[2010-07-26 17:13:14 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIV3948.html
[2010-07-26 16:52:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempkN3116.html
[2010-07-26 15:55:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempwx3116.html
[2010-07-26 15:16:50 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Templi3116.html
[2010-07-25 23:06:52 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZK2164.html
[2010-07-25 23:06:52 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxK2164.html
[2010-07-25 18:09:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBN2448.html
[2010-07-25 18:09:36 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphI2448.html
[2010-07-25 16:03:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphG3348.html
[2010-07-25 14:18:27 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFn3348.html
[2010-07-25 12:13:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvY3348.html
[2010-07-25 10:47:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphS3348.html
[2010-07-25 10:00:20 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempuU3348.html
[2010-07-24 23:26:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempZR3108.html
[2010-07-24 23:26:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempeg3108.html
[2010-07-24 23:07:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempwo3108.html

[2010-07-24 16:47:14 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempzW2736.html
[2010-07-24 16:47:14 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNl2736.html
[2010-07-24 14:45:04 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempio2892.html
[2010-07-24 13:40:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempYb2892.html
[2010-07-23 21:43:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFi3060.html
[2010-07-23 12:58:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempnh3060.html
[2010-07-23 12:58:00 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIb3060.html
[2010-07-22 17:26:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDPY412.html
[2010-07-22 14:34:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemppjW412.html
[2010-07-22 12:58:53 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempdp1996.html
[2010-07-21 22:02:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempyO2872.html
[2010-07-21 22:02:38 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHV2872.html
[2010-07-21 21:48:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempInl732.html
[2010-07-21 21:25:12 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempApN732.html
[2010-07-21 18:21:40 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempqw2084.html
[2010-07-21 18:21:40 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJL2084.html
[2010-07-21 18:17:45 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempzy2696.html
[2010-07-21 18:17:45 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgn2696.html
[2010-07-21 16:52:11 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temprl1320.html
[2010-07-21 16:52:11 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBm1320.html
[2010-07-21 13:58:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxE3176.html
[2010-07-21 13:20:04 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgt3744.html
[2010-07-21 12:40:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFx3744.html
[2010-07-21 12:38:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempfS3568.html
[2010-07-21 11:41:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcW3568.html
[2010-07-21 11:25:48 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempwC2908.html
[2010-07-21 11:08:08 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGE2908.html
[2010-07-20 16:07:08 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempxn3096.html
[2010-07-20 16:00:15 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempka1360.html
[2010-07-20 16:00:15 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempvj1360.html
[2010-07-20 10:59:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempid2992.html
[2010-07-20 10:59:17 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempqn2992.html
[2010-07-20 10:52:46 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempfx2832.html
[2010-07-20 10:52:46 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempxz2832.html
[2010-07-20 01:16:22 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFi1612.html
[2010-07-19 12:43:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempzq2596.html
[2010-07-19 12:43:36 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temple2596.html
[2010-07-19 02:31:57 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempFl2480.html
[2010-07-18 15:36:09 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempax3092.html
[2010-07-18 15:36:09 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempbh3092.html
[2010-07-17 23:24:30 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJD2440.html
[2010-07-17 23:24:30 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temppk2440.html
[2010-07-17 18:04:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJxD788.html
[2010-07-17 18:04:40 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEKZ788.html
[2010-07-17 17:00:39 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSZ3008.html
[2010-07-17 17:00:39 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemppU3008.html
[2010-07-17 15:44:16 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempWw2944.html
[2010-07-17 15:44:16 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcS2944.html
[2010-07-17 15:34:14 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJB2944.html
[2010-07-17 15:34:14 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempBr2944.html
[2010-07-17 14:05:15 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempzg2928.html
[2010-07-17 14:05:15 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGa2928.html
[2010-07-17 13:10:44 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempyT2932.html
[2010-07-17 13:10:44 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHi2932.html
[2010-07-17 13:07:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCw3004.html
[2010-07-17 13:07:51 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temphz3004.html
[2010-07-17 08:55:22 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQY2924.html
[2010-07-17 08:55:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNk2924.html
[2010-07-17 02:12:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCq2896.html
[2010-07-15 21:50:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNl2944.html
[2010-07-15 17:30:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempsv2924.html
[2010-07-15 17:30:29 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempLK2924.html
[2010-07-15 12:38:35 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRt2848.html
[2010-07-15 12:38:35 | 000,000,000 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPI2848.html
[2010-07-12 15:43:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIC3940.html
[2010-07-12 14:52:58 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempag2880.html
[2010-07-12 14:31:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempjx2880.html
[2010-07-12 12:52:38 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXR2836.html
010-07-14 21:30:49 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPN2848.html
[2010-07-14 21:20:38 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUA2848.html
[2010-07-14 17:52:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempbF2244.html
[2010-07-14 15:26:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempAy2244.html
[2010-07-14 14:59:30 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempzO3656.html
[2010-07-14 12:58:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNg3656.html
[2010-07-14 10:57:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempcb2828.html
[2010-07-14 10:57:24 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempyq2828.html
[2010-07-13 23:54:12 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempmC3972.html
[2010-07-13 23:54:12 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempdb3972.html
[2010-07-13 23:30:11 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Templo3884.html
[2010-07-13 23:28:20 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempOV3884.html
[2010-07-13 21:35:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHd2864.html
[2010-07-13 19:41:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempwx2864.html
[2010-07-13 18:42:37 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNN2864.html
[2010-07-13 16:04:39 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempuA2864.html
[2010-07-13 15:45:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempWx2796.html
[2010-07-13 13:28:31 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempmV2912.html
[2010-07-13 13:24:59 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempzW2912.html
[2010-07-13 13:24:37 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPk2828.html
[2010-07-13 13:16:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNB2828.html
[2010-07-13 11:51:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempfC2672.html
[2010-07-13 11:45:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEe2672.html
[2010-07-13 10:15:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGI2804.html
[2010-07-12 23:43:20 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempVC3032.html
[2010-07-12 21:49:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temptv3172.html
[2010-07-12 19:14:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcX3172.html
[2010-07-12 18:32:48 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxJ2756.html
[2010-07-12 17:53:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempTp2756.html
[2010-07-12 12:26:06 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempLN2836.html
[2010-07-12 12:14:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPL2264.html
[2010-07-12 11:36:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempoo2784.html
[2010-07-12 11:06:11 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMH2784.html
[2010-07-12 10:39:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHx3872.html
[2010-07-12 10:37:09 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempiv3872.html
[2010-07-12 00:17:37 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvL2852.html
[2010-07-12 00:17:37 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgn2852.html
[2010-07-11 20:19:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaX2800.html
[2010-07-11 20:13:30 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIo2800.html
[2010-07-11 11:43:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemppE3656.html
[2010-07-11 11:31:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMj3656.html
[2010-07-11 11:18:23 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSY2820.html
[2010-07-11 11:04:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRp2820.html
[2010-07-11 10:27:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempwVB356.html
[2010-07-11 10:21:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaI2760.html
[2010-07-11 10:06:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUh2760.html
[2010-07-10 21:39:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRZ2580.html
[2010-07-10 21:31:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSe2580.html
[2010-07-10 21:30:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSJ3296.html
[2010-07-10 20:36:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPX3296.html
[2010-07-10 19:40:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempzN2484.html
[2010-07-10 19:38:11 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphP2484.html
[2010-07-10 19:37:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempdB2824.html
[2010-07-10 18:54:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphC2824.html
[2010-07-10 18:08:33 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemphB3704.html
[2010-07-10 18:08:33 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGL3704.html
[2010-07-10 16:39:22 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempgj3704.html
[2010-07-10 15:30:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHI2896.html
[2010-07-10 15:07:28 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempYg2896.html
[2010-07-10 15:00:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempit2808.html
[2010-07-10 12:48:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempVt2808.html
[2010-07-09 23:48:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMFF792.html
[2010-07-09 23:48:06 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxWo792.html
[2010-07-09 23:43:28 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEli472.html
[2010-07-09 23:20:49 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSte472.html
[2010-07-09 23:15:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempVB3620.html
[2010-07-09 22:21:45 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxG3620.html
[2010-07-09 18:12:21 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempsj3620.html
[2010-07-09 17:00:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemprK3620.html
[2010-07-09 14:37:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDq3620.html
[2010-07-09 13:26:28 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempup3620.html
[2010-07-09 11:44:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaK2780.html
[2010-07-09 11:15:08 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemplP2780.html
[2010-07-08 22:50:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPw3016.html
[2010-07-08 20:39:31 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNIV176.html
[2010-07-08 19:18:33 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGvQ176.html
[2010-07-08 18:43:46 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCrR472.html
[2010-07-08 18:10:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCbD472.html
[2010-07-08 17:58:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempdi3888.html
[2010-07-08 17:12:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempKv3888.html
[2010-07-08 16:04:52 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXS2872.html
[2010-07-08 12:59:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaU2872.html
[2010-07-07 23:38:34 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempjW1852.html
[2010-07-07 23:09:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMQ1852.html
[2010-07-07 23:03:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempjK2380.html
[2010-07-07 22:24:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempum2872.html
[2010-07-07 22:03:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempVt2872.html
[2010-07-07 13:23:46 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempno3468.html
[2010-07-07 13:22:36 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Templw3468.html
[2010-07-07 12:53:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempeH2892.html
[2010-07-07 11:34:05 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQr2892.html
[2010-07-07 10:47:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempeG3292.html
[2010-07-07 10:47:55 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempAA3292.html
[2010-07-07 10:31:42 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIL3292.html
[2010-07-07 10:21:07 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempAW2884.html
[2010-07-07 10:21:07 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemppJ2884.html
[2010-07-06 21:58:48 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempdc2720.html
[2010-07-06 21:58:48 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCz2720.html
[2010-07-06 20:38:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJI2132.html
[2010-07-06 18:29:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempxj2932.html
[2010-07-06 17:41:23 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcI2932.html
[2010-07-06 16:07:01 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempSE3340.html
[2010-07-06 16:04:35 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempGd2520.html
[2010-07-06 14:54:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempwB2520.html
[2010-07-06 12:55:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvT1476.html
[2010-07-06 11:48:39 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempuz1476.html
[2010-07-06 10:36:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempnb2976.html
[2010-07-06 10:23:44 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDl2976.html
[2010-07-06 00:01:56 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempfz3736.html
[2010-07-05 22:25:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempWg3736.html
[2010-07-05 22:22:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempxn2392.html
[2010-07-05 22:05:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemprO2940.html
[2010-07-05 20:30:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCG2940.html
[2010-07-05 18:35:50 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPO2996.html
[2010-07-05 15:45:25 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempWE2996.html
[2010-07-05 12:47:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCz2864.html
[2010-07-04 23:40:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemptI1984.html
[2010-07-04 23:39:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempnn1984.html
[2010-07-04 20:35:57 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempil4056.html
[2010-07-04 20:20:41 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempul4056.html
[2010-07-04 20:18:57 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEd3532.html
[2010-07-04 20:03:13 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Temphq3532.html
[2010-07-04 17:16:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJw2100.html
[2010-07-04 17:02:18 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempkk2100.html
[2010-07-04 16:41:02 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDH2900.html
[2010-07-04 16:02:16 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempcH2900.html
[2010-07-04 13:58:15 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempjB3376.html
[2010-07-04 13:55:51 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMh3376.html
[2010-07-04 13:47:56 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEF2864.html
[2010-07-04 09:34:58 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemprR1904.html
[2010-07-04 08:34:59 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempEv1904.html
[2010-07-04 08:34:48 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempQA1904.html
[2010-07-04 08:17:32 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempXA2720.html
[2010-07-04 00:25:40 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempPC2908.html
[2010-07-03 22:40:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNy2908.html
[2010-07-03 16:11:02 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUi2908.html
[2010-07-03 14:11:24 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempub2908.html
[2010-07-02 23:48:18 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNd3880.html
[2010-07-02 23:48:18 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemptX3880.html
[2010-07-02 21:03:02 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempvT3880.html
[2010-07-02 20:18:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempmX3232.html
[2010-07-02 19:59:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempLx3232.html
[2010-07-02 19:57:58 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempMG3232.html
[2010-07-02 16:45:19 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempob2808.html
[2010-07-02 14:41:39 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempxC4024.html
[2010-07-02 14:41:39 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempDu4024.html
[2010-07-02 14:18:03 | 000,000,134 | RHS- | M] () -- C:\Windows\SysWow64\autorun.inf
[2010-07-02 14:11:52 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempwx3592.html
[2010-07-02 11:48:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempvv3592.html
[2010-07-02 11:34:37 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHr2836.html
[2010-07-02 00:36:55 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempft3696.html
[2010-07-01 23:15:00 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempNz2324.html
[2010-07-01 21:14:50 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempCa1672.html
[2010-07-01 20:11:43 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TemprM2444.html
[2010-07-01 18:57:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Templn2728.html
[2010-07-01 18:57:08 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempHA2728.html
[2010-07-01 18:56:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempIE2728.html
[2010-07-01 16:43:10 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempff2600.html
[2010-07-01 15:19:54 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempsI3856.html
[2010-07-01 15:19:54 | 000,002,089 | ---- | M] () -- C:\Users\Ici\AppData\Local\Tempty3856.html
[2010-07-01 13:12:14 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempRr1116.html
[2010-07-01 13:12:14 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempJz1116.html

[2010-07-01 12:33:29 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempOS1116.html
[2010-07-01 10:26:33 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempUU2384.html
[2010-07-01 10:23:17 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempaU2704.html
[2010-06-30 17:24:47 | 000,002,432 | ---- | M] () -- C:\Users\Ici\AppData\Local\TempES3936.html


:Commands
[emptytemp]
[start explorer]
[Reboot][/code]
Wklejasz to do OTL w białe okienko i klikasz run fix.
Wykonaj pełny skan [url=http://dobreprogramy.pl/index.php?dz=2&id=1998][b]DR WEB CureIt[/b][/url]
Wykonaj pełny skan[url=http://www.dobreprogramy.pl/Malwarebytes-AntiMalware,Program,Windows,13117.html][b]MBAM[/b][/url]
Co znajda usun po czym daj logi z usuwania + nowy log OTL

Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!

Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.

×
×
  • Dodaj nową pozycję...

Powiadomienie o plikach cookie

Strona wykorzystuje pliki cookies w celu prawidłowego świadczenia usług i wygody użytkowników. Warunki przechowywania i dostępu do plików cookies możesz zmienić w ustawieniach przeglądarki.