Nefrum utworzono 28 sierpnia 2010 utworzono 28 sierpnia 2010 Cześć Dziś zauważyłem 2 procesy o nazwie "shell.exe" oraz "csrss.exe" nie mam pojęcia skąd się wzieły. [log]OTL logfile created on: 2010-08-28 16:59:29 - Run 2 OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\Tomek\Downloads 64bit- Enterprise Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 63,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 83,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 148,95 Gb Total Space | 81,49 Gb Free Space | 54,71% Space Free | Partition Type: NTFS Drive D: | 149,04 Gb Total Space | 117,32 Gb Free Space | 78,72% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: DOM Current User Name: Tomek Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 60 Days Output = Standard [color=#E56717]========== Processes (All) ==========[/color] PRC - [2010-08-14 10:34:41 | 000,135,664 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe PRC - [2010-08-07 11:53:41 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Tomek\Downloads\OTL.exe PRC - [2010-07-23 04:15:35 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2010-07-23 04:15:35 | 000,014,808 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe PRC - [2010-04-07 21:07:24 | 000,810,120 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe PRC - [2009-07-14 03:14:16 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ctfmon.exe [color=#E56717]========== Modules (All) ==========[/color] MOD - [2010-08-07 11:53:41 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Tomek\Downloads\OTL.exe MOD - [2010-08-06 21:35:43 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll MOD - [2009-07-14 03:17:51 | 001,289,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll MOD - [2009-07-14 03:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll MOD - [2009-07-14 03:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll MOD - [2009-07-14 03:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll MOD - [2009-07-14 03:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll MOD - [2009-07-14 03:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll MOD - [2009-07-14 03:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll MOD - [2009-07-14 03:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll MOD - [2009-07-14 03:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll MOD - [2009-07-14 03:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll MOD - [2009-07-14 03:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll MOD - [2009-07-14 03:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll MOD - [2009-07-14 03:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll MOD - [2009-07-14 03:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll MOD - [2009-07-14 03:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll MOD - [2009-07-14 03:16:13 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll MOD - [2009-07-14 03:16:12 | 001,412,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll MOD - [2009-07-14 03:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll MOD - [2009-07-14 03:16:12 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll MOD - [2009-07-14 03:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll MOD - [2009-07-14 03:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll MOD - [2009-07-14 03:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll MOD - [2009-07-14 03:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll MOD - [2009-07-14 03:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll MOD - [2009-07-14 03:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll MOD - [2009-07-14 03:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll MOD - [2009-07-14 03:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll MOD - [2009-07-14 03:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll MOD - [2009-07-14 03:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2009-07-14 03:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll MOD - [2009-07-14 03:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll MOD - [2009-07-14 03:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll MOD - [2009-07-14 03:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll MOD - [2009-07-14 03:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll MOD - [2009-07-14 03:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll MOD - [2009-07-14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009-07-14 03:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv MOD - [2009-07-14 03:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll MOD - [2009-07-14 03:11:24 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll MOD - [2009-07-14 03:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll MOD - [2009-07-14 03:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll MOD - [2009-07-14 03:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll MOD - [2009-07-14 03:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll MOD - [2009-07-14 03:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll MOD - [2009-07-14 03:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll MOD - [2009-07-14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2010-05-27 11:44:54 | 002,608,904 | ---- | M] (Raxco Software, Inc.) [Auto | Running] -- C:\Program Files\Raxco\PerfectDisk\PDAgent.exe -- (PDAgent) SRV:[b]64bit:[/b] - [2010-05-27 11:44:44 | 002,259,208 | ---- | M] (Raxco Software, Inc.) [On_Demand | Running] -- C:\Program Files\Raxco\PerfectDisk\PDEngine.exe -- (PDEngine) SRV:[b]64bit:[/b] - [2010-04-07 21:10:42 | 000,042,336 | ---- | M] (ESET) [Disabled | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv) SRV:[b]64bit:[/b] - [2010-04-07 21:07:24 | 000,810,120 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn) SRV:[b]64bit:[/b] - [2010-01-22 03:01:12 | 000,202,752 | ---- | M] (AMD) [Disabled | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009-11-02 12:48:18 | 000,126,352 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost) SRV:[b]64bit:[/b] - [2009-09-21 16:24:40 | 001,420,560 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) SRV:[b]64bit:[/b] - [2009-09-21 16:00:44 | 000,831,760 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) SRV:[b]64bit:[/b] - [2009-07-14 03:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService) SRV:[b]64bit:[/b] - [2009-07-14 03:41:54 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\StorSvc.dll -- (StorSvc) SRV:[b]64bit:[/b] - [2009-07-14 03:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 03:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService) SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2009-03-27 12:10:16 | 000,016,896 | ---- | M] (LSI Corporation) [Disabled | Stopped] -- C:\Program Files\LSI SoftModem\agr64svc.exe -- (AgereModemAudio) SRV - [2010-08-20 08:42:22 | 000,407,336 | ---- | M] (Valve Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010-08-21 18:36:07 | 000,026,424 | --S- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DRIVER_BIN64 -- (DRIVER_B) DRV:[b]64bit:[/b] - [2010-08-08 13:45:50 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010-05-06 11:21:46 | 000,125,456 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV:[b]64bit:[/b] - [2010-04-07 21:08:30 | 000,050,600 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp) DRV:[b]64bit:[/b] - [2010-04-07 21:08:28 | 000,033,608 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\epfwndis.sys -- (Epfwndis) DRV:[b]64bit:[/b] - [2010-04-07 21:08:26 | 000,169,592 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw) DRV:[b]64bit:[/b] - [2010-04-07 21:07:10 | 000,139,704 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv) DRV:[b]64bit:[/b] - [2010-04-07 21:03:52 | 000,163,888 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm) DRV:[b]64bit:[/b] - [2010-01-22 03:13:24 | 006,233,088 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2010-01-22 03:13:24 | 006,233,088 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atipmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2010-01-22 02:07:56 | 000,161,280 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2009-11-11 17:44:26 | 000,034,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\point64k.sys -- (Point64) DRV:[b]64bit:[/b] - [2009-11-06 12:56:06 | 001,550,848 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009-11-02 12:48:02 | 000,013,784 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB) DRV:[b]64bit:[/b] - [2009-10-03 17:36:34 | 000,020,480 | ---- | M] (MotioninJoy) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MijUfilt.sys -- (MotioninJoyUSBFilter) DRV:[b]64bit:[/b] - [2009-09-17 06:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R) DRV:[b]64bit:[/b] - [2009-08-13 05:20:46 | 001,209,856 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem) DRV:[b]64bit:[/b] - [2009-08-05 22:43:58 | 000,320,040 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) Broadcom NetLink (TM) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 01:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap) DRV:[b]64bit:[/b] - [2009-07-14 01:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID) DRV:[b]64bit:[/b] - [2009-07-14 01:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC) DRV:[b]64bit:[/b] - [2009-06-24 12:23:24 | 000,205,472 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService) DRV:[b]64bit:[/b] - [2009-06-10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-05-24 13:57:42 | 000,243,760 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-4039863893-364985132-2430816299-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage IE - HKU\S-1-5-21-4039863893-364985132-2430816299-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198 FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.2.0185 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..network.proxy.type: 0 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-08-06 15:51:29 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-08-13 17:40:55 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010-08-07 09:42:18 | 000,000,000 | ---D | M] [2010-08-06 21:41:19 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\mozilla\Extensions [2010-08-28 12:08:45 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\mozilla\Firefox\Profiles\fixz9gmf.default\extensions [2010-08-08 13:46:11 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\mozilla\Firefox\Profiles\fixz9gmf.default\extensions\DTToolbar@toolbarnet.com [2010-08-08 13:46:07 | 000,002,059 | ---- | M] () -- C:\Users\Tomek\AppData\Roaming\Mozilla\FireFox\Profiles\fixz9gmf.default\searchplugins\daemon-search.xml [2010-08-09 18:58:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions [2010-08-06 16:02:46 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2010-08-09 18:58:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010-08-09 18:58:42 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2010-07-23 02:41:44 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2010-07-23 02:41:44 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2010-07-23 02:41:44 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2010-07-23 02:41:44 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2010-07-23 02:41:44 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2010-07-23 02:41:44 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2010-08-07 17:03:21 | 000,000,808 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3:[b]64bit:[/b] - HKU\S-1-5-21-4039863893-364985132-2430816299-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKU\S-1-5-21-4039863893-364985132-2430816299-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-4039863893-364985132-2430816299-1000..\Run: [DS3 Tool] C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe (www.motioninjoy.com) O4 - HKU\S-1-5-21-4039863893-364985132-2430816299-1000..\Run: [NetfMeter] C:\Windows\shell.exe (Microsoft) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O4 - Startup: C:\Users\Sławek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\YoWindow.lnk = C:\Program Files (x86)\YoWindow\yowindow.exe (Repkasoft) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 86.63.64.48 86.63.64.49 O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (systempropertiesperformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{a7a5d5f4-a2e2-11df-90b4-00262d96a4d0}\Shell - "" = AutoRun O33 - MountPoints2\{a7a5d5f4-a2e2-11df-90b4-00262d96a4d0}\Shell\AutoRun\command - "" = F:\autorun.exe -- File not found O34 - HKLM BootExecute: (PDBoot.exe) - File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) MsConfig:64bit - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) MsConfig:64bit - StartUpReg: [b]AmIcoSinglun64[/b] - hkey= - key= - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (AlcorMicro Co., Ltd.) MsConfig:64bit - StartUpReg: [b]Apoint[/b] - hkey= - key= - C:\Program Files\Apoint2K\Apoint.exe (Alps Electric Co., Ltd.) MsConfig:64bit - StartUpReg: [b]ATICustomerCare[/b] - hkey= - key= - C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.) MsConfig:64bit - StartUpReg: [b]cFosSpeed[/b] - hkey= - key= - C:\Program Files\cFosSpeed\cFosSpeed.exe File not found MsConfig:64bit - StartUpReg: [b]DAEMON Tools Lite[/b] - hkey= - key= - D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) MsConfig:64bit - StartUpReg: [b]egui[/b] - hkey= - key= - C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET) MsConfig:64bit - StartUpReg: [b]Gadu-Gadu 10[/b] - hkey= - key= - C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.) MsConfig:64bit - StartUpReg: [b]IntelliPoint[/b] - hkey= - key= - C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation) MsConfig:64bit - StartUpReg: [b]LManager[/b] - hkey= - key= - C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.) MsConfig:64bit - StartUpReg: [b]PLFSetI[/b] - hkey= - key= - C:\Windows\PLFSetI.exe () MsConfig:64bit - StartUpReg: [b]RtHDVCpl[/b] - hkey= - key= - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) MsConfig:64bit - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.) MsConfig:64bit - StartUpReg: [b]StartCCC[/b] - hkey= - key= - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) MsConfig:64bit - StartUpReg: [b]Steam[/b] - hkey= - key= - c:\program files (x86)\steam\steam.exe (Valve Corporation) MsConfig:64bit - StartUpReg: [b]SunJavaUpdateSched[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) MsConfig:64bit - State: "startup" - Reg Error: Key error. MsConfig:64bit - State: "bootini" - Reg Error: Key error. MsConfig:64bit - State: "services" - Reg Error: Key error. SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Base - Driver Group SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group SafeBootMin:[b]64bit:[/b] File system - Driver Group SafeBootMin:[b]64bit:[/b] Filter - Driver Group SafeBootMin:[b]64bit:[/b] HelpSvc - Service SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group SafeBootMin:[b]64bit:[/b] sacsvr - Service SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] vmms - Service SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Base - Driver Group SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group SafeBootNet:[b]64bit:[/b] File system - Driver Group SafeBootNet:[b]64bit:[/b] Filter - Driver Group SafeBootNet:[b]64bit:[/b] HelpSvc - Service SafeBootNet:[b]64bit:[/b] Messenger - Service SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group SafeBootNet:[b]64bit:[/b] Network - Driver Group SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group SafeBootNet:[b]64bit:[/b] rdsessmgr - Service SafeBootNet:[b]64bit:[/b] sacsvr - Service SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] TDI - Driver Group SafeBootNet:[b]64bit:[/b] vmms - Service SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2010-08-28 16:08:01 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\Patch 1.03 i DLC [2010-08-28 15:19:32 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Documents\KONAMI [2010-08-28 12:53:45 | 000,000,000 | ---D | C] -- C:\ProgramData\KONAMI [2010-08-28 12:38:56 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\DLC 1.7 [PES_2010] [MR] [2010-08-28 11:01:17 | 000,229,376 | RHS- | C] (Microsoft) -- C:\Windows\shell.exe [2010-08-27 18:19:48 | 000,090,112 | ---- | C] (Saikeware Technology Co., Ltd. CHINA) -- C:\Windows\SysWow64\MijFrc.dll [2010-08-27 18:19:48 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\MotioninJoy [2010-08-27 18:19:48 | 000,000,000 | ---D | C] -- C:\ProgramData\MotioninJoy [2010-08-27 18:19:47 | 001,716,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01009.dll [2010-08-27 18:19:47 | 000,030,208 | ---- | C] (MotioninJoy) -- C:\Windows\SysNative\drivers\MijBThid.sys [2010-08-27 18:19:47 | 000,020,480 | ---- | C] (MotioninJoy) -- C:\Windows\SysNative\drivers\MijUfilt.sys [2010-08-27 18:19:47 | 000,000,000 | ---D | C] -- C:\Program Files\MotioninJoy [2010-08-22 10:23:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight [2010-08-21 18:29:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ray Adams [2010-08-20 16:03:51 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Tibia [2010-08-20 16:03:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tibia [2010-08-19 23:49:15 | 013,388,288 | ---- | C] (ATI Technologies Inc.) -- C:\Users\Tomek\Desktop\atioglxx.dll [2010-08-18 09:40:51 | 000,000,000 | ---D | C] -- C:\Program Files\cFosSpeed [2010-08-17 17:08:44 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Media Player Classic [2010-08-17 17:08:28 | 000,839,680 | ---- | C] (http://www.mp3dev.org/) -- C:\Windows\SysWow64\lameACM.acm [2010-08-17 17:08:28 | 000,217,088 | ---- | C] (www.helixcommunity.org) -- C:\Windows\SysWow64\yv12vfw.dll [2010-08-17 17:08:28 | 000,151,552 | ---- | C] (fccHandler) -- C:\Windows\SysWow64\ac3acm.acm [2010-08-17 17:08:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\K-Lite Codec Pack [2010-08-17 17:06:27 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\BESTplayer [2010-08-16 11:09:07 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2010-08-15 20:17:42 | 000,240,640 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfdic10n.dll [2010-08-15 20:17:42 | 000,031,232 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfpct10n.dll [2010-08-15 20:17:42 | 000,028,160 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfwmf10n.dll [2010-08-15 20:17:42 | 000,027,136 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfcal10n.dll [2010-08-15 20:17:42 | 000,025,600 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfmac10n.dll [2010-08-15 20:17:41 | 001,455,736 | ---- | C] (Borland International) -- C:\Windows\System\VCL35.BPL [2010-08-15 20:17:41 | 000,996,872 | ---- | C] (Borland International) -- C:\Windows\System\Cp3240mt.dll [2010-08-15 20:17:41 | 000,913,616 | ---- | C] (TurboPower Software Company) -- C:\Windows\System\A258_R35.bpl [2010-08-15 20:17:41 | 000,906,512 | ---- | C] (TurboPower Software Company) -- C:\Windows\System\A255_R35.bpl [2010-08-15 20:17:41 | 000,212,480 | ---- | C] (Eastman Kodak) -- C:\Windows\System\Pcdlib32.dll [2010-08-15 20:17:41 | 000,111,104 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfpng70n.dll [2010-08-15 20:17:41 | 000,032,768 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfgif70n.dll [2010-08-15 20:17:41 | 000,029,952 | ---- | C] (Borland International) -- C:\Windows\System\Borlndmm.dll [2010-08-15 20:17:41 | 000,027,136 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfimg10n.dll [2010-08-15 20:17:41 | 000,024,576 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfpcx70n.dll [2010-08-15 20:17:41 | 000,024,064 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfeps70n.dll [2010-08-15 20:17:41 | 000,022,016 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfpsd70n.dll [2010-08-15 20:17:41 | 000,020,992 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lftga70n.dll [2010-08-15 20:17:41 | 000,020,480 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfwpg70n.dll [2010-08-15 20:17:41 | 000,019,456 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfras70n.dll [2010-08-15 20:17:41 | 000,019,456 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfmsp70n.dll [2010-08-15 20:17:41 | 000,018,944 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfwfx70n.dll [2010-08-15 20:17:40 | 000,995,383 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\MFC42.DLL [2010-08-15 20:17:40 | 000,933,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\MFC40.DLL [2010-08-15 20:17:40 | 000,349,696 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LTKRN70N.DLL [2010-08-15 20:17:40 | 000,344,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\MSVCRT40.DLL [2010-08-15 20:17:40 | 000,266,293 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\MSVCRT.DLL [2010-08-15 20:17:40 | 000,245,912 | ---- | C] (Borland International) -- C:\Windows\System\vclx35.bpl [2010-08-15 20:17:40 | 000,244,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\Msflxgrd.OCX [2010-08-15 20:17:40 | 000,186,880 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFCMP70N.DLL [2010-08-15 20:17:40 | 000,093,184 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFTIF70N.DLL [2010-08-15 20:17:40 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\MSVCIRT.DLL [2010-08-15 20:17:40 | 000,055,808 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFFAX70N.DLL [2010-08-15 20:17:40 | 000,053,760 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LTFIL70N.DLL [2010-08-15 20:17:40 | 000,035,328 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFFPX70N.DLL [2010-08-15 20:17:40 | 000,028,672 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFLMA70N.DLL [2010-08-15 20:17:40 | 000,026,112 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFICA70N.DLL [2010-08-15 20:17:40 | 000,025,088 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFLMB70N.DLL [2010-08-15 20:17:40 | 000,024,576 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFBMP70N.DLL [2010-08-15 20:17:40 | 000,024,064 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFPCT70N.DLL [2010-08-15 20:17:40 | 000,020,480 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFIMG70N.DLL [2010-08-15 20:17:40 | 000,019,456 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFPCD70N.DLL [2010-08-15 20:17:40 | 000,018,944 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFMAC70N.DLL [2010-08-15 20:17:40 | 000,017,920 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFAVI70N.DLL [2010-08-15 20:06:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IrfanView [2010-08-14 17:17:23 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt [2010-08-14 17:13:51 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Documents\BFBC2 [2010-08-14 16:55:10 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll [2010-08-14 16:55:10 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll [2010-08-14 16:55:10 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll [2010-08-14 16:55:10 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll [2010-08-14 16:55:09 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll [2010-08-14 16:55:09 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll [2010-08-14 16:55:09 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll [2010-08-14 16:55:09 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll [2010-08-14 16:55:09 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll [2010-08-14 16:55:09 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll [2010-08-14 16:55:08 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll [2010-08-14 16:55:08 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll [2010-08-14 16:55:07 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll [2010-08-14 16:55:07 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll [2010-08-14 16:55:07 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll [2010-08-14 16:55:07 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll [2010-08-14 16:55:07 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll [2010-08-14 16:55:07 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll [2010-08-14 16:55:06 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll [2010-08-14 16:55:06 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll [2010-08-14 16:55:06 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll [2010-08-14 16:55:06 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll [2010-08-14 16:55:06 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll [2010-08-14 16:55:06 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll [2010-08-14 16:55:06 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll [2010-08-14 16:55:06 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll [2010-08-14 16:55:06 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll [2010-08-14 16:55:06 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll [2010-08-14 16:55:06 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll [2010-08-14 16:55:06 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll [2010-08-14 16:55:06 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll [2010-08-14 16:55:06 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll [2010-08-14 16:55:05 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll [2010-08-14 16:55:05 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll [2010-08-14 16:55:05 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll [2010-08-14 16:55:05 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll [2010-08-14 16:55:05 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll [2010-08-14 16:55:05 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll [2010-08-14 16:55:05 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll [2010-08-14 16:55:05 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll [2010-08-14 16:55:04 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll [2010-08-14 16:55:04 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll [2010-08-14 16:55:04 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll [2010-08-14 16:55:04 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll [2010-08-14 16:55:04 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll [2010-08-14 16:55:04 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll [2010-08-14 16:55:04 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll [2010-08-14 16:55:04 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll [2010-08-14 16:55:04 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll [2010-08-14 16:55:04 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll [2010-08-14 16:55:04 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll [2010-08-14 16:55:04 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll [2010-08-14 16:55:03 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll [2010-08-14 16:55:03 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll [2010-08-14 16:55:03 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll [2010-08-14 16:55:03 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll [2010-08-14 16:55:03 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll [2010-08-14 16:55:03 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll [2010-08-14 16:55:03 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll [2010-08-14 16:55:03 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll [2010-08-14 16:55:02 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll [2010-08-14 16:55:02 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll [2010-08-14 16:55:02 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll [2010-08-14 16:55:02 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll [2010-08-14 16:55:02 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll [2010-08-14 16:55:02 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll [2010-08-14 16:55:01 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll [2010-08-14 16:55:01 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll [2010-08-14 16:55:01 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll [2010-08-14 16:55:01 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll [2010-08-14 16:55:01 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll [2010-08-14 16:55:01 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll [2010-08-14 16:55:01 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll [2010-08-14 16:55:01 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll [2010-08-14 16:55:00 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll [2010-08-14 16:55:00 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll [2010-08-14 16:55:00 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll [2010-08-14 16:55:00 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll [2010-08-14 16:54:58 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll [2010-08-14 16:54:58 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll [2010-08-14 16:54:58 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll [2010-08-14 16:54:58 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll [2010-08-14 16:54:58 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll [2010-08-14 16:54:58 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll [2010-08-14 16:54:57 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll [2010-08-14 16:54:57 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll [2010-08-14 16:54:57 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll [2010-08-14 16:54:57 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll [2010-08-14 16:54:54 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll [2010-08-14 16:54:54 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll [2010-08-14 16:54:54 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll [2010-08-14 16:54:54 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll [2010-08-14 16:54:51 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll [2010-08-14 16:54:51 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_33.dll [2010-08-14 16:54:51 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll [2010-08-14 16:54:51 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_33.dll [2010-08-14 16:54:51 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll [2010-08-14 16:54:51 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_7.dll [2010-08-14 16:54:50 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll [2010-08-14 16:54:49 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll [2010-08-14 16:54:49 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll [2010-08-14 16:54:49 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll [2010-08-14 16:54:49 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll [2010-08-14 16:54:49 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll [2010-08-14 16:54:49 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll [2010-08-14 16:54:48 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll [2010-08-14 16:54:47 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll [2010-08-14 16:54:47 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll [2010-08-14 16:54:47 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll [2010-08-14 16:54:47 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll [2010-08-14 16:54:47 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll [2010-08-14 16:54:47 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll [2010-08-14 16:54:47 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll [2010-08-14 16:54:46 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll [2010-08-14 16:54:46 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll [2010-08-14 16:54:46 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll [2010-08-14 16:54:46 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll [2010-08-14 16:54:46 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll [2010-08-14 16:54:46 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll [2010-08-14 16:54:45 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll [2010-08-14 16:54:45 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll [2010-08-14 16:54:39 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll [2010-08-14 16:54:39 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll [2010-08-14 16:54:39 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll [2010-08-14 16:54:39 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll [2010-08-14 16:54:39 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll [2010-08-14 16:54:38 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll [2010-08-14 16:54:38 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll [2010-08-14 16:54:37 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll [2010-08-14 16:54:36 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll [2010-08-14 16:54:36 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll [2010-08-14 16:54:35 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll [2010-08-14 11:40:04 | 000,000,000 | ---D | C] -- C:\Windows\pss [2010-08-14 10:18:51 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\Harry.Potter.and.the.Half.Blood.Prince.2009.PL.720p.BRRip.XviD.AC3-WDZ [2010-08-14 10:03:18 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Google [2010-08-13 17:35:20 | 000,000,000 | ---D | C] -- C:\Program Files\Google [2010-08-13 17:35:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Google [2010-08-13 17:33:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\YoWindow [2010-08-13 13:13:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Raxco [2010-08-13 13:13:38 | 000,000,000 | ---D | C] -- C:\Program Files\Raxco [2010-08-13 13:12:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Raxco [2010-08-12 18:25:30 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2010-08-12 18:24:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies [2010-08-12 18:08:34 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\PMB Files [2010-08-12 18:08:33 | 000,000,000 | ---D | C] -- C:\ProgramData\PMB Files [2010-08-12 18:08:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pando Networks [2010-08-12 18:00:05 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2010-08-11 17:09:12 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\takie tam [2010-08-10 15:57:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\METRO 2033 [2010-08-09 18:59:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2010-08-09 18:59:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2010-08-09 18:58:51 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2010-08-09 18:58:51 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2010-08-09 18:58:51 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2010-08-09 18:58:51 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2010-08-09 18:58:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2010-08-09 18:50:26 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft IntelliPoint [2010-08-09 16:13:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CCleaner [2010-08-08 22:02:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HLTooLz [2010-08-08 22:02:49 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\Setup1.exe [2010-08-08 22:02:48 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\ST6UNST.EXE [2010-08-08 16:40:46 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\WebcamMax [2010-08-08 16:05:41 | 000,000,000 | ---D | C] -- C:\ProgramData\WebcamMax [2010-08-08 15:58:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WebcamMax [2010-08-08 15:37:09 | 000,000,000 | ---D | C] -- C:\ProgramData\OpenFM [2010-08-08 14:05:20 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Documents\FIFA 10 [2010-08-08 14:02:59 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Leadertech [2010-08-08 13:53:50 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll [2010-08-08 13:53:50 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll [2010-08-08 13:53:47 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_33.dll [2010-08-08 13:53:47 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll [2010-08-08 13:53:47 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll [2010-08-08 13:53:40 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll [2010-08-08 13:53:39 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll [2010-08-08 13:53:39 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll [2010-08-08 13:53:39 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll [2010-08-08 13:53:39 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll [2010-08-08 13:53:39 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll [2010-08-08 13:53:38 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll [2010-08-08 13:46:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Toolbar [2010-08-08 13:45:19 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\DAEMON Tools Lite [2010-08-08 13:45:17 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite [2010-08-07 17:45:09 | 000,000,000 | ---D | C] -- C:\_OTL [2010-08-07 16:43:10 | 000,000,000 | ---D | C] -- C:\Users\Tomek\DoctorWeb [2010-08-07 13:29:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Hewlett-Packard [2010-08-07 13:22:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works [2010-08-07 13:22:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER [2010-08-07 13:22:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET [2010-08-07 13:20:47 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office [2010-08-07 13:20:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office [2010-08-07 13:20:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help [2010-08-07 13:19:49 | 000,000,000 | RH-D | C] -- C:\MSOCache [2010-08-07 09:43:06 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\ESET [2010-08-07 09:43:06 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\ESET [2010-08-07 09:42:17 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET [2010-08-07 09:42:17 | 000,000,000 | ---D | C] -- C:\Program Files\ESET [2010-08-06 22:27:22 | 000,000,000 | ---D | C] -- C:\Windows\Panther [2010-08-06 21:42:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR [2010-08-06 21:42:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Launch Manager [2010-08-06 21:41:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2010-08-06 21:41:17 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Mozilla [2010-08-06 21:41:17 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Mozilla [2010-08-06 21:41:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2010-08-06 21:40:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2010-08-06 21:40:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe [2010-08-06 21:35:39 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\systemcpl.dll [2010-08-06 21:35:39 | 000,001,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppcomapi.dll [2010-08-06 21:34:20 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Searches [2010-08-06 21:34:06 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Identities [2010-08-06 21:34:00 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Contacts [2010-08-06 21:33:54 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\VirtualStore [2010-08-06 21:33:30 | 000,000,000 | --SD | C] -- C:\Users\Tomek\AppData\Roaming\Microsoft [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Videos [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Saved Games [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Pictures [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Music [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Links [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Favorites [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Downloads [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Documents [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Desktop [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Ustawienia lokalne [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\AppData\Local\Temporary Internet Files [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Szablony [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\SendTo [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Recent [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\PrintHood [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\NetHood [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Documents\Moje wideo [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Documents\Moje obrazy [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Moje dokumenty [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Documents\Moja muzyka [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Menu Start [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\AppData\Local\Historia [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Dane aplikacji [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\AppData\Local\Dane aplikacji [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Cookies [2010-08-06 21:33:30 | 000,000,000 | -H-D | C] -- C:\Users\Tomek\AppData [2010-08-06 21:33:30 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Temp [2010-08-06 21:33:30 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Microsoft [2010-08-06 21:33:30 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Media Center Programs [2010-08-06 21:33:21 | 000,000,000 | -HSD | C] -- C:\Recovery [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Ulubione [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Szablony [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Pulpit [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Start [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji [2010-08-06 21:31:02 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2010-08-06 21:28:19 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2010-08-06 21:27:55 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2010-08-06 19:52:54 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Diagnostics [2010-08-06 18:50:30 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Ventrilo [2010-08-06 18:50:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ventrilo [2010-08-06 18:50:16 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\mIRC [2010-08-06 18:50:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\mIRC [2010-08-06 18:50:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard [2010-08-06 17:33:50 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Documents\My Games [2010-08-06 17:33:31 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll [2010-08-06 17:33:31 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll [2010-08-06 17:33:31 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll [2010-08-06 17:33:31 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll [2010-08-06 17:33:31 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll [2010-08-06 17:33:31 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll [2010-08-06 17:33:30 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll [2010-08-06 17:33:30 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll [2010-08-06 17:33:30 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll [2010-08-06 17:33:30 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll [2010-08-06 17:33:29 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll [2010-08-06 17:33:29 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll [2010-08-06 17:33:29 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll [2010-08-06 17:33:29 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll [2010-08-06 17:31:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts [2010-08-06 17:01:25 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2010-08-06 16:31:38 | 001,658,880 | ---- | C] (SuYin) -- C:\Windows\Acer Crystal Eye webcam.EXE [2010-08-06 16:31:13 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Intel [2010-08-06 16:30:26 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\ATI [2010-08-06 16:30:26 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\ATI [2010-08-06 16:30:06 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Intel [2010-08-06 16:30:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Intel [2010-08-06 16:30:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco [2010-08-06 16:29:32 | 000,000,000 | ---D | C] -- C:\Program Files\Broadcom [2010-08-06 16:28:37 | 001,550,848 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\athrx.sys [2010-08-06 16:28:37 | 001,550,848 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\athrx.sys [2010-08-06 16:28:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Atheros [2010-08-06 16:28:15 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\InstallShield [2010-08-06 16:23:51 | 000,000,000 | ---D | C] -- C:\Program Files\Intel [2010-08-06 16:22:49 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics [2010-08-06 16:20:36 | 000,000,000 | ---D | C] -- C:\ProgramData\AmUStor [2010-08-06 16:20:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AmIcoSingLun [2010-08-06 16:19:44 | 000,014,848 | ---- | C] (LSI Corporation) -- C:\Windows\SysWow64\agrsco64.dll [2010-08-06 16:19:41 | 000,000,000 | ---D | C] -- C:\Program Files\LSI SoftModem [2010-08-06 16:19:40 | 000,064,000 | ---- | C] (LSI Corporation) -- C:\Windows\agrsmdel.exe [2010-08-06 16:19:40 | 000,030,720 | ---- | C] (LSI Corporation) -- C:\Windows\agrdel64.exe [2010-08-06 16:19:40 | 000,014,848 | ---- | C] (LSI Corporation) -- C:\Windows\SysNative\agrsco64.dll [2010-08-06 16:19:35 | 000,000,000 | ---D | C] -- C:\Windows\Options [2010-08-06 16:19:20 | 000,000,000 | ---D | C] -- C:\Program Files\Apoint2K [2010-08-06 16:19:18 | 001,490,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01007.dll [2010-08-06 16:19:18 | 000,243,760 | ---- | C] (Alps Electric Co., Ltd.) -- C:\Windows\SysNative\drivers\Apfiltr.sys [2010-08-06 16:19:18 | 000,098,816 | ---- | C] (Alps Electric Co., Ltd.) -- C:\Windows\SysNative\Vxdif.dll [2010-08-06 16:17:05 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\skypePM [2010-08-06 16:12:13 | 000,056,344 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\HECIx64.sys [2010-08-06 16:11:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam [2010-08-06 16:11:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam [2010-08-06 16:10:00 | 000,446,464 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\ATIDEMGX.dll [2010-08-06 16:10:00 | 000,055,296 | ---- | C] (AMD) -- C:\Windows\SysNative\coinst.dll [2010-08-06 16:04:55 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM [2010-08-06 16:04:47 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek [2010-08-06 16:04:46 | 001,604,128 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkHDM64.dll [2010-08-06 16:04:46 | 001,291,808 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RHDMEx64.dll [2010-08-06 16:04:46 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RH3DHT64.dll [2010-08-06 16:04:46 | 000,205,472 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\drivers\RtHDMIVX.sys [2010-08-06 16:04:46 | 000,058,912 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RHCoInst64.dll [2010-08-06 16:04:45 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RH3DAA64.dll [2010-08-06 16:04:44 | 000,513,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll [2010-08-06 16:04:44 | 000,211,376 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll [2010-08-06 16:04:44 | 000,193,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll [2010-08-06 16:04:44 | 000,150,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll [2010-08-06 16:04:43 | 001,680,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll [2010-08-06 16:04:43 | 000,611,872 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl [2010-08-06 16:04:43 | 000,332,320 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll [2010-08-06 16:04:42 | 001,638,432 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll [2010-08-06 16:04:42 | 001,200,672 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll [2010-08-06 16:04:42 | 000,436,768 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll [2010-08-06 16:04:42 | 000,363,008 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll [2010-08-06 16:04:42 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll [2010-08-06 16:04:42 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll [2010-08-06 16:04:42 | 000,198,656 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll [2010-08-06 16:04:42 | 000,149,536 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll [2010-08-06 16:04:42 | 000,095,744 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll [2010-08-06 16:04:42 | 000,073,216 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll [2010-08-06 16:04:42 | 000,066,592 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll [2010-08-06 16:04:40 | 000,320,512 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll [2010-08-06 16:04:39 | 000,310,784 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll [2010-08-06 16:04:39 | 000,166,400 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll [2010-08-06 16:04:39 | 000,108,032 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll [2010-08-06 16:04:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek [2010-08-06 16:04:37 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp [2010-08-06 16:04:36 | 000,831,488 | R--- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2010-08-06 16:04:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield [2010-08-06 16:03:21 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Adobe [2010-08-06 16:02:54 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Skype [2010-08-06 16:02:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google [2010-08-06 16:02:37 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype [2010-08-06 16:02:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [2010-08-06 16:02:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2010-08-06 16:02:03 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed [2010-08-06 15:59:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI [2010-08-06 15:59:10 | 000,000,000 | ---D | C] -- C:\Program Files\ATI [2010-08-06 15:58:21 | 000,000,000 | ---D | C] -- C:\ATI [2010-08-06 15:55:58 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information [2010-08-06 15:55:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Atheros [2010-08-06 15:54:36 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll [2010-08-06 15:54:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel [2010-08-06 15:53:23 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\cache [2010-08-06 15:53:22 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Macromedia [2010-08-06 15:53:18 | 000,000,000 | ---D | C] -- C:\Intel [2010-08-06 15:51:40 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Gadu-Gadu 10 [2010-08-06 15:50:14 | 001,081,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mscomctl.ocx [2010-08-06 15:50:14 | 000,526,184 | ---- | C] (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) -- C:\Windows\SysWow64\XceedCry.dll [2010-08-06 15:50:14 | 000,456,536 | ---- | C] (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) -- C:\Windows\SysWow64\XCEEDZIP.DLL [2010-08-06 15:50:14 | 000,209,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tabctl32.ocx [2010-08-06 15:50:14 | 000,152,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Comdlg32.ocx [2010-08-06 15:50:14 | 000,132,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Msinet.ocx [2010-08-06 15:50:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Driver Magician [2010-08-06 15:49:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Gadu-Gadu 10 [2010-08-06 15:49:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gadu-Gadu 10 [2010-08-06 15:47:49 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\WinRAR [2010-08-06 15:47:43 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR [2010-08-06 15:47:00 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX [2010-08-06 15:46:25 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2010-07-12 11:24:32 | 000,341,504 | ---- | C] (repkasoft) -- C:\Windows\yowindow.scr [2010-07-07 03:54:16 | 000,143,360 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atiapfxx.exe [2010-07-07 03:51:26 | 000,450,048 | ---- | C] (AMD) -- C:\Windows\SysNative\atieclxx.exe [2010-07-07 03:50:54 | 000,202,752 | ---- | C] (AMD) -- C:\Windows\SysNative\atiesrxx.exe [2010-07-07 03:49:36 | 000,421,376 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysNative\atipdl64.dll [2010-07-07 03:49:18 | 000,278,528 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysWow64\Oemdspif.dll [2010-07-07 03:30:12 | 002,617,856 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiumd6a.dll [2010-07-07 03:22:26 | 004,668,928 | ---- | C] (ATI Technologies Inc. ) -- C:\Windows\SysNative\atiumd64.dll [2010-07-07 03:16:06 | 000,316,928 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atiadlxx.dll [2010-07-07 03:14:50 | 000,028,160 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiu9p64.dll [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2010-08-28 17:00:20 | 001,835,008 | -HS- | M] () -- C:\Users\Tomek\NTUSER.DAT [2010-08-28 16:39:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010-08-28 16:27:40 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010-08-28 16:27:25 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-08-28 16:27:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-08-28 16:27:15 | 3111,518,208 | -HS- | M] () -- C:\hiberfil.sys [2010-08-28 15:55:13 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempeO2132.html [2010-08-28 15:39:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOW1488.html [2010-08-28 15:16:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempoZ3696.html [2010-08-28 14:35:18 | 000,009,600 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010-08-28 14:35:17 | 000,009,600 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010-08-28 14:35:12 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempzi3888.html [2010-08-28 14:35:12 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempnb3888.html [2010-08-28 13:23:46 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcs2640.html [2010-08-28 13:23:46 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOu2640.html [2010-08-28 13:23:45 | 008,484,133 | -H-- | M] () -- C:\Users\Tomek\AppData\Local\IconCache.db [2010-08-28 13:16:53 | 003,197,721 | ---- | M] () -- C:\Users\Tomek\Desktop\741A0001_0_FLV_VIDEO_Iaq.flv [2010-08-28 12:42:30 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempmd1244.html [2010-08-28 12:12:30 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLZ3744.html [2010-08-28 11:01:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temptm2912.html [2010-08-28 10:45:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYK1796.html [2010-08-28 10:26:49 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempKd3748.html [2010-08-28 09:28:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempuw3508.html [2010-08-27 23:28:12 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQD2452.html [2010-08-27 23:28:12 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqT2452.html [2010-08-27 21:37:37 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAE3380.html [2010-08-27 21:37:37 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temppd3380.html [2010-08-27 19:43:29 | 000,056,592 | ---- | M] () -- C:\Users\Tomek\Documents\devdata.dat [2010-08-27 19:12:53 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temprr3576.html [2010-08-27 19:05:03 | 001,523,412 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010-08-27 19:05:03 | 000,687,828 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2010-08-27 19:05:03 | 000,607,190 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010-08-27 19:05:03 | 000,131,382 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2010-08-27 19:05:03 | 000,103,568 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010-08-27 18:58:07 | 000,000,543 | ---- | M] () -- C:\Windows\NGO.cer [2010-08-27 18:32:17 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_MijUfilt_01009.Wdf [2010-08-27 18:31:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempmN1476.html [2010-08-27 18:19:48 | 000,000,923 | ---- | M] () -- C:\Users\Public\Desktop\DS3 Tool.lnk [2010-08-27 18:07:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temptb3224.html [2010-08-27 14:35:42 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXm1464.html [2010-08-27 14:03:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempmp3436.html [2010-08-27 11:54:19 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempEM1444.html [2010-08-27 11:54:19 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAr1444.html [2010-08-27 11:25:33 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempry3036.html [2010-08-26 18:44:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYS1556.html [2010-08-26 18:44:28 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temphj1556.html [2010-08-26 15:01:22 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxF3116.html [2010-08-26 15:01:22 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaE3116.html [2010-08-26 11:11:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempcZ3560.html [2010-08-26 11:11:45 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLi3560.html [2010-08-26 08:47:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempbV3584.html [2010-08-25 19:19:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBP3020.html [2010-08-25 18:20:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZA3772.html [2010-08-25 18:20:54 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQH3772.html [2010-08-25 17:21:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPj3060.html [2010-08-25 16:40:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempON2504.html [2010-08-25 12:30:59 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempmBn960.html [2010-08-25 11:15:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXN3632.html [2010-08-25 10:18:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemptRM244.html [2010-08-25 09:15:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYI3400.html [2010-08-25 08:56:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqI3340.html [2010-08-24 23:39:03 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempof2476.html [2010-08-24 23:39:03 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXA2476.html [2010-08-24 19:04:39 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempwv1544.html [2010-08-24 17:50:47 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempmd3248.html [2010-08-24 17:50:47 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuK3248.html [2010-08-24 17:47:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempnT3716.html [2010-08-24 16:54:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWY3344.html [2010-08-24 14:38:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuO3912.html [2010-08-24 14:38:24 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempoZ3912.html [2010-08-24 13:24:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLyu924.html [2010-08-24 13:24:21 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJRN924.html [2010-08-24 12:44:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempyZ3220.html [2010-08-24 12:09:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjXz184.html [2010-08-24 12:09:17 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxCg184.html [2010-08-24 11:26:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempvZl780.html [2010-08-24 11:17:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempVR3028.html [2010-08-24 10:49:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGO2664.html [2010-08-24 10:12:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdq3200.html [2010-08-24 09:37:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempUNj548.html [2010-08-24 09:30:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjF4076.html [2010-08-23 22:53:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temphk1800.html [2010-08-23 19:53:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcl3884.html [2010-08-23 19:53:54 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempKB3884.html [2010-08-23 17:58:10 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempgT3408.html [2010-08-23 17:58:10 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempiz3408.html [2010-08-23 17:45:51 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPZ3304.html [2010-08-23 17:45:51 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDE3304.html [2010-08-23 17:41:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemplTr236.html [2010-08-23 16:52:13 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempot2960.html [2010-08-23 16:26:49 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempzd2512.html [2010-08-23 15:54:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temput3164.html [2010-08-23 15:01:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temple3124.html [2010-08-23 11:36:31 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaK3612.html [2010-08-23 11:36:31 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempez3612.html [2010-08-23 10:57:53 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAg3748.html [2010-08-23 10:39:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temphj3496.html [2010-08-23 10:24:31 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOf1404.html [2010-08-23 10:13:13 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYB2400.html [2010-08-23 10:10:00 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempUt2736.html [2010-08-23 09:45:14 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempSV3596.html [2010-08-23 08:50:39 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemprS3516.html [2010-08-23 08:50:39 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempFP3516.html [2010-08-22 20:32:19 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXZ3940.html [2010-08-22 20:32:19 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXY3940.html [2010-08-22 20:03:01 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJI2584.html [2010-08-22 20:03:01 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaT2584.html [2010-08-22 19:36:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemptB1268.html [2010-08-22 19:36:08 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempMG1268.html [2010-08-22 16:50:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYk3536.html [2010-08-22 16:50:35 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgb3536.html [2010-08-22 15:47:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjO2964.html [2010-08-22 15:47:24 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQm2964.html [2010-08-22 15:01:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temptq3968.html [2010-08-22 15:01:24 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQx3968.html [2010-08-22 14:08:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGk2192.html [2010-08-22 12:47:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temppt3260.html [2010-08-22 12:47:06 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempEC3260.html [2010-08-21 20:25:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAP2280.html [2010-08-21 20:25:15 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGC2280.html [2010-08-21 18:40:18 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjP3244.html [2010-08-21 18:40:18 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempUW3244.html [2010-08-21 18:36:49 | 359,717,347 | ---- | M] () -- C:\Windows\MEMORY.DMP [2010-08-21 18:36:07 | 000,026,424 | --S- | M] () -- C:\Windows\SysNative\drivers\DRIVER_BIN64 [2010-08-21 18:35:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempgF1704.html [2010-08-21 18:35:15 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgu1704.html [2010-08-21 18:32:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaZ3432.html [2010-08-21 18:32:45 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPL3432.html [2010-08-21 18:14:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAI3712.html [2010-08-21 18:14:38 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDH3712.html [2010-08-21 14:50:10 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNh3232.html [2010-08-21 14:50:10 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTO3232.html [2010-08-21 12:18:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempkD2824.html [2010-08-21 12:18:15 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGn2824.html [2010-08-21 08:43:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempbF3608.html [2010-08-21 08:18:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYl3624.html [2010-08-20 22:55:39 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNW1488.html [2010-08-20 20:58:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcd2444.html [2010-08-20 20:58:45 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempvI2444.html [2010-08-20 18:23:33 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZm3968.html [2010-08-20 18:23:33 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXK3968.html [2010-08-20 18:16:02 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempeXq644.html [2010-08-20 17:38:55 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiC4004.html [2010-08-20 16:18:40 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZS3992.html [2010-08-20 14:22:19 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Templo3784.html [2010-08-20 14:22:19 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTy3784.html [2010-08-20 11:13:42 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempKw1300.html [2010-08-20 11:13:42 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjN1300.html [2010-08-20 11:00:10 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIx3192.html [2010-08-20 10:37:46 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempri3628.html [2010-08-20 10:34:57 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBI2208.html [2010-08-20 10:17:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempMw3708.html [2010-08-20 09:43:03 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempRM3764.html [2010-08-19 23:51:30 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempva3420.html [2010-08-19 10:48:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGA3788.html [2010-08-19 09:43:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIk2508.html [2010-08-19 09:17:38 | 000,000,460 | ---- | M] () -- C:\Users\Tomek\Documents\cc_20100819_091735.reg [2010-08-19 09:08:01 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwM3888.html [2010-08-18 18:31:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTk3608.html [2010-08-18 15:44:13 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempSrE620.html [2010-08-18 14:04:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzJ2880.html [2010-08-18 11:03:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLK3492.html [2010-08-18 09:53:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcl3484.html [2010-08-18 09:33:30 | 000,007,597 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Resmon.ResmonCfg [2010-08-17 22:33:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempjp4576.html [2010-08-17 22:33:56 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYZ4576.html [2010-08-17 20:22:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemplM1448.html [2010-08-17 20:22:56 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwI1448.html [2010-08-17 15:43:31 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWl3080.html [2010-08-17 15:43:31 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempzi3080.html [2010-08-17 12:54:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temphl3460.html [2010-08-17 12:54:34 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemppX3460.html [2010-08-17 12:41:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWl2324.html [2010-08-17 12:41:04 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempte2324.html [2010-08-16 22:56:27 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempMd1572.html [2010-08-16 22:56:27 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDD1572.html [2010-08-16 21:21:58 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempnh3416.html [2010-08-16 19:15:20 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaP2448.html [2010-08-16 19:15:20 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGG2448.html [2010-08-16 18:06:33 | 000,001,511 | ---- | M] () -- C:\Users\Tomek\Desktop\BFBC2Game — skrót.lnk [2010-08-16 18:06:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdc3012.html [2010-08-16 17:55:51 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJtB568.html [2010-08-16 17:55:51 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWKR568.html [2010-08-16 17:38:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqV2152.html [2010-08-16 16:11:18 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJT1460.html [2010-08-16 09:34:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqS3820.html [2010-08-15 22:59:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempqn3132.html [2010-08-15 22:59:04 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempoi3132.html [2010-08-15 22:04:50 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempsa3228.html [2010-08-15 21:56:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDs3668.html [2010-08-15 18:59:40 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuE4260.html [2010-08-15 18:59:40 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcs4260.html [2010-08-15 17:29:59 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempVW1652.html [2010-08-15 13:22:53 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempyu3880.html [2010-08-14 19:58:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempir3892.html [2010-08-14 19:58:41 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBS3892.html [2010-08-14 18:57:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemptI1148.html [2010-08-14 18:19:19 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQF3680.html [2010-08-14 17:23:32 | 000,000,232 | ---- | M] () -- C:\Users\Tomek\Desktop\Battlefield Bad Company™ 2.lnk [2010-08-14 17:15:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempbH3280.html [2010-08-14 14:38:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPO2952.html [2010-08-14 14:38:28 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxF2952.html [2010-08-14 09:08:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiG4084.html [2010-08-13 20:42:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgl4048.html [2010-08-13 20:42:48 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZm4048.html [2010-08-13 19:33:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdk2236.html [2010-08-13 19:33:41 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNU2236.html [2010-08-13 18:10:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemprF3652.html [2010-08-13 18:10:21 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempRh3652.html [2010-08-13 17:59:57 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJH3848.html [2010-08-13 15:46:03 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPr1964.html [2010-08-13 10:03:00 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempeE2020.html [2010-08-13 09:09:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempnV3680.html [2010-08-12 21:21:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiE2632.html [2010-08-12 21:21:11 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempEn4084.html [2010-08-12 21:01:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempei2292.html [2010-08-12 19:23:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempSo2356.html [2010-08-12 19:23:54 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuV2356.html [2010-08-12 18:26:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempnw3760.html [2010-08-12 18:26:08 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdv3760.html [2010-08-12 18:19:01 | 000,001,514 | ---- | M] () -- C:\Users\Tomek\Desktop\Resume Download of The Lord of the Rings Online Siege of Mirkwood.lnk [2010-08-12 18:01:58 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwI2584.html [2010-08-12 18:01:58 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzN2584.html [2010-08-12 17:56:40 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWo2252.html [2010-08-12 17:56:40 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIM2252.html [2010-08-12 17:50:34 | 000,002,189 | ---- | M] () -- C:\Users\Tomek\Desktop\cstrike.rar [2010-08-12 17:24:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGH1064.html [2010-08-12 16:19:12 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJF2528.html [2010-08-12 16:19:12 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgq2528.html [2010-08-12 11:24:59 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempmI1508.html [2010-08-12 10:00:00 | 000,108,032 | ---- | M] () -- C:\Windows\SysWow64\ff_vfw.dll [2010-08-12 10:00:00 | 000,000,038 | ---- | M] () -- C:\Windows\avisplitter.ini [2010-08-12 09:43:10 | 000,001,084 | ---- | M] () -- C:\Users\Tomek\Documents\cc_20100812_094308.reg [2010-08-12 09:40:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempHI2728.html [2010-08-11 21:54:46 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempsI3148.html [2010-08-11 21:54:46 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempCB3148.html [2010-08-11 20:38:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempCS2156.html [2010-08-11 19:28:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemppL3612.html [2010-08-11 19:28:43 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempMo3612.html [2010-08-11 16:03:47 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempnYC224.html [2010-08-11 10:08:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYP3176.html [2010-08-10 21:43:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAd3796.html [2010-08-10 21:42:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempsr3420.html [2010-08-10 19:10:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjQ3408.html [2010-08-10 16:05:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempun1052.html [2010-08-10 13:58:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemptK3660.html [2010-08-10 12:37:18 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempun3676.html [2010-08-10 12:37:18 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxH3676.html [2010-08-10 10:58:01 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaDq316.html [2010-08-10 09:22:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempHy4088.html [2010-08-09 23:11:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIW2740.html [2010-08-09 23:11:15 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNU2740.html [2010-08-09 21:54:20 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempmx1372.html [2010-08-09 21:54:20 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempoX1372.html [2010-08-09 20:20:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwH1428.html [2010-08-09 20:12:14 | 000,068,264 | ---- | M] () -- C:\Users\Tomek\AppData\Local\GDIPFONTCACHEV1.DAT [2010-08-09 20:11:36 | 000,307,320 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010-08-09 19:58:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTo1168.html [2010-08-09 18:58:42 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2010-08-09 18:58:42 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2010-08-09 18:58:42 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2010-08-09 18:58:42 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2010-08-09 17:17:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjW1980.html [2010-08-09 16:12:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYI2104.html [2010-08-09 15:08:47 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZh3532.html [2010-08-09 14:00:31 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempHB3524.html [2010-08-09 14:00:31 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempxk3524.html [2010-08-09 13:43:05 | 200,000,000 | ---- | M] () -- C:\Users\Tomek\met33.part02.rar [2010-08-09 13:30:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNe3576.html [2010-08-09 12:29:32 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXS1016.html [2010-08-09 12:29:32 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempFi1016.html [2010-08-09 12:24:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLCJ852.html [2010-08-09 11:21:01 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzT3992.html [2010-08-09 10:15:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempVH2328.html [2010-08-09 09:19:00 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAz3216.html [2010-08-08 22:53:51 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDE1820.html [2010-08-08 22:53:51 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiB1820.html [2010-08-08 22:02:58 | 000,209,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tabctl32.ocx [2010-08-08 22:02:49 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\Setup1.exe [2010-08-08 22:02:48 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\ST6UNST.EXE [2010-08-08 18:53:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZG3652.html [2010-08-08 17:55:47 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempeB3024.html [2010-08-08 17:50:44 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempCi3560.html [2010-08-08 17:41:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgr2792.html [2010-08-08 17:41:48 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzH2792.html [2010-08-08 17:04:18 | 000,000,136 | ---- | M] () -- C:\Users\Tomek\Desktop\winsockfix.bat [2010-08-08 16:46:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNr1172.html [2010-08-08 15:16:55 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempde2288.html [2010-08-08 15:16:55 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdk2288.html [2010-08-08 14:50:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempvD3768.html [2010-08-08 14:28:55 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempsI2544.html [2010-08-08 14:23:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYS3844.html [2010-08-08 14:02:41 | 000,000,192 | ---- | M] () -- C:\Users\Tomek\Desktop\FIFA 10.lnk [2010-08-08 13:46:20 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOk2924.html [2010-08-08 13:46:20 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBa2924.html [2010-08-08 13:45:50 | 000,834,544 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys [2010-08-08 12:40:50 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010-08-08 11:56:16 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTR1260.html [2010-08-08 09:20:52 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempkA3832.html [2010-08-08 07:20:10 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPs1796.html [2010-08-07 22:05:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAe3624.html [2010-08-07 22:05:54 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxD3624.html [2010-08-07 21:01:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempcJG952.html [2010-08-07 21:01:25 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempHDA952.html [2010-08-07 18:53:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemprcV716.html [2010-08-07 18:53:06 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwSt716.html [2010-08-07 17:03:21 | 000,000,808 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2010-08-07 16:37:50 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIB1228.html [2010-08-07 16:37:50 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempbP1228.html [2010-08-07 16:36:56 | 000,000,414 | RHS- | M] () -- C:\ProgramData\ntuser.pol [2010-08-07 13:51:29 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBu2632.html [2010-08-07 09:44:29 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJT2868.html [2010-08-06 21:57:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOH1780.html [2010-08-06 21:42:25 | 000,000,000 | ---- | M] () -- C:\Windows\Setup.INI [2010-08-06 21:42:13 | 000,000,089 | ---- | M] () -- C:\Windows\LManager.UNI [2010-08-06 21:41:15 | 000,001,939 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010-08-06 21:35:51 | 000,524,288 | -HS- | M] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2010-08-06 21:35:51 | 000,524,288 | -HS- | M] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2010-08-06 21:35:51 | 000,065,536 | -HS- | M] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [2010-08-06 21:35:44 | 000,002,048 | ---- | M] () -- C:\Windows\SysWow64\winver.exe [2010-08-06 21:35:41 | 000,410,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\systemcpl.dll [2010-08-06 21:35:40 | 000,001,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\sppcomapi.dll [2010-08-06 21:35:39 | 000,113,543 | ---- | M] () -- C:\Windows\SysWow64\slmgr.vbs [2010-08-06 21:33:30 | 000,000,020 | -HS- | M] () -- C:\Users\Tomek\ntuser.ini [2010-08-06 21:31:41 | 000,000,803 | ---- | M] () -- C:\Windows\SysWow64\license.rtf [2010-08-06 21:31:41 | 000,000,803 | ---- | M] () -- C:\Windows\SysNative\license.rtf [2010-08-06 20:41:05 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDk3572.html [2010-08-06 20:41:05 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWB3572.html [2010-08-06 20:16:09 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLu3016.html [2010-08-06 19:55:05 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemphUZ988.html [2010-08-06 19:55:05 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempEea988.html [2010-08-06 19:45:40 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQX3396.html [2010-08-06 19:29:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPDa568.html [2010-08-06 18:42:52 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temple1308.html [2010-08-06 17:01:51 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_point64k_01009.Wdf [2010-08-06 16:32:55 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin [2010-08-06 16:32:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaPR452.html [2010-08-06 16:32:04 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempctK452.html [2010-08-06 16:29:17 | 000,006,656 | ---- | M] () -- C:\Windows\SysNative\bcmwlrc.dll [2010-08-06 16:22:52 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf [2010-08-06 16:19:23 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01007.Wdf [2010-08-06 16:17:06 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat [2010-08-06 16:12:37 | 000,000,218 | ---- | M] () -- C:\Users\Tomek\Desktop\Counter-Strike.url [2010-08-06 16:06:20 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPl2024.html [2010-08-06 16:00:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempsf2812.html [2010-08-06 16:00:25 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempcX2812.html [2010-08-06 15:49:53 | 000,001,003 | ---- | M] () -- C:\Users\Tomek\Desktop\Gadu-Gadu 10.lnk [2010-08-03 13:08:02 | 000,229,376 | RHS- | M] (Microsoft) -- C:\Windows\shell.exe [2010-07-12 11:24:32 | 000,341,504 | ---- | M] (repkasoft) -- C:\Windows\yowindow.scr [2010-07-07 03:54:32 | 000,063,416 | ---- | M] () -- C:\Windows\SysNative\atiapfxx.blb [2010-07-07 03:54:16 | 000,143,360 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atiapfxx.exe [2010-07-07 03:49:18 | 000,278,528 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\SysWow64\Oemdspif.dll [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-08-28 15:53:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempeO2132.html [2010-08-28 15:29:43 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOW1488.html [2010-08-28 15:14:35 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempoZ3696.html [2010-08-28 14:33:11 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempzi3888.html [2010-08-28 14:33:11 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempnb3888.html [2010-08-28 13:16:51 | 003,197,721 | ---- | C] () -- C:\Users\Tomek\Desktop\741A0001_0_FLV_VIDEO_Iaq.flv [2010-08-28 13:14:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcs2640.html [2010-08-28 13:14:40 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOu2640.html [2010-08-28 12:22:59 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempmd1244.html [2010-08-28 11:47:05 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLZ3744.html [2010-08-28 10:56:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temptm2912.html [2010-08-28 10:44:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYK1796.html [2010-08-28 10:26:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempKd3748.html [2010-08-28 09:10:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempuw3508.html [2010-08-27 22:53:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQD2452.html [2010-08-27 22:53:31 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqT2452.html [2010-08-27 21:35:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAE3380.html [2010-08-27 21:35:31 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temppd3380.html [2010-08-27 19:47:14 | 000,056,592 | ---- | C] () -- C:\Users\Tomek\Documents\devdata.dat [2010-08-27 19:07:45 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temprr3576.html [2010-08-27 18:58:07 | 000,000,543 | ---- | C] () -- C:\Windows\NGO.cer [2010-08-27 18:32:17 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_MijUfilt_01009.Wdf [2010-08-27 18:30:56 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempmN1476.html [2010-08-27 18:19:48 | 000,000,923 | ---- | C] () -- C:\Users\Public\Desktop\DS3 Tool.lnk [2010-08-27 18:07:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temptb3224.html [2010-08-27 14:35:28 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXm1464.html [2010-08-27 13:49:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempmp3436.html [2010-08-27 11:41:27 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempEM1444.html [2010-08-27 11:41:27 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAr1444.html [2010-08-27 11:05:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempry3036.html [2010-08-26 18:34:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYS1556.html [2010-08-26 18:34:31 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temphj1556.html [2010-08-26 14:57:56 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxF3116.html [2010-08-26 14:57:56 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaE3116.html [2010-08-26 10:55:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempcZ3560.html [2010-08-26 10:55:38 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLi3560.html [2010-08-26 08:39:58 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempbV3584.html [2010-08-25 18:32:46 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBP3020.html [2010-08-25 18:05:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZA3772.html [2010-08-25 18:05:16 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQH3772.html [2010-08-25 17:21:05 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPj3060.html [2010-08-25 16:24:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempON2504.html [2010-08-25 11:35:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempmBn960.html [2010-08-25 11:14:51 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXN3632.html [2010-08-25 10:17:56 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemptRM244.html [2010-08-25 09:02:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYI3400.html [2010-08-25 08:53:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqI3340.html [2010-08-24 22:58:46 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempof2476.html [2010-08-24 22:58:46 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXA2476.html [2010-08-24 18:35:08 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempwv1544.html [2010-08-24 17:48:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempmd3248.html [2010-08-24 17:48:41 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuK3248.html [2010-08-24 17:44:22 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempnT3716.html [2010-08-24 16:37:22 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWY3344.html [2010-08-24 14:37:35 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuO3912.html [2010-08-24 14:37:35 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempoZ3912.html [2010-08-24 13:23:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLyu924.html [2010-08-24 13:23:15 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJRN924.html [2010-08-24 12:42:46 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempyZ3220.html [2010-08-24 12:07:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjXz184.html [2010-08-24 12:07:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxCg184.html [2010-08-24 11:20:14 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempvZl780.html [2010-08-24 11:17:25 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempVR3028.html [2010-08-24 10:49:26 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGO2664.html [2010-08-24 10:12:02 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdq3200.html [2010-08-24 09:37:26 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempUNj548.html [2010-08-24 09:20:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjF4076.html [2010-08-23 21:02:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temphk1800.html [2010-08-23 19:17:55 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcl3884.html [2010-08-23 19:17:55 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempKB3884.html [2010-08-23 17:57:12 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempgT3408.html [2010-08-23 17:57:12 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempiz3408.html [2010-08-23 17:45:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPZ3304.html [2010-08-23 17:45:32 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDE3304.html [2010-08-23 16:57:43 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemplTr236.html [2010-08-23 16:52:02 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempot2960.html [2010-08-23 16:26:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempzd2512.html [2010-08-23 15:41:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temput3164.html [2010-08-23 15:00:46 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temple3124.html [2010-08-23 11:13:04 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaK3612.html [2010-08-23 11:13:04 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempez3612.html [2010-08-23 10:57:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAg3748.html [2010-08-23 10:38:51 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temphj3496.html [2010-08-23 10:21:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOf1404.html [2010-08-23 10:12:58 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYB2400.html [2010-08-23 10:09:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempUt2736.html [2010-08-23 09:44:59 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempSV3596.html [2010-08-23 08:25:54 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemprS3516.html [2010-08-23 08:25:54 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempFP3516.html [2010-08-22 20:29:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXZ3940.html [2010-08-22 20:29:00 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXY3940.html [2010-08-22 20:01:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJI2584.html [2010-08-22 20:01:41 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaT2584.html [2010-08-22 17:17:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemptB1268.html [2010-08-22 17:17:41 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempMG1268.html [2010-08-22 16:39:26 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgb3536.html [2010-08-22 16:39:25 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYk3536.html [2010-08-22 15:38:49 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjO2964.html [2010-08-22 15:38:49 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQm2964.html [2010-08-22 14:51:10 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temptq3968.html [2010-08-22 14:51:10 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQx3968.html [2010-08-22 13:26:56 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGk2192.html [2010-08-22 09:41:34 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temppt3260.html [2010-08-22 09:41:34 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempEC3260.html [2010-08-21 20:11:59 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAP2280.html [2010-08-21 20:11:59 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGC2280.html [2010-08-21 18:38:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjP3244.html [2010-08-21 18:38:41 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempUW3244.html [2010-08-21 18:35:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempgF1704.html [2010-08-21 18:35:15 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgu1704.html [2010-08-21 18:31:57 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaZ3432.html [2010-08-21 18:31:57 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPL3432.html [2010-08-21 18:29:49 | 000,026,424 | --S- | C] () -- C:\Windows\SysNative\drivers\DRIVER_BIN64 [2010-08-21 18:14:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAI3712.html [2010-08-21 18:14:38 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDH3712.html [2010-08-21 14:17:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNh3232.html [2010-08-21 14:17:15 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTO3232.html [2010-08-21 09:44:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempkD2824.html [2010-08-21 09:44:42 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGn2824.html [2010-08-21 08:41:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempbF3608.html [2010-08-21 08:08:06 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYl3624.html [2010-08-20 22:48:14 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNW1488.html [2010-08-20 20:07:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcd2444.html [2010-08-20 20:07:30 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempvI2444.html [2010-08-20 18:23:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZm3968.html [2010-08-20 18:23:00 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXK3968.html [2010-08-20 18:15:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempeXq644.html [2010-08-20 17:37:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiC4004.html [2010-08-20 15:53:14 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZS3992.html [2010-08-20 15:52:40 | 000,001,003 | ---- | C] () -- C:\Users\Tomek\Desktop\Gadu-Gadu 10.lnk [2010-08-20 14:19:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Templo3784.html [2010-08-20 14:19:31 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTy3784.html [2010-08-20 11:05:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempKw1300.html [2010-08-20 11:05:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjN1300.html [2010-08-20 10:57:08 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIx3192.html [2010-08-20 10:37:35 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempri3628.html [2010-08-20 10:34:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBI2208.html [2010-08-20 10:17:10 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempMw3708.html [2010-08-20 08:35:53 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempRM3764.html [2010-08-19 22:11:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempva3420.html [2010-08-19 10:33:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGA3788.html [2010-08-19 09:43:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIk2508.html [2010-08-19 09:17:37 | 000,000,460 | ---- | C] () -- C:\Users\Tomek\Documents\cc_20100819_091735.reg [2010-08-19 09:05:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwM3888.html [2010-08-18 17:18:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTk3608.html [2010-08-18 15:43:53 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempSrE620.html [2010-08-18 14:04:19 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzJ2880.html [2010-08-18 11:03:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLK3492.html [2010-08-18 09:52:57 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcl3484.html [2010-08-17 22:29:17 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempjp4576.html [2010-08-17 22:29:17 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYZ4576.html [2010-08-17 20:19:47 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemplM1448.html [2010-08-17 20:19:47 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwI1448.html [2010-08-17 17:08:30 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2010-08-17 17:08:30 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini [2010-08-17 17:08:28 | 000,790,528 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2010-08-17 17:08:28 | 000,134,144 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2010-08-17 17:08:28 | 000,000,547 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll.manifest [2010-08-17 17:08:28 | 000,000,414 | ---- | C] () -- C:\Windows\SysWow64\lame_acm.xml [2010-08-17 17:08:27 | 000,108,032 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2010-08-17 15:42:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWl3080.html [2010-08-17 15:42:48 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempzi3080.html [2010-08-17 12:43:01 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temphl3460.html [2010-08-17 12:43:01 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemppX3460.html [2010-08-17 12:27:06 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWl2324.html [2010-08-17 12:27:06 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempte2324.html [2010-08-16 21:43:27 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempMd1572.html [2010-08-16 21:43:27 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDD1572.html [2010-08-16 21:18:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempnh3416.html [2010-08-16 19:14:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaP2448.html [2010-08-16 19:14:16 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGG2448.html [2010-08-16 18:06:34 | 000,001,511 | ---- | C] () -- C:\Users\Tomek\Desktop\BFBC2Game — skrót.lnk [2010-08-16 18:05:54 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdc3012.html [2010-08-16 17:45:11 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJtB568.html [2010-08-16 17:45:11 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWKR568.html [2010-08-16 17:37:55 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqV2152.html [2010-08-16 16:11:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJT1460.html [2010-08-16 11:09:04 | 359,717,347 | ---- | C] () -- C:\Windows\MEMORY.DMP [2010-08-16 09:33:20 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqS3820.html [2010-08-15 22:56:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempqn3132.html [2010-08-15 22:56:44 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempoi3132.html [2010-08-15 21:56:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempsa3228.html [2010-08-15 21:55:07 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDs3668.html [2010-08-15 20:17:41 | 000,081,920 | ---- | C] () -- C:\Windows\System\CAPI2032.DLL [2010-08-15 20:17:40 | 000,306,688 | ---- | C] () -- C:\Windows\System\LFFPX7.DLL [2010-08-15 20:17:40 | 000,095,232 | ---- | C] () -- C:\Windows\System\LFKODAK.DLL [2010-08-15 17:43:21 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuE4260.html [2010-08-15 17:43:21 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcs4260.html [2010-08-15 17:11:34 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempVW1652.html [2010-08-15 12:40:36 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempyu3880.html [2010-08-14 19:16:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempir3892.html [2010-08-14 19:16:44 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBS3892.html [2010-08-14 18:53:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemptI1148.html [2010-08-14 17:57:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQF3680.html [2010-08-14 17:23:32 | 000,000,232 | ---- | C] () -- C:\Users\Tomek\Desktop\Battlefield Bad Company™ 2.lnk [2010-08-14 16:49:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempbH3280.html [2010-08-14 13:35:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPO2952.html [2010-08-14 13:35:38 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxF2952.html [2010-08-14 10:34:47 | 000,001,048 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010-08-14 10:34:46 | 000,001,044 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010-08-14 08:57:53 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiG4084.html [2010-08-13 20:30:20 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgl4048.html [2010-08-13 20:30:20 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZm4048.html [2010-08-13 19:27:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdk2236.html [2010-08-13 19:27:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNU2236.html [2010-08-13 18:10:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemprF3652.html [2010-08-13 18:10:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempRh3652.html [2010-08-13 17:42:17 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJH3848.html [2010-08-13 15:45:35 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPr1964.html [2010-08-13 09:59:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempeE2020.html [2010-08-13 09:09:05 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempnV3680.html [2010-08-12 21:21:19 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiE2632.html [2010-08-12 21:15:21 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempEn4084.html [2010-08-12 20:52:21 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempei2292.html [2010-08-12 18:33:17 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempSo2356.html [2010-08-12 18:33:17 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuV2356.html [2010-08-12 18:19:01 | 000,001,514 | ---- | C] () -- C:\Users\Tomek\Desktop\Resume Download of The Lord of the Rings Online Siege of Mirkwood.lnk [2010-08-12 18:04:57 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempnw3760.html [2010-08-12 18:04:57 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdv3760.html [2010-08-12 18:00:37 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwI2584.html [2010-08-12 18:00:37 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzN2584.html [2010-08-12 17:52:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWo2252.html [2010-08-12 17:52:18 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIM2252.html [2010-08-12 17:50:34 | 000,002,189 | ---- | C] () -- C:\Users\Tomek\Desktop\cstrike.rar [2010-08-12 17:15:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGH1064.html [2010-08-12 15:51:51 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJF2528.html [2010-08-12 15:51:51 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgq2528.html [2010-08-12 11:24:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempmI1508.html [2010-08-12 09:43:09 | 000,001,084 | ---- | C] () -- C:\Users\Tomek\Documents\cc_20100812_094308.reg [2010-08-12 09:39:52 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempHI2728.html [2010-08-11 21:15:28 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempsI3148.html [2010-08-11 21:15:28 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempCB3148.html [2010-08-11 20:38:12 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempCS2156.html [2010-08-11 17:41:43 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemppL3612.html [2010-08-11 17:41:43 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempMo3612.html [2010-08-11 16:02:37 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempnYC224.html [2010-08-11 10:06:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYP3176.html [2010-08-10 21:43:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAd3796.html [2010-08-10 21:41:23 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempsr3420.html [2010-08-10 19:04:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjQ3408.html [2010-08-10 16:03:34 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempun1052.html [2010-08-10 13:49:05 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemptK3660.html [2010-08-10 12:37:04 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempun3676.html [2010-08-10 12:37:04 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxH3676.html [2010-08-10 10:57:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaDq316.html [2010-08-10 09:06:58 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempHy4088.html [2010-08-09 22:31:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIW2740.html [2010-08-09 22:31:15 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNU2740.html [2010-08-09 21:35:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempmx1372.html [2010-08-09 21:35:00 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempoX1372.html [2010-08-09 20:17:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwH1428.html [2010-08-09 18:32:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTo1168.html [2010-08-09 17:17:08 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjW1980.html [2010-08-09 16:11:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYI2104.html [2010-08-09 15:08:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZh3532.html [2010-08-09 13:54:53 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempHB3524.html [2010-08-09 13:54:53 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempxk3524.html [2010-08-09 13:27:44 | 200,000,000 | ---- | C] () -- C:\Users\Tomek\met33.part02.rar [2010-08-09 13:14:37 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNe3576.html [2010-08-09 12:25:47 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXS1016.html [2010-08-09 12:25:47 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempFi1016.html [2010-08-09 12:24:09 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLCJ852.html [2010-08-09 11:20:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzT3992.html [2010-08-09 10:15:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempVH2328.html [2010-08-09 09:18:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAz3216.html [2010-08-08 21:50:29 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDE1820.html [2010-08-08 21:50:29 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiB1820.html [2010-08-08 18:26:47 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZG3652.html [2010-08-08 17:53:59 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempeB3024.html [2010-08-08 17:45:02 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempCi3560.html [2010-08-08 17:17:26 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgr2792.html [2010-08-08 17:17:26 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzH2792.html [2010-08-08 17:04:17 | 000,000,136 | ---- | C] () -- C:\Users\Tomek\Desktop\winsockfix.bat [2010-08-08 16:18:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNr1172.html [2010-08-08 15:58:37 | 001,053,056 | ---- | C] () -- C:\Windows\SysWow64\drivers\CAMTHWDM.sys [2010-08-08 14:56:28 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempde2288.html [2010-08-08 14:56:28 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdk2288.html [2010-08-08 14:49:34 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempvD3768.html [2010-08-08 14:27:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempsI2544.html [2010-08-08 14:02:41 | 000,000,192 | ---- | C] () -- C:\Users\Tomek\Desktop\FIFA 10.lnk [2010-08-08 13:54:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYS3844.html [2010-08-08 13:45:50 | 000,834,544 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys [2010-08-08 13:28:37 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOk2924.html [2010-08-08 13:28:37 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBa2924.html [2010-08-08 12:40:50 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010-08-08 11:33:25 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTR1260.html [2010-08-08 09:14:23 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempkA3832.html [2010-08-08 07:13:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPs1796.html [2010-08-07 22:00:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAe3624.html [2010-08-07 22:00:40 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxD3624.html [2010-08-07 20:36:13 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempcJG952.html [2010-08-07 20:36:13 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempHDA952.html [2010-08-07 18:53:06 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemprcV716.html [2010-08-07 18:53:06 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwSt716.html [2010-08-07 16:36:56 | 000,000,414 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2010-08-07 16:36:02 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIB1228.html [2010-08-07 16:36:02 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempbP1228.html [2010-08-07 14:23:40 | 000,007,597 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Resmon.ResmonCfg [2010-08-07 13:47:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBu2632.html [2010-08-07 09:03:07 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJT2868.html [2010-08-06 21:49:49 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOH1780.html [2010-08-06 21:42:25 | 000,000,000 | ---- | C] () -- C:\Windows\Setup.INI [2010-08-06 21:42:13 | 000,000,089 | ---- | C] () -- C:\Windows\LManager.UNI [2010-08-06 21:41:15 | 000,001,939 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010-08-06 21:35:39 | 000,113,543 | ---- | C] () -- C:\Windows\SysWow64\slmgr.vbs [2010-08-06 21:35:39 | 000,002,048 | ---- | C] () -- C:\Windows\SysWow64\winver.exe [2010-08-06 21:33:30 | 001,835,008 | -HS- | C] () -- C:\Users\Tomek\NTUSER.DAT [2010-08-06 21:33:30 | 000,524,288 | -HS- | C] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2010-08-06 21:33:30 | 000,524,288 | -HS- | C] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2010-08-06 21:33:30 | 000,262,144 | -HS- | C] () -- C:\Users\Tomek\ntuser.dat.LOG1 [2010-08-06 21:33:30 | 000,065,536 | -HS- | C] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [2010-08-06 21:33:30 | 000,000,020 | -HS- | C] () -- C:\Users\Tomek\ntuser.ini [2010-08-06 21:33:30 | 000,000,000 | -HS- | C] () -- C:\Users\Tomek\ntuser.dat.LOG2 [2010-08-06 21:27:55 | 3111,518,208 | -HS- | C] () -- C:\hiberfil.sys [2010-08-06 20:38:07 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDk3572.html [2010-08-06 20:38:07 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWB3572.html [2010-08-06 19:57:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLu3016.html [2010-08-06 19:52:13 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemphUZ988.html [2010-08-06 19:52:13 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempEea988.html [2010-08-06 19:45:25 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQX3396.html [2010-08-06 19:22:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPDa568.html [2010-08-06 18:41:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temple1308.html [2010-08-06 17:01:51 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_point64k_01009.Wdf [2010-08-06 16:32:55 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2010-08-06 16:31:38 | 000,626,688 | ---- | C] () -- C:\Windows\Image.dll [2010-08-06 16:31:38 | 000,222,382 | ---- | C] () -- C:\Windows\Acer Crystal Eye webcam.ico [2010-08-06 16:31:38 | 000,200,704 | ---- | C] () -- C:\Windows\PLFSetI.exe [2010-08-06 16:31:38 | 000,020,480 | ---- | C] () -- C:\Windows\USB_VIDEO_REG.exe [2010-08-06 16:31:38 | 000,008,362 | ---- | C] () -- C:\Windows\Suyin.reg [2010-08-06 16:31:38 | 000,000,323 | ---- | C] () -- C:\Windows\PidList.ini [2010-08-06 16:29:33 | 000,006,656 | ---- | C] () -- C:\Windows\SysNative\bcmwlrc.dll [2010-08-06 16:28:37 | 000,308,477 | ---- | C] () -- C:\Windows\SysNative\netathrx.inf [2010-08-06 16:28:37 | 000,051,232 | ---- | C] () -- C:\Windows\SysNative\athrextx.cat [2010-08-06 16:22:52 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf [2010-08-06 16:19:23 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01007.Wdf [2010-08-06 16:17:06 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010-08-06 16:12:37 | 000,000,218 | ---- | C] () -- C:\Users\Tomek\Desktop\Counter-Strike.url [2010-08-06 16:10:00 | 000,019,462 | ---- | C] () -- C:\Windows\atiogl.xml [2010-08-06 16:10:00 | 000,001,035 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2010-08-06 16:10:00 | 000,001,035 | ---- | C] () -- C:\Windows\SysNative\atipblag.dat [2010-08-06 16:08:51 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaPR452.html [2010-08-06 16:08:51 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempctK452.html [2010-08-06 16:04:47 | 000,001,256 | R--- | C] () -- C:\Windows\SysNative\drivers\RTHDATEX.DAT [2010-08-06 16:04:47 | 000,000,520 | R--- | C] () -- C:\Windows\SysNative\drivers\RTEQEX2.DAT [2010-08-06 16:04:47 | 000,000,520 | R--- | C] () -- C:\Windows\SysNative\drivers\RTEQEX1.DAT [2010-08-06 16:04:47 | 000,000,520 | R--- | C] () -- C:\Windows\SysNative\drivers\RTEQEX0.DAT [2010-08-06 16:04:47 | 000,000,008 | R--- | C] () -- C:\Windows\SysNative\drivers\RTKHDAUD.DAT [2010-08-06 16:04:46 | 000,214,552 | R--- | C] () -- C:\Windows\SysNative\drivers\RTCONVEQ.DAT [2010-08-06 16:01:54 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPl2024.html [2010-08-06 15:53:23 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempsf2812.html [2010-08-06 15:53:23 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempcX2812.html [2010-08-06 15:50:14 | 000,110,602 | ---- | C] () -- C:\Windows\SysWow64\xcdsfx32.bin [2010-07-07 03:54:32 | 000,063,416 | ---- | C] () -- C:\Windows\SysNative\atiapfxx.blb [2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [color=#E56717]========== LOP Check ==========[/color] [2010-08-11 12:15:44 | 000,000,000 | ---D | M] -- C:\Users\cs\AppData\Roaming\ESET [2010-08-07 12:02:55 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\ESET [2010-08-08 15:29:17 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\Gadu-Gadu 10 [2010-08-15 20:06:10 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\IrfanView [2010-08-08 15:37:08 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\OpenFM [2010-08-20 22:03:45 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\Tibia [2010-08-08 15:58:41 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\WebcamMax [2010-08-13 17:33:24 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\YoWindow [2010-08-17 17:06:31 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\BESTplayer [2010-08-08 13:49:09 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\DAEMON Tools Lite [2010-08-07 09:43:06 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\ESET [2010-08-06 16:00:25 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Gadu-Gadu 10 [2010-08-08 14:02:59 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Leadertech [2010-08-27 18:19:48 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\MotioninJoy [2010-08-20 16:04:03 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Tibia [2010-08-08 16:40:46 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\WebcamMax [2010-08-17 22:24:51 | 000,032,592 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%\*.* >[/color] [2010-08-28 16:27:15 | 3111,518,208 | -HS- | M] () -- C:\hiberfil.sys [2010-08-28 16:27:15 | 4148,690,944 | -HS- | M] () -- C:\pagefile.sys [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys [2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys [2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2009-07-14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysWow64\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys [2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2009-07-14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2009-07-14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe < End of report > [/log]
Tomek01 komentarz 29 sierpnia 2010 komentarz 29 sierpnia 2010 Odinstaluj Deamon Tools Toolbar i ponownie wrzuć logi OTL i RSIT.
Bomaw komentarz 29 sierpnia 2010 komentarz 29 sierpnia 2010 RSIT log [log]Logfile of random's system information tool 1.08 (written by random/random) Run by Tomek at 2010-08-29 22:55:32 Microsoft Windows 7 Enterprise System drive C: has 85 GB (56%) free of 153 GB Total RAM: 3957 MB (71% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 22:55:35, on 2010-08-29 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16385) Boot mode: Normal Running processes: C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Users\Tomek\Downloads\RSIT.exe C:\Program Files (x86)\trend micro\Tomek.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'USŁUGA SIECIOWA') O8 - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 6170 bytes ======Scheduled tasks folder====== C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-08-09 41760] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=0 "ConsentPromptBehaviorUser"=3 "EnableLUA"=0 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 months====== 2010-08-29 22:55:32 ----D---- C:\rsit 2010-08-29 22:55:32 ----D---- C:\Program Files (x86)\trend micro 2010-08-29 10:14:40 ----HDC---- C:\ProgramData\{ECC164E0-3133-4C70-A831-F08DB2940F70} 2010-08-29 10:14:27 ----D---- C:\ProgramData\Lavasoft 2010-08-29 10:14:27 ----D---- C:\Program Files (x86)\Lavasoft 2010-08-28 18:47:38 ----D---- C:\ProgramData\KONAMI 2010-08-27 18:19:48 ----D---- C:\Users\Tomek\AppData\Roaming\MotioninJoy 2010-08-27 18:19:48 ----D---- C:\ProgramData\MotioninJoy 2010-08-27 18:19:48 ----A---- C:\Windows\SysWOW64\MijFrc.dll 2010-08-22 10:23:22 ----D---- C:\Program Files (x86)\Microsoft Silverlight 2010-08-21 18:29:37 ----D---- C:\Program Files (x86)\Ray Adams 2010-08-20 16:03:51 ----D---- C:\Users\Tomek\AppData\Roaming\Tibia 2010-08-20 16:03:46 ----D---- C:\Program Files (x86)\Tibia 2010-08-17 17:08:44 ----D---- C:\Users\Tomek\AppData\Roaming\Media Player Classic 2010-08-17 17:08:30 ----A---- C:\Windows\SysWOW64\unrar.dll 2010-08-17 17:08:30 ----A---- C:\Windows\avisplitter.ini 2010-08-17 17:08:28 ----A---- C:\Windows\SysWOW64\yv12vfw.dll 2010-08-17 17:08:28 ----A---- C:\Windows\SysWOW64\xvidvfw.dll 2010-08-17 17:08:28 ----A---- C:\Windows\SysWOW64\xvidcore.dll 2010-08-17 17:08:28 ----A---- C:\Windows\SysWOW64\ff_vfw.dll.manifest 2010-08-17 17:08:27 ----A---- C:\Windows\SysWOW64\ff_vfw.dll 2010-08-17 17:08:24 ----D---- C:\Program Files (x86)\K-Lite Codec Pack 2010-08-17 17:06:27 ----D---- C:\Users\Tomek\AppData\Roaming\BESTplayer 2010-08-16 11:09:07 ----D---- C:\Windows\Minidump 2010-08-15 20:06:09 ----D---- C:\Program Files (x86)\IrfanView 2010-08-14 16:55:10 ----A---- C:\Windows\SysWOW64\XAudio2_5.dll 2010-08-14 16:55:10 ----A---- C:\Windows\SysWOW64\xactengine3_5.dll 2010-08-14 16:55:09 ----A---- C:\Windows\SysWOW64\d3dx11_42.dll 2010-08-14 16:55:09 ----A---- C:\Windows\SysWOW64\d3dcsx_42.dll 2010-08-14 16:55:09 ----A---- C:\Windows\SysWOW64\D3DCompiler_42.dll 2010-08-14 16:55:08 ----A---- C:\Windows\SysWOW64\d3dx10_42.dll 2010-08-14 16:55:07 ----A---- C:\Windows\SysWOW64\D3DX9_42.dll 2010-08-14 16:55:07 ----A---- C:\Windows\SysWOW64\d3dx10_41.dll 2010-08-14 16:55:07 ----A---- C:\Windows\SysWOW64\D3DCompiler_41.dll 2010-08-14 16:55:06 ----A---- C:\Windows\SysWOW64\XAudio2_4.dll 2010-08-14 16:55:06 ----A---- C:\Windows\SysWOW64\XAPOFX1_3.dll 2010-08-14 16:55:06 ----A---- C:\Windows\SysWOW64\xactengine3_4.dll 2010-08-14 16:55:06 ----A---- C:\Windows\SysWOW64\X3DAudio1_6.dll 2010-08-14 16:55:06 ----A---- C:\Windows\SysWOW64\D3DX9_41.dll 2010-08-14 16:55:06 ----A---- C:\Windows\SysWOW64\d3dx10_40.dll 2010-08-14 16:55:06 ----A---- C:\Windows\SysWOW64\D3DCompiler_40.dll 2010-08-14 16:55:05 ----A---- C:\Windows\SysWOW64\XAudio2_3.dll 2010-08-14 16:55:05 ----A---- C:\Windows\SysWOW64\XAPOFX1_2.dll 2010-08-14 16:55:05 ----A---- C:\Windows\SysWOW64\xactengine3_3.dll 2010-08-14 16:55:05 ----A---- C:\Windows\SysWOW64\D3DX9_40.dll 2010-08-14 16:55:04 ----A---- C:\Windows\SysWOW64\XAudio2_2.dll 2010-08-14 16:55:04 ----A---- C:\Windows\SysWOW64\XAPOFX1_1.dll 2010-08-14 16:55:04 ----A---- C:\Windows\SysWOW64\xactengine3_2.dll 2010-08-14 16:55:04 ----A---- C:\Windows\SysWOW64\X3DAudio1_5.dll 2010-08-14 16:55:04 ----A---- C:\Windows\SysWOW64\d3dx10_39.dll 2010-08-14 16:55:04 ----A---- C:\Windows\SysWOW64\D3DCompiler_39.dll 2010-08-14 16:55:03 ----A---- C:\Windows\SysWOW64\XAudio2_1.dll 2010-08-14 16:55:03 ----A---- C:\Windows\SysWOW64\XAPOFX1_0.dll 2010-08-14 16:55:03 ----A---- C:\Windows\SysWOW64\xactengine3_1.dll 2010-08-14 16:55:03 ----A---- C:\Windows\SysWOW64\D3DX9_39.dll 2010-08-14 16:55:02 ----A---- C:\Windows\SysWOW64\X3DAudio1_4.dll 2010-08-14 16:55:02 ----A---- C:\Windows\SysWOW64\d3dx10_38.dll 2010-08-14 16:55:02 ----A---- C:\Windows\SysWOW64\D3DCompiler_38.dll 2010-08-14 16:55:01 ----A---- C:\Windows\SysWOW64\XAudio2_0.dll 2010-08-14 16:55:01 ----A---- C:\Windows\SysWOW64\xactengine3_0.dll 2010-08-14 16:55:01 ----A---- C:\Windows\SysWOW64\X3DAudio1_3.dll 2010-08-14 16:55:01 ----A---- C:\Windows\SysWOW64\D3DX9_38.dll 2010-08-14 16:55:00 ----A---- C:\Windows\SysWOW64\d3dx10_37.dll 2010-08-14 16:55:00 ----A---- C:\Windows\SysWOW64\D3DCompiler_37.dll 2010-08-14 16:54:58 ----A---- C:\Windows\SysWOW64\xactengine2_10.dll 2010-08-14 16:54:58 ----A---- C:\Windows\SysWOW64\d3dx10_36.dll 2010-08-14 16:54:58 ----A---- C:\Windows\SysWOW64\D3DCompiler_36.dll 2010-08-14 16:54:57 ----A---- C:\Windows\SysWOW64\xactengine2_9.dll 2010-08-14 16:54:57 ----A---- C:\Windows\SysWOW64\d3dx9_36.dll 2010-08-14 16:54:54 ----A---- C:\Windows\SysWOW64\xactengine2_8.dll 2010-08-14 16:54:54 ----A---- C:\Windows\SysWOW64\X3DAudio1_2.dll 2010-08-14 16:54:51 ----A---- C:\Windows\SysWOW64\xactengine2_7.dll 2010-08-14 16:54:51 ----A---- C:\Windows\SysWOW64\d3dx10_33.dll 2010-08-14 16:54:51 ----A---- C:\Windows\SysWOW64\D3DCompiler_33.dll 2010-08-14 16:54:49 ----A---- C:\Windows\SysWOW64\xactengine2_6.dll 2010-08-14 16:54:49 ----A---- C:\Windows\SysWOW64\xactengine2_5.dll 2010-08-14 16:54:49 ----A---- C:\Windows\SysWOW64\d3dx10.dll 2010-08-14 16:54:47 ----A---- C:\Windows\SysWOW64\xactengine2_4.dll 2010-08-14 16:54:47 ----A---- C:\Windows\SysWOW64\xactengine2_3.dll 2010-08-14 16:54:47 ----A---- C:\Windows\SysWOW64\x3daudio1_1.dll 2010-08-14 16:54:46 ----A---- C:\Windows\SysWOW64\xinput1_2.dll 2010-08-14 16:54:46 ----A---- C:\Windows\SysWOW64\xinput1_1.dll 2010-08-14 16:54:46 ----A---- C:\Windows\SysWOW64\xactengine2_2.dll 2010-08-14 16:54:45 ----A---- C:\Windows\SysWOW64\xactengine2_1.dll 2010-08-14 16:54:39 ----A---- C:\Windows\SysWOW64\xactengine2_0.dll 2010-08-14 16:54:39 ----A---- C:\Windows\SysWOW64\x3daudio1_0.dll 2010-08-14 11:40:04 ----D---- C:\Windows\pss 2010-08-13 17:35:16 ----D---- C:\ProgramData\Google 2010-08-13 17:33:09 ----D---- C:\Program Files (x86)\YoWindow 2010-08-13 13:13:39 ----D---- C:\ProgramData\Raxco 2010-08-13 13:12:50 ----D---- C:\Program Files (x86)\Raxco 2010-08-12 18:25:30 ----D---- C:\ProgramData\ATI 2010-08-12 18:24:31 ----D---- C:\Program Files (x86)\ATI Technologies 2010-08-12 18:08:33 ----D---- C:\ProgramData\PMB Files 2010-08-12 18:08:22 ----D---- C:\Program Files (x86)\Pando Networks 2010-08-10 15:57:05 ----D---- C:\Program Files (x86)\METRO 2033 2010-08-09 18:59:06 ----D---- C:\ProgramData\Sun 2010-08-09 18:59:06 ----D---- C:\Program Files (x86)\Common Files\Java 2010-08-09 18:58:51 ----A---- C:\Windows\SysWOW64\javaws.exe 2010-08-09 18:58:51 ----A---- C:\Windows\SysWOW64\javaw.exe 2010-08-09 18:58:51 ----A---- C:\Windows\SysWOW64\java.exe 2010-08-09 18:58:51 ----A---- C:\Windows\SysWOW64\deployJava1.dll 2010-08-09 18:58:41 ----D---- C:\Program Files (x86)\Java 2010-08-09 16:13:07 ----D---- C:\Program Files (x86)\CCleaner 2010-08-08 22:02:53 ----D---- C:\Program Files (x86)\HLTooLz 2010-08-08 22:02:49 ----N---- C:\Windows\Setup1.exe 2010-08-08 22:02:48 ----A---- C:\Windows\ST6UNST.EXE 2010-08-08 16:40:46 ----D---- C:\Users\Tomek\AppData\Roaming\WebcamMax 2010-08-08 16:05:41 ----D---- C:\ProgramData\WebcamMax 2010-08-08 15:58:37 ----A---- C:\Windows\SysWOW64\drivers\CAMTHWDM.sys 2010-08-08 15:58:33 ----D---- C:\Program Files (x86)\WebcamMax 2010-08-08 15:37:09 ----D---- C:\ProgramData\OpenFM 2010-08-08 14:02:59 ----D---- C:\Users\Tomek\AppData\Roaming\Leadertech 2010-08-08 13:53:50 ----A---- C:\Windows\SysWOW64\D3DX9_37.dll 2010-08-08 13:53:47 ----A---- C:\Windows\SysWOW64\d3dx9_33.dll 2010-08-08 13:53:47 ----A---- C:\Windows\SysWOW64\d3dx9_32.dll 2010-08-08 13:53:47 ----A---- C:\Windows\SysWOW64\d3dx9_31.dll 2010-08-08 13:53:40 ----A---- C:\Windows\SysWOW64\d3dx9_30.dll 2010-08-08 13:53:39 ----A---- C:\Windows\SysWOW64\d3dx9_29.dll 2010-08-08 13:53:39 ----A---- C:\Windows\SysWOW64\d3dx9_28.dll 2010-08-08 13:53:39 ----A---- C:\Windows\SysWOW64\d3dx9_27.dll 2010-08-08 13:53:39 ----A---- C:\Windows\SysWOW64\d3dx9_26.dll 2010-08-08 13:53:39 ----A---- C:\Windows\SysWOW64\d3dx9_25.dll 2010-08-08 13:53:38 ----A---- C:\Windows\SysWOW64\d3dx9_24.dll 2010-08-08 13:46:07 ----D---- C:\Program Files (x86)\DAEMON Tools Toolbar 2010-08-08 13:45:19 ----D---- C:\Users\Tomek\AppData\Roaming\DAEMON Tools Lite 2010-08-08 13:45:17 ----D---- C:\ProgramData\DAEMON Tools Lite 2010-08-07 17:45:09 ----D---- C:\_OTL 2010-08-07 13:29:30 ----D---- C:\ProgramData\Hewlett-Packard 2010-08-07 13:22:50 ----D---- C:\Program Files (x86)\Microsoft Works 2010-08-07 13:22:43 ----D---- C:\Program Files (x86)\Common Files\DESIGNER 2010-08-07 13:22:37 ----D---- C:\Program Files (x86)\Microsoft.NET 2010-08-07 13:20:19 ----D---- C:\Program Files (x86)\Microsoft Office 2010-08-07 13:20:18 ----D---- C:\ProgramData\Microsoft Help 2010-08-07 13:19:49 ----RHD---- C:\MSOCache 2010-08-07 09:43:06 ----D---- C:\Users\Tomek\AppData\Roaming\ESET 2010-08-07 09:42:17 ----D---- C:\ProgramData\ESET 2010-08-06 22:27:22 ----D---- C:\Windows\Panther 2010-08-06 21:42:48 ----D---- C:\Program Files (x86)\Common Files\Adobe AIR 2010-08-06 21:42:25 ----A---- C:\Windows\Setup.INI 2010-08-06 21:42:08 ----D---- C:\Program Files (x86)\Launch Manager 2010-08-06 21:41:52 ----D---- C:\ProgramData\Adobe 2010-08-06 21:41:17 ----D---- C:\Users\Tomek\AppData\Roaming\Mozilla 2010-08-06 21:41:13 ----D---- C:\Program Files (x86)\Mozilla Firefox 2010-08-06 21:40:30 ----D---- C:\Program Files (x86)\Common Files\Adobe 2010-08-06 21:40:30 ----D---- C:\Program Files (x86)\Adobe 2010-08-06 21:35:39 ----A---- C:\Windows\SysWOW64\winver.exe 2010-08-06 21:35:39 ----A---- C:\Windows\SysWOW64\user32.dll 2010-08-06 21:35:39 ----A---- C:\Windows\SysWOW64\systemcpl.dll 2010-08-06 21:35:39 ----A---- C:\Windows\SysWOW64\sppcomapi.dll 2010-08-06 21:35:39 ----A---- C:\Windows\SysWOW64\slmgr.vbs 2010-08-06 21:34:06 ----D---- C:\Users\Tomek\AppData\Roaming\Identities 2010-08-06 21:33:30 ----SD---- C:\Users\Tomek\AppData\Roaming\Microsoft 2010-08-06 21:33:30 ----D---- C:\Users\Tomek\AppData\Roaming\Media Center Programs 2010-08-06 21:33:21 ----SHD---- C:\Recovery 2010-08-06 21:33:20 ----SHD---- C:\ProgramData\Ulubione 2010-08-06 21:33:20 ----SHD---- C:\ProgramData\Szablony 2010-08-06 21:33:20 ----SHD---- C:\ProgramData\Pulpit 2010-08-06 21:33:20 ----SHD---- C:\ProgramData\Menu Start 2010-08-06 21:33:20 ----SHD---- C:\ProgramData\Dokumenty 2010-08-06 21:33:20 ----SHD---- C:\ProgramData\Dane aplikacji 2010-08-06 21:31:02 ----D---- C:\Windows\SoftwareDistribution 2010-08-06 21:28:19 ----D---- C:\Windows\Prefetch 2010-08-06 21:27:57 ----ASH---- C:\pagefile.sys 2010-08-06 21:27:55 ----SHD---- C:\System Volume Information 2010-08-06 21:27:55 ----ASH---- C:\hiberfil.sys 2010-08-06 18:50:30 ----D---- C:\Users\Tomek\AppData\Roaming\Ventrilo 2010-08-06 18:50:20 ----D---- C:\Program Files (x86)\Ventrilo 2010-08-06 18:50:16 ----D---- C:\Users\Tomek\AppData\Roaming\mIRC 2010-08-06 18:50:16 ----D---- C:\Program Files (x86)\mIRC 2010-08-06 18:50:00 ----D---- C:\Program Files (x86)\Common Files\Wise Installation Wizard 2010-08-06 17:33:31 ----A---- C:\Windows\SysWOW64\d3dx9_35.dll 2010-08-06 17:33:31 ----A---- C:\Windows\SysWOW64\d3dx10_35.dll 2010-08-06 17:33:31 ----A---- C:\Windows\SysWOW64\D3DCompiler_35.dll 2010-08-06 17:33:30 ----A---- C:\Windows\SysWOW64\d3dx10_34.dll 2010-08-06 17:33:30 ----A---- C:\Windows\SysWOW64\D3DCompiler_34.dll 2010-08-06 17:33:29 ----A---- C:\Windows\SysWOW64\xinput1_3.dll 2010-08-06 17:33:29 ----A---- C:\Windows\SysWOW64\d3dx9_34.dll 2010-08-06 17:31:31 ----D---- C:\Program Files (x86)\Electronic Arts 2010-08-06 17:01:25 ----D---- C:\Windows\PCHEALTH 2010-08-06 16:31:38 ----A---- C:\Windows\USB_VIDEO_REG.exe 2010-08-06 16:31:38 ----A---- C:\Windows\PLFSetI.exe 2010-08-06 16:31:38 ----A---- C:\Windows\PidList.ini 2010-08-06 16:31:38 ----A---- C:\Windows\Image.dll 2010-08-06 16:31:38 ----A---- C:\Windows\Acer Crystal Eye webcam.EXE 2010-08-06 16:31:13 ----D---- C:\Users\Tomek\AppData\Roaming\Intel 2010-08-06 16:30:26 ----D---- C:\Users\Tomek\AppData\Roaming\ATI 2010-08-06 16:30:05 ----D---- C:\ProgramData\Intel 2010-08-06 16:30:05 ----D---- C:\Program Files (x86)\Cisco 2010-08-06 16:28:34 ----D---- C:\Program Files (x86)\Atheros 2010-08-06 16:28:15 ----D---- C:\Users\Tomek\AppData\Roaming\InstallShield 2010-08-06 16:20:36 ----D---- C:\ProgramData\AmUStor 2010-08-06 16:20:35 ----D---- C:\Program Files (x86)\AmIcoSingLun 2010-08-06 16:19:44 ----N---- C:\Windows\SysWOW64\agrsco64.dll 2010-08-06 16:19:40 ----A---- C:\Windows\agrsmdel.exe 2010-08-06 16:19:40 ----A---- C:\Windows\agrdel64.exe 2010-08-06 16:19:35 ----D---- C:\Windows\Options 2010-08-06 16:17:05 ----D---- C:\Users\Tomek\AppData\Roaming\skypePM 2010-08-06 16:11:03 ----D---- C:\Program Files (x86)\Steam 2010-08-06 16:11:03 ----D---- C:\Program Files (x86)\Common Files\Steam 2010-08-06 16:04:55 ----D---- C:\Windows\SysWOW64\RTCOM 2010-08-06 16:04:39 ----D---- C:\Program Files (x86)\Realtek 2010-08-06 16:04:37 ----HD---- C:\Program Files (x86)\Temp 2010-08-06 16:04:36 ----R---- C:\Windows\RtlExUpd.dll 2010-08-06 16:04:33 ----D---- C:\Program Files (x86)\Common Files\InstallShield 2010-08-06 16:03:21 ----D---- C:\Users\Tomek\AppData\Roaming\Adobe 2010-08-06 16:02:54 ----D---- C:\Users\Tomek\AppData\Roaming\Skype 2010-08-06 16:02:49 ----D---- C:\Program Files (x86)\Google 2010-08-06 16:02:37 ----RD---- C:\Program Files (x86)\Skype 2010-08-06 16:02:37 ----D---- C:\Program Files (x86)\Common Files\Skype 2010-08-06 16:02:31 ----D---- C:\ProgramData\Skype 2010-08-06 16:02:03 ----D---- C:\Windows\SysWOW64\Macromed 2010-08-06 15:59:39 ----D---- C:\Program Files (x86)\ATI 2010-08-06 15:58:21 ----D---- C:\ATI 2010-08-06 15:55:58 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2010-08-06 15:55:26 ----D---- C:\ProgramData\Atheros 2010-08-06 15:54:36 ----D---- C:\Program Files (x86)\Intel 2010-08-06 15:54:36 ----A---- C:\Windows\SysWOW64\CSVer.dll 2010-08-06 15:53:22 ----D---- C:\Users\Tomek\AppData\Roaming\Macromedia 2010-08-06 15:53:18 ----D---- C:\Intel 2010-08-06 15:51:40 ----D---- C:\Users\Tomek\AppData\Roaming\Gadu-Gadu 10 2010-08-06 15:50:14 ----D---- C:\Program Files (x86)\Driver Magician 2010-08-06 15:50:14 ----A---- C:\Windows\SysWOW64\XCEEDZIP.DLL 2010-08-06 15:50:14 ----A---- C:\Windows\SysWOW64\XceedCry.dll 2010-08-06 15:49:52 ----D---- C:\ProgramData\Gadu-Gadu 10 2010-08-06 15:49:25 ----D---- C:\Program Files (x86)\Gadu-Gadu 10 2010-08-06 15:47:49 ----D---- C:\Users\Tomek\AppData\Roaming\WinRAR 2010-08-06 15:46:25 ----SHD---- C:\Windows\Installer ======List of files/folders modified in the last 1 months====== 2010-08-29 22:55:33 ----D---- C:\Windows\Temp 2010-08-29 22:55:32 ----RD---- C:\Program Files (x86) 2010-08-29 18:46:54 ----D---- C:\Windows 2010-08-29 18:46:10 ----D---- C:\Windows\System32 2010-08-29 10:14:40 ----HD---- C:\ProgramData 2010-08-29 10:14:22 ----D---- C:\Windows\winsxs 2010-08-29 09:10:13 ----D---- C:\Windows\Registration 2010-08-29 08:08:59 ----D---- C:\Windows\Logs 2010-08-29 07:34:19 ----D---- C:\Windows\SysWOW64 2010-08-29 07:20:47 ----RD---- C:\Program Files 2010-08-29 07:20:47 ----D---- C:\Windows\Downloaded Program Files 2010-08-28 18:56:42 ----D---- C:\Windows\debug 2010-08-27 19:05:03 ----D---- C:\Windows\inf 2010-08-25 14:05:59 ----RSD---- C:\Windows\assembly 2010-08-22 10:23:24 ----SD---- C:\ProgramData\Microsoft 2010-08-16 11:08:18 ----D---- C:\Windows\LiveKernelReports 2010-08-15 20:18:09 ----D---- C:\Windows\system 2010-08-15 20:05:33 ----D---- C:\Windows\ModemLogs 2010-08-14 10:34:47 ----D---- C:\Windows\Tasks 2010-08-11 12:13:56 ----SHD---- C:\$Recycle.Bin 2010-08-11 12:13:51 ----RD---- C:\Users 2010-08-09 18:59:06 ----D---- C:\Program Files (x86)\Common Files 2010-08-08 15:58:37 ----D---- C:\Windows\SysWOW64\drivers 2010-08-08 13:53:40 ----D---- C:\Windows\Microsoft.NET 2010-08-07 13:22:50 ----D---- C:\Program Files (x86)\Common Files\microsoft shared 2010-08-07 13:22:39 ----RSD---- C:\Windows\Fonts 2010-08-07 13:20:41 ----D---- C:\Windows\ShellNew 2010-08-06 21:34:37 ----D---- C:\Windows\rescache 2010-08-06 21:28:38 ----D---- C:\Windows\CSC ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [] R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [] R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [] R2 DefragFS;DefragFS; C:\Windows\SysWOW64\drivers\DefragFS.sys [] R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [] R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [] R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [] R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [] R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [] R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [] R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [] R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [] R3 DKbFltr;Dritek Keyboard Filter Driver (64-bit); C:\Windows\SysWOW64\Drivers\DKbFltr.sys [2009-03-26 25608] R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [] R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [] R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [] R3 Point64;Microsoft IntelliPoint Filter Driver; C:\Windows\system32\DRIVERS\point64k.sys [] R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [] R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [] S3 a314umn1;a314umn1; C:\Windows\SysWOW64\drivers\a314umn1.sys [] S3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [] S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [] S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [] S3 DRIVER_B;DRIVER_B; \??\C:\Windows\system32\Drivers\DRIVER_BIN64 [] S3 MotioninJoyUSBFilter;MotioninJoy USB Filter Driver; C:\Windows\system32\DRIVERS\MijUfilt.sys [] S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [] S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [] S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [] S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [] S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [] S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992] R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2010-04-07 810120] S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2010-08-24 407336] S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992] S4 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agr64svc.exe [2009-03-27 16896] S4 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [] S4 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-04-07 42336] S4 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2009-09-21 1420560] S4 gupdate;Usługa Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-14 135664] S4 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe [2010-08-12 1355416] S4 PDAgent;PDAgent; C:\Program Files\Raxco\PerfectDisk\PDAgent.exe [2010-05-27 2608904] S4 PDEngine;PDEngine; C:\Program Files\Raxco\PerfectDisk\PDEngine.exe [2010-05-27 2259208] S4 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2009-09-21 831760] S4 TurboBoost;TurboBoost; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 126352] -----------------EOF-----------------[/log] info [log]info.txt logfile of random's system information tool 1.08 2010-08-29 22:55:36 ======Uninstall list====== Acer Crystal Eye Webcam-->C:\Program Files (x86)\InstallShield Installation Information\{7760D94E-B1B5-40A0-9AA0-ABF942108755}\setup.exe -runfromtemp -l0x0009 -removeonly Acrobat.com-->MsiExec.exe /X{287ECFA4-719A-2143-A09B-D6A12DE54E40} Ad-Aware-->"C:\ProgramData\{ECC164E0-3133-4C70-A831-F08DB2940F70}\Ad-AwareInstall.exe" REMOVE=TRUE MODIFY=FALSE Ad-Aware-->C:\ProgramData\{ECC164E0-3133-4C70-A831-F08DB2940F70}\Ad-AwareInstall.exe Adobe AIR-->C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723} Adobe Flash Player 10 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10i_ActiveX.exe -maintain activex Adobe Flash Player 10 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10i_Plugin.exe -maintain plugin Adobe Reader 9.1 MUI-->MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-A91000000001} Alcor Micro USB Card Reader-->C:\Program Files (x86)\InstallShield Installation Information\{DBCE1208-433D-4D3E-A26A-CB1B5E71A8F5}\setup.exe -runfromtemp -l0x0409 Atheros Driver Installation Program-->C:\Program Files (x86)\InstallShield Installation Information\{28006915-2739-4EBE-B5E8-49B25D32EB33}\setup.exe -runfromtemp -l0x0009 -removeonly ATI Catalyst Registration-->MsiExec.exe /X{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B} Battlefield: Bad Company™ 2-->MsiExec.exe /X{3AC8457C-0385-4BEA-A959-E095F05D6D67} CCleaner-->"C:\Program Files (x86)\CCleaner\uninst.exe" Counter-Strike-->"C:\Program Files (x86)\Steam\steam.exe" steam://uninstall/10 Crysis(R) SP Demo-->MsiExec.exe /I{92AF2F5A-4407-4A03-A80A-5A2582264746} Driver Magician 3.41-->"C:\Program Files (x86)\Driver Magician\unins000.exe" FIFA 10-->MsiExec.exe /X{11202615-E557-4ECF-9B86-F59C81E52909} Gadu-Gadu 10-->C:\Program Files (x86)\Gadu-Gadu 10\Uninstall.exe Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} HLTooLz-->C:\WINDOWS\st6unst.exe -n "C:\Program Files (x86)\HLTooLz\ST6UNST.LOG" IrfanView (remove only)-->C:\Program Files (x86)\IrfanView\iv_uninstall.exe Java(TM) 6 Update 20-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216020FF} K-Lite Codec Pack 6.3.0 (Full)-->"C:\Program Files (x86)\K-Lite Codec Pack\unins000.exe" Launch Manager-->C:\Windows\UNINST32.EXE LManager.UNI Microsoft Office Excel MUI (Polish) 2007-->MsiExec.exe /X{90120000-0016-0415-0000-0000000FF1CE} Microsoft Office Home and Student 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE} Microsoft Office OneNote MUI (Polish) 2007-->MsiExec.exe /X{90120000-00A1-0415-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (Polish) 2007-->MsiExec.exe /X{90120000-0018-0415-0000-0000000FF1CE} Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE} Microsoft Office Proof (Polish) 2007-->MsiExec.exe /X{90120000-001F-0415-0000-0000000FF1CE} Microsoft Office Proofing (Polish) 2007-->MsiExec.exe /X{90120000-002C-0415-0000-0000000FF1CE} Microsoft Office Shared MUI (Polish) 2007-->MsiExec.exe /X{90120000-006E-0415-0000-0000000FF1CE} Microsoft Office Word MUI (Polish) 2007-->MsiExec.exe /X{90120000-001B-0415-0000-0000000FF1CE} Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c} mIRC-->C:\Program Files (x86)\mIRC\uninstall.exe _?=C:\Program Files (x86)\mIRC Mozilla Firefox (3.6.8)-->C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe Pando Media Booster-->C:\Program Files (x86)\Pando Networks\Media Booster\uninst.exe Pro Evolution Soccer 2010-->MsiExec.exe /X{283FFB23-8751-4B08-ACB8-5E0F8BCF7727} Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -removeonly Skaner on-line mks_vir-->C:\Windows\system32\SkanerOnlineUninstall.exe Skype Toolbars-->MsiExec.exe /I{981029E0-7FC9-4CF3-AB39-6F133621921A} Skype™ 4.2-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36} Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3} The Lord of the Rings FREE Trial -->MsiExec.exe /X{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3} Tibia-->"C:\Program Files (x86)\Tibia\unins000.exe" Ventrilo-->MsiExec.exe /I{789289CA-F73A-4A16-A331-54D498CE069F} Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27} Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\Windows\SysWOW64\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT="" WebcamMax-->"C:\Program Files (x86)\WebcamMax\uninst.exe" YoWindow-->"C:\Program Files (x86)\YoWindow\uninstall.exe" ======System event log====== Computer Name: 37L4247E29-32 Event Code: 7036 Message: Usługa Cryptographic Services weszła w stan stopped. Record Number: 5 Source Name: Service Control Manager Time Written: 20090714051424.262212-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 7036 Message: Usługa Windows Modules Installer weszła w stan stopped. Record Number: 4 Source Name: Service Control Manager Time Written: 20090714051424.168612-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 7036 Message: Usługa Software Protection weszła w stan stopped. Record Number: 3 Source Name: Service Control Manager Time Written: 20090714051424.059412-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 7036 Message: Usługa Windows Event Log weszła w stan stopped. Record Number: 2 Source Name: Service Control Manager Time Written: 20090714051424.012612-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 7036 Message: Usługa Volume Shadow Copy weszła w stan stopped. Record Number: 1 Source Name: Service Control Manager Time Written: 20090714051423.934612-000 Event Type: Informacje User: =====Application event log===== Computer Name: 37L4247E29-32 Event Code: 1001 Message: Pakiet błędów , typ 0 Nazwa zdarzenia: PnPDriverNotFound Odpowiedź: Niedostępny Identyfikator pliku Cab: 0 Sygnatura problemu: P1: x64 P2: PCI\VEN_8086&DEV_3B64&SUBSYS_03471025&REV_06 P3: P4: P5: P6: P7: P8: P9: P10: Dołączone pliki: C:\Windows\Temp\DMIF8B0.tmp.log.xml Te pliki mogą być dostępne tutaj: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_496d1a11d3d1590d3f3ff89c8ec41ce9c5dc31_cab_05f5f92c Symbol analizy: Ponowne sprawdzanie rozwiązania: 0 Identyfikator raportu: fca089bf-a190-11df-ad96-97e2ef5feffc Stan raportu: 6 Record Number: 5 Source Name: Windows Error Reporting Time Written: 20100806192954.000000-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 5617 Message: Windows Management Instrumentation Service subsystems initialized successfully Record Number: 4 Source Name: Microsoft-Windows-WMI Time Written: 20100806192851.000000-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 5615 Message: Windows Management Instrumentation Service started sucessfully Record Number: 3 Source Name: Microsoft-Windows-WMI Time Written: 20100806192844.000000-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 1531 Message: Usługa profilów użytkowników została uruchomiona pomyślnie. Record Number: 2 Source Name: Microsoft-Windows-User Profiles Service Time Written: 20100806192838.869292-000 Event Type: Informacje User: ZARZĄDZANIE NT\SYSTEM Computer Name: 37L4247E29-32 Event Code: 4625 Message: System podrzędny EventSystem pomija zduplikowane wpisy dziennika zdarzeń przez okres 86400 sekund. Limit czasu pomijania można kontrolować za pomocą wartości REG_DWORD o nazwie SuppressDuplicateDuration w następującym kluczu rejestru: HKLM\Software\Microsoft\EventSystem\EventLog. Record Number: 1 Source Name: Microsoft-Windows-EventSystem Time Written: 20100806192839.000000-000 Event Type: Informacje User: =====Security event log===== Computer Name: 37L4247E29-32 Event Code: 4735 Message: Zmieniono grupę lokalną z włączonymi zabezpieczeniami. Podmiot: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: 37L4247E29-32$ Domena konta: WORKGROUP Identyfikator logowania: 0x3e7 Grupa: Identyfikator zabezpieczeń: S-1-5-32-551 Nazwa grupy: Operatorzy kopii zapasowych Domena grupy: Builtin Zmienione atrybuty: Nazwa konta SAM: - Historia identyfikatora SID: - Informacje dodatkowe: Uprawnienia: - Record Number: 5 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100806192816.935653-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4731 Message: Utworzono grupę lokalną z włączonymi zabezpieczeniami. Podmiot: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: 37L4247E29-32$ Domena konta: WORKGROUP Identyfikator logowania: 0x3e7 Nowa grupa: Identyfikator zabezpieczeń: S-1-5-32-551 Nazwa grupy: Operatorzy kopii zapasowych Domena grupy: Builtin Atrybuty: Nazwa konta SAM: Operatorzy kopii zapasowych Historia identyfikatora SID: - Informacje dodatkowe: Uprawnienia: - Record Number: 4 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100806192816.920053-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4902 Message: Utworzono tabelę zasad inspekcji użytkownika. Liczba elementów: 0 Identyfikator zasad: 0x560aa Record Number: 3 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100806192816.327252-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4624 Message: Użytkownik pomyślnie zalogował się na koncie. Podmiot: Identyfikator zabezpieczeń: S-1-0-0 Nazwa konta: - Domena konta: - Identyfikator logowania: 0x0 Typ logowania: 0 Nowe logowanie: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: SYSTEM Domena konta: ZARZĄDZANIE NT Identyfikator logowania: 0x3e7 Identyfikator GUID logowania: {00000000-0000-0000-0000-000000000000} Informacje o procesie: Identyfikator procesu: 0x4 Nazwa procesu: Informacje o sieci: Nazwa stacji roboczej: - Adres źródłowy sieci: - Port źródłowy: - Szczegółowe informacje o uwierzytelnianiu: Proces logowania: - Pakiet uwierzytelniania: - Usługi przejściowe: - Nazwa pakietu (tylko NTLM): - Długość klucza: 0 To zdarzenie jest generowane w momencie utworzenia sesji logowania. Jest ono generowane na komputerze, do którego został uzyskany dostęp. Pola podmiotu wskazują konto w systemie lokalnym, które zażądało logowania. Najczęściej jest to usługa, na przykład usługa Serwer, lub proces lokalny taki jak Winlogon.exe lub Services.exe. Pole typu logowania wskazuje rodzaj zaistniałego logowania. Najczęstsze typy to 2 (interakcyjne) i 3 (sieciowe). Pola nowego logowania wskazują konto, dla którego zostało utworzone nowe logowanie, czyli konto, które zostało zalogowane. Pola sieci wskazują lokalizację, z której pochodziło zdalne żądanie logowania. Nazwa stacji roboczej nie zawsze jest dostępna i w niektórych przypadkach może być pusta. Pola informacji o uwierzytelnianiu zawierają szczegółowe informacje o tym konkretnym żądaniu logowania. - Identyfikator GUID logowania to unikatowy identyfikator, za pomocą którego można skorelować to zdarzenie ze zdarzeniem centrum dystrybucji kluczy. - Usługi przejściowe wskazują, które usługi pośrednie uczestniczyły w tym żądaniu logowania. - Nazwa pakietu wskazuje, który protokół podrzędny spośród protokołów NTLM został użyty. - Długość klucza wskazuje długość wygenerowanego klucza sesji. Jeśli nie zażądano klucza sesji, jest to wartość 0. Record Number: 2 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100806192813.581647-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4608 Message: Trwa uruchamianie systemu Windows. To zdarzenie jest rejestrowane w momencie uruchamiania programu LSASS.EXE i inicjowania podsystemu inspekcji. Record Number: 1 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100806192813.456847-000 Event Type: Sukcesy inspekcji User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\Driver "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC "PROCESSOR_ARCHITECTURE"=AMD64 "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "USERNAME"=SYSTEM "windir"=%SystemRoot% "PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\ "NUMBER_OF_PROCESSORS"=4 "PROCESSOR_LEVEL"=6 "PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 37 Stepping 2, GenuineIntel "PROCESSOR_REVISION"=2502 -----------------EOF-----------------[/log] OTL [log]OTL logfile created on: 2010-08-29 22:59:34 - Run 3 OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\Tomek\Downloads 64bit- Enterprise Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 70,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 83,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 148,95 Gb Total Space | 82,89 Gb Free Space | 55,65% Space Free | Partition Type: NTFS Drive D: | 149,04 Gb Total Space | 117,44 Gb Free Space | 78,80% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: DOM Current User Name: Tomek Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Include 64bit Scans Company Name Whitelist: On Skip Microsoft Files: On File Age = 60 Days Output = Standard [color=#E56717]========== Processes (All) ==========[/color] PRC - [2010-08-14 10:34:41 | 000,135,664 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe PRC - [2010-08-07 11:53:41 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Tomek\Downloads\OTL.exe PRC - [2010-07-23 04:15:35 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2010-07-23 04:15:35 | 000,014,808 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe PRC - [2010-04-07 21:07:24 | 000,810,120 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [color=#E56717]========== Modules (All) ==========[/color] MOD - [2010-08-07 11:53:41 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Tomek\Downloads\OTL.exe MOD - [2010-08-06 21:35:43 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll MOD - [2009-07-14 03:17:51 | 001,289,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll MOD - [2009-07-14 03:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll MOD - [2009-07-14 03:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll MOD - [2009-07-14 03:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll MOD - [2009-07-14 03:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll MOD - [2009-07-14 03:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll MOD - [2009-07-14 03:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll MOD - [2009-07-14 03:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll MOD - [2009-07-14 03:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll MOD - [2009-07-14 03:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll MOD - [2009-07-14 03:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll MOD - [2009-07-14 03:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll MOD - [2009-07-14 03:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll MOD - [2009-07-14 03:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll MOD - [2009-07-14 03:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll MOD - [2009-07-14 03:16:13 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll MOD - [2009-07-14 03:16:12 | 001,412,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll MOD - [2009-07-14 03:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll MOD - [2009-07-14 03:16:12 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll MOD - [2009-07-14 03:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll MOD - [2009-07-14 03:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll MOD - [2009-07-14 03:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll MOD - [2009-07-14 03:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll MOD - [2009-07-14 03:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll MOD - [2009-07-14 03:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll MOD - [2009-07-14 03:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll MOD - [2009-07-14 03:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll MOD - [2009-07-14 03:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll MOD - [2009-07-14 03:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2009-07-14 03:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll MOD - [2009-07-14 03:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll MOD - [2009-07-14 03:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll MOD - [2009-07-14 03:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll MOD - [2009-07-14 03:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll MOD - [2009-07-14 03:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll MOD - [2009-07-14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009-07-14 03:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv MOD - [2009-07-14 03:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll MOD - [2009-07-14 03:11:24 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll MOD - [2009-07-14 03:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll MOD - [2009-07-14 03:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll MOD - [2009-07-14 03:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll MOD - [2009-07-14 03:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll MOD - [2009-07-14 03:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll MOD - [2009-07-14 03:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll MOD - [2009-07-14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2010-05-27 11:44:54 | 002,608,904 | ---- | M] (Raxco Software, Inc.) [Disabled | Stopped] -- C:\Program Files\Raxco\PerfectDisk\PDAgent.exe -- (PDAgent) SRV:[b]64bit:[/b] - [2010-05-27 11:44:44 | 002,259,208 | ---- | M] (Raxco Software, Inc.) [Disabled | Stopped] -- C:\Program Files\Raxco\PerfectDisk\PDEngine.exe -- (PDEngine) SRV:[b]64bit:[/b] - [2010-04-07 21:10:42 | 000,042,336 | ---- | M] (ESET) [Disabled | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv) SRV:[b]64bit:[/b] - [2010-04-07 21:07:24 | 000,810,120 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn) SRV:[b]64bit:[/b] - [2010-01-22 03:01:12 | 000,202,752 | ---- | M] (AMD) [Disabled | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009-11-02 12:48:18 | 000,126,352 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost) SRV:[b]64bit:[/b] - [2009-09-21 16:24:40 | 001,420,560 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) SRV:[b]64bit:[/b] - [2009-09-21 16:00:44 | 000,831,760 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) SRV:[b]64bit:[/b] - [2009-07-14 03:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService) SRV:[b]64bit:[/b] - [2009-07-14 03:41:54 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\StorSvc.dll -- (StorSvc) SRV:[b]64bit:[/b] - [2009-07-14 03:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 03:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService) SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2009-03-27 12:10:16 | 000,016,896 | ---- | M] (LSI Corporation) [Disabled | Stopped] -- C:\Program Files\LSI SoftModem\agr64svc.exe -- (AgereModemAudio) SRV - [2010-08-24 09:24:16 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2010-08-12 14:15:19 | 001,355,416 | ---- | M] (Lavasoft) [Disabled | Stopped] -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010-08-21 18:36:07 | 000,026,424 | --S- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DRIVER_BIN64 -- (DRIVER_B) DRV:[b]64bit:[/b] - [2010-08-08 13:45:50 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010-05-06 11:21:46 | 000,125,456 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV:[b]64bit:[/b] - [2010-04-07 21:08:30 | 000,050,600 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp) DRV:[b]64bit:[/b] - [2010-04-07 21:08:28 | 000,033,608 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\epfwndis.sys -- (Epfwndis) DRV:[b]64bit:[/b] - [2010-04-07 21:08:26 | 000,169,592 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw) DRV:[b]64bit:[/b] - [2010-04-07 21:07:10 | 000,139,704 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv) DRV:[b]64bit:[/b] - [2010-04-07 21:03:52 | 000,163,888 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm) DRV:[b]64bit:[/b] - [2010-01-22 03:13:24 | 006,233,088 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2010-01-22 03:13:24 | 006,233,088 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atipmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2010-01-22 02:07:56 | 000,161,280 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2009-11-11 17:44:26 | 000,034,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\point64k.sys -- (Point64) DRV:[b]64bit:[/b] - [2009-11-06 12:56:06 | 001,550,848 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009-11-02 12:48:02 | 000,013,784 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB) DRV:[b]64bit:[/b] - [2009-10-03 17:36:34 | 000,020,480 | ---- | M] (MotioninJoy) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MijUfilt.sys -- (MotioninJoyUSBFilter) DRV:[b]64bit:[/b] - [2009-09-17 06:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R) DRV:[b]64bit:[/b] - [2009-08-13 05:20:46 | 001,209,856 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem) DRV:[b]64bit:[/b] - [2009-08-05 22:43:58 | 000,320,040 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) Broadcom NetLink (TM) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 01:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap) DRV:[b]64bit:[/b] - [2009-07-14 01:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID) DRV:[b]64bit:[/b] - [2009-07-14 01:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC) DRV:[b]64bit:[/b] - [2009-06-24 12:23:24 | 000,205,472 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService) DRV:[b]64bit:[/b] - [2009-06-10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-05-24 13:57:42 | 000,243,760 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-4039863893-364985132-2430816299-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage IE - HKU\S-1-5-21-4039863893-364985132-2430816299-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..network.proxy.type: 0 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-08-06 15:51:29 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-08-13 17:40:55 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010-08-07 09:42:18 | 000,000,000 | ---D | M] [2010-08-06 21:41:19 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\mozilla\Extensions [2010-08-29 22:53:21 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\mozilla\Firefox\Profiles\fixz9gmf.default\extensions [2010-08-08 13:46:07 | 000,002,059 | ---- | M] () -- C:\Users\Tomek\AppData\Roaming\Mozilla\FireFox\Profiles\fixz9gmf.default\searchplugins\daemon-search.xml [2010-08-09 18:58:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions [2010-08-06 16:02:46 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2010-08-09 18:58:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010-08-09 18:58:42 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2010-07-23 02:41:44 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2010-07-23 02:41:44 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2010-07-23 02:41:44 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2010-07-23 02:41:44 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2010-07-23 02:41:44 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2010-07-23 02:41:44 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2010-08-07 17:03:21 | 000,000,808 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found O3:[b]64bit:[/b] - HKU\S-1-5-21-4039863893-364985132-2430816299-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O4 - Startup: C:\Users\Sławek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\YoWindow.lnk = C:\Program Files (x86)\YoWindow\yowindow.exe (Repkasoft) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 86.63.64.48 86.63.64.49 O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (systempropertiesperformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{a7a5d5f4-a2e2-11df-90b4-00262d96a4d0}\Shell - "" = AutoRun O33 - MountPoints2\{a7a5d5f4-a2e2-11df-90b4-00262d96a4d0}\Shell\AutoRun\command - "" = F:\autorun.exe -- File not found O34 - HKLM BootExecute: (PDBoot.exe) - File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (lsdelete) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) MsConfig:64bit - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) MsConfig:64bit - StartUpReg: [b]AmIcoSinglun64[/b] - hkey= - key= - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (AlcorMicro Co., Ltd.) MsConfig:64bit - StartUpReg: [b]Apoint[/b] - hkey= - key= - C:\Program Files\Apoint2K\Apoint.exe (Alps Electric Co., Ltd.) MsConfig:64bit - StartUpReg: [b]ATICustomerCare[/b] - hkey= - key= - C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.) MsConfig:64bit - StartUpReg: [b]cFosSpeed[/b] - hkey= - key= - C:\Program Files\cFosSpeed\cFosSpeed.exe File not found MsConfig:64bit - StartUpReg: [b]DAEMON Tools Lite[/b] - hkey= - key= - D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe File not found MsConfig:64bit - StartUpReg: [b]DS3 Tool[/b] - hkey= - key= - C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe (www.motioninjoy.com) MsConfig:64bit - StartUpReg: [b]egui[/b] - hkey= - key= - C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET) MsConfig:64bit - StartUpReg: [b]Gadu-Gadu 10[/b] - hkey= - key= - C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.) MsConfig:64bit - StartUpReg: [b]IntelliPoint[/b] - hkey= - key= - C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation) MsConfig:64bit - StartUpReg: [b]LManager[/b] - hkey= - key= - C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.) MsConfig:64bit - StartUpReg: [b]NetfMeter[/b] - hkey= - key= - C:\Windows\shell.exe File not found MsConfig:64bit - StartUpReg: [b]PLFSetI[/b] - hkey= - key= - C:\Windows\PLFSetI.exe () MsConfig:64bit - StartUpReg: [b]RtHDVCpl[/b] - hkey= - key= - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) MsConfig:64bit - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.) MsConfig:64bit - StartUpReg: [b]StartCCC[/b] - hkey= - key= - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) MsConfig:64bit - StartUpReg: [b]Steam[/b] - hkey= - key= - c:\program files (x86)\steam\steam.exe (Valve Corporation) MsConfig:64bit - StartUpReg: [b]SunJavaUpdateSched[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) MsConfig:64bit - State: "startup" - Reg Error: Key error. MsConfig:64bit - State: "bootini" - Reg Error: Key error. MsConfig:64bit - State: "services" - Reg Error: Key error. SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Base - Driver Group SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group SafeBootMin:[b]64bit:[/b] File system - Driver Group SafeBootMin:[b]64bit:[/b] Filter - Driver Group SafeBootMin:[b]64bit:[/b] HelpSvc - Service SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group SafeBootMin:[b]64bit:[/b] sacsvr - Service SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] vmms - Service SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: Lavasoft Ad-Aware Service - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft) SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Base - Driver Group SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group SafeBootNet:[b]64bit:[/b] File system - Driver Group SafeBootNet:[b]64bit:[/b] Filter - Driver Group SafeBootNet:[b]64bit:[/b] HelpSvc - Service SafeBootNet:[b]64bit:[/b] Messenger - Service SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group SafeBootNet:[b]64bit:[/b] Network - Driver Group SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group SafeBootNet:[b]64bit:[/b] rdsessmgr - Service SafeBootNet:[b]64bit:[/b] sacsvr - Service SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] TDI - Driver Group SafeBootNet:[b]64bit:[/b] vmms - Service SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Lavasoft Ad-Aware Service - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft) SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2010-08-29 22:55:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\trend micro [2010-08-29 22:55:32 | 000,000,000 | ---D | C] -- C:\rsit [2010-08-29 10:14:53 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Sunbelt Software [2010-08-29 10:14:40 | 000,000,000 | -H-D | C] -- C:\ProgramData\{ECC164E0-3133-4C70-A831-F08DB2940F70} [2010-08-29 10:14:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Lavasoft [2010-08-29 10:14:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lavasoft [2010-08-29 07:20:47 | 000,000,000 | ---D | C] -- C:\Program Files\SkanerOnline [2010-08-28 19:00:00 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Documents\KONAMI [2010-08-28 18:47:38 | 000,000,000 | ---D | C] -- C:\ProgramData\KONAMI [2010-08-28 17:19:47 | 001,422,728 | ---- | C] (Konami Digital Entertainment Co., Ltd.) -- C:\Users\Tomek\Desktop\settings.exe [2010-08-27 18:19:48 | 000,090,112 | ---- | C] (Saikeware Technology Co., Ltd. CHINA) -- C:\Windows\SysWow64\MijFrc.dll [2010-08-27 18:19:48 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\MotioninJoy [2010-08-27 18:19:48 | 000,000,000 | ---D | C] -- C:\ProgramData\MotioninJoy [2010-08-27 18:19:47 | 000,030,208 | ---- | C] (MotioninJoy) -- C:\Windows\SysNative\drivers\MijBThid.sys [2010-08-27 18:19:47 | 000,020,480 | ---- | C] (MotioninJoy) -- C:\Windows\SysNative\drivers\MijUfilt.sys [2010-08-27 18:19:47 | 000,000,000 | ---D | C] -- C:\Program Files\MotioninJoy [2010-08-22 10:23:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight [2010-08-21 18:29:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ray Adams [2010-08-20 16:03:51 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Tibia [2010-08-20 16:03:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tibia [2010-08-18 09:40:51 | 000,000,000 | ---D | C] -- C:\Program Files\cFosSpeed [2010-08-17 17:08:44 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Media Player Classic [2010-08-17 17:08:28 | 000,839,680 | ---- | C] (http://www.mp3dev.org/) -- C:\Windows\SysWow64\lameACM.acm [2010-08-17 17:08:28 | 000,217,088 | ---- | C] (www.helixcommunity.org) -- C:\Windows\SysWow64\yv12vfw.dll [2010-08-17 17:08:28 | 000,151,552 | ---- | C] (fccHandler) -- C:\Windows\SysWow64\ac3acm.acm [2010-08-17 17:08:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\K-Lite Codec Pack [2010-08-17 17:06:27 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\BESTplayer [2010-08-16 11:09:07 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2010-08-15 20:17:41 | 000,913,616 | ---- | C] (TurboPower Software Company) -- C:\Windows\System\A258_R35.bpl [2010-08-15 20:17:41 | 000,906,512 | ---- | C] (TurboPower Software Company) -- C:\Windows\System\A255_R35.bpl [2010-08-15 20:17:41 | 000,212,480 | ---- | C] (Eastman Kodak) -- C:\Windows\System\Pcdlib32.dll [2010-08-15 20:06:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IrfanView [2010-08-14 17:17:23 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt [2010-08-14 17:13:51 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Documents\BFBC2 [2010-08-14 11:40:04 | 000,000,000 | ---D | C] -- C:\Windows\pss [2010-08-14 10:18:51 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\Harry.Potter.and.the.Half.Blood.Prince.2009.PL.720p.BRRip.XviD.AC3-WDZ [2010-08-14 10:03:18 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Google [2010-08-13 17:35:20 | 000,000,000 | ---D | C] -- C:\Program Files\Google [2010-08-13 17:35:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Google [2010-08-13 17:33:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\YoWindow [2010-08-13 13:13:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Raxco [2010-08-13 13:13:38 | 000,000,000 | ---D | C] -- C:\Program Files\Raxco [2010-08-13 13:12:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Raxco [2010-08-12 18:25:30 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2010-08-12 18:24:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies [2010-08-12 18:08:34 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\PMB Files [2010-08-12 18:08:33 | 000,000,000 | ---D | C] -- C:\ProgramData\PMB Files [2010-08-12 18:08:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pando Networks [2010-08-12 18:00:05 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2010-08-11 17:09:12 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\takie tam [2010-08-10 15:57:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\METRO 2033 [2010-08-09 18:59:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2010-08-09 18:59:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2010-08-09 18:58:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2010-08-09 18:50:26 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft IntelliPoint [2010-08-09 16:13:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CCleaner [2010-08-08 22:02:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HLTooLz [2010-08-08 16:40:46 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\WebcamMax [2010-08-08 16:05:41 | 000,000,000 | ---D | C] -- C:\ProgramData\WebcamMax [2010-08-08 15:58:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WebcamMax [2010-08-08 15:37:09 | 000,000,000 | ---D | C] -- C:\ProgramData\OpenFM [2010-08-08 14:05:20 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Documents\FIFA 10 [2010-08-08 14:02:59 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Leadertech [2010-08-08 13:46:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Toolbar [2010-08-08 13:45:19 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\DAEMON Tools Lite [2010-08-08 13:45:17 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite [2010-08-07 17:45:09 | 000,000,000 | ---D | C] -- C:\_OTL [2010-08-07 16:43:10 | 000,000,000 | ---D | C] -- C:\Users\Tomek\DoctorWeb [2010-08-07 13:29:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Hewlett-Packard [2010-08-07 13:22:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works [2010-08-07 13:22:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER [2010-08-07 13:22:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET [2010-08-07 13:20:47 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office [2010-08-07 13:20:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office [2010-08-07 13:20:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help [2010-08-07 13:19:49 | 000,000,000 | RH-D | C] -- C:\MSOCache [2010-08-07 09:43:06 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\ESET [2010-08-07 09:43:06 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\ESET [2010-08-07 09:42:17 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET [2010-08-07 09:42:17 | 000,000,000 | ---D | C] -- C:\Program Files\ESET [2010-08-06 22:27:22 | 000,000,000 | ---D | C] -- C:\Windows\Panther [2010-08-06 21:42:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR [2010-08-06 21:42:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Launch Manager [2010-08-06 21:41:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2010-08-06 21:41:17 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Mozilla [2010-08-06 21:41:17 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Mozilla [2010-08-06 21:41:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2010-08-06 21:40:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2010-08-06 21:40:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe [2010-08-06 21:34:20 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Searches [2010-08-06 21:34:06 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Identities [2010-08-06 21:34:00 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Contacts [2010-08-06 21:33:54 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\VirtualStore [2010-08-06 21:33:30 | 000,000,000 | --SD | C] -- C:\Users\Tomek\AppData\Roaming\Microsoft [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Videos [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Saved Games [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Pictures [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Music [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Links [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Favorites [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Downloads [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Documents [2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Desktop [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Ustawienia lokalne [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\AppData\Local\Temporary Internet Files [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Szablony [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\SendTo [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Recent [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\PrintHood [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\NetHood [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Documents\Moje wideo [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Documents\Moje obrazy [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Moje dokumenty [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Documents\Moja muzyka [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Menu Start [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\AppData\Local\Historia [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Dane aplikacji [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\AppData\Local\Dane aplikacji [2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Cookies [2010-08-06 21:33:30 | 000,000,000 | -H-D | C] -- C:\Users\Tomek\AppData [2010-08-06 21:33:30 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Temp [2010-08-06 21:33:30 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Microsoft [2010-08-06 21:33:30 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Media Center Programs [2010-08-06 21:33:21 | 000,000,000 | -HSD | C] -- C:\Recovery [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Ulubione [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Szablony [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Pulpit [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Start [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty [2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji [2010-08-06 21:31:02 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2010-08-06 21:28:19 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2010-08-06 21:27:55 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2010-08-06 19:52:54 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Diagnostics [2010-08-06 18:50:30 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Ventrilo [2010-08-06 18:50:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ventrilo [2010-08-06 18:50:16 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\mIRC [2010-08-06 18:50:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\mIRC [2010-08-06 18:50:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard [2010-08-06 17:33:50 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Documents\My Games [2010-08-06 17:31:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts [2010-08-06 17:01:25 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2010-08-06 16:31:38 | 001,658,880 | ---- | C] (SuYin) -- C:\Windows\Acer Crystal Eye webcam.EXE [2010-08-06 16:31:13 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Intel [2010-08-06 16:30:26 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\ATI [2010-08-06 16:30:26 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\ATI [2010-08-06 16:30:06 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Intel [2010-08-06 16:30:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Intel [2010-08-06 16:30:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco [2010-08-06 16:29:32 | 000,000,000 | ---D | C] -- C:\Program Files\Broadcom [2010-08-06 16:28:37 | 001,550,848 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\athrx.sys [2010-08-06 16:28:37 | 001,550,848 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\athrx.sys [2010-08-06 16:28:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Atheros [2010-08-06 16:28:15 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\InstallShield [2010-08-06 16:23:51 | 000,000,000 | ---D | C] -- C:\Program Files\Intel [2010-08-06 16:22:49 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics [2010-08-06 16:20:36 | 000,000,000 | ---D | C] -- C:\ProgramData\AmUStor [2010-08-06 16:20:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AmIcoSingLun [2010-08-06 16:19:44 | 000,014,848 | ---- | C] (LSI Corporation) -- C:\Windows\SysWow64\agrsco64.dll [2010-08-06 16:19:41 | 000,000,000 | ---D | C] -- C:\Program Files\LSI SoftModem [2010-08-06 16:19:40 | 000,064,000 | ---- | C] (LSI Corporation) -- C:\Windows\agrsmdel.exe [2010-08-06 16:19:40 | 000,030,720 | ---- | C] (LSI Corporation) -- C:\Windows\agrdel64.exe [2010-08-06 16:19:40 | 000,014,848 | ---- | C] (LSI Corporation) -- C:\Windows\SysNative\agrsco64.dll [2010-08-06 16:19:35 | 000,000,000 | ---D | C] -- C:\Windows\Options [2010-08-06 16:19:20 | 000,000,000 | ---D | C] -- C:\Program Files\Apoint2K [2010-08-06 16:17:05 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\skypePM [2010-08-06 16:11:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam [2010-08-06 16:11:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam [2010-08-06 16:10:00 | 000,055,296 | ---- | C] (AMD) -- C:\Windows\SysNative\coinst.dll [2010-08-06 16:04:55 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM [2010-08-06 16:04:47 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek [2010-08-06 16:04:46 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RH3DHT64.dll [2010-08-06 16:04:45 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RH3DAA64.dll [2010-08-06 16:04:44 | 000,513,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll [2010-08-06 16:04:44 | 000,211,376 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll [2010-08-06 16:04:44 | 000,193,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll [2010-08-06 16:04:44 | 000,150,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll [2010-08-06 16:04:42 | 000,363,008 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll [2010-08-06 16:04:42 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll [2010-08-06 16:04:42 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll [2010-08-06 16:04:42 | 000,198,656 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll [2010-08-06 16:04:42 | 000,095,744 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll [2010-08-06 16:04:42 | 000,073,216 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll [2010-08-06 16:04:40 | 000,320,512 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll [2010-08-06 16:04:39 | 000,310,784 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll [2010-08-06 16:04:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek [2010-08-06 16:04:37 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp [2010-08-06 16:04:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield [2010-08-06 16:03:21 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Adobe [2010-08-06 16:02:54 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Skype [2010-08-06 16:02:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google [2010-08-06 16:02:37 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype [2010-08-06 16:02:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [2010-08-06 16:02:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2010-08-06 16:02:03 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed [2010-08-06 15:59:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI [2010-08-06 15:59:10 | 000,000,000 | ---D | C] -- C:\Program Files\ATI [2010-08-06 15:58:21 | 000,000,000 | ---D | C] -- C:\ATI [2010-08-06 15:55:58 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information [2010-08-06 15:55:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Atheros [2010-08-06 15:54:36 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll [2010-08-06 15:54:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel [2010-08-06 15:53:23 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\cache [2010-08-06 15:53:22 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Macromedia [2010-08-06 15:53:18 | 000,000,000 | ---D | C] -- C:\Intel [2010-08-06 15:51:40 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Gadu-Gadu 10 [2010-08-06 15:50:14 | 000,526,184 | ---- | C] (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) -- C:\Windows\SysWow64\XceedCry.dll [2010-08-06 15:50:14 | 000,456,536 | ---- | C] (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) -- C:\Windows\SysWow64\XCEEDZIP.DLL [2010-08-06 15:50:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Driver Magician [2010-08-06 15:49:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Gadu-Gadu 10 [2010-08-06 15:49:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gadu-Gadu 10 [2010-08-06 15:47:49 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\WinRAR [2010-08-06 15:47:43 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR [2010-08-06 15:47:00 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX [2010-08-06 15:46:25 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2010-07-12 11:24:32 | 000,341,504 | ---- | C] (repkasoft) -- C:\Windows\yowindow.scr [2010-07-07 03:51:26 | 000,450,048 | ---- | C] (AMD) -- C:\Windows\SysNative\atieclxx.exe [2010-07-07 03:50:54 | 000,202,752 | ---- | C] (AMD) -- C:\Windows\SysNative\atiesrxx.exe [2010-07-07 03:49:36 | 000,421,376 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysNative\atipdl64.dll [2010-07-07 03:49:18 | 000,278,528 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysWow64\Oemdspif.dll [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2010-08-29 23:00:45 | 001,835,008 | -HS- | M] () -- C:\Users\Tomek\NTUSER.DAT [2010-08-29 22:59:58 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjO3212.html [2010-08-29 22:59:58 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzS3212.html [2010-08-29 22:39:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010-08-29 22:10:24 | 000,009,600 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010-08-29 22:10:24 | 000,009,600 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010-08-29 21:54:37 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemppYa124.html [2010-08-29 21:40:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempua2160.html [2010-08-29 21:22:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temprs4004.html [2010-08-29 20:45:12 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010-08-29 20:08:16 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-08-29 20:08:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-08-29 20:08:11 | 3111,518,208 | -HS- | M] () -- C:\hiberfil.sys [2010-08-29 19:25:24 | 008,579,262 | -H-- | M] () -- C:\Users\Tomek\AppData\Local\IconCache.db [2010-08-29 19:25:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZI1548.html [2010-08-29 19:25:24 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqO1548.html [2010-08-29 18:52:38 | 000,000,941 | ---- | M] () -- C:\Users\Tomek\Desktop\DS3 Tool.lnk [2010-08-29 18:37:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPR3880.html [2010-08-29 18:37:17 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuO3880.html [2010-08-29 17:02:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJk3388.html [2010-08-29 17:02:28 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAq3388.html [2010-08-29 16:07:53 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxH3056.html [2010-08-29 16:07:53 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQq3056.html [2010-08-29 15:39:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempdZ3984.html [2010-08-29 13:19:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXj3304.html [2010-08-29 13:19:08 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLs3304.html [2010-08-29 12:23:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLA1280.html [2010-08-29 10:58:50 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempKS1060.html [2010-08-29 10:55:05 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLc4024.html [2010-08-29 10:18:36 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempRa2452.html [2010-08-29 10:14:40 | 000,001,142 | ---- | M] () -- C:\Users\Public\Desktop\Ad-Aware.lnk [2010-08-29 07:20:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiO3248.html [2010-08-28 19:19:51 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempUx4036.html [2010-08-28 19:10:57 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempKU3436.html [2010-08-28 18:00:58 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempgP2652.html [2010-08-28 15:55:13 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempeO2132.html [2010-08-28 15:39:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOW1488.html [2010-08-28 15:16:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempoZ3696.html [2010-08-28 14:35:12 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempzi3888.html [2010-08-28 14:35:12 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempnb3888.html [2010-08-28 13:23:46 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcs2640.html [2010-08-28 13:23:46 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOu2640.html [2010-08-28 12:42:30 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempmd1244.html [2010-08-28 12:12:30 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLZ3744.html [2010-08-28 11:01:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temptm2912.html [2010-08-28 10:45:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYK1796.html [2010-08-28 10:26:49 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempKd3748.html [2010-08-28 09:28:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempuw3508.html [2010-08-27 23:28:12 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQD2452.html [2010-08-27 23:28:12 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqT2452.html [2010-08-27 21:37:37 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAE3380.html [2010-08-27 21:37:37 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temppd3380.html [2010-08-27 19:43:29 | 000,056,592 | ---- | M] () -- C:\Users\Tomek\Documents\devdata.dat [2010-08-27 19:12:53 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temprr3576.html [2010-08-27 19:05:03 | 001,523,412 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010-08-27 19:05:03 | 000,687,828 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2010-08-27 19:05:03 | 000,607,190 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010-08-27 19:05:03 | 000,131,382 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2010-08-27 19:05:03 | 000,103,568 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010-08-27 18:58:07 | 000,000,543 | ---- | M] () -- C:\Windows\NGO.cer [2010-08-27 18:32:17 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_MijUfilt_01009.Wdf [2010-08-27 18:31:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempmN1476.html [2010-08-27 18:07:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temptb3224.html [2010-08-27 14:35:42 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXm1464.html [2010-08-27 14:03:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempmp3436.html [2010-08-27 11:54:19 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempEM1444.html [2010-08-27 11:54:19 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAr1444.html [2010-08-27 11:25:33 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempry3036.html [2010-08-26 18:44:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYS1556.html [2010-08-26 18:44:28 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temphj1556.html [2010-08-26 15:01:22 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxF3116.html [2010-08-26 15:01:22 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaE3116.html [2010-08-26 11:11:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempcZ3560.html [2010-08-26 11:11:45 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLi3560.html [2010-08-26 08:47:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempbV3584.html [2010-08-25 19:19:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBP3020.html [2010-08-25 18:20:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZA3772.html [2010-08-25 18:20:54 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQH3772.html [2010-08-25 17:21:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPj3060.html [2010-08-25 16:40:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempON2504.html [2010-08-25 12:30:59 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempmBn960.html [2010-08-25 11:15:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXN3632.html [2010-08-25 10:18:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemptRM244.html [2010-08-25 09:15:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYI3400.html [2010-08-25 08:56:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqI3340.html [2010-08-24 23:39:03 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempof2476.html [2010-08-24 23:39:03 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXA2476.html [2010-08-24 19:04:39 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempwv1544.html [2010-08-24 17:50:47 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempmd3248.html [2010-08-24 17:50:47 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuK3248.html [2010-08-24 17:47:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempnT3716.html [2010-08-24 16:54:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWY3344.html [2010-08-24 14:38:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuO3912.html [2010-08-24 14:38:24 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempoZ3912.html [2010-08-24 13:24:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLyu924.html [2010-08-24 13:24:21 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJRN924.html [2010-08-24 12:44:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempyZ3220.html [2010-08-24 12:09:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjXz184.html [2010-08-24 12:09:17 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxCg184.html [2010-08-24 11:26:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempvZl780.html [2010-08-24 11:17:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempVR3028.html [2010-08-24 10:49:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGO2664.html [2010-08-24 10:12:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdq3200.html [2010-08-24 09:37:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempUNj548.html [2010-08-24 09:30:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjF4076.html [2010-08-23 22:53:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temphk1800.html [2010-08-23 19:53:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcl3884.html [2010-08-23 19:53:54 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempKB3884.html [2010-08-23 17:58:10 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempgT3408.html [2010-08-23 17:58:10 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempiz3408.html [2010-08-23 17:45:51 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPZ3304.html [2010-08-23 17:45:51 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDE3304.html [2010-08-23 17:41:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemplTr236.html [2010-08-23 16:52:13 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempot2960.html [2010-08-23 16:26:49 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempzd2512.html [2010-08-23 15:54:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temput3164.html [2010-08-23 15:01:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temple3124.html [2010-08-23 11:36:31 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaK3612.html [2010-08-23 11:36:31 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempez3612.html [2010-08-23 10:57:53 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAg3748.html [2010-08-23 10:39:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temphj3496.html [2010-08-23 10:24:31 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOf1404.html [2010-08-23 10:13:13 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYB2400.html [2010-08-23 10:10:00 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempUt2736.html [2010-08-23 09:45:14 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempSV3596.html [2010-08-23 08:50:39 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemprS3516.html [2010-08-23 08:50:39 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempFP3516.html [2010-08-22 20:32:19 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXZ3940.html [2010-08-22 20:32:19 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXY3940.html [2010-08-22 20:03:01 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJI2584.html [2010-08-22 20:03:01 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaT2584.html [2010-08-22 19:36:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemptB1268.html [2010-08-22 19:36:08 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempMG1268.html [2010-08-22 16:50:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYk3536.html [2010-08-22 16:50:35 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgb3536.html [2010-08-22 15:47:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjO2964.html [2010-08-22 15:47:24 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQm2964.html [2010-08-22 15:01:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temptq3968.html [2010-08-22 15:01:24 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQx3968.html [2010-08-22 14:08:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGk2192.html [2010-08-22 12:47:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temppt3260.html [2010-08-22 12:47:06 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempEC3260.html [2010-08-21 20:25:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAP2280.html [2010-08-21 20:25:15 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGC2280.html [2010-08-21 18:40:18 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjP3244.html [2010-08-21 18:40:18 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempUW3244.html [2010-08-21 18:36:07 | 000,026,424 | --S- | M] () -- C:\Windows\SysNative\drivers\DRIVER_BIN64 [2010-08-21 18:35:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempgF1704.html [2010-08-21 18:35:15 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgu1704.html [2010-08-21 18:32:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaZ3432.html [2010-08-21 18:32:45 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPL3432.html [2010-08-21 18:14:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAI3712.html [2010-08-21 18:14:38 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDH3712.html [2010-08-21 14:50:10 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNh3232.html [2010-08-21 14:50:10 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTO3232.html [2010-08-21 12:18:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempkD2824.html [2010-08-21 12:18:15 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGn2824.html [2010-08-21 08:43:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempbF3608.html [2010-08-21 08:18:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYl3624.html [2010-08-20 22:55:39 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNW1488.html [2010-08-20 20:58:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcd2444.html [2010-08-20 20:58:45 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempvI2444.html [2010-08-20 18:23:33 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZm3968.html [2010-08-20 18:23:33 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXK3968.html [2010-08-20 18:16:02 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempeXq644.html [2010-08-20 17:38:55 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiC4004.html [2010-08-20 16:18:40 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZS3992.html [2010-08-20 14:22:19 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Templo3784.html [2010-08-20 14:22:19 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTy3784.html [2010-08-20 11:13:42 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempKw1300.html [2010-08-20 11:13:42 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjN1300.html [2010-08-20 11:00:10 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIx3192.html [2010-08-20 10:37:46 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempri3628.html [2010-08-20 10:34:57 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBI2208.html [2010-08-20 10:17:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempMw3708.html [2010-08-20 09:43:03 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempRM3764.html [2010-08-19 23:51:30 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempva3420.html [2010-08-19 10:48:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGA3788.html [2010-08-19 09:43:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIk2508.html [2010-08-19 09:17:38 | 000,000,460 | ---- | M] () -- C:\Users\Tomek\Documents\cc_20100819_091735.reg [2010-08-19 09:08:01 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwM3888.html [2010-08-18 18:31:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTk3608.html [2010-08-18 15:44:13 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempSrE620.html [2010-08-18 14:04:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzJ2880.html [2010-08-18 11:03:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLK3492.html [2010-08-18 09:53:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcl3484.html [2010-08-18 09:33:30 | 000,007,597 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Resmon.ResmonCfg [2010-08-17 22:33:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempjp4576.html [2010-08-17 22:33:56 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYZ4576.html [2010-08-17 20:22:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemplM1448.html [2010-08-17 20:22:56 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwI1448.html [2010-08-17 15:43:31 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWl3080.html [2010-08-17 15:43:31 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempzi3080.html [2010-08-17 12:54:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temphl3460.html [2010-08-17 12:54:34 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemppX3460.html [2010-08-17 12:41:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWl2324.html [2010-08-17 12:41:04 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempte2324.html [2010-08-16 22:56:27 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempMd1572.html [2010-08-16 22:56:27 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDD1572.html [2010-08-16 21:21:58 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempnh3416.html [2010-08-16 19:15:20 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaP2448.html [2010-08-16 19:15:20 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGG2448.html [2010-08-16 18:06:33 | 000,001,511 | ---- | M] () -- C:\Users\Tomek\Desktop\BFBC2Game — skrót.lnk [2010-08-16 18:06:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdc3012.html [2010-08-16 17:55:51 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJtB568.html [2010-08-16 17:55:51 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWKR568.html [2010-08-16 17:38:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqV2152.html [2010-08-16 16:11:18 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJT1460.html [2010-08-16 09:34:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqS3820.html [2010-08-15 22:59:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempqn3132.html [2010-08-15 22:59:04 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempoi3132.html [2010-08-15 22:04:50 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempsa3228.html [2010-08-15 21:56:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDs3668.html [2010-08-15 18:59:40 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuE4260.html [2010-08-15 18:59:40 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcs4260.html [2010-08-15 17:29:59 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempVW1652.html [2010-08-15 13:22:53 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempyu3880.html [2010-08-14 19:58:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempir3892.html [2010-08-14 19:58:41 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBS3892.html [2010-08-14 18:57:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemptI1148.html [2010-08-14 18:19:19 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQF3680.html [2010-08-14 17:23:32 | 000,000,232 | ---- | M] () -- C:\Users\Tomek\Desktop\Battlefield Bad Company™ 2.lnk [2010-08-14 17:15:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempbH3280.html [2010-08-14 14:38:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPO2952.html [2010-08-14 14:38:28 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxF2952.html [2010-08-14 09:08:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiG4084.html [2010-08-13 20:42:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgl4048.html [2010-08-13 20:42:48 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZm4048.html [2010-08-13 19:33:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdk2236.html [2010-08-13 19:33:41 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNU2236.html [2010-08-13 18:10:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemprF3652.html [2010-08-13 18:10:21 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempRh3652.html [2010-08-13 17:59:57 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJH3848.html [2010-08-13 15:46:03 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPr1964.html [2010-08-13 10:03:00 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempeE2020.html [2010-08-13 09:09:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempnV3680.html [2010-08-12 21:21:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiE2632.html [2010-08-12 21:21:11 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempEn4084.html [2010-08-12 21:01:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempei2292.html [2010-08-12 19:23:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempSo2356.html [2010-08-12 19:23:54 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuV2356.html [2010-08-12 18:26:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempnw3760.html [2010-08-12 18:26:08 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdv3760.html [2010-08-12 18:19:01 | 000,001,514 | ---- | M] () -- C:\Users\Tomek\Desktop\Resume Download of The Lord of the Rings Online Siege of Mirkwood.lnk [2010-08-12 18:01:58 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwI2584.html [2010-08-12 18:01:58 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzN2584.html [2010-08-12 17:56:40 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWo2252.html [2010-08-12 17:56:40 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIM2252.html [2010-08-12 17:50:34 | 000,002,189 | ---- | M] () -- C:\Users\Tomek\Desktop\cstrike.rar [2010-08-12 17:24:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGH1064.html [2010-08-12 16:19:12 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJF2528.html [2010-08-12 16:19:12 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgq2528.html [2010-08-12 14:15:20 | 000,015,880 | ---- | M] () -- C:\Windows\SysNative\lsdelete.exe [2010-08-12 11:24:59 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempmI1508.html [2010-08-12 10:00:00 | 000,108,032 | ---- | M] () -- C:\Windows\SysWow64\ff_vfw.dll [2010-08-12 10:00:00 | 000,000,038 | ---- | M] () -- C:\Windows\avisplitter.ini [2010-08-12 09:43:10 | 000,001,084 | ---- | M] () -- C:\Users\Tomek\Documents\cc_20100812_094308.reg [2010-08-12 09:40:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempHI2728.html [2010-08-11 21:54:46 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempsI3148.html [2010-08-11 21:54:46 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempCB3148.html [2010-08-11 20:38:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempCS2156.html [2010-08-11 19:28:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemppL3612.html [2010-08-11 19:28:43 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempMo3612.html [2010-08-11 16:03:47 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempnYC224.html [2010-08-11 10:08:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYP3176.html [2010-08-10 21:43:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAd3796.html [2010-08-10 21:42:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempsr3420.html [2010-08-10 19:10:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjQ3408.html [2010-08-10 16:05:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempun1052.html [2010-08-10 13:58:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemptK3660.html [2010-08-10 12:37:18 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempun3676.html [2010-08-10 12:37:18 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxH3676.html [2010-08-10 10:58:01 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaDq316.html [2010-08-10 09:22:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempHy4088.html [2010-08-09 23:11:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIW2740.html [2010-08-09 23:11:15 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNU2740.html [2010-08-09 21:54:20 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempmx1372.html [2010-08-09 21:54:20 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempoX1372.html [2010-08-09 20:20:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwH1428.html [2010-08-09 20:12:14 | 000,068,264 | ---- | M] () -- C:\Users\Tomek\AppData\Local\GDIPFONTCACHEV1.DAT [2010-08-09 20:11:36 | 000,307,320 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010-08-09 19:58:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTo1168.html [2010-08-09 17:17:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjW1980.html [2010-08-09 16:12:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYI2104.html [2010-08-09 15:08:47 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZh3532.html [2010-08-09 14:00:31 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempHB3524.html [2010-08-09 14:00:31 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempxk3524.html [2010-08-09 13:43:05 | 200,000,000 | ---- | M] () -- C:\Users\Tomek\met33.part02.rar [2010-08-09 13:30:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNe3576.html [2010-08-09 12:29:32 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXS1016.html [2010-08-09 12:29:32 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempFi1016.html [2010-08-09 12:24:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLCJ852.html [2010-08-09 11:21:01 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzT3992.html [2010-08-09 10:15:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempVH2328.html [2010-08-09 09:19:00 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAz3216.html [2010-08-08 22:53:51 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDE1820.html [2010-08-08 22:53:51 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiB1820.html [2010-08-08 18:53:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZG3652.html [2010-08-08 17:55:47 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempeB3024.html [2010-08-08 17:50:44 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempCi3560.html [2010-08-08 17:41:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgr2792.html [2010-08-08 17:41:48 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzH2792.html [2010-08-08 17:04:18 | 000,000,136 | ---- | M] () -- C:\Users\Tomek\Desktop\winsockfix.bat [2010-08-08 16:46:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNr1172.html [2010-08-08 15:16:55 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempde2288.html [2010-08-08 15:16:55 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdk2288.html [2010-08-08 14:50:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempvD3768.html [2010-08-08 14:28:55 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempsI2544.html [2010-08-08 14:23:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYS3844.html [2010-08-08 14:02:41 | 000,000,192 | ---- | M] () -- C:\Users\Tomek\Desktop\FIFA 10.lnk [2010-08-08 13:46:20 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOk2924.html [2010-08-08 13:46:20 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBa2924.html [2010-08-08 13:45:50 | 000,834,544 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys [2010-08-08 12:40:50 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010-08-08 11:56:16 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTR1260.html [2010-08-08 09:20:52 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempkA3832.html [2010-08-08 07:20:10 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPs1796.html [2010-08-07 22:05:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAe3624.html [2010-08-07 22:05:54 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxD3624.html [2010-08-07 21:01:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempcJG952.html [2010-08-07 21:01:25 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempHDA952.html [2010-08-07 18:53:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemprcV716.html [2010-08-07 18:53:06 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwSt716.html [2010-08-07 17:03:21 | 000,000,808 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2010-08-07 16:37:50 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIB1228.html [2010-08-07 16:37:50 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempbP1228.html [2010-08-07 16:36:56 | 000,000,414 | RHS- | M] () -- C:\ProgramData\ntuser.pol [2010-08-07 13:51:29 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBu2632.html [2010-08-07 09:44:29 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJT2868.html [2010-08-06 21:57:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOH1780.html [2010-08-06 21:42:25 | 000,000,000 | ---- | M] () -- C:\Windows\Setup.INI [2010-08-06 21:42:13 | 000,000,089 | ---- | M] () -- C:\Windows\LManager.UNI [2010-08-06 21:41:15 | 000,001,939 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010-08-06 21:35:51 | 000,524,288 | -HS- | M] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2010-08-06 21:35:51 | 000,524,288 | -HS- | M] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2010-08-06 21:35:51 | 000,065,536 | -HS- | M] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [2010-08-06 21:35:44 | 000,002,048 | ---- | M] () -- C:\Windows\SysWow64\winver.exe [2010-08-06 21:35:39 | 000,113,543 | ---- | M] () -- C:\Windows\SysWow64\slmgr.vbs [2010-08-06 21:33:30 | 000,000,020 | -HS- | M] () -- C:\Users\Tomek\ntuser.ini [2010-08-06 21:31:41 | 000,000,803 | ---- | M] () -- C:\Windows\SysWow64\license.rtf [2010-08-06 21:31:41 | 000,000,803 | ---- | M] () -- C:\Windows\SysNative\license.rtf [2010-08-06 20:41:05 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDk3572.html [2010-08-06 20:41:05 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWB3572.html [2010-08-06 20:16:09 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLu3016.html [2010-08-06 19:55:05 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemphUZ988.html [2010-08-06 19:55:05 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempEea988.html [2010-08-06 19:45:40 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQX3396.html [2010-08-06 19:29:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPDa568.html [2010-08-06 18:42:52 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temple1308.html [2010-08-06 17:01:51 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_point64k_01009.Wdf [2010-08-06 16:32:55 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin [2010-08-06 16:32:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaPR452.html [2010-08-06 16:32:04 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempctK452.html [2010-08-06 16:29:17 | 000,006,656 | ---- | M] () -- C:\Windows\SysNative\bcmwlrc.dll [2010-08-06 16:22:52 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf [2010-08-06 16:19:23 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01007.Wdf [2010-08-06 16:17:06 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat [2010-08-06 16:12:37 | 000,000,218 | ---- | M] () -- C:\Users\Tomek\Desktop\Counter-Strike.url [2010-08-06 16:06:20 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPl2024.html [2010-08-06 16:00:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempsf2812.html [2010-08-06 16:00:25 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempcX2812.html [2010-08-06 15:49:53 | 000,001,003 | ---- | M] () -- C:\Users\Tomek\Desktop\Gadu-Gadu 10.lnk [2010-07-12 11:24:32 | 000,341,504 | ---- | M] (repkasoft) -- C:\Windows\yowindow.scr [2010-07-07 03:54:32 | 000,063,416 | ---- | M] () -- C:\Windows\SysNative\atiapfxx.blb [2010-07-07 03:49:18 | 000,278,528 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\SysWow64\Oemdspif.dll [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-08-29 22:59:58 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjO3212.html [2010-08-29 22:59:58 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzS3212.html [2010-08-29 21:41:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemppYa124.html [2010-08-29 21:27:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempua2160.html [2010-08-29 20:50:28 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temprs4004.html [2010-08-29 18:56:55 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZI1548.html [2010-08-29 18:56:55 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqO1548.html [2010-08-29 18:52:38 | 000,000,941 | ---- | C] () -- C:\Users\Tomek\Desktop\DS3 Tool.lnk [2010-08-29 18:21:17 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPR3880.html [2010-08-29 18:21:17 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuO3880.html [2010-08-29 17:00:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJk3388.html [2010-08-29 17:00:18 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAq3388.html [2010-08-29 15:49:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxH3056.html [2010-08-29 15:49:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQq3056.html [2010-08-29 14:22:19 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempdZ3984.html [2010-08-29 12:53:14 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXj3304.html [2010-08-29 12:53:14 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLs3304.html [2010-08-29 12:23:11 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLA1280.html [2010-08-29 11:20:48 | 000,015,880 | ---- | C] () -- C:\Windows\SysNative\lsdelete.exe [2010-08-29 10:58:27 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempKS1060.html [2010-08-29 10:54:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLc4024.html [2010-08-29 10:14:40 | 000,001,142 | ---- | C] () -- C:\Users\Public\Desktop\Ad-Aware.lnk [2010-08-29 10:10:49 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempRa2452.html [2010-08-29 07:18:55 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiO3248.html [2010-08-28 19:12:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempUx4036.html [2010-08-28 19:10:36 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempKU3436.html [2010-08-28 17:56:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempgP2652.html [2010-08-28 15:53:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempeO2132.html [2010-08-28 15:29:43 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOW1488.html [2010-08-28 15:14:35 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempoZ3696.html [2010-08-28 14:33:11 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempzi3888.html [2010-08-28 14:33:11 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempnb3888.html [2010-08-28 13:14:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcs2640.html [2010-08-28 13:14:40 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOu2640.html [2010-08-28 12:22:59 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempmd1244.html [2010-08-28 11:47:05 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLZ3744.html [2010-08-28 10:56:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temptm2912.html [2010-08-28 10:44:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYK1796.html [2010-08-28 10:26:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempKd3748.html [2010-08-28 09:10:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempuw3508.html [2010-08-27 22:53:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQD2452.html [2010-08-27 22:53:31 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqT2452.html [2010-08-27 21:35:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAE3380.html [2010-08-27 21:35:31 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temppd3380.html [2010-08-27 19:47:14 | 000,056,592 | ---- | C] () -- C:\Users\Tomek\Documents\devdata.dat [2010-08-27 19:07:45 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temprr3576.html [2010-08-27 18:58:07 | 000,000,543 | ---- | C] () -- C:\Windows\NGO.cer [2010-08-27 18:32:17 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_MijUfilt_01009.Wdf [2010-08-27 18:30:56 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempmN1476.html [2010-08-27 18:07:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temptb3224.html [2010-08-27 14:35:28 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXm1464.html [2010-08-27 13:49:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempmp3436.html [2010-08-27 11:41:27 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempEM1444.html [2010-08-27 11:41:27 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAr1444.html [2010-08-27 11:05:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempry3036.html [2010-08-26 18:34:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYS1556.html [2010-08-26 18:34:31 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temphj1556.html [2010-08-26 14:57:56 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxF3116.html [2010-08-26 14:57:56 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaE3116.html [2010-08-26 10:55:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempcZ3560.html [2010-08-26 10:55:38 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLi3560.html [2010-08-26 08:39:58 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempbV3584.html [2010-08-25 18:32:46 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBP3020.html [2010-08-25 18:05:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZA3772.html [2010-08-25 18:05:16 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQH3772.html [2010-08-25 17:21:05 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPj3060.html [2010-08-25 16:24:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempON2504.html [2010-08-25 11:35:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempmBn960.html [2010-08-25 11:14:51 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXN3632.html [2010-08-25 10:17:56 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemptRM244.html [2010-08-25 09:02:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYI3400.html [2010-08-25 08:53:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqI3340.html [2010-08-24 22:58:46 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempof2476.html [2010-08-24 22:58:46 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXA2476.html [2010-08-24 18:35:08 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempwv1544.html [2010-08-24 17:48:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempmd3248.html [2010-08-24 17:48:41 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuK3248.html [2010-08-24 17:44:22 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempnT3716.html [2010-08-24 16:37:22 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWY3344.html [2010-08-24 14:37:35 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuO3912.html [2010-08-24 14:37:35 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempoZ3912.html [2010-08-24 13:23:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLyu924.html [2010-08-24 13:23:15 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJRN924.html [2010-08-24 12:42:46 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempyZ3220.html [2010-08-24 12:07:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjXz184.html [2010-08-24 12:07:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxCg184.html [2010-08-24 11:20:14 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempvZl780.html [2010-08-24 11:17:25 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempVR3028.html [2010-08-24 10:49:26 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGO2664.html [2010-08-24 10:12:02 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdq3200.html [2010-08-24 09:37:26 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempUNj548.html [2010-08-24 09:20:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjF4076.html [2010-08-23 21:02:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temphk1800.html [2010-08-23 19:17:55 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcl3884.html [2010-08-23 19:17:55 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempKB3884.html [2010-08-23 17:57:12 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempgT3408.html [2010-08-23 17:57:12 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempiz3408.html [2010-08-23 17:45:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPZ3304.html [2010-08-23 17:45:32 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDE3304.html [2010-08-23 16:57:43 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemplTr236.html [2010-08-23 16:52:02 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempot2960.html [2010-08-23 16:26:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempzd2512.html [2010-08-23 15:41:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temput3164.html [2010-08-23 15:00:46 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temple3124.html [2010-08-23 11:13:04 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaK3612.html [2010-08-23 11:13:04 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempez3612.html [2010-08-23 10:57:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAg3748.html [2010-08-23 10:38:51 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temphj3496.html [2010-08-23 10:21:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOf1404.html [2010-08-23 10:12:58 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYB2400.html [2010-08-23 10:09:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempUt2736.html [2010-08-23 09:44:59 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempSV3596.html [2010-08-23 08:25:54 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemprS3516.html [2010-08-23 08:25:54 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempFP3516.html [2010-08-22 20:29:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXZ3940.html [2010-08-22 20:29:00 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXY3940.html [2010-08-22 20:01:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJI2584.html [2010-08-22 20:01:41 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaT2584.html [2010-08-22 17:17:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemptB1268.html [2010-08-22 17:17:41 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempMG1268.html [2010-08-22 16:39:26 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgb3536.html [2010-08-22 16:39:25 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYk3536.html [2010-08-22 15:38:49 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjO2964.html [2010-08-22 15:38:49 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQm2964.html [2010-08-22 14:51:10 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temptq3968.html [2010-08-22 14:51:10 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQx3968.html [2010-08-22 13:26:56 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGk2192.html [2010-08-22 09:41:34 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temppt3260.html [2010-08-22 09:41:34 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempEC3260.html [2010-08-21 20:11:59 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAP2280.html [2010-08-21 20:11:59 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGC2280.html [2010-08-21 18:38:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjP3244.html [2010-08-21 18:38:41 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempUW3244.html [2010-08-21 18:35:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempgF1704.html [2010-08-21 18:35:15 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgu1704.html [2010-08-21 18:31:57 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaZ3432.html [2010-08-21 18:31:57 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPL3432.html [2010-08-21 18:29:49 | 000,026,424 | --S- | C] () -- C:\Windows\SysNative\drivers\DRIVER_BIN64 [2010-08-21 18:14:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAI3712.html [2010-08-21 18:14:38 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDH3712.html [2010-08-21 14:17:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNh3232.html [2010-08-21 14:17:15 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTO3232.html [2010-08-21 09:44:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempkD2824.html [2010-08-21 09:44:42 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGn2824.html [2010-08-21 08:41:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempbF3608.html [2010-08-21 08:08:06 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYl3624.html [2010-08-20 22:48:14 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNW1488.html [2010-08-20 20:07:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcd2444.html [2010-08-20 20:07:30 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempvI2444.html [2010-08-20 18:23:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZm3968.html [2010-08-20 18:23:00 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXK3968.html [2010-08-20 18:15:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempeXq644.html [2010-08-20 17:37:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiC4004.html [2010-08-20 15:53:14 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZS3992.html [2010-08-20 15:52:40 | 000,001,003 | ---- | C] () -- C:\Users\Tomek\Desktop\Gadu-Gadu 10.lnk [2010-08-20 14:19:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Templo3784.html [2010-08-20 14:19:31 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTy3784.html [2010-08-20 11:05:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempKw1300.html [2010-08-20 11:05:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjN1300.html [2010-08-20 10:57:08 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIx3192.html [2010-08-20 10:37:35 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempri3628.html [2010-08-20 10:34:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBI2208.html [2010-08-20 10:17:10 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempMw3708.html [2010-08-20 08:35:53 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempRM3764.html [2010-08-19 22:11:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempva3420.html [2010-08-19 10:33:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGA3788.html [2010-08-19 09:43:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIk2508.html [2010-08-19 09:17:37 | 000,000,460 | ---- | C] () -- C:\Users\Tomek\Documents\cc_20100819_091735.reg [2010-08-19 09:05:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwM3888.html [2010-08-18 17:18:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTk3608.html [2010-08-18 15:43:53 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempSrE620.html [2010-08-18 14:04:19 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzJ2880.html [2010-08-18 11:03:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLK3492.html [2010-08-18 09:52:57 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcl3484.html [2010-08-17 22:29:17 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempjp4576.html [2010-08-17 22:29:17 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYZ4576.html [2010-08-17 20:19:47 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemplM1448.html [2010-08-17 20:19:47 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwI1448.html [2010-08-17 17:08:30 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2010-08-17 17:08:30 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini [2010-08-17 17:08:28 | 000,790,528 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2010-08-17 17:08:28 | 000,134,144 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2010-08-17 17:08:28 | 000,000,547 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll.manifest [2010-08-17 17:08:28 | 000,000,414 | ---- | C] () -- C:\Windows\SysWow64\lame_acm.xml [2010-08-17 17:08:27 | 000,108,032 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2010-08-17 15:42:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWl3080.html [2010-08-17 15:42:48 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempzi3080.html [2010-08-17 12:43:01 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temphl3460.html [2010-08-17 12:43:01 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemppX3460.html [2010-08-17 12:27:06 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWl2324.html [2010-08-17 12:27:06 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempte2324.html [2010-08-16 21:43:27 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempMd1572.html [2010-08-16 21:43:27 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDD1572.html [2010-08-16 21:18:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempnh3416.html [2010-08-16 19:14:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaP2448.html [2010-08-16 19:14:16 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGG2448.html [2010-08-16 18:06:34 | 000,001,511 | ---- | C] () -- C:\Users\Tomek\Desktop\BFBC2Game — skrót.lnk [2010-08-16 18:05:54 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdc3012.html [2010-08-16 17:45:11 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJtB568.html [2010-08-16 17:45:11 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWKR568.html [2010-08-16 17:37:55 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqV2152.html [2010-08-16 16:11:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJT1460.html [2010-08-16 09:33:20 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqS3820.html [2010-08-15 22:56:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempqn3132.html [2010-08-15 22:56:44 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempoi3132.html [2010-08-15 21:56:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempsa3228.html [2010-08-15 21:55:07 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDs3668.html [2010-08-15 20:17:41 | 000,081,920 | ---- | C] () -- C:\Windows\System\CAPI2032.DLL [2010-08-15 20:17:40 | 000,306,688 | ---- | C] () -- C:\Windows\System\LFFPX7.DLL [2010-08-15 20:17:40 | 000,095,232 | ---- | C] () -- C:\Windows\System\LFKODAK.DLL [2010-08-15 17:43:21 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuE4260.html [2010-08-15 17:43:21 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcs4260.html [2010-08-15 17:11:34 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempVW1652.html [2010-08-15 12:40:36 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempyu3880.html [2010-08-14 19:16:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempir3892.html [2010-08-14 19:16:44 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBS3892.html [2010-08-14 18:53:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemptI1148.html [2010-08-14 17:57:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQF3680.html [2010-08-14 17:23:32 | 000,000,232 | ---- | C] () -- C:\Users\Tomek\Desktop\Battlefield Bad Company™ 2.lnk [2010-08-14 16:49:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempbH3280.html [2010-08-14 13:35:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPO2952.html [2010-08-14 13:35:38 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxF2952.html [2010-08-14 10:34:47 | 000,001,048 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010-08-14 10:34:46 | 000,001,044 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010-08-14 08:57:53 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiG4084.html [2010-08-13 20:30:20 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgl4048.html [2010-08-13 20:30:20 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZm4048.html [2010-08-13 19:27:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdk2236.html [2010-08-13 19:27:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNU2236.html [2010-08-13 18:10:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemprF3652.html [2010-08-13 18:10:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempRh3652.html [2010-08-13 17:42:17 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJH3848.html [2010-08-13 15:45:35 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPr1964.html [2010-08-13 09:59:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempeE2020.html [2010-08-13 09:09:05 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempnV3680.html [2010-08-12 21:21:19 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiE2632.html [2010-08-12 21:15:21 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempEn4084.html [2010-08-12 20:52:21 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempei2292.html [2010-08-12 18:33:17 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempSo2356.html [2010-08-12 18:33:17 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuV2356.html [2010-08-12 18:19:01 | 000,001,514 | ---- | C] () -- C:\Users\Tomek\Desktop\Resume Download of The Lord of the Rings Online Siege of Mirkwood.lnk [2010-08-12 18:04:57 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempnw3760.html [2010-08-12 18:04:57 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdv3760.html [2010-08-12 18:00:37 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwI2584.html [2010-08-12 18:00:37 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzN2584.html [2010-08-12 17:52:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWo2252.html [2010-08-12 17:52:18 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIM2252.html [2010-08-12 17:50:34 | 000,002,189 | ---- | C] () -- C:\Users\Tomek\Desktop\cstrike.rar [2010-08-12 17:15:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGH1064.html [2010-08-12 15:51:51 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJF2528.html [2010-08-12 15:51:51 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgq2528.html [2010-08-12 11:24:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempmI1508.html [2010-08-12 09:43:09 | 000,001,084 | ---- | C] () -- C:\Users\Tomek\Documents\cc_20100812_094308.reg [2010-08-12 09:39:52 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempHI2728.html [2010-08-11 21:15:28 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempsI3148.html [2010-08-11 21:15:28 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempCB3148.html [2010-08-11 20:38:12 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempCS2156.html [2010-08-11 17:41:43 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemppL3612.html [2010-08-11 17:41:43 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempMo3612.html [2010-08-11 16:02:37 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempnYC224.html [2010-08-11 10:06:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYP3176.html [2010-08-10 21:43:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAd3796.html [2010-08-10 21:41:23 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempsr3420.html [2010-08-10 19:04:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjQ3408.html [2010-08-10 16:03:34 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempun1052.html [2010-08-10 13:49:05 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemptK3660.html [2010-08-10 12:37:04 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempun3676.html [2010-08-10 12:37:04 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxH3676.html [2010-08-10 10:57:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaDq316.html [2010-08-10 09:06:58 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempHy4088.html [2010-08-09 22:31:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIW2740.html [2010-08-09 22:31:15 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNU2740.html [2010-08-09 21:35:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempmx1372.html [2010-08-09 21:35:00 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempoX1372.html [2010-08-09 20:17:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwH1428.html [2010-08-09 18:32:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTo1168.html [2010-08-09 17:17:08 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjW1980.html [2010-08-09 16:11:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYI2104.html [2010-08-09 15:08:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZh3532.html [2010-08-09 13:54:53 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempHB3524.html [2010-08-09 13:54:53 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempxk3524.html [2010-08-09 13:27:44 | 200,000,000 | ---- | C] () -- C:\Users\Tomek\met33.part02.rar [2010-08-09 13:14:37 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNe3576.html [2010-08-09 12:25:47 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXS1016.html [2010-08-09 12:25:47 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempFi1016.html [2010-08-09 12:24:09 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLCJ852.html [2010-08-09 11:20:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzT3992.html [2010-08-09 10:15:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempVH2328.html [2010-08-09 09:18:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAz3216.html [2010-08-08 21:50:29 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDE1820.html [2010-08-08 21:50:29 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiB1820.html [2010-08-08 18:26:47 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZG3652.html [2010-08-08 17:53:59 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempeB3024.html [2010-08-08 17:45:02 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempCi3560.html [2010-08-08 17:17:26 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgr2792.html [2010-08-08 17:17:26 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzH2792.html [2010-08-08 17:04:17 | 000,000,136 | ---- | C] () -- C:\Users\Tomek\Desktop\winsockfix.bat [2010-08-08 16:18:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNr1172.html [2010-08-08 15:58:37 | 001,053,056 | ---- | C] () -- C:\Windows\SysWow64\drivers\CAMTHWDM.sys [2010-08-08 14:56:28 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempde2288.html [2010-08-08 14:56:28 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdk2288.html [2010-08-08 14:49:34 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempvD3768.html [2010-08-08 14:27:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempsI2544.html [2010-08-08 14:02:41 | 000,000,192 | ---- | C] () -- C:\Users\Tomek\Desktop\FIFA 10.lnk [2010-08-08 13:54:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYS3844.html [2010-08-08 13:45:50 | 000,834,544 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys [2010-08-08 13:28:37 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOk2924.html [2010-08-08 13:28:37 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBa2924.html [2010-08-08 12:40:50 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010-08-08 11:33:25 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTR1260.html [2010-08-08 09:14:23 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempkA3832.html [2010-08-08 07:13:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPs1796.html [2010-08-07 22:00:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAe3624.html [2010-08-07 22:00:40 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxD3624.html [2010-08-07 20:36:13 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempcJG952.html [2010-08-07 20:36:13 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempHDA952.html [2010-08-07 18:53:06 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemprcV716.html [2010-08-07 18:53:06 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwSt716.html [2010-08-07 16:36:56 | 000,000,414 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2010-08-07 16:36:02 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIB1228.html [2010-08-07 16:36:02 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempbP1228.html [2010-08-07 14:23:40 | 000,007,597 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Resmon.ResmonCfg [2010-08-07 13:47:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBu2632.html [2010-08-07 09:03:07 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJT2868.html [2010-08-06 21:49:49 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOH1780.html [2010-08-06 21:42:25 | 000,000,000 | ---- | C] () -- C:\Windows\Setup.INI [2010-08-06 21:42:13 | 000,000,089 | ---- | C] () -- C:\Windows\LManager.UNI [2010-08-06 21:41:15 | 000,001,939 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010-08-06 21:35:39 | 000,113,543 | ---- | C] () -- C:\Windows\SysWow64\slmgr.vbs [2010-08-06 21:35:39 | 000,002,048 | ---- | C] () -- C:\Windows\SysWow64\winver.exe [2010-08-06 21:33:30 | 001,835,008 | -HS- | C] () -- C:\Users\Tomek\NTUSER.DAT [2010-08-06 21:33:30 | 000,524,288 | -HS- | C] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2010-08-06 21:33:30 | 000,524,288 | -HS- | C] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2010-08-06 21:33:30 | 000,262,144 | -HS- | C] () -- C:\Users\Tomek\ntuser.dat.LOG1 [2010-08-06 21:33:30 | 000,065,536 | -HS- | C] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [2010-08-06 21:33:30 | 000,000,020 | -HS- | C] () -- C:\Users\Tomek\ntuser.ini [2010-08-06 21:33:30 | 000,000,000 | -HS- | C] () -- C:\Users\Tomek\ntuser.dat.LOG2 [2010-08-06 21:27:55 | 3111,518,208 | -HS- | C] () -- C:\hiberfil.sys [2010-08-06 20:38:07 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDk3572.html [2010-08-06 20:38:07 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWB3572.html [2010-08-06 19:57:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLu3016.html [2010-08-06 19:52:13 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemphUZ988.html [2010-08-06 19:52:13 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempEea988.html [2010-08-06 19:45:25 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQX3396.html [2010-08-06 19:22:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPDa568.html [2010-08-06 18:41:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temple1308.html [2010-08-06 17:01:51 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_point64k_01009.Wdf [2010-08-06 16:32:55 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2010-08-06 16:31:38 | 000,626,688 | ---- | C] () -- C:\Windows\Image.dll [2010-08-06 16:31:38 | 000,222,382 | ---- | C] () -- C:\Windows\Acer Crystal Eye webcam.ico [2010-08-06 16:31:38 | 000,200,704 | ---- | C] () -- C:\Windows\PLFSetI.exe [2010-08-06 16:31:38 | 000,020,480 | ---- | C] () -- C:\Windows\USB_VIDEO_REG.exe [2010-08-06 16:31:38 | 000,008,362 | ---- | C] () -- C:\Windows\Suyin.reg [2010-08-06 16:31:38 | 000,000,323 | ---- | C] () -- C:\Windows\PidList.ini [2010-08-06 16:29:33 | 000,006,656 | ---- | C] () -- C:\Windows\SysNative\bcmwlrc.dll [2010-08-06 16:28:37 | 000,308,477 | ---- | C] () -- C:\Windows\SysNative\netathrx.inf [2010-08-06 16:28:37 | 000,051,232 | ---- | C] () -- C:\Windows\SysNative\athrextx.cat [2010-08-06 16:22:52 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf [2010-08-06 16:19:23 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01007.Wdf [2010-08-06 16:17:06 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010-08-06 16:12:37 | 000,000,218 | ---- | C] () -- C:\Users\Tomek\Desktop\Counter-Strike.url [2010-08-06 16:10:00 | 000,019,462 | ---- | C] () -- C:\Windows\atiogl.xml [2010-08-06 16:10:00 | 000,001,035 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2010-08-06 16:10:00 | 000,001,035 | ---- | C] () -- C:\Windows\SysNative\atipblag.dat [2010-08-06 16:08:51 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaPR452.html [2010-08-06 16:08:51 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempctK452.html [2010-08-06 16:04:47 | 000,001,256 | R--- | C] () -- C:\Windows\SysNative\drivers\RTHDATEX.DAT [2010-08-06 16:04:47 | 000,000,520 | R--- | C] () -- C:\Windows\SysNative\drivers\RTEQEX2.DAT [2010-08-06 16:04:47 | 000,000,520 | R--- | C] () -- C:\Windows\SysNative\drivers\RTEQEX1.DAT [2010-08-06 16:04:47 | 000,000,520 | R--- | C] () -- C:\Windows\SysNative\drivers\RTEQEX0.DAT [2010-08-06 16:04:47 | 000,000,008 | R--- | C] () -- C:\Windows\SysNative\drivers\RTKHDAUD.DAT [2010-08-06 16:04:46 | 000,214,552 | R--- | C] () -- C:\Windows\SysNative\drivers\RTCONVEQ.DAT [2010-08-06 16:01:54 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPl2024.html [2010-08-06 15:53:23 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempsf2812.html [2010-08-06 15:53:23 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempcX2812.html [2010-08-06 15:50:14 | 000,110,602 | ---- | C] () -- C:\Windows\SysWow64\xcdsfx32.bin [2010-07-07 03:54:32 | 000,063,416 | ---- | C] () -- C:\Windows\SysNative\atiapfxx.blb [2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [color=#E56717]========== LOP Check ==========[/color] [2010-08-11 12:15:44 | 000,000,000 | ---D | M] -- C:\Users\cs\AppData\Roaming\ESET [2010-08-07 12:02:55 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\ESET [2010-08-08 15:29:17 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\Gadu-Gadu 10 [2010-08-15 20:06:10 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\IrfanView [2010-08-08 15:37:08 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\OpenFM [2010-08-20 22:03:45 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\Tibia [2010-08-08 15:58:41 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\WebcamMax [2010-08-13 17:33:24 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\YoWindow [2010-08-17 17:06:31 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\BESTplayer [2010-08-08 13:49:09 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\DAEMON Tools Lite [2010-08-07 09:43:06 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\ESET [2010-08-06 16:00:25 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Gadu-Gadu 10 [2010-08-08 14:02:59 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Leadertech [2010-08-27 18:19:48 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\MotioninJoy [2010-08-20 16:04:03 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Tibia [2010-08-08 16:40:46 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\WebcamMax [2010-08-17 22:24:51 | 000,032,592 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%\*.* >[/color] [2010-08-29 20:08:10 | 000,002,035 | ---- | M] () -- C:\aaw7boot.log [2010-08-29 20:08:11 | 3111,518,208 | -HS- | M] () -- C:\hiberfil.sys [2010-08-29 08:51:50 | 000,015,190 | ---- | M] () -- C:\mksbasel.cpp.log [2010-08-29 20:08:10 | 4148,690,944 | -HS- | M] () -- C:\pagefile.sys [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys [2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys [2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2009-07-14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysWow64\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys [2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2009-07-14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2009-07-14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe < End of report > [/log]
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.