x-kom hosting

Podejrzane procesy

Nefrum
utworzono
utworzono

Cześć
Dziś zauważyłem 2 procesy o nazwie "shell.exe" oraz "csrss.exe" nie mam pojęcia skąd się wzieły.
[log]OTL logfile created on: 2010-08-28 16:59:29 - Run 2
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\Tomek\Downloads
64bit- Enterprise Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 63,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 83,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 148,95 Gb Total Space | 81,49 Gb Free Space | 54,71% Space Free | Partition Type: NTFS
Drive D: | 149,04 Gb Total Space | 117,32 Gb Free Space | 78,72% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: DOM
Current User Name: Tomek
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 60 Days
Output = Standard

[color=#E56717]========== Processes (All) ==========[/color]

PRC - [2010-08-14 10:34:41 | 000,135,664 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
PRC - [2010-08-07 11:53:41 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Tomek\Downloads\OTL.exe
PRC - [2010-07-23 04:15:35 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2010-07-23 04:15:35 | 000,014,808 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
PRC - [2010-04-07 21:07:24 | 000,810,120 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
PRC - [2009-07-14 03:14:16 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ctfmon.exe


[color=#E56717]========== Modules (All) ==========[/color]

MOD - [2010-08-07 11:53:41 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Tomek\Downloads\OTL.exe
MOD - [2010-08-06 21:35:43 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll
MOD - [2009-07-14 03:17:51 | 001,289,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll
MOD - [2009-07-14 03:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll
MOD - [2009-07-14 03:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll
MOD - [2009-07-14 03:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll
MOD - [2009-07-14 03:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll
MOD - [2009-07-14 03:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll
MOD - [2009-07-14 03:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll
MOD - [2009-07-14 03:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll
MOD - [2009-07-14 03:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll
MOD - [2009-07-14 03:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll
MOD - [2009-07-14 03:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll
MOD - [2009-07-14 03:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll
MOD - [2009-07-14 03:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll
MOD - [2009-07-14 03:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll
MOD - [2009-07-14 03:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll
MOD - [2009-07-14 03:16:13 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll
MOD - [2009-07-14 03:16:12 | 001,412,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll
MOD - [2009-07-14 03:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll
MOD - [2009-07-14 03:16:12 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll
MOD - [2009-07-14 03:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll
MOD - [2009-07-14 03:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll
MOD - [2009-07-14 03:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll
MOD - [2009-07-14 03:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll
MOD - [2009-07-14 03:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll
MOD - [2009-07-14 03:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll
MOD - [2009-07-14 03:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll
MOD - [2009-07-14 03:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll
MOD - [2009-07-14 03:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll
MOD - [2009-07-14 03:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll
MOD - [2009-07-14 03:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll
MOD - [2009-07-14 03:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll
MOD - [2009-07-14 03:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll
MOD - [2009-07-14 03:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll
MOD - [2009-07-14 03:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll
MOD - [2009-07-14 03:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll
MOD - [2009-07-14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
MOD - [2009-07-14 03:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv
MOD - [2009-07-14 03:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll
MOD - [2009-07-14 03:11:24 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll
MOD - [2009-07-14 03:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll
MOD - [2009-07-14 03:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll
MOD - [2009-07-14 03:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll
MOD - [2009-07-14 03:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll
MOD - [2009-07-14 03:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll
MOD - [2009-07-14 03:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll
MOD - [2009-07-14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2010-05-27 11:44:54 | 002,608,904 | ---- | M] (Raxco Software, Inc.) [Auto | Running] -- C:\Program Files\Raxco\PerfectDisk\PDAgent.exe -- (PDAgent)
SRV:[b]64bit:[/b] - [2010-05-27 11:44:44 | 002,259,208 | ---- | M] (Raxco Software, Inc.) [On_Demand | Running] -- C:\Program Files\Raxco\PerfectDisk\PDEngine.exe -- (PDEngine)
SRV:[b]64bit:[/b] - [2010-04-07 21:10:42 | 000,042,336 | ---- | M] (ESET) [Disabled | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV:[b]64bit:[/b] - [2010-04-07 21:07:24 | 000,810,120 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn)
SRV:[b]64bit:[/b] - [2010-01-22 03:01:12 | 000,202,752 | ---- | M] (AMD) [Disabled | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2009-11-02 12:48:18 | 000,126,352 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV:[b]64bit:[/b] - [2009-09-21 16:24:40 | 001,420,560 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV:[b]64bit:[/b] - [2009-09-21 16:00:44 | 000,831,760 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:54 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\StorSvc.dll -- (StorSvc)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:[b]64bit:[/b] - [2009-03-27 12:10:16 | 000,016,896 | ---- | M] (LSI Corporation) [Disabled | Stopped] -- C:\Program Files\LSI SoftModem\agr64svc.exe -- (AgereModemAudio)
SRV - [2010-08-20 08:42:22 | 000,407,336 | ---- | M] (Valve Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2010-08-21 18:36:07 | 000,026,424 | --S- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DRIVER_BIN64 -- (DRIVER_B)
DRV:[b]64bit:[/b] - [2010-08-08 13:45:50 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2010-05-06 11:21:46 | 000,125,456 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:[b]64bit:[/b] - [2010-04-07 21:08:30 | 000,050,600 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
DRV:[b]64bit:[/b] - [2010-04-07 21:08:28 | 000,033,608 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\epfwndis.sys -- (Epfwndis)
DRV:[b]64bit:[/b] - [2010-04-07 21:08:26 | 000,169,592 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
DRV:[b]64bit:[/b] - [2010-04-07 21:07:10 | 000,139,704 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:[b]64bit:[/b] - [2010-04-07 21:03:52 | 000,163,888 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:[b]64bit:[/b] - [2010-01-22 03:13:24 | 006,233,088 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:[b]64bit:[/b] - [2010-01-22 03:13:24 | 006,233,088 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atipmdag.sys -- (amdkmdag)
DRV:[b]64bit:[/b] - [2010-01-22 02:07:56 | 000,161,280 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:[b]64bit:[/b] - [2009-11-11 17:44:26 | 000,034,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\point64k.sys -- (Point64)
DRV:[b]64bit:[/b] - [2009-11-06 12:56:06 | 001,550,848 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:[b]64bit:[/b] - [2009-11-02 12:48:02 | 000,013,784 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
DRV:[b]64bit:[/b] - [2009-10-03 17:36:34 | 000,020,480 | ---- | M] (MotioninJoy) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MijUfilt.sys -- (MotioninJoyUSBFilter)
DRV:[b]64bit:[/b] - [2009-09-17 06:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R)
DRV:[b]64bit:[/b] - [2009-08-13 05:20:46 | 001,209,856 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem)
DRV:[b]64bit:[/b] - [2009-08-05 22:43:58 | 000,320,040 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) Broadcom NetLink (TM)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-07-14 01:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap)
DRV:[b]64bit:[/b] - [2009-07-14 01:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID)
DRV:[b]64bit:[/b] - [2009-07-14 01:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC)
DRV:[b]64bit:[/b] - [2009-06-24 12:23:24 | 000,205,472 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)
DRV:[b]64bit:[/b] - [2009-06-10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-05-24 13:57:42 | 000,243,760 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)

[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-4039863893-364985132-2430816299-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
IE - HKU\S-1-5-21-4039863893-364985132-2430816299-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.2.0185
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..network.proxy.type: 0

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-08-06 15:51:29 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-08-13 17:40:55 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010-08-07 09:42:18 | 000,000,000 | ---D | M]

[2010-08-06 21:41:19 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\mozilla\Extensions
[2010-08-28 12:08:45 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\mozilla\Firefox\Profiles\fixz9gmf.default\extensions
[2010-08-08 13:46:11 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\mozilla\Firefox\Profiles\fixz9gmf.default\extensions\DTToolbar@toolbarnet.com
[2010-08-08 13:46:07 | 000,002,059 | ---- | M] () -- C:\Users\Tomek\AppData\Roaming\Mozilla\FireFox\Profiles\fixz9gmf.default\searchplugins\daemon-search.xml
[2010-08-09 18:58:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions
[2010-08-06 16:02:46 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010-08-09 18:58:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010-08-09 18:58:42 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2010-07-23 02:41:44 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2010-07-23 02:41:44 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2010-07-23 02:41:44 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2010-07-23 02:41:44 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2010-07-23 02:41:44 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2010-07-23 02:41:44 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml

O1 HOSTS File: ([2010-08-07 17:03:21 | 000,000,808 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3:[b]64bit:[/b] - HKU\S-1-5-21-4039863893-364985132-2430816299-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKU\S-1-5-21-4039863893-364985132-2430816299-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-4039863893-364985132-2430816299-1000..\Run: [DS3 Tool] C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe (www.motioninjoy.com)
O4 - HKU\S-1-5-21-4039863893-364985132-2430816299-1000..\Run: [NetfMeter] C:\Windows\shell.exe (Microsoft)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - Startup: C:\Users\Sławek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\YoWindow.lnk = C:\Program Files (x86)\YoWindow\yowindow.exe (Repkasoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 86.63.64.48 86.63.64.49
O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (systempropertiesperformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{a7a5d5f4-a2e2-11df-90b4-00262d96a4d0}\Shell - "" = AutoRun
O33 - MountPoints2\{a7a5d5f4-a2e2-11df-90b4-00262d96a4d0}\Shell\AutoRun\command - "" = F:\autorun.exe -- File not found
O34 - HKLM BootExecute: (PDBoot.exe) - File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

MsConfig:64bit - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
MsConfig:64bit - StartUpReg: [b]AmIcoSinglun64[/b] - hkey= - key= - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (AlcorMicro Co., Ltd.)
MsConfig:64bit - StartUpReg: [b]Apoint[/b] - hkey= - key= - C:\Program Files\Apoint2K\Apoint.exe (Alps Electric Co., Ltd.)
MsConfig:64bit - StartUpReg: [b]ATICustomerCare[/b] - hkey= - key= - C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.)
MsConfig:64bit - StartUpReg: [b]cFosSpeed[/b] - hkey= - key= - C:\Program Files\cFosSpeed\cFosSpeed.exe File not found
MsConfig:64bit - StartUpReg: [b]DAEMON Tools Lite[/b] - hkey= - key= - D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
MsConfig:64bit - StartUpReg: [b]egui[/b] - hkey= - key= - C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
MsConfig:64bit - StartUpReg: [b]Gadu-Gadu 10[/b] - hkey= - key= - C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.)
MsConfig:64bit - StartUpReg: [b]IntelliPoint[/b] - hkey= - key= - C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
MsConfig:64bit - StartUpReg: [b]LManager[/b] - hkey= - key= - C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
MsConfig:64bit - StartUpReg: [b]PLFSetI[/b] - hkey= - key= - C:\Windows\PLFSetI.exe ()
MsConfig:64bit - StartUpReg: [b]RtHDVCpl[/b] - hkey= - key= - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
MsConfig:64bit - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
MsConfig:64bit - StartUpReg: [b]StartCCC[/b] - hkey= - key= - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
MsConfig:64bit - StartUpReg: [b]Steam[/b] - hkey= - key= - c:\program files (x86)\steam\steam.exe (Valve Corporation)
MsConfig:64bit - StartUpReg: [b]SunJavaUpdateSched[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
MsConfig:64bit - State: "startup" - Reg Error: Key error.
MsConfig:64bit - State: "bootini" - Reg Error: Key error.
MsConfig:64bit - State: "services" - Reg Error: Key error.

SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

[color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color]

[2010-08-28 16:08:01 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\Patch 1.03 i DLC
[2010-08-28 15:19:32 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Documents\KONAMI
[2010-08-28 12:53:45 | 000,000,000 | ---D | C] -- C:\ProgramData\KONAMI
[2010-08-28 12:38:56 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\DLC 1.7 [PES_2010] [MR]
[2010-08-28 11:01:17 | 000,229,376 | RHS- | C] (Microsoft) -- C:\Windows\shell.exe
[2010-08-27 18:19:48 | 000,090,112 | ---- | C] (Saikeware Technology Co., Ltd. CHINA) -- C:\Windows\SysWow64\MijFrc.dll
[2010-08-27 18:19:48 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\MotioninJoy
[2010-08-27 18:19:48 | 000,000,000 | ---D | C] -- C:\ProgramData\MotioninJoy
[2010-08-27 18:19:47 | 001,716,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01009.dll
[2010-08-27 18:19:47 | 000,030,208 | ---- | C] (MotioninJoy) -- C:\Windows\SysNative\drivers\MijBThid.sys
[2010-08-27 18:19:47 | 000,020,480 | ---- | C] (MotioninJoy) -- C:\Windows\SysNative\drivers\MijUfilt.sys
[2010-08-27 18:19:47 | 000,000,000 | ---D | C] -- C:\Program Files\MotioninJoy
[2010-08-22 10:23:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2010-08-21 18:29:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ray Adams
[2010-08-20 16:03:51 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Tibia
[2010-08-20 16:03:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tibia
[2010-08-19 23:49:15 | 013,388,288 | ---- | C] (ATI Technologies Inc.) -- C:\Users\Tomek\Desktop\atioglxx.dll
[2010-08-18 09:40:51 | 000,000,000 | ---D | C] -- C:\Program Files\cFosSpeed
[2010-08-17 17:08:44 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Media Player Classic
[2010-08-17 17:08:28 | 000,839,680 | ---- | C] (http://www.mp3dev.org/) -- C:\Windows\SysWow64\lameACM.acm
[2010-08-17 17:08:28 | 000,217,088 | ---- | C] (www.helixcommunity.org) -- C:\Windows\SysWow64\yv12vfw.dll
[2010-08-17 17:08:28 | 000,151,552 | ---- | C] (fccHandler) -- C:\Windows\SysWow64\ac3acm.acm
[2010-08-17 17:08:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\K-Lite Codec Pack
[2010-08-17 17:06:27 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\BESTplayer
[2010-08-16 11:09:07 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2010-08-15 20:17:42 | 000,240,640 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfdic10n.dll
[2010-08-15 20:17:42 | 000,031,232 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfpct10n.dll
[2010-08-15 20:17:42 | 000,028,160 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfwmf10n.dll
[2010-08-15 20:17:42 | 000,027,136 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfcal10n.dll
[2010-08-15 20:17:42 | 000,025,600 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfmac10n.dll
[2010-08-15 20:17:41 | 001,455,736 | ---- | C] (Borland International) -- C:\Windows\System\VCL35.BPL
[2010-08-15 20:17:41 | 000,996,872 | ---- | C] (Borland International) -- C:\Windows\System\Cp3240mt.dll
[2010-08-15 20:17:41 | 000,913,616 | ---- | C] (TurboPower Software Company) -- C:\Windows\System\A258_R35.bpl
[2010-08-15 20:17:41 | 000,906,512 | ---- | C] (TurboPower Software Company) -- C:\Windows\System\A255_R35.bpl
[2010-08-15 20:17:41 | 000,212,480 | ---- | C] (Eastman Kodak) -- C:\Windows\System\Pcdlib32.dll
[2010-08-15 20:17:41 | 000,111,104 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfpng70n.dll
[2010-08-15 20:17:41 | 000,032,768 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfgif70n.dll
[2010-08-15 20:17:41 | 000,029,952 | ---- | C] (Borland International) -- C:\Windows\System\Borlndmm.dll
[2010-08-15 20:17:41 | 000,027,136 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfimg10n.dll
[2010-08-15 20:17:41 | 000,024,576 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfpcx70n.dll
[2010-08-15 20:17:41 | 000,024,064 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfeps70n.dll
[2010-08-15 20:17:41 | 000,022,016 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfpsd70n.dll
[2010-08-15 20:17:41 | 000,020,992 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lftga70n.dll
[2010-08-15 20:17:41 | 000,020,480 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfwpg70n.dll
[2010-08-15 20:17:41 | 000,019,456 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfras70n.dll
[2010-08-15 20:17:41 | 000,019,456 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfmsp70n.dll
[2010-08-15 20:17:41 | 000,018,944 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\Lfwfx70n.dll
[2010-08-15 20:17:40 | 000,995,383 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\MFC42.DLL
[2010-08-15 20:17:40 | 000,933,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\MFC40.DLL
[2010-08-15 20:17:40 | 000,349,696 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LTKRN70N.DLL
[2010-08-15 20:17:40 | 000,344,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\MSVCRT40.DLL
[2010-08-15 20:17:40 | 000,266,293 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\MSVCRT.DLL
[2010-08-15 20:17:40 | 000,245,912 | ---- | C] (Borland International) -- C:\Windows\System\vclx35.bpl
[2010-08-15 20:17:40 | 000,244,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\Msflxgrd.OCX
[2010-08-15 20:17:40 | 000,186,880 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFCMP70N.DLL
[2010-08-15 20:17:40 | 000,093,184 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFTIF70N.DLL
[2010-08-15 20:17:40 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\MSVCIRT.DLL
[2010-08-15 20:17:40 | 000,055,808 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFFAX70N.DLL
[2010-08-15 20:17:40 | 000,053,760 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LTFIL70N.DLL
[2010-08-15 20:17:40 | 000,035,328 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFFPX70N.DLL
[2010-08-15 20:17:40 | 000,028,672 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFLMA70N.DLL
[2010-08-15 20:17:40 | 000,026,112 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFICA70N.DLL
[2010-08-15 20:17:40 | 000,025,088 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFLMB70N.DLL
[2010-08-15 20:17:40 | 000,024,576 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFBMP70N.DLL
[2010-08-15 20:17:40 | 000,024,064 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFPCT70N.DLL
[2010-08-15 20:17:40 | 000,020,480 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFIMG70N.DLL
[2010-08-15 20:17:40 | 000,019,456 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFPCD70N.DLL
[2010-08-15 20:17:40 | 000,018,944 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFMAC70N.DLL
[2010-08-15 20:17:40 | 000,017,920 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System\LFAVI70N.DLL
[2010-08-15 20:06:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IrfanView
[2010-08-14 17:17:23 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2010-08-14 17:13:51 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Documents\BFBC2
[2010-08-14 16:55:10 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll
[2010-08-14 16:55:10 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll
[2010-08-14 16:55:10 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll
[2010-08-14 16:55:10 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll
[2010-08-14 16:55:09 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll
[2010-08-14 16:55:09 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll
[2010-08-14 16:55:09 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll
[2010-08-14 16:55:09 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll
[2010-08-14 16:55:09 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll
[2010-08-14 16:55:09 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll
[2010-08-14 16:55:08 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll
[2010-08-14 16:55:08 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll
[2010-08-14 16:55:07 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll
[2010-08-14 16:55:07 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll
[2010-08-14 16:55:07 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll
[2010-08-14 16:55:07 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll
[2010-08-14 16:55:07 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll
[2010-08-14 16:55:07 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll
[2010-08-14 16:55:06 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll
[2010-08-14 16:55:06 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll
[2010-08-14 16:55:06 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll
[2010-08-14 16:55:06 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll
[2010-08-14 16:55:06 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll
[2010-08-14 16:55:06 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll
[2010-08-14 16:55:06 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll
[2010-08-14 16:55:06 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll
[2010-08-14 16:55:06 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll
[2010-08-14 16:55:06 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll
[2010-08-14 16:55:06 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll
[2010-08-14 16:55:06 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll
[2010-08-14 16:55:06 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll
[2010-08-14 16:55:06 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll
[2010-08-14 16:55:05 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll
[2010-08-14 16:55:05 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll
[2010-08-14 16:55:05 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll
[2010-08-14 16:55:05 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll
[2010-08-14 16:55:05 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll
[2010-08-14 16:55:05 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll
[2010-08-14 16:55:05 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll
[2010-08-14 16:55:05 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll
[2010-08-14 16:55:04 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll
[2010-08-14 16:55:04 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll
[2010-08-14 16:55:04 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll
[2010-08-14 16:55:04 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll
[2010-08-14 16:55:04 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll
[2010-08-14 16:55:04 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll
[2010-08-14 16:55:04 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll
[2010-08-14 16:55:04 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll
[2010-08-14 16:55:04 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll
[2010-08-14 16:55:04 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll
[2010-08-14 16:55:04 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll
[2010-08-14 16:55:04 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll
[2010-08-14 16:55:03 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll
[2010-08-14 16:55:03 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll
[2010-08-14 16:55:03 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll
[2010-08-14 16:55:03 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll
[2010-08-14 16:55:03 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll
[2010-08-14 16:55:03 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll
[2010-08-14 16:55:03 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll
[2010-08-14 16:55:03 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll
[2010-08-14 16:55:02 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll
[2010-08-14 16:55:02 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll
[2010-08-14 16:55:02 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll
[2010-08-14 16:55:02 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll
[2010-08-14 16:55:02 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll
[2010-08-14 16:55:02 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll
[2010-08-14 16:55:01 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll
[2010-08-14 16:55:01 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll
[2010-08-14 16:55:01 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll
[2010-08-14 16:55:01 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll
[2010-08-14 16:55:01 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll
[2010-08-14 16:55:01 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll
[2010-08-14 16:55:01 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll
[2010-08-14 16:55:01 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll
[2010-08-14 16:55:00 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll
[2010-08-14 16:55:00 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll
[2010-08-14 16:55:00 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll
[2010-08-14 16:55:00 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll
[2010-08-14 16:54:58 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll
[2010-08-14 16:54:58 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll
[2010-08-14 16:54:58 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll
[2010-08-14 16:54:58 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll
[2010-08-14 16:54:58 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll
[2010-08-14 16:54:58 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll
[2010-08-14 16:54:57 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll
[2010-08-14 16:54:57 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll
[2010-08-14 16:54:57 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll
[2010-08-14 16:54:57 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll
[2010-08-14 16:54:54 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll
[2010-08-14 16:54:54 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll
[2010-08-14 16:54:54 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll
[2010-08-14 16:54:54 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll
[2010-08-14 16:54:51 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll
[2010-08-14 16:54:51 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_33.dll
[2010-08-14 16:54:51 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll
[2010-08-14 16:54:51 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_33.dll
[2010-08-14 16:54:51 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll
[2010-08-14 16:54:51 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_7.dll
[2010-08-14 16:54:50 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll
[2010-08-14 16:54:49 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll
[2010-08-14 16:54:49 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll
[2010-08-14 16:54:49 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll
[2010-08-14 16:54:49 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll
[2010-08-14 16:54:49 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll
[2010-08-14 16:54:49 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll
[2010-08-14 16:54:48 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll
[2010-08-14 16:54:47 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll
[2010-08-14 16:54:47 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll
[2010-08-14 16:54:47 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll
[2010-08-14 16:54:47 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll
[2010-08-14 16:54:47 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll
[2010-08-14 16:54:47 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll
[2010-08-14 16:54:47 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll
[2010-08-14 16:54:46 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll
[2010-08-14 16:54:46 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll
[2010-08-14 16:54:46 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll
[2010-08-14 16:54:46 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll
[2010-08-14 16:54:46 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll
[2010-08-14 16:54:46 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll
[2010-08-14 16:54:45 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll
[2010-08-14 16:54:45 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll
[2010-08-14 16:54:39 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll
[2010-08-14 16:54:39 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll
[2010-08-14 16:54:39 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll
[2010-08-14 16:54:39 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll
[2010-08-14 16:54:39 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll
[2010-08-14 16:54:38 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll
[2010-08-14 16:54:38 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll
[2010-08-14 16:54:37 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll
[2010-08-14 16:54:36 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll
[2010-08-14 16:54:36 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll
[2010-08-14 16:54:35 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll
[2010-08-14 11:40:04 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2010-08-14 10:18:51 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\Harry.Potter.and.the.Half.Blood.Prince.2009.PL.720p.BRRip.XviD.AC3-WDZ
[2010-08-14 10:03:18 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Google
[2010-08-13 17:35:20 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2010-08-13 17:35:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Google
[2010-08-13 17:33:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\YoWindow
[2010-08-13 13:13:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Raxco
[2010-08-13 13:13:38 | 000,000,000 | ---D | C] -- C:\Program Files\Raxco
[2010-08-13 13:12:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Raxco
[2010-08-12 18:25:30 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2010-08-12 18:24:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2010-08-12 18:08:34 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\PMB Files
[2010-08-12 18:08:33 | 000,000,000 | ---D | C] -- C:\ProgramData\PMB Files
[2010-08-12 18:08:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pando Networks
[2010-08-12 18:00:05 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2010-08-11 17:09:12 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\takie tam
[2010-08-10 15:57:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\METRO 2033
[2010-08-09 18:59:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2010-08-09 18:59:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2010-08-09 18:58:51 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll
[2010-08-09 18:58:51 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2010-08-09 18:58:51 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2010-08-09 18:58:51 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2010-08-09 18:58:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2010-08-09 18:50:26 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft IntelliPoint
[2010-08-09 16:13:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CCleaner
[2010-08-08 22:02:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HLTooLz
[2010-08-08 22:02:49 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\Setup1.exe
[2010-08-08 22:02:48 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\ST6UNST.EXE
[2010-08-08 16:40:46 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\WebcamMax
[2010-08-08 16:05:41 | 000,000,000 | ---D | C] -- C:\ProgramData\WebcamMax
[2010-08-08 15:58:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WebcamMax
[2010-08-08 15:37:09 | 000,000,000 | ---D | C] -- C:\ProgramData\OpenFM
[2010-08-08 14:05:20 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Documents\FIFA 10
[2010-08-08 14:02:59 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Leadertech
[2010-08-08 13:53:50 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll
[2010-08-08 13:53:50 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll
[2010-08-08 13:53:47 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_33.dll
[2010-08-08 13:53:47 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll
[2010-08-08 13:53:47 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll
[2010-08-08 13:53:40 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll
[2010-08-08 13:53:39 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll
[2010-08-08 13:53:39 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll
[2010-08-08 13:53:39 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll
[2010-08-08 13:53:39 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll
[2010-08-08 13:53:39 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll
[2010-08-08 13:53:38 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll
[2010-08-08 13:46:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Toolbar
[2010-08-08 13:45:19 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\DAEMON Tools Lite
[2010-08-08 13:45:17 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2010-08-07 17:45:09 | 000,000,000 | ---D | C] -- C:\_OTL
[2010-08-07 16:43:10 | 000,000,000 | ---D | C] -- C:\Users\Tomek\DoctorWeb
[2010-08-07 13:29:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Hewlett-Packard
[2010-08-07 13:22:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works
[2010-08-07 13:22:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2010-08-07 13:22:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2010-08-07 13:20:47 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2010-08-07 13:20:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2010-08-07 13:20:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2010-08-07 13:19:49 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2010-08-07 09:43:06 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\ESET
[2010-08-07 09:43:06 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\ESET
[2010-08-07 09:42:17 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
[2010-08-07 09:42:17 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2010-08-06 22:27:22 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2010-08-06 21:42:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR
[2010-08-06 21:42:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Launch Manager
[2010-08-06 21:41:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2010-08-06 21:41:17 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Mozilla
[2010-08-06 21:41:17 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Mozilla
[2010-08-06 21:41:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2010-08-06 21:40:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2010-08-06 21:40:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2010-08-06 21:35:39 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\systemcpl.dll
[2010-08-06 21:35:39 | 000,001,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppcomapi.dll
[2010-08-06 21:34:20 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Searches
[2010-08-06 21:34:06 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Identities
[2010-08-06 21:34:00 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Contacts
[2010-08-06 21:33:54 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\VirtualStore
[2010-08-06 21:33:30 | 000,000,000 | --SD | C] -- C:\Users\Tomek\AppData\Roaming\Microsoft
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Videos
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Saved Games
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Pictures
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Music
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Links
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Favorites
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Downloads
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Documents
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Desktop
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Ustawienia lokalne
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\AppData\Local\Temporary Internet Files
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Szablony
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\SendTo
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Recent
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\PrintHood
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\NetHood
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Documents\Moje wideo
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Documents\Moje obrazy
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Moje dokumenty
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Documents\Moja muzyka
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Menu Start
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\AppData\Local\Historia
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Dane aplikacji
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\AppData\Local\Dane aplikacji
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Cookies
[2010-08-06 21:33:30 | 000,000,000 | -H-D | C] -- C:\Users\Tomek\AppData
[2010-08-06 21:33:30 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Temp
[2010-08-06 21:33:30 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Microsoft
[2010-08-06 21:33:30 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Media Center Programs
[2010-08-06 21:33:21 | 000,000,000 | -HSD | C] -- C:\Recovery
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Ulubione
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Szablony
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Pulpit
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Start
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji
[2010-08-06 21:31:02 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2010-08-06 21:28:19 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2010-08-06 21:27:55 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2010-08-06 19:52:54 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Diagnostics
[2010-08-06 18:50:30 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Ventrilo
[2010-08-06 18:50:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ventrilo
[2010-08-06 18:50:16 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\mIRC
[2010-08-06 18:50:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\mIRC
[2010-08-06 18:50:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2010-08-06 17:33:50 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Documents\My Games
[2010-08-06 17:33:31 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll
[2010-08-06 17:33:31 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll
[2010-08-06 17:33:31 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll
[2010-08-06 17:33:31 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll
[2010-08-06 17:33:31 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll
[2010-08-06 17:33:31 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll
[2010-08-06 17:33:30 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll
[2010-08-06 17:33:30 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll
[2010-08-06 17:33:30 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll
[2010-08-06 17:33:30 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll
[2010-08-06 17:33:29 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll
[2010-08-06 17:33:29 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll
[2010-08-06 17:33:29 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll
[2010-08-06 17:33:29 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll
[2010-08-06 17:31:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts
[2010-08-06 17:01:25 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2010-08-06 16:31:38 | 001,658,880 | ---- | C] (SuYin) -- C:\Windows\Acer Crystal Eye webcam.EXE
[2010-08-06 16:31:13 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Intel
[2010-08-06 16:30:26 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\ATI
[2010-08-06 16:30:26 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\ATI
[2010-08-06 16:30:06 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Intel
[2010-08-06 16:30:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Intel
[2010-08-06 16:30:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco
[2010-08-06 16:29:32 | 000,000,000 | ---D | C] -- C:\Program Files\Broadcom
[2010-08-06 16:28:37 | 001,550,848 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\athrx.sys
[2010-08-06 16:28:37 | 001,550,848 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\athrx.sys
[2010-08-06 16:28:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Atheros
[2010-08-06 16:28:15 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\InstallShield
[2010-08-06 16:23:51 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2010-08-06 16:22:49 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics
[2010-08-06 16:20:36 | 000,000,000 | ---D | C] -- C:\ProgramData\AmUStor
[2010-08-06 16:20:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AmIcoSingLun
[2010-08-06 16:19:44 | 000,014,848 | ---- | C] (LSI Corporation) -- C:\Windows\SysWow64\agrsco64.dll
[2010-08-06 16:19:41 | 000,000,000 | ---D | C] -- C:\Program Files\LSI SoftModem
[2010-08-06 16:19:40 | 000,064,000 | ---- | C] (LSI Corporation) -- C:\Windows\agrsmdel.exe
[2010-08-06 16:19:40 | 000,030,720 | ---- | C] (LSI Corporation) -- C:\Windows\agrdel64.exe
[2010-08-06 16:19:40 | 000,014,848 | ---- | C] (LSI Corporation) -- C:\Windows\SysNative\agrsco64.dll
[2010-08-06 16:19:35 | 000,000,000 | ---D | C] -- C:\Windows\Options
[2010-08-06 16:19:20 | 000,000,000 | ---D | C] -- C:\Program Files\Apoint2K
[2010-08-06 16:19:18 | 001,490,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01007.dll
[2010-08-06 16:19:18 | 000,243,760 | ---- | C] (Alps Electric Co., Ltd.) -- C:\Windows\SysNative\drivers\Apfiltr.sys
[2010-08-06 16:19:18 | 000,098,816 | ---- | C] (Alps Electric Co., Ltd.) -- C:\Windows\SysNative\Vxdif.dll
[2010-08-06 16:17:05 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\skypePM
[2010-08-06 16:12:13 | 000,056,344 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\HECIx64.sys
[2010-08-06 16:11:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam
[2010-08-06 16:11:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam
[2010-08-06 16:10:00 | 000,446,464 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\ATIDEMGX.dll
[2010-08-06 16:10:00 | 000,055,296 | ---- | C] (AMD) -- C:\Windows\SysNative\coinst.dll
[2010-08-06 16:04:55 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2010-08-06 16:04:47 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2010-08-06 16:04:46 | 001,604,128 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkHDM64.dll
[2010-08-06 16:04:46 | 001,291,808 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RHDMEx64.dll
[2010-08-06 16:04:46 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RH3DHT64.dll
[2010-08-06 16:04:46 | 000,205,472 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\drivers\RtHDMIVX.sys
[2010-08-06 16:04:46 | 000,058,912 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RHCoInst64.dll
[2010-08-06 16:04:45 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RH3DAA64.dll
[2010-08-06 16:04:44 | 000,513,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2010-08-06 16:04:44 | 000,211,376 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2010-08-06 16:04:44 | 000,193,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2010-08-06 16:04:44 | 000,150,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2010-08-06 16:04:43 | 001,680,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll
[2010-08-06 16:04:43 | 000,611,872 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl
[2010-08-06 16:04:43 | 000,332,320 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll
[2010-08-06 16:04:42 | 001,638,432 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll
[2010-08-06 16:04:42 | 001,200,672 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll
[2010-08-06 16:04:42 | 000,436,768 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll
[2010-08-06 16:04:42 | 000,363,008 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2010-08-06 16:04:42 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2010-08-06 16:04:42 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2010-08-06 16:04:42 | 000,198,656 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2010-08-06 16:04:42 | 000,149,536 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll
[2010-08-06 16:04:42 | 000,095,744 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2010-08-06 16:04:42 | 000,073,216 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2010-08-06 16:04:42 | 000,066,592 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll
[2010-08-06 16:04:40 | 000,320,512 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2010-08-06 16:04:39 | 000,310,784 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2010-08-06 16:04:39 | 000,166,400 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll
[2010-08-06 16:04:39 | 000,108,032 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll
[2010-08-06 16:04:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2010-08-06 16:04:37 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2010-08-06 16:04:36 | 000,831,488 | R--- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2010-08-06 16:04:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2010-08-06 16:03:21 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Adobe
[2010-08-06 16:02:54 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Skype
[2010-08-06 16:02:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2010-08-06 16:02:37 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2010-08-06 16:02:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2010-08-06 16:02:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2010-08-06 16:02:03 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2010-08-06 15:59:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI
[2010-08-06 15:59:10 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2010-08-06 15:58:21 | 000,000,000 | ---D | C] -- C:\ATI
[2010-08-06 15:55:58 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2010-08-06 15:55:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Atheros
[2010-08-06 15:54:36 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll
[2010-08-06 15:54:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2010-08-06 15:53:23 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\cache
[2010-08-06 15:53:22 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Macromedia
[2010-08-06 15:53:18 | 000,000,000 | ---D | C] -- C:\Intel
[2010-08-06 15:51:40 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Gadu-Gadu 10
[2010-08-06 15:50:14 | 001,081,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mscomctl.ocx
[2010-08-06 15:50:14 | 000,526,184 | ---- | C] (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) -- C:\Windows\SysWow64\XceedCry.dll
[2010-08-06 15:50:14 | 000,456,536 | ---- | C] (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) -- C:\Windows\SysWow64\XCEEDZIP.DLL
[2010-08-06 15:50:14 | 000,209,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tabctl32.ocx
[2010-08-06 15:50:14 | 000,152,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Comdlg32.ocx
[2010-08-06 15:50:14 | 000,132,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Msinet.ocx
[2010-08-06 15:50:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Driver Magician
[2010-08-06 15:49:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Gadu-Gadu 10
[2010-08-06 15:49:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gadu-Gadu 10
[2010-08-06 15:47:49 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\WinRAR
[2010-08-06 15:47:43 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2010-08-06 15:47:00 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX
[2010-08-06 15:46:25 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2010-07-12 11:24:32 | 000,341,504 | ---- | C] (repkasoft) -- C:\Windows\yowindow.scr
[2010-07-07 03:54:16 | 000,143,360 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atiapfxx.exe
[2010-07-07 03:51:26 | 000,450,048 | ---- | C] (AMD) -- C:\Windows\SysNative\atieclxx.exe
[2010-07-07 03:50:54 | 000,202,752 | ---- | C] (AMD) -- C:\Windows\SysNative\atiesrxx.exe
[2010-07-07 03:49:36 | 000,421,376 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysNative\atipdl64.dll
[2010-07-07 03:49:18 | 000,278,528 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysWow64\Oemdspif.dll
[2010-07-07 03:30:12 | 002,617,856 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiumd6a.dll
[2010-07-07 03:22:26 | 004,668,928 | ---- | C] (ATI Technologies Inc. ) -- C:\Windows\SysNative\atiumd64.dll
[2010-07-07 03:16:06 | 000,316,928 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atiadlxx.dll
[2010-07-07 03:14:50 | 000,028,160 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiu9p64.dll

[color=#E56717]========== Files - Modified Within 60 Days ==========[/color]

[2010-08-28 17:00:20 | 001,835,008 | -HS- | M] () -- C:\Users\Tomek\NTUSER.DAT
[2010-08-28 16:39:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010-08-28 16:27:40 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010-08-28 16:27:25 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010-08-28 16:27:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010-08-28 16:27:15 | 3111,518,208 | -HS- | M] () -- C:\hiberfil.sys
[2010-08-28 15:55:13 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempeO2132.html
[2010-08-28 15:39:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOW1488.html
[2010-08-28 15:16:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempoZ3696.html
[2010-08-28 14:35:18 | 000,009,600 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010-08-28 14:35:17 | 000,009,600 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010-08-28 14:35:12 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempzi3888.html
[2010-08-28 14:35:12 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempnb3888.html
[2010-08-28 13:23:46 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcs2640.html
[2010-08-28 13:23:46 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOu2640.html
[2010-08-28 13:23:45 | 008,484,133 | -H-- | M] () -- C:\Users\Tomek\AppData\Local\IconCache.db
[2010-08-28 13:16:53 | 003,197,721 | ---- | M] () -- C:\Users\Tomek\Desktop\741A0001_0_FLV_VIDEO_Iaq.flv
[2010-08-28 12:42:30 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempmd1244.html
[2010-08-28 12:12:30 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLZ3744.html
[2010-08-28 11:01:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temptm2912.html
[2010-08-28 10:45:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYK1796.html
[2010-08-28 10:26:49 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempKd3748.html
[2010-08-28 09:28:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempuw3508.html
[2010-08-27 23:28:12 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQD2452.html
[2010-08-27 23:28:12 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqT2452.html
[2010-08-27 21:37:37 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAE3380.html
[2010-08-27 21:37:37 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temppd3380.html
[2010-08-27 19:43:29 | 000,056,592 | ---- | M] () -- C:\Users\Tomek\Documents\devdata.dat
[2010-08-27 19:12:53 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temprr3576.html
[2010-08-27 19:05:03 | 001,523,412 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010-08-27 19:05:03 | 000,687,828 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2010-08-27 19:05:03 | 000,607,190 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010-08-27 19:05:03 | 000,131,382 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2010-08-27 19:05:03 | 000,103,568 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010-08-27 18:58:07 | 000,000,543 | ---- | M] () -- C:\Windows\NGO.cer
[2010-08-27 18:32:17 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_MijUfilt_01009.Wdf
[2010-08-27 18:31:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempmN1476.html
[2010-08-27 18:19:48 | 000,000,923 | ---- | M] () -- C:\Users\Public\Desktop\DS3 Tool.lnk
[2010-08-27 18:07:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temptb3224.html
[2010-08-27 14:35:42 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXm1464.html
[2010-08-27 14:03:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempmp3436.html
[2010-08-27 11:54:19 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempEM1444.html
[2010-08-27 11:54:19 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAr1444.html
[2010-08-27 11:25:33 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempry3036.html
[2010-08-26 18:44:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYS1556.html
[2010-08-26 18:44:28 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temphj1556.html
[2010-08-26 15:01:22 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxF3116.html
[2010-08-26 15:01:22 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaE3116.html
[2010-08-26 11:11:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempcZ3560.html
[2010-08-26 11:11:45 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLi3560.html
[2010-08-26 08:47:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempbV3584.html
[2010-08-25 19:19:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBP3020.html
[2010-08-25 18:20:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZA3772.html
[2010-08-25 18:20:54 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQH3772.html
[2010-08-25 17:21:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPj3060.html
[2010-08-25 16:40:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempON2504.html
[2010-08-25 12:30:59 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempmBn960.html
[2010-08-25 11:15:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXN3632.html
[2010-08-25 10:18:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemptRM244.html
[2010-08-25 09:15:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYI3400.html
[2010-08-25 08:56:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqI3340.html
[2010-08-24 23:39:03 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempof2476.html
[2010-08-24 23:39:03 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXA2476.html
[2010-08-24 19:04:39 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempwv1544.html
[2010-08-24 17:50:47 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempmd3248.html
[2010-08-24 17:50:47 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuK3248.html
[2010-08-24 17:47:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempnT3716.html
[2010-08-24 16:54:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWY3344.html
[2010-08-24 14:38:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuO3912.html
[2010-08-24 14:38:24 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempoZ3912.html
[2010-08-24 13:24:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLyu924.html
[2010-08-24 13:24:21 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJRN924.html
[2010-08-24 12:44:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempyZ3220.html
[2010-08-24 12:09:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjXz184.html
[2010-08-24 12:09:17 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxCg184.html
[2010-08-24 11:26:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempvZl780.html
[2010-08-24 11:17:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempVR3028.html
[2010-08-24 10:49:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGO2664.html
[2010-08-24 10:12:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdq3200.html
[2010-08-24 09:37:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempUNj548.html
[2010-08-24 09:30:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjF4076.html
[2010-08-23 22:53:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temphk1800.html
[2010-08-23 19:53:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcl3884.html
[2010-08-23 19:53:54 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempKB3884.html
[2010-08-23 17:58:10 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempgT3408.html
[2010-08-23 17:58:10 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempiz3408.html
[2010-08-23 17:45:51 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPZ3304.html
[2010-08-23 17:45:51 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDE3304.html
[2010-08-23 17:41:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemplTr236.html
[2010-08-23 16:52:13 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempot2960.html
[2010-08-23 16:26:49 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempzd2512.html
[2010-08-23 15:54:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temput3164.html
[2010-08-23 15:01:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temple3124.html
[2010-08-23 11:36:31 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaK3612.html
[2010-08-23 11:36:31 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempez3612.html
[2010-08-23 10:57:53 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAg3748.html
[2010-08-23 10:39:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temphj3496.html
[2010-08-23 10:24:31 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOf1404.html
[2010-08-23 10:13:13 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYB2400.html
[2010-08-23 10:10:00 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempUt2736.html
[2010-08-23 09:45:14 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempSV3596.html
[2010-08-23 08:50:39 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemprS3516.html
[2010-08-23 08:50:39 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempFP3516.html
[2010-08-22 20:32:19 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXZ3940.html
[2010-08-22 20:32:19 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXY3940.html
[2010-08-22 20:03:01 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJI2584.html
[2010-08-22 20:03:01 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaT2584.html
[2010-08-22 19:36:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemptB1268.html
[2010-08-22 19:36:08 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempMG1268.html
[2010-08-22 16:50:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYk3536.html
[2010-08-22 16:50:35 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgb3536.html
[2010-08-22 15:47:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjO2964.html
[2010-08-22 15:47:24 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQm2964.html
[2010-08-22 15:01:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temptq3968.html
[2010-08-22 15:01:24 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQx3968.html
[2010-08-22 14:08:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGk2192.html
[2010-08-22 12:47:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temppt3260.html
[2010-08-22 12:47:06 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempEC3260.html
[2010-08-21 20:25:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAP2280.html
[2010-08-21 20:25:15 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGC2280.html
[2010-08-21 18:40:18 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjP3244.html
[2010-08-21 18:40:18 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempUW3244.html
[2010-08-21 18:36:49 | 359,717,347 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2010-08-21 18:36:07 | 000,026,424 | --S- | M] () -- C:\Windows\SysNative\drivers\DRIVER_BIN64
[2010-08-21 18:35:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempgF1704.html
[2010-08-21 18:35:15 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgu1704.html
[2010-08-21 18:32:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaZ3432.html
[2010-08-21 18:32:45 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPL3432.html
[2010-08-21 18:14:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAI3712.html
[2010-08-21 18:14:38 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDH3712.html
[2010-08-21 14:50:10 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNh3232.html
[2010-08-21 14:50:10 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTO3232.html
[2010-08-21 12:18:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempkD2824.html
[2010-08-21 12:18:15 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGn2824.html
[2010-08-21 08:43:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempbF3608.html
[2010-08-21 08:18:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYl3624.html
[2010-08-20 22:55:39 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNW1488.html
[2010-08-20 20:58:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcd2444.html
[2010-08-20 20:58:45 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempvI2444.html
[2010-08-20 18:23:33 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZm3968.html
[2010-08-20 18:23:33 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXK3968.html
[2010-08-20 18:16:02 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempeXq644.html
[2010-08-20 17:38:55 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiC4004.html
[2010-08-20 16:18:40 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZS3992.html
[2010-08-20 14:22:19 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Templo3784.html
[2010-08-20 14:22:19 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTy3784.html
[2010-08-20 11:13:42 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempKw1300.html
[2010-08-20 11:13:42 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjN1300.html
[2010-08-20 11:00:10 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIx3192.html
[2010-08-20 10:37:46 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempri3628.html
[2010-08-20 10:34:57 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBI2208.html
[2010-08-20 10:17:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempMw3708.html
[2010-08-20 09:43:03 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempRM3764.html
[2010-08-19 23:51:30 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempva3420.html
[2010-08-19 10:48:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGA3788.html
[2010-08-19 09:43:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIk2508.html
[2010-08-19 09:17:38 | 000,000,460 | ---- | M] () -- C:\Users\Tomek\Documents\cc_20100819_091735.reg
[2010-08-19 09:08:01 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwM3888.html
[2010-08-18 18:31:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTk3608.html
[2010-08-18 15:44:13 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempSrE620.html
[2010-08-18 14:04:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzJ2880.html
[2010-08-18 11:03:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLK3492.html
[2010-08-18 09:53:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcl3484.html
[2010-08-18 09:33:30 | 000,007,597 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Resmon.ResmonCfg
[2010-08-17 22:33:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempjp4576.html
[2010-08-17 22:33:56 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYZ4576.html
[2010-08-17 20:22:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemplM1448.html
[2010-08-17 20:22:56 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwI1448.html
[2010-08-17 15:43:31 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWl3080.html
[2010-08-17 15:43:31 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempzi3080.html
[2010-08-17 12:54:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temphl3460.html
[2010-08-17 12:54:34 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemppX3460.html
[2010-08-17 12:41:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWl2324.html
[2010-08-17 12:41:04 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempte2324.html
[2010-08-16 22:56:27 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempMd1572.html
[2010-08-16 22:56:27 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDD1572.html
[2010-08-16 21:21:58 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempnh3416.html
[2010-08-16 19:15:20 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaP2448.html
[2010-08-16 19:15:20 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGG2448.html
[2010-08-16 18:06:33 | 000,001,511 | ---- | M] () -- C:\Users\Tomek\Desktop\BFBC2Game — skrót.lnk
[2010-08-16 18:06:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdc3012.html
[2010-08-16 17:55:51 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJtB568.html
[2010-08-16 17:55:51 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWKR568.html
[2010-08-16 17:38:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqV2152.html
[2010-08-16 16:11:18 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJT1460.html
[2010-08-16 09:34:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqS3820.html
[2010-08-15 22:59:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempqn3132.html
[2010-08-15 22:59:04 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempoi3132.html
[2010-08-15 22:04:50 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempsa3228.html
[2010-08-15 21:56:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDs3668.html
[2010-08-15 18:59:40 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuE4260.html
[2010-08-15 18:59:40 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcs4260.html
[2010-08-15 17:29:59 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempVW1652.html
[2010-08-15 13:22:53 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempyu3880.html
[2010-08-14 19:58:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempir3892.html
[2010-08-14 19:58:41 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBS3892.html
[2010-08-14 18:57:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemptI1148.html
[2010-08-14 18:19:19 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQF3680.html
[2010-08-14 17:23:32 | 000,000,232 | ---- | M] () -- C:\Users\Tomek\Desktop\Battlefield Bad Company™ 2.lnk
[2010-08-14 17:15:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempbH3280.html
[2010-08-14 14:38:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPO2952.html
[2010-08-14 14:38:28 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxF2952.html
[2010-08-14 09:08:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiG4084.html
[2010-08-13 20:42:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgl4048.html
[2010-08-13 20:42:48 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZm4048.html
[2010-08-13 19:33:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdk2236.html
[2010-08-13 19:33:41 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNU2236.html
[2010-08-13 18:10:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemprF3652.html
[2010-08-13 18:10:21 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempRh3652.html
[2010-08-13 17:59:57 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJH3848.html
[2010-08-13 15:46:03 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPr1964.html
[2010-08-13 10:03:00 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempeE2020.html
[2010-08-13 09:09:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempnV3680.html
[2010-08-12 21:21:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiE2632.html
[2010-08-12 21:21:11 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempEn4084.html
[2010-08-12 21:01:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempei2292.html
[2010-08-12 19:23:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempSo2356.html
[2010-08-12 19:23:54 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuV2356.html
[2010-08-12 18:26:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempnw3760.html
[2010-08-12 18:26:08 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdv3760.html
[2010-08-12 18:19:01 | 000,001,514 | ---- | M] () -- C:\Users\Tomek\Desktop\Resume Download of The Lord of the Rings Online Siege of Mirkwood.lnk
[2010-08-12 18:01:58 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwI2584.html
[2010-08-12 18:01:58 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzN2584.html
[2010-08-12 17:56:40 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWo2252.html
[2010-08-12 17:56:40 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIM2252.html
[2010-08-12 17:50:34 | 000,002,189 | ---- | M] () -- C:\Users\Tomek\Desktop\cstrike.rar
[2010-08-12 17:24:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGH1064.html
[2010-08-12 16:19:12 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJF2528.html
[2010-08-12 16:19:12 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgq2528.html
[2010-08-12 11:24:59 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempmI1508.html
[2010-08-12 10:00:00 | 000,108,032 | ---- | M] () -- C:\Windows\SysWow64\ff_vfw.dll
[2010-08-12 10:00:00 | 000,000,038 | ---- | M] () -- C:\Windows\avisplitter.ini
[2010-08-12 09:43:10 | 000,001,084 | ---- | M] () -- C:\Users\Tomek\Documents\cc_20100812_094308.reg
[2010-08-12 09:40:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempHI2728.html
[2010-08-11 21:54:46 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempsI3148.html
[2010-08-11 21:54:46 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempCB3148.html
[2010-08-11 20:38:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempCS2156.html
[2010-08-11 19:28:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemppL3612.html
[2010-08-11 19:28:43 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempMo3612.html
[2010-08-11 16:03:47 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempnYC224.html
[2010-08-11 10:08:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYP3176.html
[2010-08-10 21:43:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAd3796.html
[2010-08-10 21:42:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempsr3420.html
[2010-08-10 19:10:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjQ3408.html
[2010-08-10 16:05:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempun1052.html
[2010-08-10 13:58:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemptK3660.html
[2010-08-10 12:37:18 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempun3676.html
[2010-08-10 12:37:18 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxH3676.html
[2010-08-10 10:58:01 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaDq316.html
[2010-08-10 09:22:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempHy4088.html
[2010-08-09 23:11:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIW2740.html
[2010-08-09 23:11:15 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNU2740.html
[2010-08-09 21:54:20 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempmx1372.html
[2010-08-09 21:54:20 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempoX1372.html
[2010-08-09 20:20:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwH1428.html
[2010-08-09 20:12:14 | 000,068,264 | ---- | M] () -- C:\Users\Tomek\AppData\Local\GDIPFONTCACHEV1.DAT
[2010-08-09 20:11:36 | 000,307,320 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010-08-09 19:58:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTo1168.html
[2010-08-09 18:58:42 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll
[2010-08-09 18:58:42 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2010-08-09 18:58:42 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2010-08-09 18:58:42 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2010-08-09 17:17:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjW1980.html
[2010-08-09 16:12:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYI2104.html
[2010-08-09 15:08:47 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZh3532.html
[2010-08-09 14:00:31 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempHB3524.html
[2010-08-09 14:00:31 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempxk3524.html
[2010-08-09 13:43:05 | 200,000,000 | ---- | M] () -- C:\Users\Tomek\met33.part02.rar
[2010-08-09 13:30:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNe3576.html
[2010-08-09 12:29:32 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXS1016.html
[2010-08-09 12:29:32 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempFi1016.html
[2010-08-09 12:24:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLCJ852.html
[2010-08-09 11:21:01 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzT3992.html
[2010-08-09 10:15:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempVH2328.html
[2010-08-09 09:19:00 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAz3216.html
[2010-08-08 22:53:51 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDE1820.html
[2010-08-08 22:53:51 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiB1820.html
[2010-08-08 22:02:58 | 000,209,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tabctl32.ocx
[2010-08-08 22:02:49 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\Setup1.exe
[2010-08-08 22:02:48 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\ST6UNST.EXE
[2010-08-08 18:53:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZG3652.html
[2010-08-08 17:55:47 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempeB3024.html
[2010-08-08 17:50:44 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempCi3560.html
[2010-08-08 17:41:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgr2792.html
[2010-08-08 17:41:48 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzH2792.html
[2010-08-08 17:04:18 | 000,000,136 | ---- | M] () -- C:\Users\Tomek\Desktop\winsockfix.bat
[2010-08-08 16:46:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNr1172.html
[2010-08-08 15:16:55 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempde2288.html
[2010-08-08 15:16:55 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdk2288.html
[2010-08-08 14:50:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempvD3768.html
[2010-08-08 14:28:55 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempsI2544.html
[2010-08-08 14:23:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYS3844.html
[2010-08-08 14:02:41 | 000,000,192 | ---- | M] () -- C:\Users\Tomek\Desktop\FIFA 10.lnk
[2010-08-08 13:46:20 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOk2924.html
[2010-08-08 13:46:20 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBa2924.html
[2010-08-08 13:45:50 | 000,834,544 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys
[2010-08-08 12:40:50 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010-08-08 11:56:16 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTR1260.html
[2010-08-08 09:20:52 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempkA3832.html
[2010-08-08 07:20:10 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPs1796.html
[2010-08-07 22:05:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAe3624.html
[2010-08-07 22:05:54 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxD3624.html
[2010-08-07 21:01:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempcJG952.html
[2010-08-07 21:01:25 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempHDA952.html
[2010-08-07 18:53:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemprcV716.html
[2010-08-07 18:53:06 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwSt716.html
[2010-08-07 17:03:21 | 000,000,808 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2010-08-07 16:37:50 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIB1228.html
[2010-08-07 16:37:50 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempbP1228.html
[2010-08-07 16:36:56 | 000,000,414 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2010-08-07 13:51:29 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBu2632.html
[2010-08-07 09:44:29 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJT2868.html
[2010-08-06 21:57:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOH1780.html
[2010-08-06 21:42:25 | 000,000,000 | ---- | M] () -- C:\Windows\Setup.INI
[2010-08-06 21:42:13 | 000,000,089 | ---- | M] () -- C:\Windows\LManager.UNI
[2010-08-06 21:41:15 | 000,001,939 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010-08-06 21:35:51 | 000,524,288 | -HS- | M] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2010-08-06 21:35:51 | 000,524,288 | -HS- | M] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2010-08-06 21:35:51 | 000,065,536 | -HS- | M] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2010-08-06 21:35:44 | 000,002,048 | ---- | M] () -- C:\Windows\SysWow64\winver.exe
[2010-08-06 21:35:41 | 000,410,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\systemcpl.dll
[2010-08-06 21:35:40 | 000,001,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\sppcomapi.dll
[2010-08-06 21:35:39 | 000,113,543 | ---- | M] () -- C:\Windows\SysWow64\slmgr.vbs
[2010-08-06 21:33:30 | 000,000,020 | -HS- | M] () -- C:\Users\Tomek\ntuser.ini
[2010-08-06 21:31:41 | 000,000,803 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2010-08-06 21:31:41 | 000,000,803 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2010-08-06 20:41:05 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDk3572.html
[2010-08-06 20:41:05 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWB3572.html
[2010-08-06 20:16:09 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLu3016.html
[2010-08-06 19:55:05 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemphUZ988.html
[2010-08-06 19:55:05 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempEea988.html
[2010-08-06 19:45:40 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQX3396.html
[2010-08-06 19:29:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPDa568.html
[2010-08-06 18:42:52 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temple1308.html
[2010-08-06 17:01:51 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_point64k_01009.Wdf
[2010-08-06 16:32:55 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2010-08-06 16:32:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaPR452.html
[2010-08-06 16:32:04 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempctK452.html
[2010-08-06 16:29:17 | 000,006,656 | ---- | M] () -- C:\Windows\SysNative\bcmwlrc.dll
[2010-08-06 16:22:52 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2010-08-06 16:19:23 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01007.Wdf
[2010-08-06 16:17:06 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat
[2010-08-06 16:12:37 | 000,000,218 | ---- | M] () -- C:\Users\Tomek\Desktop\Counter-Strike.url
[2010-08-06 16:06:20 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPl2024.html
[2010-08-06 16:00:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempsf2812.html
[2010-08-06 16:00:25 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempcX2812.html
[2010-08-06 15:49:53 | 000,001,003 | ---- | M] () -- C:\Users\Tomek\Desktop\Gadu-Gadu 10.lnk
[2010-08-03 13:08:02 | 000,229,376 | RHS- | M] (Microsoft) -- C:\Windows\shell.exe
[2010-07-12 11:24:32 | 000,341,504 | ---- | M] (repkasoft) -- C:\Windows\yowindow.scr
[2010-07-07 03:54:32 | 000,063,416 | ---- | M] () -- C:\Windows\SysNative\atiapfxx.blb
[2010-07-07 03:54:16 | 000,143,360 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atiapfxx.exe
[2010-07-07 03:49:18 | 000,278,528 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\SysWow64\Oemdspif.dll

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010-08-28 15:53:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempeO2132.html
[2010-08-28 15:29:43 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOW1488.html
[2010-08-28 15:14:35 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempoZ3696.html
[2010-08-28 14:33:11 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempzi3888.html
[2010-08-28 14:33:11 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempnb3888.html
[2010-08-28 13:16:51 | 003,197,721 | ---- | C] () -- C:\Users\Tomek\Desktop\741A0001_0_FLV_VIDEO_Iaq.flv
[2010-08-28 13:14:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcs2640.html
[2010-08-28 13:14:40 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOu2640.html
[2010-08-28 12:22:59 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempmd1244.html
[2010-08-28 11:47:05 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLZ3744.html
[2010-08-28 10:56:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temptm2912.html
[2010-08-28 10:44:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYK1796.html
[2010-08-28 10:26:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempKd3748.html
[2010-08-28 09:10:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempuw3508.html
[2010-08-27 22:53:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQD2452.html
[2010-08-27 22:53:31 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqT2452.html
[2010-08-27 21:35:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAE3380.html
[2010-08-27 21:35:31 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temppd3380.html
[2010-08-27 19:47:14 | 000,056,592 | ---- | C] () -- C:\Users\Tomek\Documents\devdata.dat
[2010-08-27 19:07:45 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temprr3576.html
[2010-08-27 18:58:07 | 000,000,543 | ---- | C] () -- C:\Windows\NGO.cer
[2010-08-27 18:32:17 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_MijUfilt_01009.Wdf
[2010-08-27 18:30:56 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempmN1476.html
[2010-08-27 18:19:48 | 000,000,923 | ---- | C] () -- C:\Users\Public\Desktop\DS3 Tool.lnk
[2010-08-27 18:07:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temptb3224.html
[2010-08-27 14:35:28 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXm1464.html
[2010-08-27 13:49:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempmp3436.html
[2010-08-27 11:41:27 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempEM1444.html
[2010-08-27 11:41:27 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAr1444.html
[2010-08-27 11:05:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempry3036.html
[2010-08-26 18:34:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYS1556.html
[2010-08-26 18:34:31 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temphj1556.html
[2010-08-26 14:57:56 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxF3116.html
[2010-08-26 14:57:56 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaE3116.html
[2010-08-26 10:55:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempcZ3560.html
[2010-08-26 10:55:38 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLi3560.html
[2010-08-26 08:39:58 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempbV3584.html
[2010-08-25 18:32:46 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBP3020.html
[2010-08-25 18:05:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZA3772.html
[2010-08-25 18:05:16 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQH3772.html
[2010-08-25 17:21:05 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPj3060.html
[2010-08-25 16:24:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempON2504.html
[2010-08-25 11:35:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempmBn960.html
[2010-08-25 11:14:51 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXN3632.html
[2010-08-25 10:17:56 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemptRM244.html
[2010-08-25 09:02:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYI3400.html
[2010-08-25 08:53:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqI3340.html
[2010-08-24 22:58:46 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempof2476.html
[2010-08-24 22:58:46 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXA2476.html
[2010-08-24 18:35:08 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempwv1544.html
[2010-08-24 17:48:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempmd3248.html
[2010-08-24 17:48:41 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuK3248.html
[2010-08-24 17:44:22 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempnT3716.html
[2010-08-24 16:37:22 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWY3344.html
[2010-08-24 14:37:35 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuO3912.html
[2010-08-24 14:37:35 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempoZ3912.html
[2010-08-24 13:23:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLyu924.html
[2010-08-24 13:23:15 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJRN924.html
[2010-08-24 12:42:46 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempyZ3220.html
[2010-08-24 12:07:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjXz184.html
[2010-08-24 12:07:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxCg184.html
[2010-08-24 11:20:14 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempvZl780.html
[2010-08-24 11:17:25 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempVR3028.html
[2010-08-24 10:49:26 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGO2664.html
[2010-08-24 10:12:02 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdq3200.html
[2010-08-24 09:37:26 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempUNj548.html
[2010-08-24 09:20:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjF4076.html
[2010-08-23 21:02:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temphk1800.html
[2010-08-23 19:17:55 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcl3884.html
[2010-08-23 19:17:55 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempKB3884.html
[2010-08-23 17:57:12 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempgT3408.html
[2010-08-23 17:57:12 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempiz3408.html
[2010-08-23 17:45:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPZ3304.html
[2010-08-23 17:45:32 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDE3304.html
[2010-08-23 16:57:43 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemplTr236.html
[2010-08-23 16:52:02 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempot2960.html
[2010-08-23 16:26:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempzd2512.html
[2010-08-23 15:41:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temput3164.html
[2010-08-23 15:00:46 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temple3124.html
[2010-08-23 11:13:04 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaK3612.html
[2010-08-23 11:13:04 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempez3612.html
[2010-08-23 10:57:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAg3748.html
[2010-08-23 10:38:51 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temphj3496.html
[2010-08-23 10:21:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOf1404.html
[2010-08-23 10:12:58 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYB2400.html
[2010-08-23 10:09:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempUt2736.html
[2010-08-23 09:44:59 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempSV3596.html
[2010-08-23 08:25:54 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemprS3516.html
[2010-08-23 08:25:54 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempFP3516.html
[2010-08-22 20:29:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXZ3940.html
[2010-08-22 20:29:00 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXY3940.html
[2010-08-22 20:01:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJI2584.html
[2010-08-22 20:01:41 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaT2584.html
[2010-08-22 17:17:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemptB1268.html
[2010-08-22 17:17:41 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempMG1268.html
[2010-08-22 16:39:26 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgb3536.html
[2010-08-22 16:39:25 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYk3536.html
[2010-08-22 15:38:49 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjO2964.html
[2010-08-22 15:38:49 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQm2964.html
[2010-08-22 14:51:10 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temptq3968.html
[2010-08-22 14:51:10 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQx3968.html
[2010-08-22 13:26:56 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGk2192.html
[2010-08-22 09:41:34 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temppt3260.html
[2010-08-22 09:41:34 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempEC3260.html
[2010-08-21 20:11:59 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAP2280.html
[2010-08-21 20:11:59 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGC2280.html
[2010-08-21 18:38:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjP3244.html
[2010-08-21 18:38:41 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempUW3244.html
[2010-08-21 18:35:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempgF1704.html
[2010-08-21 18:35:15 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgu1704.html
[2010-08-21 18:31:57 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaZ3432.html
[2010-08-21 18:31:57 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPL3432.html
[2010-08-21 18:29:49 | 000,026,424 | --S- | C] () -- C:\Windows\SysNative\drivers\DRIVER_BIN64
[2010-08-21 18:14:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAI3712.html
[2010-08-21 18:14:38 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDH3712.html
[2010-08-21 14:17:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNh3232.html
[2010-08-21 14:17:15 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTO3232.html
[2010-08-21 09:44:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempkD2824.html
[2010-08-21 09:44:42 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGn2824.html
[2010-08-21 08:41:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempbF3608.html
[2010-08-21 08:08:06 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYl3624.html
[2010-08-20 22:48:14 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNW1488.html
[2010-08-20 20:07:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcd2444.html
[2010-08-20 20:07:30 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempvI2444.html
[2010-08-20 18:23:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZm3968.html
[2010-08-20 18:23:00 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXK3968.html
[2010-08-20 18:15:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempeXq644.html
[2010-08-20 17:37:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiC4004.html
[2010-08-20 15:53:14 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZS3992.html
[2010-08-20 15:52:40 | 000,001,003 | ---- | C] () -- C:\Users\Tomek\Desktop\Gadu-Gadu 10.lnk
[2010-08-20 14:19:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Templo3784.html
[2010-08-20 14:19:31 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTy3784.html
[2010-08-20 11:05:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempKw1300.html
[2010-08-20 11:05:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjN1300.html
[2010-08-20 10:57:08 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIx3192.html
[2010-08-20 10:37:35 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempri3628.html
[2010-08-20 10:34:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBI2208.html
[2010-08-20 10:17:10 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempMw3708.html
[2010-08-20 08:35:53 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempRM3764.html
[2010-08-19 22:11:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempva3420.html
[2010-08-19 10:33:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGA3788.html
[2010-08-19 09:43:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIk2508.html
[2010-08-19 09:17:37 | 000,000,460 | ---- | C] () -- C:\Users\Tomek\Documents\cc_20100819_091735.reg
[2010-08-19 09:05:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwM3888.html
[2010-08-18 17:18:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTk3608.html
[2010-08-18 15:43:53 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempSrE620.html
[2010-08-18 14:04:19 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzJ2880.html
[2010-08-18 11:03:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLK3492.html
[2010-08-18 09:52:57 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcl3484.html
[2010-08-17 22:29:17 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempjp4576.html
[2010-08-17 22:29:17 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYZ4576.html
[2010-08-17 20:19:47 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemplM1448.html
[2010-08-17 20:19:47 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwI1448.html
[2010-08-17 17:08:30 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010-08-17 17:08:30 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2010-08-17 17:08:28 | 000,790,528 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2010-08-17 17:08:28 | 000,134,144 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2010-08-17 17:08:28 | 000,000,547 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll.manifest
[2010-08-17 17:08:28 | 000,000,414 | ---- | C] () -- C:\Windows\SysWow64\lame_acm.xml
[2010-08-17 17:08:27 | 000,108,032 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2010-08-17 15:42:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWl3080.html
[2010-08-17 15:42:48 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempzi3080.html
[2010-08-17 12:43:01 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temphl3460.html
[2010-08-17 12:43:01 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemppX3460.html
[2010-08-17 12:27:06 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWl2324.html
[2010-08-17 12:27:06 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempte2324.html
[2010-08-16 21:43:27 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempMd1572.html
[2010-08-16 21:43:27 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDD1572.html
[2010-08-16 21:18:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempnh3416.html
[2010-08-16 19:14:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaP2448.html
[2010-08-16 19:14:16 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGG2448.html
[2010-08-16 18:06:34 | 000,001,511 | ---- | C] () -- C:\Users\Tomek\Desktop\BFBC2Game — skrót.lnk
[2010-08-16 18:05:54 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdc3012.html
[2010-08-16 17:45:11 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJtB568.html
[2010-08-16 17:45:11 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWKR568.html
[2010-08-16 17:37:55 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqV2152.html
[2010-08-16 16:11:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJT1460.html
[2010-08-16 11:09:04 | 359,717,347 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2010-08-16 09:33:20 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqS3820.html
[2010-08-15 22:56:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempqn3132.html
[2010-08-15 22:56:44 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempoi3132.html
[2010-08-15 21:56:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempsa3228.html
[2010-08-15 21:55:07 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDs3668.html
[2010-08-15 20:17:41 | 000,081,920 | ---- | C] () -- C:\Windows\System\CAPI2032.DLL
[2010-08-15 20:17:40 | 000,306,688 | ---- | C] () -- C:\Windows\System\LFFPX7.DLL
[2010-08-15 20:17:40 | 000,095,232 | ---- | C] () -- C:\Windows\System\LFKODAK.DLL
[2010-08-15 17:43:21 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuE4260.html
[2010-08-15 17:43:21 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcs4260.html
[2010-08-15 17:11:34 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempVW1652.html
[2010-08-15 12:40:36 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempyu3880.html
[2010-08-14 19:16:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempir3892.html
[2010-08-14 19:16:44 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBS3892.html
[2010-08-14 18:53:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemptI1148.html
[2010-08-14 17:57:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQF3680.html
[2010-08-14 17:23:32 | 000,000,232 | ---- | C] () -- C:\Users\Tomek\Desktop\Battlefield Bad Company™ 2.lnk
[2010-08-14 16:49:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempbH3280.html
[2010-08-14 13:35:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPO2952.html
[2010-08-14 13:35:38 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxF2952.html
[2010-08-14 10:34:47 | 000,001,048 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010-08-14 10:34:46 | 000,001,044 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010-08-14 08:57:53 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiG4084.html
[2010-08-13 20:30:20 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgl4048.html
[2010-08-13 20:30:20 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZm4048.html
[2010-08-13 19:27:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdk2236.html
[2010-08-13 19:27:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNU2236.html
[2010-08-13 18:10:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemprF3652.html
[2010-08-13 18:10:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempRh3652.html
[2010-08-13 17:42:17 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJH3848.html
[2010-08-13 15:45:35 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPr1964.html
[2010-08-13 09:59:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempeE2020.html
[2010-08-13 09:09:05 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempnV3680.html
[2010-08-12 21:21:19 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiE2632.html
[2010-08-12 21:15:21 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempEn4084.html
[2010-08-12 20:52:21 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempei2292.html
[2010-08-12 18:33:17 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempSo2356.html
[2010-08-12 18:33:17 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuV2356.html
[2010-08-12 18:19:01 | 000,001,514 | ---- | C] () -- C:\Users\Tomek\Desktop\Resume Download of The Lord of the Rings Online Siege of Mirkwood.lnk
[2010-08-12 18:04:57 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempnw3760.html
[2010-08-12 18:04:57 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdv3760.html
[2010-08-12 18:00:37 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwI2584.html
[2010-08-12 18:00:37 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzN2584.html
[2010-08-12 17:52:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWo2252.html
[2010-08-12 17:52:18 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIM2252.html
[2010-08-12 17:50:34 | 000,002,189 | ---- | C] () -- C:\Users\Tomek\Desktop\cstrike.rar
[2010-08-12 17:15:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGH1064.html
[2010-08-12 15:51:51 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJF2528.html
[2010-08-12 15:51:51 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgq2528.html
[2010-08-12 11:24:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempmI1508.html
[2010-08-12 09:43:09 | 000,001,084 | ---- | C] () -- C:\Users\Tomek\Documents\cc_20100812_094308.reg
[2010-08-12 09:39:52 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempHI2728.html
[2010-08-11 21:15:28 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempsI3148.html
[2010-08-11 21:15:28 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempCB3148.html
[2010-08-11 20:38:12 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempCS2156.html
[2010-08-11 17:41:43 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemppL3612.html
[2010-08-11 17:41:43 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempMo3612.html
[2010-08-11 16:02:37 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempnYC224.html
[2010-08-11 10:06:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYP3176.html
[2010-08-10 21:43:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAd3796.html
[2010-08-10 21:41:23 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempsr3420.html
[2010-08-10 19:04:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjQ3408.html
[2010-08-10 16:03:34 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempun1052.html
[2010-08-10 13:49:05 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemptK3660.html
[2010-08-10 12:37:04 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempun3676.html
[2010-08-10 12:37:04 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxH3676.html
[2010-08-10 10:57:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaDq316.html
[2010-08-10 09:06:58 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempHy4088.html
[2010-08-09 22:31:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIW2740.html
[2010-08-09 22:31:15 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNU2740.html
[2010-08-09 21:35:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempmx1372.html
[2010-08-09 21:35:00 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempoX1372.html
[2010-08-09 20:17:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwH1428.html
[2010-08-09 18:32:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTo1168.html
[2010-08-09 17:17:08 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjW1980.html
[2010-08-09 16:11:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYI2104.html
[2010-08-09 15:08:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZh3532.html
[2010-08-09 13:54:53 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempHB3524.html
[2010-08-09 13:54:53 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempxk3524.html
[2010-08-09 13:27:44 | 200,000,000 | ---- | C] () -- C:\Users\Tomek\met33.part02.rar
[2010-08-09 13:14:37 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNe3576.html
[2010-08-09 12:25:47 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXS1016.html
[2010-08-09 12:25:47 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempFi1016.html
[2010-08-09 12:24:09 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLCJ852.html
[2010-08-09 11:20:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzT3992.html
[2010-08-09 10:15:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempVH2328.html
[2010-08-09 09:18:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAz3216.html
[2010-08-08 21:50:29 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDE1820.html
[2010-08-08 21:50:29 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiB1820.html
[2010-08-08 18:26:47 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZG3652.html
[2010-08-08 17:53:59 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempeB3024.html
[2010-08-08 17:45:02 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempCi3560.html
[2010-08-08 17:17:26 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgr2792.html
[2010-08-08 17:17:26 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzH2792.html
[2010-08-08 17:04:17 | 000,000,136 | ---- | C] () -- C:\Users\Tomek\Desktop\winsockfix.bat
[2010-08-08 16:18:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNr1172.html
[2010-08-08 15:58:37 | 001,053,056 | ---- | C] () -- C:\Windows\SysWow64\drivers\CAMTHWDM.sys
[2010-08-08 14:56:28 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempde2288.html
[2010-08-08 14:56:28 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdk2288.html
[2010-08-08 14:49:34 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempvD3768.html
[2010-08-08 14:27:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempsI2544.html
[2010-08-08 14:02:41 | 000,000,192 | ---- | C] () -- C:\Users\Tomek\Desktop\FIFA 10.lnk
[2010-08-08 13:54:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYS3844.html
[2010-08-08 13:45:50 | 000,834,544 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys
[2010-08-08 13:28:37 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOk2924.html
[2010-08-08 13:28:37 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBa2924.html
[2010-08-08 12:40:50 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010-08-08 11:33:25 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTR1260.html
[2010-08-08 09:14:23 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempkA3832.html
[2010-08-08 07:13:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPs1796.html
[2010-08-07 22:00:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAe3624.html
[2010-08-07 22:00:40 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxD3624.html
[2010-08-07 20:36:13 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempcJG952.html
[2010-08-07 20:36:13 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempHDA952.html
[2010-08-07 18:53:06 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemprcV716.html
[2010-08-07 18:53:06 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwSt716.html
[2010-08-07 16:36:56 | 000,000,414 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2010-08-07 16:36:02 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIB1228.html
[2010-08-07 16:36:02 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempbP1228.html
[2010-08-07 14:23:40 | 000,007,597 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Resmon.ResmonCfg
[2010-08-07 13:47:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBu2632.html
[2010-08-07 09:03:07 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJT2868.html
[2010-08-06 21:49:49 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOH1780.html
[2010-08-06 21:42:25 | 000,000,000 | ---- | C] () -- C:\Windows\Setup.INI
[2010-08-06 21:42:13 | 000,000,089 | ---- | C] () -- C:\Windows\LManager.UNI
[2010-08-06 21:41:15 | 000,001,939 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010-08-06 21:35:39 | 000,113,543 | ---- | C] () -- C:\Windows\SysWow64\slmgr.vbs
[2010-08-06 21:35:39 | 000,002,048 | ---- | C] () -- C:\Windows\SysWow64\winver.exe
[2010-08-06 21:33:30 | 001,835,008 | -HS- | C] () -- C:\Users\Tomek\NTUSER.DAT
[2010-08-06 21:33:30 | 000,524,288 | -HS- | C] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2010-08-06 21:33:30 | 000,524,288 | -HS- | C] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2010-08-06 21:33:30 | 000,262,144 | -HS- | C] () -- C:\Users\Tomek\ntuser.dat.LOG1
[2010-08-06 21:33:30 | 000,065,536 | -HS- | C] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2010-08-06 21:33:30 | 000,000,020 | -HS- | C] () -- C:\Users\Tomek\ntuser.ini
[2010-08-06 21:33:30 | 000,000,000 | -HS- | C] () -- C:\Users\Tomek\ntuser.dat.LOG2
[2010-08-06 21:27:55 | 3111,518,208 | -HS- | C] () -- C:\hiberfil.sys
[2010-08-06 20:38:07 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDk3572.html
[2010-08-06 20:38:07 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWB3572.html
[2010-08-06 19:57:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLu3016.html
[2010-08-06 19:52:13 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemphUZ988.html
[2010-08-06 19:52:13 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempEea988.html
[2010-08-06 19:45:25 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQX3396.html
[2010-08-06 19:22:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPDa568.html
[2010-08-06 18:41:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temple1308.html
[2010-08-06 17:01:51 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_point64k_01009.Wdf
[2010-08-06 16:32:55 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2010-08-06 16:31:38 | 000,626,688 | ---- | C] () -- C:\Windows\Image.dll
[2010-08-06 16:31:38 | 000,222,382 | ---- | C] () -- C:\Windows\Acer Crystal Eye webcam.ico
[2010-08-06 16:31:38 | 000,200,704 | ---- | C] () -- C:\Windows\PLFSetI.exe
[2010-08-06 16:31:38 | 000,020,480 | ---- | C] () -- C:\Windows\USB_VIDEO_REG.exe
[2010-08-06 16:31:38 | 000,008,362 | ---- | C] () -- C:\Windows\Suyin.reg
[2010-08-06 16:31:38 | 000,000,323 | ---- | C] () -- C:\Windows\PidList.ini
[2010-08-06 16:29:33 | 000,006,656 | ---- | C] () -- C:\Windows\SysNative\bcmwlrc.dll
[2010-08-06 16:28:37 | 000,308,477 | ---- | C] () -- C:\Windows\SysNative\netathrx.inf
[2010-08-06 16:28:37 | 000,051,232 | ---- | C] () -- C:\Windows\SysNative\athrextx.cat
[2010-08-06 16:22:52 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2010-08-06 16:19:23 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01007.Wdf
[2010-08-06 16:17:06 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010-08-06 16:12:37 | 000,000,218 | ---- | C] () -- C:\Users\Tomek\Desktop\Counter-Strike.url
[2010-08-06 16:10:00 | 000,019,462 | ---- | C] () -- C:\Windows\atiogl.xml
[2010-08-06 16:10:00 | 000,001,035 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2010-08-06 16:10:00 | 000,001,035 | ---- | C] () -- C:\Windows\SysNative\atipblag.dat
[2010-08-06 16:08:51 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaPR452.html
[2010-08-06 16:08:51 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempctK452.html
[2010-08-06 16:04:47 | 000,001,256 | R--- | C] () -- C:\Windows\SysNative\drivers\RTHDATEX.DAT
[2010-08-06 16:04:47 | 000,000,520 | R--- | C] () -- C:\Windows\SysNative\drivers\RTEQEX2.DAT
[2010-08-06 16:04:47 | 000,000,520 | R--- | C] () -- C:\Windows\SysNative\drivers\RTEQEX1.DAT
[2010-08-06 16:04:47 | 000,000,520 | R--- | C] () -- C:\Windows\SysNative\drivers\RTEQEX0.DAT
[2010-08-06 16:04:47 | 000,000,008 | R--- | C] () -- C:\Windows\SysNative\drivers\RTKHDAUD.DAT
[2010-08-06 16:04:46 | 000,214,552 | R--- | C] () -- C:\Windows\SysNative\drivers\RTCONVEQ.DAT
[2010-08-06 16:01:54 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPl2024.html
[2010-08-06 15:53:23 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempsf2812.html
[2010-08-06 15:53:23 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempcX2812.html
[2010-08-06 15:50:14 | 000,110,602 | ---- | C] () -- C:\Windows\SysWow64\xcdsfx32.bin
[2010-07-07 03:54:32 | 000,063,416 | ---- | C] () -- C:\Windows\SysNative\atiapfxx.blb
[2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll

[color=#E56717]========== LOP Check ==========[/color]

[2010-08-11 12:15:44 | 000,000,000 | ---D | M] -- C:\Users\cs\AppData\Roaming\ESET
[2010-08-07 12:02:55 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\ESET
[2010-08-08 15:29:17 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\Gadu-Gadu 10
[2010-08-15 20:06:10 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\IrfanView
[2010-08-08 15:37:08 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\OpenFM
[2010-08-20 22:03:45 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\Tibia
[2010-08-08 15:58:41 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\WebcamMax
[2010-08-13 17:33:24 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\YoWindow
[2010-08-17 17:06:31 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\BESTplayer
[2010-08-08 13:49:09 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\DAEMON Tools Lite
[2010-08-07 09:43:06 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\ESET
[2010-08-06 16:00:25 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Gadu-Gadu 10
[2010-08-08 14:02:59 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Leadertech
[2010-08-27 18:19:48 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\MotioninJoy
[2010-08-20 16:04:03 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Tibia
[2010-08-08 16:40:46 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\WebcamMax
[2010-08-17 22:24:51 | 000,032,592 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]


[color=#A23BEC]< %systemdrive%\*.* >[/color]
[2010-08-28 16:27:15 | 3111,518,208 | -HS- | M] () -- C:\hiberfil.sys
[2010-08-28 16:27:15 | 4148,690,944 | -HS- | M] () -- C:\pagefile.sys


[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys
[2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2009-07-14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys

[color=#A23BEC]< MD5 for: CDROM.SYS >[/color]
[2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysWow64\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys
[2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2009-07-14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2009-07-14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
< End of report >
[/log]

Tomek01
komentarz
komentarz

Odinstaluj Deamon Tools Toolbar i ponownie wrzuć logi OTL i RSIT.

Bomaw
komentarz
komentarz

RSIT
log
[log]Logfile of random's system information tool 1.08 (written by random/random)
Run by Tomek at 2010-08-29 22:55:32
Microsoft Windows 7 Enterprise
System drive C: has 85 GB (56%) free of 153 GB
Total RAM: 3957 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:55:35, on 2010-08-29
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Users\Tomek\Downloads\RSIT.exe
C:\Program Files (x86)\trend micro\Tomek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'USŁUGA SIECIOWA')
O8 - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6170 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-08-09 41760]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-08-29 22:55:32 ----D---- C:\rsit
2010-08-29 22:55:32 ----D---- C:\Program Files (x86)\trend micro
2010-08-29 10:14:40 ----HDC---- C:\ProgramData\{ECC164E0-3133-4C70-A831-F08DB2940F70}
2010-08-29 10:14:27 ----D---- C:\ProgramData\Lavasoft
2010-08-29 10:14:27 ----D---- C:\Program Files (x86)\Lavasoft
2010-08-28 18:47:38 ----D---- C:\ProgramData\KONAMI
2010-08-27 18:19:48 ----D---- C:\Users\Tomek\AppData\Roaming\MotioninJoy
2010-08-27 18:19:48 ----D---- C:\ProgramData\MotioninJoy
2010-08-27 18:19:48 ----A---- C:\Windows\SysWOW64\MijFrc.dll
2010-08-22 10:23:22 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2010-08-21 18:29:37 ----D---- C:\Program Files (x86)\Ray Adams
2010-08-20 16:03:51 ----D---- C:\Users\Tomek\AppData\Roaming\Tibia
2010-08-20 16:03:46 ----D---- C:\Program Files (x86)\Tibia
2010-08-17 17:08:44 ----D---- C:\Users\Tomek\AppData\Roaming\Media Player Classic
2010-08-17 17:08:30 ----A---- C:\Windows\SysWOW64\unrar.dll
2010-08-17 17:08:30 ----A---- C:\Windows\avisplitter.ini
2010-08-17 17:08:28 ----A---- C:\Windows\SysWOW64\yv12vfw.dll
2010-08-17 17:08:28 ----A---- C:\Windows\SysWOW64\xvidvfw.dll
2010-08-17 17:08:28 ----A---- C:\Windows\SysWOW64\xvidcore.dll
2010-08-17 17:08:28 ----A---- C:\Windows\SysWOW64\ff_vfw.dll.manifest
2010-08-17 17:08:27 ----A---- C:\Windows\SysWOW64\ff_vfw.dll
2010-08-17 17:08:24 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2010-08-17 17:06:27 ----D---- C:\Users\Tomek\AppData\Roaming\BESTplayer
2010-08-16 11:09:07 ----D---- C:\Windows\Minidump
2010-08-15 20:06:09 ----D---- C:\Program Files (x86)\IrfanView
2010-08-14 16:55:10 ----A---- C:\Windows\SysWOW64\XAudio2_5.dll
2010-08-14 16:55:10 ----A---- C:\Windows\SysWOW64\xactengine3_5.dll
2010-08-14 16:55:09 ----A---- C:\Windows\SysWOW64\d3dx11_42.dll
2010-08-14 16:55:09 ----A---- C:\Windows\SysWOW64\d3dcsx_42.dll
2010-08-14 16:55:09 ----A---- C:\Windows\SysWOW64\D3DCompiler_42.dll
2010-08-14 16:55:08 ----A---- C:\Windows\SysWOW64\d3dx10_42.dll
2010-08-14 16:55:07 ----A---- C:\Windows\SysWOW64\D3DX9_42.dll
2010-08-14 16:55:07 ----A---- C:\Windows\SysWOW64\d3dx10_41.dll
2010-08-14 16:55:07 ----A---- C:\Windows\SysWOW64\D3DCompiler_41.dll
2010-08-14 16:55:06 ----A---- C:\Windows\SysWOW64\XAudio2_4.dll
2010-08-14 16:55:06 ----A---- C:\Windows\SysWOW64\XAPOFX1_3.dll
2010-08-14 16:55:06 ----A---- C:\Windows\SysWOW64\xactengine3_4.dll
2010-08-14 16:55:06 ----A---- C:\Windows\SysWOW64\X3DAudio1_6.dll
2010-08-14 16:55:06 ----A---- C:\Windows\SysWOW64\D3DX9_41.dll
2010-08-14 16:55:06 ----A---- C:\Windows\SysWOW64\d3dx10_40.dll
2010-08-14 16:55:06 ----A---- C:\Windows\SysWOW64\D3DCompiler_40.dll
2010-08-14 16:55:05 ----A---- C:\Windows\SysWOW64\XAudio2_3.dll
2010-08-14 16:55:05 ----A---- C:\Windows\SysWOW64\XAPOFX1_2.dll
2010-08-14 16:55:05 ----A---- C:\Windows\SysWOW64\xactengine3_3.dll
2010-08-14 16:55:05 ----A---- C:\Windows\SysWOW64\D3DX9_40.dll
2010-08-14 16:55:04 ----A---- C:\Windows\SysWOW64\XAudio2_2.dll
2010-08-14 16:55:04 ----A---- C:\Windows\SysWOW64\XAPOFX1_1.dll
2010-08-14 16:55:04 ----A---- C:\Windows\SysWOW64\xactengine3_2.dll
2010-08-14 16:55:04 ----A---- C:\Windows\SysWOW64\X3DAudio1_5.dll
2010-08-14 16:55:04 ----A---- C:\Windows\SysWOW64\d3dx10_39.dll
2010-08-14 16:55:04 ----A---- C:\Windows\SysWOW64\D3DCompiler_39.dll
2010-08-14 16:55:03 ----A---- C:\Windows\SysWOW64\XAudio2_1.dll
2010-08-14 16:55:03 ----A---- C:\Windows\SysWOW64\XAPOFX1_0.dll
2010-08-14 16:55:03 ----A---- C:\Windows\SysWOW64\xactengine3_1.dll
2010-08-14 16:55:03 ----A---- C:\Windows\SysWOW64\D3DX9_39.dll
2010-08-14 16:55:02 ----A---- C:\Windows\SysWOW64\X3DAudio1_4.dll
2010-08-14 16:55:02 ----A---- C:\Windows\SysWOW64\d3dx10_38.dll
2010-08-14 16:55:02 ----A---- C:\Windows\SysWOW64\D3DCompiler_38.dll
2010-08-14 16:55:01 ----A---- C:\Windows\SysWOW64\XAudio2_0.dll
2010-08-14 16:55:01 ----A---- C:\Windows\SysWOW64\xactengine3_0.dll
2010-08-14 16:55:01 ----A---- C:\Windows\SysWOW64\X3DAudio1_3.dll
2010-08-14 16:55:01 ----A---- C:\Windows\SysWOW64\D3DX9_38.dll
2010-08-14 16:55:00 ----A---- C:\Windows\SysWOW64\d3dx10_37.dll
2010-08-14 16:55:00 ----A---- C:\Windows\SysWOW64\D3DCompiler_37.dll
2010-08-14 16:54:58 ----A---- C:\Windows\SysWOW64\xactengine2_10.dll
2010-08-14 16:54:58 ----A---- C:\Windows\SysWOW64\d3dx10_36.dll
2010-08-14 16:54:58 ----A---- C:\Windows\SysWOW64\D3DCompiler_36.dll
2010-08-14 16:54:57 ----A---- C:\Windows\SysWOW64\xactengine2_9.dll
2010-08-14 16:54:57 ----A---- C:\Windows\SysWOW64\d3dx9_36.dll
2010-08-14 16:54:54 ----A---- C:\Windows\SysWOW64\xactengine2_8.dll
2010-08-14 16:54:54 ----A---- C:\Windows\SysWOW64\X3DAudio1_2.dll
2010-08-14 16:54:51 ----A---- C:\Windows\SysWOW64\xactengine2_7.dll
2010-08-14 16:54:51 ----A---- C:\Windows\SysWOW64\d3dx10_33.dll
2010-08-14 16:54:51 ----A---- C:\Windows\SysWOW64\D3DCompiler_33.dll
2010-08-14 16:54:49 ----A---- C:\Windows\SysWOW64\xactengine2_6.dll
2010-08-14 16:54:49 ----A---- C:\Windows\SysWOW64\xactengine2_5.dll
2010-08-14 16:54:49 ----A---- C:\Windows\SysWOW64\d3dx10.dll
2010-08-14 16:54:47 ----A---- C:\Windows\SysWOW64\xactengine2_4.dll
2010-08-14 16:54:47 ----A---- C:\Windows\SysWOW64\xactengine2_3.dll
2010-08-14 16:54:47 ----A---- C:\Windows\SysWOW64\x3daudio1_1.dll
2010-08-14 16:54:46 ----A---- C:\Windows\SysWOW64\xinput1_2.dll
2010-08-14 16:54:46 ----A---- C:\Windows\SysWOW64\xinput1_1.dll
2010-08-14 16:54:46 ----A---- C:\Windows\SysWOW64\xactengine2_2.dll
2010-08-14 16:54:45 ----A---- C:\Windows\SysWOW64\xactengine2_1.dll
2010-08-14 16:54:39 ----A---- C:\Windows\SysWOW64\xactengine2_0.dll
2010-08-14 16:54:39 ----A---- C:\Windows\SysWOW64\x3daudio1_0.dll
2010-08-14 11:40:04 ----D---- C:\Windows\pss
2010-08-13 17:35:16 ----D---- C:\ProgramData\Google
2010-08-13 17:33:09 ----D---- C:\Program Files (x86)\YoWindow
2010-08-13 13:13:39 ----D---- C:\ProgramData\Raxco
2010-08-13 13:12:50 ----D---- C:\Program Files (x86)\Raxco
2010-08-12 18:25:30 ----D---- C:\ProgramData\ATI
2010-08-12 18:24:31 ----D---- C:\Program Files (x86)\ATI Technologies
2010-08-12 18:08:33 ----D---- C:\ProgramData\PMB Files
2010-08-12 18:08:22 ----D---- C:\Program Files (x86)\Pando Networks
2010-08-10 15:57:05 ----D---- C:\Program Files (x86)\METRO 2033
2010-08-09 18:59:06 ----D---- C:\ProgramData\Sun
2010-08-09 18:59:06 ----D---- C:\Program Files (x86)\Common Files\Java
2010-08-09 18:58:51 ----A---- C:\Windows\SysWOW64\javaws.exe
2010-08-09 18:58:51 ----A---- C:\Windows\SysWOW64\javaw.exe
2010-08-09 18:58:51 ----A---- C:\Windows\SysWOW64\java.exe
2010-08-09 18:58:51 ----A---- C:\Windows\SysWOW64\deployJava1.dll
2010-08-09 18:58:41 ----D---- C:\Program Files (x86)\Java
2010-08-09 16:13:07 ----D---- C:\Program Files (x86)\CCleaner
2010-08-08 22:02:53 ----D---- C:\Program Files (x86)\HLTooLz
2010-08-08 22:02:49 ----N---- C:\Windows\Setup1.exe
2010-08-08 22:02:48 ----A---- C:\Windows\ST6UNST.EXE
2010-08-08 16:40:46 ----D---- C:\Users\Tomek\AppData\Roaming\WebcamMax
2010-08-08 16:05:41 ----D---- C:\ProgramData\WebcamMax
2010-08-08 15:58:37 ----A---- C:\Windows\SysWOW64\drivers\CAMTHWDM.sys
2010-08-08 15:58:33 ----D---- C:\Program Files (x86)\WebcamMax
2010-08-08 15:37:09 ----D---- C:\ProgramData\OpenFM
2010-08-08 14:02:59 ----D---- C:\Users\Tomek\AppData\Roaming\Leadertech
2010-08-08 13:53:50 ----A---- C:\Windows\SysWOW64\D3DX9_37.dll
2010-08-08 13:53:47 ----A---- C:\Windows\SysWOW64\d3dx9_33.dll
2010-08-08 13:53:47 ----A---- C:\Windows\SysWOW64\d3dx9_32.dll
2010-08-08 13:53:47 ----A---- C:\Windows\SysWOW64\d3dx9_31.dll
2010-08-08 13:53:40 ----A---- C:\Windows\SysWOW64\d3dx9_30.dll
2010-08-08 13:53:39 ----A---- C:\Windows\SysWOW64\d3dx9_29.dll
2010-08-08 13:53:39 ----A---- C:\Windows\SysWOW64\d3dx9_28.dll
2010-08-08 13:53:39 ----A---- C:\Windows\SysWOW64\d3dx9_27.dll
2010-08-08 13:53:39 ----A---- C:\Windows\SysWOW64\d3dx9_26.dll
2010-08-08 13:53:39 ----A---- C:\Windows\SysWOW64\d3dx9_25.dll
2010-08-08 13:53:38 ----A---- C:\Windows\SysWOW64\d3dx9_24.dll
2010-08-08 13:46:07 ----D---- C:\Program Files (x86)\DAEMON Tools Toolbar
2010-08-08 13:45:19 ----D---- C:\Users\Tomek\AppData\Roaming\DAEMON Tools Lite
2010-08-08 13:45:17 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-08-07 17:45:09 ----D---- C:\_OTL
2010-08-07 13:29:30 ----D---- C:\ProgramData\Hewlett-Packard
2010-08-07 13:22:50 ----D---- C:\Program Files (x86)\Microsoft Works
2010-08-07 13:22:43 ----D---- C:\Program Files (x86)\Common Files\DESIGNER
2010-08-07 13:22:37 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-08-07 13:20:19 ----D---- C:\Program Files (x86)\Microsoft Office
2010-08-07 13:20:18 ----D---- C:\ProgramData\Microsoft Help
2010-08-07 13:19:49 ----RHD---- C:\MSOCache
2010-08-07 09:43:06 ----D---- C:\Users\Tomek\AppData\Roaming\ESET
2010-08-07 09:42:17 ----D---- C:\ProgramData\ESET
2010-08-06 22:27:22 ----D---- C:\Windows\Panther
2010-08-06 21:42:48 ----D---- C:\Program Files (x86)\Common Files\Adobe AIR
2010-08-06 21:42:25 ----A---- C:\Windows\Setup.INI
2010-08-06 21:42:08 ----D---- C:\Program Files (x86)\Launch Manager
2010-08-06 21:41:52 ----D---- C:\ProgramData\Adobe
2010-08-06 21:41:17 ----D---- C:\Users\Tomek\AppData\Roaming\Mozilla
2010-08-06 21:41:13 ----D---- C:\Program Files (x86)\Mozilla Firefox
2010-08-06 21:40:30 ----D---- C:\Program Files (x86)\Common Files\Adobe
2010-08-06 21:40:30 ----D---- C:\Program Files (x86)\Adobe
2010-08-06 21:35:39 ----A---- C:\Windows\SysWOW64\winver.exe
2010-08-06 21:35:39 ----A---- C:\Windows\SysWOW64\user32.dll
2010-08-06 21:35:39 ----A---- C:\Windows\SysWOW64\systemcpl.dll
2010-08-06 21:35:39 ----A---- C:\Windows\SysWOW64\sppcomapi.dll
2010-08-06 21:35:39 ----A---- C:\Windows\SysWOW64\slmgr.vbs
2010-08-06 21:34:06 ----D---- C:\Users\Tomek\AppData\Roaming\Identities
2010-08-06 21:33:30 ----SD---- C:\Users\Tomek\AppData\Roaming\Microsoft
2010-08-06 21:33:30 ----D---- C:\Users\Tomek\AppData\Roaming\Media Center Programs
2010-08-06 21:33:21 ----SHD---- C:\Recovery
2010-08-06 21:33:20 ----SHD---- C:\ProgramData\Ulubione
2010-08-06 21:33:20 ----SHD---- C:\ProgramData\Szablony
2010-08-06 21:33:20 ----SHD---- C:\ProgramData\Pulpit
2010-08-06 21:33:20 ----SHD---- C:\ProgramData\Menu Start
2010-08-06 21:33:20 ----SHD---- C:\ProgramData\Dokumenty
2010-08-06 21:33:20 ----SHD---- C:\ProgramData\Dane aplikacji
2010-08-06 21:31:02 ----D---- C:\Windows\SoftwareDistribution
2010-08-06 21:28:19 ----D---- C:\Windows\Prefetch
2010-08-06 21:27:57 ----ASH---- C:\pagefile.sys
2010-08-06 21:27:55 ----SHD---- C:\System Volume Information
2010-08-06 21:27:55 ----ASH---- C:\hiberfil.sys
2010-08-06 18:50:30 ----D---- C:\Users\Tomek\AppData\Roaming\Ventrilo
2010-08-06 18:50:20 ----D---- C:\Program Files (x86)\Ventrilo
2010-08-06 18:50:16 ----D---- C:\Users\Tomek\AppData\Roaming\mIRC
2010-08-06 18:50:16 ----D---- C:\Program Files (x86)\mIRC
2010-08-06 18:50:00 ----D---- C:\Program Files (x86)\Common Files\Wise Installation Wizard
2010-08-06 17:33:31 ----A---- C:\Windows\SysWOW64\d3dx9_35.dll
2010-08-06 17:33:31 ----A---- C:\Windows\SysWOW64\d3dx10_35.dll
2010-08-06 17:33:31 ----A---- C:\Windows\SysWOW64\D3DCompiler_35.dll
2010-08-06 17:33:30 ----A---- C:\Windows\SysWOW64\d3dx10_34.dll
2010-08-06 17:33:30 ----A---- C:\Windows\SysWOW64\D3DCompiler_34.dll
2010-08-06 17:33:29 ----A---- C:\Windows\SysWOW64\xinput1_3.dll
2010-08-06 17:33:29 ----A---- C:\Windows\SysWOW64\d3dx9_34.dll
2010-08-06 17:31:31 ----D---- C:\Program Files (x86)\Electronic Arts
2010-08-06 17:01:25 ----D---- C:\Windows\PCHEALTH
2010-08-06 16:31:38 ----A---- C:\Windows\USB_VIDEO_REG.exe
2010-08-06 16:31:38 ----A---- C:\Windows\PLFSetI.exe
2010-08-06 16:31:38 ----A---- C:\Windows\PidList.ini
2010-08-06 16:31:38 ----A---- C:\Windows\Image.dll
2010-08-06 16:31:38 ----A---- C:\Windows\Acer Crystal Eye webcam.EXE
2010-08-06 16:31:13 ----D---- C:\Users\Tomek\AppData\Roaming\Intel
2010-08-06 16:30:26 ----D---- C:\Users\Tomek\AppData\Roaming\ATI
2010-08-06 16:30:05 ----D---- C:\ProgramData\Intel
2010-08-06 16:30:05 ----D---- C:\Program Files (x86)\Cisco
2010-08-06 16:28:34 ----D---- C:\Program Files (x86)\Atheros
2010-08-06 16:28:15 ----D---- C:\Users\Tomek\AppData\Roaming\InstallShield
2010-08-06 16:20:36 ----D---- C:\ProgramData\AmUStor
2010-08-06 16:20:35 ----D---- C:\Program Files (x86)\AmIcoSingLun
2010-08-06 16:19:44 ----N---- C:\Windows\SysWOW64\agrsco64.dll
2010-08-06 16:19:40 ----A---- C:\Windows\agrsmdel.exe
2010-08-06 16:19:40 ----A---- C:\Windows\agrdel64.exe
2010-08-06 16:19:35 ----D---- C:\Windows\Options
2010-08-06 16:17:05 ----D---- C:\Users\Tomek\AppData\Roaming\skypePM
2010-08-06 16:11:03 ----D---- C:\Program Files (x86)\Steam
2010-08-06 16:11:03 ----D---- C:\Program Files (x86)\Common Files\Steam
2010-08-06 16:04:55 ----D---- C:\Windows\SysWOW64\RTCOM
2010-08-06 16:04:39 ----D---- C:\Program Files (x86)\Realtek
2010-08-06 16:04:37 ----HD---- C:\Program Files (x86)\Temp
2010-08-06 16:04:36 ----R---- C:\Windows\RtlExUpd.dll
2010-08-06 16:04:33 ----D---- C:\Program Files (x86)\Common Files\InstallShield
2010-08-06 16:03:21 ----D---- C:\Users\Tomek\AppData\Roaming\Adobe
2010-08-06 16:02:54 ----D---- C:\Users\Tomek\AppData\Roaming\Skype
2010-08-06 16:02:49 ----D---- C:\Program Files (x86)\Google
2010-08-06 16:02:37 ----RD---- C:\Program Files (x86)\Skype
2010-08-06 16:02:37 ----D---- C:\Program Files (x86)\Common Files\Skype
2010-08-06 16:02:31 ----D---- C:\ProgramData\Skype
2010-08-06 16:02:03 ----D---- C:\Windows\SysWOW64\Macromed
2010-08-06 15:59:39 ----D---- C:\Program Files (x86)\ATI
2010-08-06 15:58:21 ----D---- C:\ATI
2010-08-06 15:55:58 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-08-06 15:55:26 ----D---- C:\ProgramData\Atheros
2010-08-06 15:54:36 ----D---- C:\Program Files (x86)\Intel
2010-08-06 15:54:36 ----A---- C:\Windows\SysWOW64\CSVer.dll
2010-08-06 15:53:22 ----D---- C:\Users\Tomek\AppData\Roaming\Macromedia
2010-08-06 15:53:18 ----D---- C:\Intel
2010-08-06 15:51:40 ----D---- C:\Users\Tomek\AppData\Roaming\Gadu-Gadu 10
2010-08-06 15:50:14 ----D---- C:\Program Files (x86)\Driver Magician
2010-08-06 15:50:14 ----A---- C:\Windows\SysWOW64\XCEEDZIP.DLL
2010-08-06 15:50:14 ----A---- C:\Windows\SysWOW64\XceedCry.dll
2010-08-06 15:49:52 ----D---- C:\ProgramData\Gadu-Gadu 10
2010-08-06 15:49:25 ----D---- C:\Program Files (x86)\Gadu-Gadu 10
2010-08-06 15:47:49 ----D---- C:\Users\Tomek\AppData\Roaming\WinRAR
2010-08-06 15:46:25 ----SHD---- C:\Windows\Installer

======List of files/folders modified in the last 1 months======

2010-08-29 22:55:33 ----D---- C:\Windows\Temp
2010-08-29 22:55:32 ----RD---- C:\Program Files (x86)
2010-08-29 18:46:54 ----D---- C:\Windows
2010-08-29 18:46:10 ----D---- C:\Windows\System32
2010-08-29 10:14:40 ----HD---- C:\ProgramData
2010-08-29 10:14:22 ----D---- C:\Windows\winsxs
2010-08-29 09:10:13 ----D---- C:\Windows\Registration
2010-08-29 08:08:59 ----D---- C:\Windows\Logs
2010-08-29 07:34:19 ----D---- C:\Windows\SysWOW64
2010-08-29 07:20:47 ----RD---- C:\Program Files
2010-08-29 07:20:47 ----D---- C:\Windows\Downloaded Program Files
2010-08-28 18:56:42 ----D---- C:\Windows\debug
2010-08-27 19:05:03 ----D---- C:\Windows\inf
2010-08-25 14:05:59 ----RSD---- C:\Windows\assembly
2010-08-22 10:23:24 ----SD---- C:\ProgramData\Microsoft
2010-08-16 11:08:18 ----D---- C:\Windows\LiveKernelReports
2010-08-15 20:18:09 ----D---- C:\Windows\system
2010-08-15 20:05:33 ----D---- C:\Windows\ModemLogs
2010-08-14 10:34:47 ----D---- C:\Windows\Tasks
2010-08-11 12:13:56 ----SHD---- C:\$Recycle.Bin
2010-08-11 12:13:51 ----RD---- C:\Users
2010-08-09 18:59:06 ----D---- C:\Program Files (x86)\Common Files
2010-08-08 15:58:37 ----D---- C:\Windows\SysWOW64\drivers
2010-08-08 13:53:40 ----D---- C:\Windows\Microsoft.NET
2010-08-07 13:22:50 ----D---- C:\Program Files (x86)\Common Files\microsoft shared
2010-08-07 13:22:39 ----RSD---- C:\Windows\Fonts
2010-08-07 13:20:41 ----D---- C:\Windows\ShellNew
2010-08-06 21:34:37 ----D---- C:\Windows\rescache
2010-08-06 21:28:38 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys []
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys []
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys []
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys []
R2 DefragFS;DefragFS; C:\Windows\SysWOW64\drivers\DefragFS.sys []
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys []
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys []
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys []
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys []
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys []
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys []
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys []
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys []
R3 DKbFltr;Dritek Keyboard Filter Driver (64-bit); C:\Windows\SysWOW64\Drivers\DKbFltr.sys [2009-03-26 25608]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys []
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys []
R3 Point64;Microsoft IntelliPoint Filter Driver; C:\Windows\system32\DRIVERS\point64k.sys []
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys []
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys []
S3 a314umn1;a314umn1; C:\Windows\SysWOW64\drivers\a314umn1.sys []
S3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys []
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys []
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys []
S3 DRIVER_B;DRIVER_B; \??\C:\Windows\system32\Drivers\DRIVER_BIN64 []
S3 MotioninJoyUSBFilter;MotioninJoy USB Filter Driver; C:\Windows\system32\DRIVERS\MijUfilt.sys []
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys []
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys []
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys []
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2010-04-07 810120]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2010-08-24 407336]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agr64svc.exe [2009-03-27 16896]
S4 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe []
S4 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-04-07 42336]
S4 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2009-09-21 1420560]
S4 gupdate;Usługa Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-08-14 135664]
S4 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe [2010-08-12 1355416]
S4 PDAgent;PDAgent; C:\Program Files\Raxco\PerfectDisk\PDAgent.exe [2010-05-27 2608904]
S4 PDEngine;PDEngine; C:\Program Files\Raxco\PerfectDisk\PDEngine.exe [2010-05-27 2259208]
S4 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2009-09-21 831760]
S4 TurboBoost;TurboBoost; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 126352]

-----------------EOF-----------------[/log]
info
[log]info.txt logfile of random's system information tool 1.08 2010-08-29 22:55:36

======Uninstall list======

Acer Crystal Eye Webcam-->C:\Program Files (x86)\InstallShield Installation Information\{7760D94E-B1B5-40A0-9AA0-ABF942108755}\setup.exe -runfromtemp -l0x0009 -removeonly
Acrobat.com-->MsiExec.exe /X{287ECFA4-719A-2143-A09B-D6A12DE54E40}
Ad-Aware-->"C:\ProgramData\{ECC164E0-3133-4C70-A831-F08DB2940F70}\Ad-AwareInstall.exe" REMOVE=TRUE MODIFY=FALSE
Ad-Aware-->C:\ProgramData\{ECC164E0-3133-4C70-A831-F08DB2940F70}\Ad-AwareInstall.exe
Adobe AIR-->C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Flash Player 10 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10i_ActiveX.exe -maintain activex
Adobe Flash Player 10 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10i_Plugin.exe -maintain plugin
Adobe Reader 9.1 MUI-->MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-A91000000001}
Alcor Micro USB Card Reader-->C:\Program Files (x86)\InstallShield Installation Information\{DBCE1208-433D-4D3E-A26A-CB1B5E71A8F5}\setup.exe -runfromtemp -l0x0409
Atheros Driver Installation Program-->C:\Program Files (x86)\InstallShield Installation Information\{28006915-2739-4EBE-B5E8-49B25D32EB33}\setup.exe -runfromtemp -l0x0009 -removeonly
ATI Catalyst Registration-->MsiExec.exe /X{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}
Battlefield: Bad Company™ 2-->MsiExec.exe /X{3AC8457C-0385-4BEA-A959-E095F05D6D67}
CCleaner-->"C:\Program Files (x86)\CCleaner\uninst.exe"
Counter-Strike-->"C:\Program Files (x86)\Steam\steam.exe" steam://uninstall/10
Crysis(R) SP Demo-->MsiExec.exe /I{92AF2F5A-4407-4A03-A80A-5A2582264746}
Driver Magician 3.41-->"C:\Program Files (x86)\Driver Magician\unins000.exe"
FIFA 10-->MsiExec.exe /X{11202615-E557-4ECF-9B86-F59C81E52909}
Gadu-Gadu 10-->C:\Program Files (x86)\Gadu-Gadu 10\Uninstall.exe
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HLTooLz-->C:\WINDOWS\st6unst.exe -n "C:\Program Files (x86)\HLTooLz\ST6UNST.LOG"
IrfanView (remove only)-->C:\Program Files (x86)\IrfanView\iv_uninstall.exe
Java(TM) 6 Update 20-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216020FF}
K-Lite Codec Pack 6.3.0 (Full)-->"C:\Program Files (x86)\K-Lite Codec Pack\unins000.exe"
Launch Manager-->C:\Windows\UNINST32.EXE LManager.UNI
Microsoft Office Excel MUI (Polish) 2007-->MsiExec.exe /X{90120000-0016-0415-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Polish) 2007-->MsiExec.exe /X{90120000-00A1-0415-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Polish) 2007-->MsiExec.exe /X{90120000-0018-0415-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Polish) 2007-->MsiExec.exe /X{90120000-001F-0415-0000-0000000FF1CE}
Microsoft Office Proofing (Polish) 2007-->MsiExec.exe /X{90120000-002C-0415-0000-0000000FF1CE}
Microsoft Office Shared MUI (Polish) 2007-->MsiExec.exe /X{90120000-006E-0415-0000-0000000FF1CE}
Microsoft Office Word MUI (Polish) 2007-->MsiExec.exe /X{90120000-001B-0415-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
mIRC-->C:\Program Files (x86)\mIRC\uninstall.exe _?=C:\Program Files (x86)\mIRC
Mozilla Firefox (3.6.8)-->C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
Pando Media Booster-->C:\Program Files (x86)\Pando Networks\Media Booster\uninst.exe
Pro Evolution Soccer 2010-->MsiExec.exe /X{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -removeonly
Skaner on-line mks_vir-->C:\Windows\system32\SkanerOnlineUninstall.exe
Skype Toolbars-->MsiExec.exe /I{981029E0-7FC9-4CF3-AB39-6F133621921A}
Skype™ 4.2-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
The Lord of the Rings FREE Trial -->MsiExec.exe /X{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}
Tibia-->"C:\Program Files (x86)\Tibia\unins000.exe"
Ventrilo-->MsiExec.exe /I{789289CA-F73A-4A16-A331-54D498CE069F}
Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\Windows\SysWOW64\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
WebcamMax-->"C:\Program Files (x86)\WebcamMax\uninst.exe"
YoWindow-->"C:\Program Files (x86)\YoWindow\uninstall.exe"

======System event log======

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Usługa Cryptographic Services weszła w stan stopped.
Record Number: 5
Source Name: Service Control Manager
Time Written: 20090714051424.262212-000
Event Type: Informacje
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Usługa Windows Modules Installer weszła w stan stopped.
Record Number: 4
Source Name: Service Control Manager
Time Written: 20090714051424.168612-000
Event Type: Informacje
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Usługa Software Protection weszła w stan stopped.
Record Number: 3
Source Name: Service Control Manager
Time Written: 20090714051424.059412-000
Event Type: Informacje
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Usługa Windows Event Log weszła w stan stopped.
Record Number: 2
Source Name: Service Control Manager
Time Written: 20090714051424.012612-000
Event Type: Informacje
User:

Computer Name: 37L4247E29-32
Event Code: 7036
Message: Usługa Volume Shadow Copy weszła w stan stopped.
Record Number: 1
Source Name: Service Control Manager
Time Written: 20090714051423.934612-000
Event Type: Informacje
User:

=====Application event log=====

Computer Name: 37L4247E29-32
Event Code: 1001
Message: Pakiet błędów , typ 0
Nazwa zdarzenia: PnPDriverNotFound
Odpowiedź: Niedostępny
Identyfikator pliku Cab: 0

Sygnatura problemu:
P1: x64
P2: PCI\VEN_8086&DEV_3B64&SUBSYS_03471025&REV_06
P3:
P4:
P5:
P6:
P7:
P8:
P9:
P10:

Dołączone pliki:
C:\Windows\Temp\DMIF8B0.tmp.log.xml

Te pliki mogą być dostępne tutaj:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_496d1a11d3d1590d3f3ff89c8ec41ce9c5dc31_cab_05f5f92c

Symbol analizy:
Ponowne sprawdzanie rozwiązania: 0
Identyfikator raportu: fca089bf-a190-11df-ad96-97e2ef5feffc
Stan raportu: 6
Record Number: 5
Source Name: Windows Error Reporting
Time Written: 20100806192954.000000-000
Event Type: Informacje
User:

Computer Name: 37L4247E29-32
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20100806192851.000000-000
Event Type: Informacje
User:

Computer Name: 37L4247E29-32
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 3
Source Name: Microsoft-Windows-WMI
Time Written: 20100806192844.000000-000
Event Type: Informacje
User:

Computer Name: 37L4247E29-32
Event Code: 1531
Message: Usługa profilów użytkowników została uruchomiona pomyślnie.


Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20100806192838.869292-000
Event Type: Informacje
User: ZARZĄDZANIE NT\SYSTEM

Computer Name: 37L4247E29-32
Event Code: 4625
Message: System podrzędny EventSystem pomija zduplikowane wpisy dziennika zdarzeń przez okres 86400 sekund. Limit czasu pomijania można kontrolować za pomocą wartości REG_DWORD o nazwie SuppressDuplicateDuration w następującym kluczu rejestru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 1
Source Name: Microsoft-Windows-EventSystem
Time Written: 20100806192839.000000-000
Event Type: Informacje
User:

=====Security event log=====

Computer Name: 37L4247E29-32
Event Code: 4735
Message: Zmieniono grupę lokalną z włączonymi zabezpieczeniami.

Podmiot:
Identyfikator zabezpieczeń: S-1-5-18
Nazwa konta: 37L4247E29-32$
Domena konta: WORKGROUP
Identyfikator logowania: 0x3e7

Grupa:
Identyfikator zabezpieczeń: S-1-5-32-551
Nazwa grupy: Operatorzy kopii zapasowych
Domena grupy: Builtin

Zmienione atrybuty:
Nazwa konta SAM: -
Historia identyfikatora SID: -

Informacje dodatkowe:
Uprawnienia: -
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100806192816.935653-000
Event Type: Sukcesy inspekcji
User:

Computer Name: 37L4247E29-32
Event Code: 4731
Message: Utworzono grupę lokalną z włączonymi zabezpieczeniami.

Podmiot:
Identyfikator zabezpieczeń: S-1-5-18
Nazwa konta: 37L4247E29-32$
Domena konta: WORKGROUP
Identyfikator logowania: 0x3e7

Nowa grupa:
Identyfikator zabezpieczeń: S-1-5-32-551
Nazwa grupy: Operatorzy kopii zapasowych
Domena grupy: Builtin

Atrybuty:
Nazwa konta SAM: Operatorzy kopii zapasowych
Historia identyfikatora SID: -

Informacje dodatkowe:
Uprawnienia: -
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100806192816.920053-000
Event Type: Sukcesy inspekcji
User:

Computer Name: 37L4247E29-32
Event Code: 4902
Message: Utworzono tabelę zasad inspekcji użytkownika.

Liczba elementów: 0
Identyfikator zasad: 0x560aa
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100806192816.327252-000
Event Type: Sukcesy inspekcji
User:

Computer Name: 37L4247E29-32
Event Code: 4624
Message: Użytkownik pomyślnie zalogował się na koncie.

Podmiot:
Identyfikator zabezpieczeń: S-1-0-0
Nazwa konta: -
Domena konta: -
Identyfikator logowania: 0x0

Typ logowania: 0

Nowe logowanie:
Identyfikator zabezpieczeń: S-1-5-18
Nazwa konta: SYSTEM
Domena konta: ZARZĄDZANIE NT
Identyfikator logowania: 0x3e7
Identyfikator GUID logowania: {00000000-0000-0000-0000-000000000000}

Informacje o procesie:
Identyfikator procesu: 0x4
Nazwa procesu:

Informacje o sieci:
Nazwa stacji roboczej: -
Adres źródłowy sieci: -
Port źródłowy: -

Szczegółowe informacje o uwierzytelnianiu:
Proces logowania: -
Pakiet uwierzytelniania: -
Usługi przejściowe: -
Nazwa pakietu (tylko NTLM): -
Długość klucza: 0

To zdarzenie jest generowane w momencie utworzenia sesji logowania. Jest ono generowane na komputerze, do którego został uzyskany dostęp.

Pola podmiotu wskazują konto w systemie lokalnym, które zażądało logowania. Najczęściej jest to usługa, na przykład usługa Serwer, lub proces lokalny taki jak Winlogon.exe lub Services.exe.

Pole typu logowania wskazuje rodzaj zaistniałego logowania. Najczęstsze typy to 2 (interakcyjne) i 3 (sieciowe).

Pola nowego logowania wskazują konto, dla którego zostało utworzone nowe logowanie, czyli konto, które zostało zalogowane.

Pola sieci wskazują lokalizację, z której pochodziło zdalne żądanie logowania. Nazwa stacji roboczej nie zawsze jest dostępna i w niektórych przypadkach może być pusta.

Pola informacji o uwierzytelnianiu zawierają szczegółowe informacje o tym konkretnym żądaniu logowania.
- Identyfikator GUID logowania to unikatowy identyfikator, za pomocą którego można skorelować to zdarzenie ze zdarzeniem centrum dystrybucji kluczy.
- Usługi przejściowe wskazują, które usługi pośrednie uczestniczyły w tym żądaniu logowania.
- Nazwa pakietu wskazuje, który protokół podrzędny spośród protokołów NTLM został użyty.
- Długość klucza wskazuje długość wygenerowanego klucza sesji. Jeśli nie zażądano klucza sesji, jest to wartość 0.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100806192813.581647-000
Event Type: Sukcesy inspekcji
User:

Computer Name: 37L4247E29-32
Event Code: 4608
Message: Trwa uruchamianie systemu Windows.

To zdarzenie jest rejestrowane w momencie uruchamiania programu LSASS.EXE i inicjowania podsystemu inspekcji.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100806192813.456847-000
Event Type: Sukcesy inspekcji
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\Driver
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=4
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 37 Stepping 2, GenuineIntel
"PROCESSOR_REVISION"=2502

-----------------EOF-----------------[/log]


OTL
[log]OTL logfile created on: 2010-08-29 22:59:34 - Run 3
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\Tomek\Downloads
64bit- Enterprise Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 70,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 83,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 148,95 Gb Total Space | 82,89 Gb Free Space | 55,65% Space Free | Partition Type: NTFS
Drive D: | 149,04 Gb Total Space | 117,44 Gb Free Space | 78,80% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: DOM
Current User Name: Tomek
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 60 Days
Output = Standard

[color=#E56717]========== Processes (All) ==========[/color]

PRC - [2010-08-14 10:34:41 | 000,135,664 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
PRC - [2010-08-07 11:53:41 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Tomek\Downloads\OTL.exe
PRC - [2010-07-23 04:15:35 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2010-07-23 04:15:35 | 000,014,808 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
PRC - [2010-04-07 21:07:24 | 000,810,120 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe


[color=#E56717]========== Modules (All) ==========[/color]

MOD - [2010-08-07 11:53:41 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Tomek\Downloads\OTL.exe
MOD - [2010-08-06 21:35:43 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll
MOD - [2009-07-14 03:17:51 | 001,289,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll
MOD - [2009-07-14 03:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll
MOD - [2009-07-14 03:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll
MOD - [2009-07-14 03:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll
MOD - [2009-07-14 03:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll
MOD - [2009-07-14 03:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll
MOD - [2009-07-14 03:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll
MOD - [2009-07-14 03:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll
MOD - [2009-07-14 03:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll
MOD - [2009-07-14 03:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll
MOD - [2009-07-14 03:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll
MOD - [2009-07-14 03:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll
MOD - [2009-07-14 03:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll
MOD - [2009-07-14 03:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll
MOD - [2009-07-14 03:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll
MOD - [2009-07-14 03:16:13 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll
MOD - [2009-07-14 03:16:12 | 001,412,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll
MOD - [2009-07-14 03:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll
MOD - [2009-07-14 03:16:12 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll
MOD - [2009-07-14 03:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll
MOD - [2009-07-14 03:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll
MOD - [2009-07-14 03:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll
MOD - [2009-07-14 03:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll
MOD - [2009-07-14 03:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll
MOD - [2009-07-14 03:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll
MOD - [2009-07-14 03:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll
MOD - [2009-07-14 03:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll
MOD - [2009-07-14 03:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll
MOD - [2009-07-14 03:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll
MOD - [2009-07-14 03:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll
MOD - [2009-07-14 03:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll
MOD - [2009-07-14 03:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll
MOD - [2009-07-14 03:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll
MOD - [2009-07-14 03:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll
MOD - [2009-07-14 03:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll
MOD - [2009-07-14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
MOD - [2009-07-14 03:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv
MOD - [2009-07-14 03:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll
MOD - [2009-07-14 03:11:24 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll
MOD - [2009-07-14 03:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll
MOD - [2009-07-14 03:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll
MOD - [2009-07-14 03:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll
MOD - [2009-07-14 03:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll
MOD - [2009-07-14 03:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll
MOD - [2009-07-14 03:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll
MOD - [2009-07-14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2010-05-27 11:44:54 | 002,608,904 | ---- | M] (Raxco Software, Inc.) [Disabled | Stopped] -- C:\Program Files\Raxco\PerfectDisk\PDAgent.exe -- (PDAgent)
SRV:[b]64bit:[/b] - [2010-05-27 11:44:44 | 002,259,208 | ---- | M] (Raxco Software, Inc.) [Disabled | Stopped] -- C:\Program Files\Raxco\PerfectDisk\PDEngine.exe -- (PDEngine)
SRV:[b]64bit:[/b] - [2010-04-07 21:10:42 | 000,042,336 | ---- | M] (ESET) [Disabled | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV:[b]64bit:[/b] - [2010-04-07 21:07:24 | 000,810,120 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn)
SRV:[b]64bit:[/b] - [2010-01-22 03:01:12 | 000,202,752 | ---- | M] (AMD) [Disabled | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2009-11-02 12:48:18 | 000,126,352 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV:[b]64bit:[/b] - [2009-09-21 16:24:40 | 001,420,560 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV:[b]64bit:[/b] - [2009-09-21 16:00:44 | 000,831,760 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:54 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\StorSvc.dll -- (StorSvc)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:[b]64bit:[/b] - [2009-03-27 12:10:16 | 000,016,896 | ---- | M] (LSI Corporation) [Disabled | Stopped] -- C:\Program Files\LSI SoftModem\agr64svc.exe -- (AgereModemAudio)
SRV - [2010-08-24 09:24:16 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010-08-12 14:15:19 | 001,355,416 | ---- | M] (Lavasoft) [Disabled | Stopped] -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2010-08-21 18:36:07 | 000,026,424 | --S- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DRIVER_BIN64 -- (DRIVER_B)
DRV:[b]64bit:[/b] - [2010-08-08 13:45:50 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2010-05-06 11:21:46 | 000,125,456 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:[b]64bit:[/b] - [2010-04-07 21:08:30 | 000,050,600 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
DRV:[b]64bit:[/b] - [2010-04-07 21:08:28 | 000,033,608 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\epfwndis.sys -- (Epfwndis)
DRV:[b]64bit:[/b] - [2010-04-07 21:08:26 | 000,169,592 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
DRV:[b]64bit:[/b] - [2010-04-07 21:07:10 | 000,139,704 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:[b]64bit:[/b] - [2010-04-07 21:03:52 | 000,163,888 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:[b]64bit:[/b] - [2010-01-22 03:13:24 | 006,233,088 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:[b]64bit:[/b] - [2010-01-22 03:13:24 | 006,233,088 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atipmdag.sys -- (amdkmdag)
DRV:[b]64bit:[/b] - [2010-01-22 02:07:56 | 000,161,280 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:[b]64bit:[/b] - [2009-11-11 17:44:26 | 000,034,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\point64k.sys -- (Point64)
DRV:[b]64bit:[/b] - [2009-11-06 12:56:06 | 001,550,848 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:[b]64bit:[/b] - [2009-11-02 12:48:02 | 000,013,784 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
DRV:[b]64bit:[/b] - [2009-10-03 17:36:34 | 000,020,480 | ---- | M] (MotioninJoy) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MijUfilt.sys -- (MotioninJoyUSBFilter)
DRV:[b]64bit:[/b] - [2009-09-17 06:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R)
DRV:[b]64bit:[/b] - [2009-08-13 05:20:46 | 001,209,856 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem)
DRV:[b]64bit:[/b] - [2009-08-05 22:43:58 | 000,320,040 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) Broadcom NetLink (TM)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-07-14 01:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap)
DRV:[b]64bit:[/b] - [2009-07-14 01:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID)
DRV:[b]64bit:[/b] - [2009-07-14 01:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC)
DRV:[b]64bit:[/b] - [2009-06-24 12:23:24 | 000,205,472 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)
DRV:[b]64bit:[/b] - [2009-06-10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-05-24 13:57:42 | 000,243,760 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)

[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-4039863893-364985132-2430816299-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
IE - HKU\S-1-5-21-4039863893-364985132-2430816299-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..network.proxy.type: 0

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-08-06 15:51:29 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-08-13 17:40:55 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010-08-07 09:42:18 | 000,000,000 | ---D | M]

[2010-08-06 21:41:19 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\mozilla\Extensions
[2010-08-29 22:53:21 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\mozilla\Firefox\Profiles\fixz9gmf.default\extensions
[2010-08-08 13:46:07 | 000,002,059 | ---- | M] () -- C:\Users\Tomek\AppData\Roaming\Mozilla\FireFox\Profiles\fixz9gmf.default\searchplugins\daemon-search.xml
[2010-08-09 18:58:52 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions
[2010-08-06 16:02:46 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010-08-09 18:58:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010-08-09 18:58:42 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2010-07-23 02:41:44 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2010-07-23 02:41:44 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2010-07-23 02:41:44 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2010-07-23 02:41:44 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2010-07-23 02:41:44 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2010-07-23 02:41:44 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml

O1 HOSTS File: ([2010-08-07 17:03:21 | 000,000,808 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found
O3:[b]64bit:[/b] - HKU\S-1-5-21-4039863893-364985132-2430816299-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - Startup: C:\Users\Sławek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\YoWindow.lnk = C:\Program Files (x86)\YoWindow\yowindow.exe (Repkasoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 86.63.64.48 86.63.64.49
O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (systempropertiesperformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{a7a5d5f4-a2e2-11df-90b4-00262d96a4d0}\Shell - "" = AutoRun
O33 - MountPoints2\{a7a5d5f4-a2e2-11df-90b4-00262d96a4d0}\Shell\AutoRun\command - "" = F:\autorun.exe -- File not found
O34 - HKLM BootExecute: (PDBoot.exe) - File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - File not found
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

MsConfig:64bit - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
MsConfig:64bit - StartUpReg: [b]AmIcoSinglun64[/b] - hkey= - key= - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (AlcorMicro Co., Ltd.)
MsConfig:64bit - StartUpReg: [b]Apoint[/b] - hkey= - key= - C:\Program Files\Apoint2K\Apoint.exe (Alps Electric Co., Ltd.)
MsConfig:64bit - StartUpReg: [b]ATICustomerCare[/b] - hkey= - key= - C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.)
MsConfig:64bit - StartUpReg: [b]cFosSpeed[/b] - hkey= - key= - C:\Program Files\cFosSpeed\cFosSpeed.exe File not found
MsConfig:64bit - StartUpReg: [b]DAEMON Tools Lite[/b] - hkey= - key= - D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe File not found
MsConfig:64bit - StartUpReg: [b]DS3 Tool[/b] - hkey= - key= - C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe (www.motioninjoy.com)
MsConfig:64bit - StartUpReg: [b]egui[/b] - hkey= - key= - C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
MsConfig:64bit - StartUpReg: [b]Gadu-Gadu 10[/b] - hkey= - key= - C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.)
MsConfig:64bit - StartUpReg: [b]IntelliPoint[/b] - hkey= - key= - C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
MsConfig:64bit - StartUpReg: [b]LManager[/b] - hkey= - key= - C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
MsConfig:64bit - StartUpReg: [b]NetfMeter[/b] - hkey= - key= - C:\Windows\shell.exe File not found
MsConfig:64bit - StartUpReg: [b]PLFSetI[/b] - hkey= - key= - C:\Windows\PLFSetI.exe ()
MsConfig:64bit - StartUpReg: [b]RtHDVCpl[/b] - hkey= - key= - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
MsConfig:64bit - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
MsConfig:64bit - StartUpReg: [b]StartCCC[/b] - hkey= - key= - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
MsConfig:64bit - StartUpReg: [b]Steam[/b] - hkey= - key= - c:\program files (x86)\steam\steam.exe (Valve Corporation)
MsConfig:64bit - StartUpReg: [b]SunJavaUpdateSched[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
MsConfig:64bit - State: "startup" - Reg Error: Key error.
MsConfig:64bit - State: "bootini" - Reg Error: Key error.
MsConfig:64bit - State: "services" - Reg Error: Key error.

SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: Lavasoft Ad-Aware Service - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Lavasoft Ad-Aware Service - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

[color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color]

[2010-08-29 22:55:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\trend micro
[2010-08-29 22:55:32 | 000,000,000 | ---D | C] -- C:\rsit
[2010-08-29 10:14:53 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Sunbelt Software
[2010-08-29 10:14:40 | 000,000,000 | -H-D | C] -- C:\ProgramData\{ECC164E0-3133-4C70-A831-F08DB2940F70}
[2010-08-29 10:14:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Lavasoft
[2010-08-29 10:14:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lavasoft
[2010-08-29 07:20:47 | 000,000,000 | ---D | C] -- C:\Program Files\SkanerOnline
[2010-08-28 19:00:00 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Documents\KONAMI
[2010-08-28 18:47:38 | 000,000,000 | ---D | C] -- C:\ProgramData\KONAMI
[2010-08-28 17:19:47 | 001,422,728 | ---- | C] (Konami Digital Entertainment Co., Ltd.) -- C:\Users\Tomek\Desktop\settings.exe
[2010-08-27 18:19:48 | 000,090,112 | ---- | C] (Saikeware Technology Co., Ltd. CHINA) -- C:\Windows\SysWow64\MijFrc.dll
[2010-08-27 18:19:48 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\MotioninJoy
[2010-08-27 18:19:48 | 000,000,000 | ---D | C] -- C:\ProgramData\MotioninJoy
[2010-08-27 18:19:47 | 000,030,208 | ---- | C] (MotioninJoy) -- C:\Windows\SysNative\drivers\MijBThid.sys
[2010-08-27 18:19:47 | 000,020,480 | ---- | C] (MotioninJoy) -- C:\Windows\SysNative\drivers\MijUfilt.sys
[2010-08-27 18:19:47 | 000,000,000 | ---D | C] -- C:\Program Files\MotioninJoy
[2010-08-22 10:23:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2010-08-21 18:29:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ray Adams
[2010-08-20 16:03:51 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Tibia
[2010-08-20 16:03:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tibia
[2010-08-18 09:40:51 | 000,000,000 | ---D | C] -- C:\Program Files\cFosSpeed
[2010-08-17 17:08:44 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Media Player Classic
[2010-08-17 17:08:28 | 000,839,680 | ---- | C] (http://www.mp3dev.org/) -- C:\Windows\SysWow64\lameACM.acm
[2010-08-17 17:08:28 | 000,217,088 | ---- | C] (www.helixcommunity.org) -- C:\Windows\SysWow64\yv12vfw.dll
[2010-08-17 17:08:28 | 000,151,552 | ---- | C] (fccHandler) -- C:\Windows\SysWow64\ac3acm.acm
[2010-08-17 17:08:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\K-Lite Codec Pack
[2010-08-17 17:06:27 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\BESTplayer
[2010-08-16 11:09:07 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2010-08-15 20:17:41 | 000,913,616 | ---- | C] (TurboPower Software Company) -- C:\Windows\System\A258_R35.bpl
[2010-08-15 20:17:41 | 000,906,512 | ---- | C] (TurboPower Software Company) -- C:\Windows\System\A255_R35.bpl
[2010-08-15 20:17:41 | 000,212,480 | ---- | C] (Eastman Kodak) -- C:\Windows\System\Pcdlib32.dll
[2010-08-15 20:06:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IrfanView
[2010-08-14 17:17:23 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2010-08-14 17:13:51 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Documents\BFBC2
[2010-08-14 11:40:04 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2010-08-14 10:18:51 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\Harry.Potter.and.the.Half.Blood.Prince.2009.PL.720p.BRRip.XviD.AC3-WDZ
[2010-08-14 10:03:18 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Google
[2010-08-13 17:35:20 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2010-08-13 17:35:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Google
[2010-08-13 17:33:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\YoWindow
[2010-08-13 13:13:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Raxco
[2010-08-13 13:13:38 | 000,000,000 | ---D | C] -- C:\Program Files\Raxco
[2010-08-13 13:12:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Raxco
[2010-08-12 18:25:30 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2010-08-12 18:24:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2010-08-12 18:08:34 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\PMB Files
[2010-08-12 18:08:33 | 000,000,000 | ---D | C] -- C:\ProgramData\PMB Files
[2010-08-12 18:08:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pando Networks
[2010-08-12 18:00:05 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2010-08-11 17:09:12 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\takie tam
[2010-08-10 15:57:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\METRO 2033
[2010-08-09 18:59:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2010-08-09 18:59:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2010-08-09 18:58:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2010-08-09 18:50:26 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft IntelliPoint
[2010-08-09 16:13:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CCleaner
[2010-08-08 22:02:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HLTooLz
[2010-08-08 16:40:46 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\WebcamMax
[2010-08-08 16:05:41 | 000,000,000 | ---D | C] -- C:\ProgramData\WebcamMax
[2010-08-08 15:58:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WebcamMax
[2010-08-08 15:37:09 | 000,000,000 | ---D | C] -- C:\ProgramData\OpenFM
[2010-08-08 14:05:20 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Documents\FIFA 10
[2010-08-08 14:02:59 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Leadertech
[2010-08-08 13:46:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Toolbar
[2010-08-08 13:45:19 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\DAEMON Tools Lite
[2010-08-08 13:45:17 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2010-08-07 17:45:09 | 000,000,000 | ---D | C] -- C:\_OTL
[2010-08-07 16:43:10 | 000,000,000 | ---D | C] -- C:\Users\Tomek\DoctorWeb
[2010-08-07 13:29:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Hewlett-Packard
[2010-08-07 13:22:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works
[2010-08-07 13:22:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2010-08-07 13:22:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2010-08-07 13:20:47 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2010-08-07 13:20:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2010-08-07 13:20:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2010-08-07 13:19:49 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2010-08-07 09:43:06 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\ESET
[2010-08-07 09:43:06 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\ESET
[2010-08-07 09:42:17 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
[2010-08-07 09:42:17 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2010-08-06 22:27:22 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2010-08-06 21:42:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR
[2010-08-06 21:42:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Launch Manager
[2010-08-06 21:41:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2010-08-06 21:41:17 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Mozilla
[2010-08-06 21:41:17 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Mozilla
[2010-08-06 21:41:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2010-08-06 21:40:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2010-08-06 21:40:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2010-08-06 21:34:20 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Searches
[2010-08-06 21:34:06 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Identities
[2010-08-06 21:34:00 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Contacts
[2010-08-06 21:33:54 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\VirtualStore
[2010-08-06 21:33:30 | 000,000,000 | --SD | C] -- C:\Users\Tomek\AppData\Roaming\Microsoft
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Videos
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Saved Games
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Pictures
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Music
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Links
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Favorites
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Downloads
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Documents
[2010-08-06 21:33:30 | 000,000,000 | R--D | C] -- C:\Users\Tomek\Desktop
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Ustawienia lokalne
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\AppData\Local\Temporary Internet Files
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Szablony
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\SendTo
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Recent
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\PrintHood
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\NetHood
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Documents\Moje wideo
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Documents\Moje obrazy
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Moje dokumenty
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Documents\Moja muzyka
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Menu Start
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\AppData\Local\Historia
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Dane aplikacji
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\AppData\Local\Dane aplikacji
[2010-08-06 21:33:30 | 000,000,000 | -HSD | C] -- C:\Users\Tomek\Cookies
[2010-08-06 21:33:30 | 000,000,000 | -H-D | C] -- C:\Users\Tomek\AppData
[2010-08-06 21:33:30 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Temp
[2010-08-06 21:33:30 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Microsoft
[2010-08-06 21:33:30 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Media Center Programs
[2010-08-06 21:33:21 | 000,000,000 | -HSD | C] -- C:\Recovery
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Ulubione
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Szablony
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Pulpit
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Start
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2010-08-06 21:33:20 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji
[2010-08-06 21:31:02 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2010-08-06 21:28:19 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2010-08-06 21:27:55 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2010-08-06 19:52:54 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Diagnostics
[2010-08-06 18:50:30 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Ventrilo
[2010-08-06 18:50:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ventrilo
[2010-08-06 18:50:16 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\mIRC
[2010-08-06 18:50:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\mIRC
[2010-08-06 18:50:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2010-08-06 17:33:50 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Documents\My Games
[2010-08-06 17:31:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts
[2010-08-06 17:01:25 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2010-08-06 16:31:38 | 001,658,880 | ---- | C] (SuYin) -- C:\Windows\Acer Crystal Eye webcam.EXE
[2010-08-06 16:31:13 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Intel
[2010-08-06 16:30:26 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\ATI
[2010-08-06 16:30:26 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\ATI
[2010-08-06 16:30:06 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Intel
[2010-08-06 16:30:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Intel
[2010-08-06 16:30:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco
[2010-08-06 16:29:32 | 000,000,000 | ---D | C] -- C:\Program Files\Broadcom
[2010-08-06 16:28:37 | 001,550,848 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\athrx.sys
[2010-08-06 16:28:37 | 001,550,848 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\athrx.sys
[2010-08-06 16:28:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Atheros
[2010-08-06 16:28:15 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\InstallShield
[2010-08-06 16:23:51 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2010-08-06 16:22:49 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics
[2010-08-06 16:20:36 | 000,000,000 | ---D | C] -- C:\ProgramData\AmUStor
[2010-08-06 16:20:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AmIcoSingLun
[2010-08-06 16:19:44 | 000,014,848 | ---- | C] (LSI Corporation) -- C:\Windows\SysWow64\agrsco64.dll
[2010-08-06 16:19:41 | 000,000,000 | ---D | C] -- C:\Program Files\LSI SoftModem
[2010-08-06 16:19:40 | 000,064,000 | ---- | C] (LSI Corporation) -- C:\Windows\agrsmdel.exe
[2010-08-06 16:19:40 | 000,030,720 | ---- | C] (LSI Corporation) -- C:\Windows\agrdel64.exe
[2010-08-06 16:19:40 | 000,014,848 | ---- | C] (LSI Corporation) -- C:\Windows\SysNative\agrsco64.dll
[2010-08-06 16:19:35 | 000,000,000 | ---D | C] -- C:\Windows\Options
[2010-08-06 16:19:20 | 000,000,000 | ---D | C] -- C:\Program Files\Apoint2K
[2010-08-06 16:17:05 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\skypePM
[2010-08-06 16:11:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam
[2010-08-06 16:11:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam
[2010-08-06 16:10:00 | 000,055,296 | ---- | C] (AMD) -- C:\Windows\SysNative\coinst.dll
[2010-08-06 16:04:55 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2010-08-06 16:04:47 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2010-08-06 16:04:46 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RH3DHT64.dll
[2010-08-06 16:04:45 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RH3DAA64.dll
[2010-08-06 16:04:44 | 000,513,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2010-08-06 16:04:44 | 000,211,376 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2010-08-06 16:04:44 | 000,193,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2010-08-06 16:04:44 | 000,150,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2010-08-06 16:04:42 | 000,363,008 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2010-08-06 16:04:42 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2010-08-06 16:04:42 | 000,304,640 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2010-08-06 16:04:42 | 000,198,656 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2010-08-06 16:04:42 | 000,095,744 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2010-08-06 16:04:42 | 000,073,216 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2010-08-06 16:04:40 | 000,320,512 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2010-08-06 16:04:39 | 000,310,784 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2010-08-06 16:04:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2010-08-06 16:04:37 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2010-08-06 16:04:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2010-08-06 16:03:21 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Adobe
[2010-08-06 16:02:54 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Skype
[2010-08-06 16:02:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2010-08-06 16:02:37 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2010-08-06 16:02:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2010-08-06 16:02:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2010-08-06 16:02:03 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2010-08-06 15:59:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI
[2010-08-06 15:59:10 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2010-08-06 15:58:21 | 000,000,000 | ---D | C] -- C:\ATI
[2010-08-06 15:55:58 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2010-08-06 15:55:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Atheros
[2010-08-06 15:54:36 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll
[2010-08-06 15:54:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2010-08-06 15:53:23 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\cache
[2010-08-06 15:53:22 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Macromedia
[2010-08-06 15:53:18 | 000,000,000 | ---D | C] -- C:\Intel
[2010-08-06 15:51:40 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Gadu-Gadu 10
[2010-08-06 15:50:14 | 000,526,184 | ---- | C] (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) -- C:\Windows\SysWow64\XceedCry.dll
[2010-08-06 15:50:14 | 000,456,536 | ---- | C] (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) -- C:\Windows\SysWow64\XCEEDZIP.DLL
[2010-08-06 15:50:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Driver Magician
[2010-08-06 15:49:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Gadu-Gadu 10
[2010-08-06 15:49:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gadu-Gadu 10
[2010-08-06 15:47:49 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\WinRAR
[2010-08-06 15:47:43 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2010-08-06 15:47:00 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX
[2010-08-06 15:46:25 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2010-07-12 11:24:32 | 000,341,504 | ---- | C] (repkasoft) -- C:\Windows\yowindow.scr
[2010-07-07 03:51:26 | 000,450,048 | ---- | C] (AMD) -- C:\Windows\SysNative\atieclxx.exe
[2010-07-07 03:50:54 | 000,202,752 | ---- | C] (AMD) -- C:\Windows\SysNative\atiesrxx.exe
[2010-07-07 03:49:36 | 000,421,376 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysNative\atipdl64.dll
[2010-07-07 03:49:18 | 000,278,528 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysWow64\Oemdspif.dll

[color=#E56717]========== Files - Modified Within 60 Days ==========[/color]

[2010-08-29 23:00:45 | 001,835,008 | -HS- | M] () -- C:\Users\Tomek\NTUSER.DAT
[2010-08-29 22:59:58 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjO3212.html
[2010-08-29 22:59:58 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzS3212.html
[2010-08-29 22:39:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010-08-29 22:10:24 | 000,009,600 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010-08-29 22:10:24 | 000,009,600 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010-08-29 21:54:37 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemppYa124.html
[2010-08-29 21:40:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempua2160.html
[2010-08-29 21:22:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temprs4004.html
[2010-08-29 20:45:12 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010-08-29 20:08:16 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010-08-29 20:08:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010-08-29 20:08:11 | 3111,518,208 | -HS- | M] () -- C:\hiberfil.sys
[2010-08-29 19:25:24 | 008,579,262 | -H-- | M] () -- C:\Users\Tomek\AppData\Local\IconCache.db
[2010-08-29 19:25:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZI1548.html
[2010-08-29 19:25:24 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqO1548.html
[2010-08-29 18:52:38 | 000,000,941 | ---- | M] () -- C:\Users\Tomek\Desktop\DS3 Tool.lnk
[2010-08-29 18:37:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPR3880.html
[2010-08-29 18:37:17 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuO3880.html
[2010-08-29 17:02:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJk3388.html
[2010-08-29 17:02:28 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAq3388.html
[2010-08-29 16:07:53 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxH3056.html
[2010-08-29 16:07:53 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQq3056.html
[2010-08-29 15:39:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempdZ3984.html
[2010-08-29 13:19:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXj3304.html
[2010-08-29 13:19:08 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLs3304.html
[2010-08-29 12:23:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLA1280.html
[2010-08-29 10:58:50 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempKS1060.html
[2010-08-29 10:55:05 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLc4024.html
[2010-08-29 10:18:36 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempRa2452.html
[2010-08-29 10:14:40 | 000,001,142 | ---- | M] () -- C:\Users\Public\Desktop\Ad-Aware.lnk
[2010-08-29 07:20:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiO3248.html
[2010-08-28 19:19:51 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempUx4036.html
[2010-08-28 19:10:57 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempKU3436.html
[2010-08-28 18:00:58 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempgP2652.html
[2010-08-28 15:55:13 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempeO2132.html
[2010-08-28 15:39:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOW1488.html
[2010-08-28 15:16:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempoZ3696.html
[2010-08-28 14:35:12 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempzi3888.html
[2010-08-28 14:35:12 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempnb3888.html
[2010-08-28 13:23:46 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcs2640.html
[2010-08-28 13:23:46 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOu2640.html
[2010-08-28 12:42:30 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempmd1244.html
[2010-08-28 12:12:30 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLZ3744.html
[2010-08-28 11:01:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temptm2912.html
[2010-08-28 10:45:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYK1796.html
[2010-08-28 10:26:49 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempKd3748.html
[2010-08-28 09:28:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempuw3508.html
[2010-08-27 23:28:12 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQD2452.html
[2010-08-27 23:28:12 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqT2452.html
[2010-08-27 21:37:37 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAE3380.html
[2010-08-27 21:37:37 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temppd3380.html
[2010-08-27 19:43:29 | 000,056,592 | ---- | M] () -- C:\Users\Tomek\Documents\devdata.dat
[2010-08-27 19:12:53 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temprr3576.html
[2010-08-27 19:05:03 | 001,523,412 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010-08-27 19:05:03 | 000,687,828 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2010-08-27 19:05:03 | 000,607,190 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010-08-27 19:05:03 | 000,131,382 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2010-08-27 19:05:03 | 000,103,568 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010-08-27 18:58:07 | 000,000,543 | ---- | M] () -- C:\Windows\NGO.cer
[2010-08-27 18:32:17 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_MijUfilt_01009.Wdf
[2010-08-27 18:31:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempmN1476.html
[2010-08-27 18:07:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temptb3224.html
[2010-08-27 14:35:42 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXm1464.html
[2010-08-27 14:03:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempmp3436.html
[2010-08-27 11:54:19 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempEM1444.html
[2010-08-27 11:54:19 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAr1444.html
[2010-08-27 11:25:33 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempry3036.html
[2010-08-26 18:44:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYS1556.html
[2010-08-26 18:44:28 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temphj1556.html
[2010-08-26 15:01:22 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxF3116.html
[2010-08-26 15:01:22 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaE3116.html
[2010-08-26 11:11:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempcZ3560.html
[2010-08-26 11:11:45 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLi3560.html
[2010-08-26 08:47:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempbV3584.html
[2010-08-25 19:19:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBP3020.html
[2010-08-25 18:20:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZA3772.html
[2010-08-25 18:20:54 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQH3772.html
[2010-08-25 17:21:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPj3060.html
[2010-08-25 16:40:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempON2504.html
[2010-08-25 12:30:59 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempmBn960.html
[2010-08-25 11:15:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXN3632.html
[2010-08-25 10:18:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemptRM244.html
[2010-08-25 09:15:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYI3400.html
[2010-08-25 08:56:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqI3340.html
[2010-08-24 23:39:03 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempof2476.html
[2010-08-24 23:39:03 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXA2476.html
[2010-08-24 19:04:39 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempwv1544.html
[2010-08-24 17:50:47 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempmd3248.html
[2010-08-24 17:50:47 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuK3248.html
[2010-08-24 17:47:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempnT3716.html
[2010-08-24 16:54:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWY3344.html
[2010-08-24 14:38:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuO3912.html
[2010-08-24 14:38:24 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempoZ3912.html
[2010-08-24 13:24:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLyu924.html
[2010-08-24 13:24:21 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJRN924.html
[2010-08-24 12:44:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempyZ3220.html
[2010-08-24 12:09:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjXz184.html
[2010-08-24 12:09:17 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxCg184.html
[2010-08-24 11:26:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempvZl780.html
[2010-08-24 11:17:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempVR3028.html
[2010-08-24 10:49:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGO2664.html
[2010-08-24 10:12:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdq3200.html
[2010-08-24 09:37:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempUNj548.html
[2010-08-24 09:30:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjF4076.html
[2010-08-23 22:53:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temphk1800.html
[2010-08-23 19:53:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcl3884.html
[2010-08-23 19:53:54 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempKB3884.html
[2010-08-23 17:58:10 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempgT3408.html
[2010-08-23 17:58:10 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempiz3408.html
[2010-08-23 17:45:51 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPZ3304.html
[2010-08-23 17:45:51 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDE3304.html
[2010-08-23 17:41:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemplTr236.html
[2010-08-23 16:52:13 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempot2960.html
[2010-08-23 16:26:49 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempzd2512.html
[2010-08-23 15:54:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temput3164.html
[2010-08-23 15:01:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temple3124.html
[2010-08-23 11:36:31 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaK3612.html
[2010-08-23 11:36:31 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempez3612.html
[2010-08-23 10:57:53 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAg3748.html
[2010-08-23 10:39:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temphj3496.html
[2010-08-23 10:24:31 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOf1404.html
[2010-08-23 10:13:13 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYB2400.html
[2010-08-23 10:10:00 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempUt2736.html
[2010-08-23 09:45:14 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempSV3596.html
[2010-08-23 08:50:39 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemprS3516.html
[2010-08-23 08:50:39 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempFP3516.html
[2010-08-22 20:32:19 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXZ3940.html
[2010-08-22 20:32:19 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXY3940.html
[2010-08-22 20:03:01 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJI2584.html
[2010-08-22 20:03:01 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaT2584.html
[2010-08-22 19:36:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemptB1268.html
[2010-08-22 19:36:08 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempMG1268.html
[2010-08-22 16:50:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYk3536.html
[2010-08-22 16:50:35 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgb3536.html
[2010-08-22 15:47:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjO2964.html
[2010-08-22 15:47:24 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQm2964.html
[2010-08-22 15:01:24 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temptq3968.html
[2010-08-22 15:01:24 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQx3968.html
[2010-08-22 14:08:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGk2192.html
[2010-08-22 12:47:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temppt3260.html
[2010-08-22 12:47:06 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempEC3260.html
[2010-08-21 20:25:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAP2280.html
[2010-08-21 20:25:15 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGC2280.html
[2010-08-21 18:40:18 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjP3244.html
[2010-08-21 18:40:18 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempUW3244.html
[2010-08-21 18:36:07 | 000,026,424 | --S- | M] () -- C:\Windows\SysNative\drivers\DRIVER_BIN64
[2010-08-21 18:35:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempgF1704.html
[2010-08-21 18:35:15 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgu1704.html
[2010-08-21 18:32:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaZ3432.html
[2010-08-21 18:32:45 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPL3432.html
[2010-08-21 18:14:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAI3712.html
[2010-08-21 18:14:38 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDH3712.html
[2010-08-21 14:50:10 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNh3232.html
[2010-08-21 14:50:10 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTO3232.html
[2010-08-21 12:18:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempkD2824.html
[2010-08-21 12:18:15 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGn2824.html
[2010-08-21 08:43:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempbF3608.html
[2010-08-21 08:18:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYl3624.html
[2010-08-20 22:55:39 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNW1488.html
[2010-08-20 20:58:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcd2444.html
[2010-08-20 20:58:45 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempvI2444.html
[2010-08-20 18:23:33 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZm3968.html
[2010-08-20 18:23:33 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXK3968.html
[2010-08-20 18:16:02 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempeXq644.html
[2010-08-20 17:38:55 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiC4004.html
[2010-08-20 16:18:40 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZS3992.html
[2010-08-20 14:22:19 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Templo3784.html
[2010-08-20 14:22:19 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTy3784.html
[2010-08-20 11:13:42 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempKw1300.html
[2010-08-20 11:13:42 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjN1300.html
[2010-08-20 11:00:10 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIx3192.html
[2010-08-20 10:37:46 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempri3628.html
[2010-08-20 10:34:57 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBI2208.html
[2010-08-20 10:17:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempMw3708.html
[2010-08-20 09:43:03 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempRM3764.html
[2010-08-19 23:51:30 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempva3420.html
[2010-08-19 10:48:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGA3788.html
[2010-08-19 09:43:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIk2508.html
[2010-08-19 09:17:38 | 000,000,460 | ---- | M] () -- C:\Users\Tomek\Documents\cc_20100819_091735.reg
[2010-08-19 09:08:01 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwM3888.html
[2010-08-18 18:31:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTk3608.html
[2010-08-18 15:44:13 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempSrE620.html
[2010-08-18 14:04:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzJ2880.html
[2010-08-18 11:03:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLK3492.html
[2010-08-18 09:53:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcl3484.html
[2010-08-18 09:33:30 | 000,007,597 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Resmon.ResmonCfg
[2010-08-17 22:33:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempjp4576.html
[2010-08-17 22:33:56 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYZ4576.html
[2010-08-17 20:22:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemplM1448.html
[2010-08-17 20:22:56 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwI1448.html
[2010-08-17 15:43:31 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWl3080.html
[2010-08-17 15:43:31 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempzi3080.html
[2010-08-17 12:54:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temphl3460.html
[2010-08-17 12:54:34 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemppX3460.html
[2010-08-17 12:41:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWl2324.html
[2010-08-17 12:41:04 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempte2324.html
[2010-08-16 22:56:27 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempMd1572.html
[2010-08-16 22:56:27 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDD1572.html
[2010-08-16 21:21:58 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempnh3416.html
[2010-08-16 19:15:20 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaP2448.html
[2010-08-16 19:15:20 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGG2448.html
[2010-08-16 18:06:33 | 000,001,511 | ---- | M] () -- C:\Users\Tomek\Desktop\BFBC2Game — skrót.lnk
[2010-08-16 18:06:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdc3012.html
[2010-08-16 17:55:51 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJtB568.html
[2010-08-16 17:55:51 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWKR568.html
[2010-08-16 17:38:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqV2152.html
[2010-08-16 16:11:18 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJT1460.html
[2010-08-16 09:34:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempqS3820.html
[2010-08-15 22:59:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempqn3132.html
[2010-08-15 22:59:04 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempoi3132.html
[2010-08-15 22:04:50 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempsa3228.html
[2010-08-15 21:56:07 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDs3668.html
[2010-08-15 18:59:40 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuE4260.html
[2010-08-15 18:59:40 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempcs4260.html
[2010-08-15 17:29:59 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempVW1652.html
[2010-08-15 13:22:53 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempyu3880.html
[2010-08-14 19:58:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempir3892.html
[2010-08-14 19:58:41 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBS3892.html
[2010-08-14 18:57:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemptI1148.html
[2010-08-14 18:19:19 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQF3680.html
[2010-08-14 17:23:32 | 000,000,232 | ---- | M] () -- C:\Users\Tomek\Desktop\Battlefield Bad Company™ 2.lnk
[2010-08-14 17:15:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempbH3280.html
[2010-08-14 14:38:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPO2952.html
[2010-08-14 14:38:28 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxF2952.html
[2010-08-14 09:08:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiG4084.html
[2010-08-13 20:42:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgl4048.html
[2010-08-13 20:42:48 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZm4048.html
[2010-08-13 19:33:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdk2236.html
[2010-08-13 19:33:41 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNU2236.html
[2010-08-13 18:10:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemprF3652.html
[2010-08-13 18:10:21 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempRh3652.html
[2010-08-13 17:59:57 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJH3848.html
[2010-08-13 15:46:03 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPr1964.html
[2010-08-13 10:03:00 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempeE2020.html
[2010-08-13 09:09:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempnV3680.html
[2010-08-12 21:21:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiE2632.html
[2010-08-12 21:21:11 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempEn4084.html
[2010-08-12 21:01:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempei2292.html
[2010-08-12 19:23:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempSo2356.html
[2010-08-12 19:23:54 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempuV2356.html
[2010-08-12 18:26:08 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempnw3760.html
[2010-08-12 18:26:08 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdv3760.html
[2010-08-12 18:19:01 | 000,001,514 | ---- | M] () -- C:\Users\Tomek\Desktop\Resume Download of The Lord of the Rings Online Siege of Mirkwood.lnk
[2010-08-12 18:01:58 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwI2584.html
[2010-08-12 18:01:58 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzN2584.html
[2010-08-12 17:56:40 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWo2252.html
[2010-08-12 17:56:40 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIM2252.html
[2010-08-12 17:50:34 | 000,002,189 | ---- | M] () -- C:\Users\Tomek\Desktop\cstrike.rar
[2010-08-12 17:24:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempGH1064.html
[2010-08-12 16:19:12 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJF2528.html
[2010-08-12 16:19:12 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgq2528.html
[2010-08-12 14:15:20 | 000,015,880 | ---- | M] () -- C:\Windows\SysNative\lsdelete.exe
[2010-08-12 11:24:59 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempmI1508.html
[2010-08-12 10:00:00 | 000,108,032 | ---- | M] () -- C:\Windows\SysWow64\ff_vfw.dll
[2010-08-12 10:00:00 | 000,000,038 | ---- | M] () -- C:\Windows\avisplitter.ini
[2010-08-12 09:43:10 | 000,001,084 | ---- | M] () -- C:\Users\Tomek\Documents\cc_20100812_094308.reg
[2010-08-12 09:40:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempHI2728.html
[2010-08-11 21:54:46 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempsI3148.html
[2010-08-11 21:54:46 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempCB3148.html
[2010-08-11 20:38:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempCS2156.html
[2010-08-11 19:28:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemppL3612.html
[2010-08-11 19:28:43 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempMo3612.html
[2010-08-11 16:03:47 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempnYC224.html
[2010-08-11 10:08:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYP3176.html
[2010-08-10 21:43:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAd3796.html
[2010-08-10 21:42:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempsr3420.html
[2010-08-10 19:10:17 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjQ3408.html
[2010-08-10 16:05:21 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempun1052.html
[2010-08-10 13:58:38 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemptK3660.html
[2010-08-10 12:37:18 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempun3676.html
[2010-08-10 12:37:18 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxH3676.html
[2010-08-10 10:58:01 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaDq316.html
[2010-08-10 09:22:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempHy4088.html
[2010-08-09 23:11:15 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIW2740.html
[2010-08-09 23:11:15 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNU2740.html
[2010-08-09 21:54:20 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempmx1372.html
[2010-08-09 21:54:20 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempoX1372.html
[2010-08-09 20:20:41 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwH1428.html
[2010-08-09 20:12:14 | 000,068,264 | ---- | M] () -- C:\Users\Tomek\AppData\Local\GDIPFONTCACHEV1.DAT
[2010-08-09 20:11:36 | 000,307,320 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010-08-09 19:58:28 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTo1168.html
[2010-08-09 17:17:26 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempjW1980.html
[2010-08-09 16:12:34 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYI2104.html
[2010-08-09 15:08:47 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZh3532.html
[2010-08-09 14:00:31 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempHB3524.html
[2010-08-09 14:00:31 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempxk3524.html
[2010-08-09 13:43:05 | 200,000,000 | ---- | M] () -- C:\Users\Tomek\met33.part02.rar
[2010-08-09 13:30:43 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNe3576.html
[2010-08-09 12:29:32 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempXS1016.html
[2010-08-09 12:29:32 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempFi1016.html
[2010-08-09 12:24:35 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLCJ852.html
[2010-08-09 11:21:01 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzT3992.html
[2010-08-09 10:15:56 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempVH2328.html
[2010-08-09 09:19:00 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAz3216.html
[2010-08-08 22:53:51 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDE1820.html
[2010-08-08 22:53:51 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempiB1820.html
[2010-08-08 18:53:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempZG3652.html
[2010-08-08 17:55:47 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempeB3024.html
[2010-08-08 17:50:44 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempCi3560.html
[2010-08-08 17:41:48 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempgr2792.html
[2010-08-08 17:41:48 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempzH2792.html
[2010-08-08 17:04:18 | 000,000,136 | ---- | M] () -- C:\Users\Tomek\Desktop\winsockfix.bat
[2010-08-08 16:46:45 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempNr1172.html
[2010-08-08 15:16:55 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempde2288.html
[2010-08-08 15:16:55 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempdk2288.html
[2010-08-08 14:50:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempvD3768.html
[2010-08-08 14:28:55 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempsI2544.html
[2010-08-08 14:23:23 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempYS3844.html
[2010-08-08 14:02:41 | 000,000,192 | ---- | M] () -- C:\Users\Tomek\Desktop\FIFA 10.lnk
[2010-08-08 13:46:20 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOk2924.html
[2010-08-08 13:46:20 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBa2924.html
[2010-08-08 13:45:50 | 000,834,544 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys
[2010-08-08 12:40:50 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010-08-08 11:56:16 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempTR1260.html
[2010-08-08 09:20:52 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempkA3832.html
[2010-08-08 07:20:10 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPs1796.html
[2010-08-07 22:05:54 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempAe3624.html
[2010-08-07 22:05:54 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempxD3624.html
[2010-08-07 21:01:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempcJG952.html
[2010-08-07 21:01:25 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempHDA952.html
[2010-08-07 18:53:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemprcV716.html
[2010-08-07 18:53:06 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempwSt716.html
[2010-08-07 17:03:21 | 000,000,808 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2010-08-07 16:37:50 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempIB1228.html
[2010-08-07 16:37:50 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempbP1228.html
[2010-08-07 16:36:56 | 000,000,414 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2010-08-07 13:51:29 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempBu2632.html
[2010-08-07 09:44:29 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempJT2868.html
[2010-08-06 21:57:06 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempOH1780.html
[2010-08-06 21:42:25 | 000,000,000 | ---- | M] () -- C:\Windows\Setup.INI
[2010-08-06 21:42:13 | 000,000,089 | ---- | M] () -- C:\Windows\LManager.UNI
[2010-08-06 21:41:15 | 000,001,939 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010-08-06 21:35:51 | 000,524,288 | -HS- | M] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2010-08-06 21:35:51 | 000,524,288 | -HS- | M] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2010-08-06 21:35:51 | 000,065,536 | -HS- | M] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2010-08-06 21:35:44 | 000,002,048 | ---- | M] () -- C:\Windows\SysWow64\winver.exe
[2010-08-06 21:35:39 | 000,113,543 | ---- | M] () -- C:\Windows\SysWow64\slmgr.vbs
[2010-08-06 21:33:30 | 000,000,020 | -HS- | M] () -- C:\Users\Tomek\ntuser.ini
[2010-08-06 21:31:41 | 000,000,803 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2010-08-06 21:31:41 | 000,000,803 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2010-08-06 20:41:05 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempDk3572.html
[2010-08-06 20:41:05 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempWB3572.html
[2010-08-06 20:16:09 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempLu3016.html
[2010-08-06 19:55:05 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TemphUZ988.html
[2010-08-06 19:55:05 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempEea988.html
[2010-08-06 19:45:40 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempQX3396.html
[2010-08-06 19:29:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPDa568.html
[2010-08-06 18:42:52 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Temple1308.html
[2010-08-06 17:01:51 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_point64k_01009.Wdf
[2010-08-06 16:32:55 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2010-08-06 16:32:04 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempaPR452.html
[2010-08-06 16:32:04 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempctK452.html
[2010-08-06 16:29:17 | 000,006,656 | ---- | M] () -- C:\Windows\SysNative\bcmwlrc.dll
[2010-08-06 16:22:52 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2010-08-06 16:19:23 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01007.Wdf
[2010-08-06 16:17:06 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat
[2010-08-06 16:12:37 | 000,000,218 | ---- | M] () -- C:\Users\Tomek\Desktop\Counter-Strike.url
[2010-08-06 16:06:20 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempPl2024.html
[2010-08-06 16:00:25 | 000,002,432 | ---- | M] () -- C:\Users\Tomek\AppData\Local\Tempsf2812.html
[2010-08-06 16:00:25 | 000,002,089 | ---- | M] () -- C:\Users\Tomek\AppData\Local\TempcX2812.html
[2010-08-06 15:49:53 | 000,001,003 | ---- | M] () -- C:\Users\Tomek\Desktop\Gadu-Gadu 10.lnk
[2010-07-12 11:24:32 | 000,341,504 | ---- | M] (repkasoft) -- C:\Windows\yowindow.scr
[2010-07-07 03:54:32 | 000,063,416 | ---- | M] () -- C:\Windows\SysNative\atiapfxx.blb
[2010-07-07 03:49:18 | 000,278,528 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\SysWow64\Oemdspif.dll

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010-08-29 22:59:58 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjO3212.html
[2010-08-29 22:59:58 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzS3212.html
[2010-08-29 21:41:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemppYa124.html
[2010-08-29 21:27:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempua2160.html
[2010-08-29 20:50:28 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temprs4004.html
[2010-08-29 18:56:55 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZI1548.html
[2010-08-29 18:56:55 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqO1548.html
[2010-08-29 18:52:38 | 000,000,941 | ---- | C] () -- C:\Users\Tomek\Desktop\DS3 Tool.lnk
[2010-08-29 18:21:17 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPR3880.html
[2010-08-29 18:21:17 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuO3880.html
[2010-08-29 17:00:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJk3388.html
[2010-08-29 17:00:18 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAq3388.html
[2010-08-29 15:49:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxH3056.html
[2010-08-29 15:49:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQq3056.html
[2010-08-29 14:22:19 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempdZ3984.html
[2010-08-29 12:53:14 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXj3304.html
[2010-08-29 12:53:14 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLs3304.html
[2010-08-29 12:23:11 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLA1280.html
[2010-08-29 11:20:48 | 000,015,880 | ---- | C] () -- C:\Windows\SysNative\lsdelete.exe
[2010-08-29 10:58:27 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempKS1060.html
[2010-08-29 10:54:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLc4024.html
[2010-08-29 10:14:40 | 000,001,142 | ---- | C] () -- C:\Users\Public\Desktop\Ad-Aware.lnk
[2010-08-29 10:10:49 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempRa2452.html
[2010-08-29 07:18:55 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiO3248.html
[2010-08-28 19:12:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempUx4036.html
[2010-08-28 19:10:36 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempKU3436.html
[2010-08-28 17:56:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempgP2652.html
[2010-08-28 15:53:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempeO2132.html
[2010-08-28 15:29:43 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOW1488.html
[2010-08-28 15:14:35 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempoZ3696.html
[2010-08-28 14:33:11 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempzi3888.html
[2010-08-28 14:33:11 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempnb3888.html
[2010-08-28 13:14:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcs2640.html
[2010-08-28 13:14:40 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOu2640.html
[2010-08-28 12:22:59 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempmd1244.html
[2010-08-28 11:47:05 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLZ3744.html
[2010-08-28 10:56:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temptm2912.html
[2010-08-28 10:44:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYK1796.html
[2010-08-28 10:26:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempKd3748.html
[2010-08-28 09:10:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempuw3508.html
[2010-08-27 22:53:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQD2452.html
[2010-08-27 22:53:31 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqT2452.html
[2010-08-27 21:35:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAE3380.html
[2010-08-27 21:35:31 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temppd3380.html
[2010-08-27 19:47:14 | 000,056,592 | ---- | C] () -- C:\Users\Tomek\Documents\devdata.dat
[2010-08-27 19:07:45 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temprr3576.html
[2010-08-27 18:58:07 | 000,000,543 | ---- | C] () -- C:\Windows\NGO.cer
[2010-08-27 18:32:17 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_MijUfilt_01009.Wdf
[2010-08-27 18:30:56 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempmN1476.html
[2010-08-27 18:07:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temptb3224.html
[2010-08-27 14:35:28 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXm1464.html
[2010-08-27 13:49:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempmp3436.html
[2010-08-27 11:41:27 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempEM1444.html
[2010-08-27 11:41:27 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAr1444.html
[2010-08-27 11:05:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempry3036.html
[2010-08-26 18:34:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYS1556.html
[2010-08-26 18:34:31 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temphj1556.html
[2010-08-26 14:57:56 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxF3116.html
[2010-08-26 14:57:56 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaE3116.html
[2010-08-26 10:55:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempcZ3560.html
[2010-08-26 10:55:38 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLi3560.html
[2010-08-26 08:39:58 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempbV3584.html
[2010-08-25 18:32:46 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBP3020.html
[2010-08-25 18:05:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZA3772.html
[2010-08-25 18:05:16 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQH3772.html
[2010-08-25 17:21:05 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPj3060.html
[2010-08-25 16:24:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempON2504.html
[2010-08-25 11:35:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempmBn960.html
[2010-08-25 11:14:51 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXN3632.html
[2010-08-25 10:17:56 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemptRM244.html
[2010-08-25 09:02:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYI3400.html
[2010-08-25 08:53:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqI3340.html
[2010-08-24 22:58:46 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempof2476.html
[2010-08-24 22:58:46 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXA2476.html
[2010-08-24 18:35:08 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempwv1544.html
[2010-08-24 17:48:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempmd3248.html
[2010-08-24 17:48:41 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuK3248.html
[2010-08-24 17:44:22 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempnT3716.html
[2010-08-24 16:37:22 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWY3344.html
[2010-08-24 14:37:35 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuO3912.html
[2010-08-24 14:37:35 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempoZ3912.html
[2010-08-24 13:23:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLyu924.html
[2010-08-24 13:23:15 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJRN924.html
[2010-08-24 12:42:46 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempyZ3220.html
[2010-08-24 12:07:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjXz184.html
[2010-08-24 12:07:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxCg184.html
[2010-08-24 11:20:14 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempvZl780.html
[2010-08-24 11:17:25 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempVR3028.html
[2010-08-24 10:49:26 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGO2664.html
[2010-08-24 10:12:02 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdq3200.html
[2010-08-24 09:37:26 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempUNj548.html
[2010-08-24 09:20:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjF4076.html
[2010-08-23 21:02:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temphk1800.html
[2010-08-23 19:17:55 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcl3884.html
[2010-08-23 19:17:55 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempKB3884.html
[2010-08-23 17:57:12 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempgT3408.html
[2010-08-23 17:57:12 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempiz3408.html
[2010-08-23 17:45:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPZ3304.html
[2010-08-23 17:45:32 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDE3304.html
[2010-08-23 16:57:43 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemplTr236.html
[2010-08-23 16:52:02 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempot2960.html
[2010-08-23 16:26:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempzd2512.html
[2010-08-23 15:41:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temput3164.html
[2010-08-23 15:00:46 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temple3124.html
[2010-08-23 11:13:04 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaK3612.html
[2010-08-23 11:13:04 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempez3612.html
[2010-08-23 10:57:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAg3748.html
[2010-08-23 10:38:51 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temphj3496.html
[2010-08-23 10:21:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOf1404.html
[2010-08-23 10:12:58 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYB2400.html
[2010-08-23 10:09:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempUt2736.html
[2010-08-23 09:44:59 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempSV3596.html
[2010-08-23 08:25:54 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemprS3516.html
[2010-08-23 08:25:54 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempFP3516.html
[2010-08-22 20:29:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXZ3940.html
[2010-08-22 20:29:00 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXY3940.html
[2010-08-22 20:01:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJI2584.html
[2010-08-22 20:01:41 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaT2584.html
[2010-08-22 17:17:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemptB1268.html
[2010-08-22 17:17:41 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempMG1268.html
[2010-08-22 16:39:26 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgb3536.html
[2010-08-22 16:39:25 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYk3536.html
[2010-08-22 15:38:49 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjO2964.html
[2010-08-22 15:38:49 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQm2964.html
[2010-08-22 14:51:10 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temptq3968.html
[2010-08-22 14:51:10 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQx3968.html
[2010-08-22 13:26:56 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGk2192.html
[2010-08-22 09:41:34 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temppt3260.html
[2010-08-22 09:41:34 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempEC3260.html
[2010-08-21 20:11:59 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAP2280.html
[2010-08-21 20:11:59 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGC2280.html
[2010-08-21 18:38:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjP3244.html
[2010-08-21 18:38:41 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempUW3244.html
[2010-08-21 18:35:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempgF1704.html
[2010-08-21 18:35:15 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgu1704.html
[2010-08-21 18:31:57 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaZ3432.html
[2010-08-21 18:31:57 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPL3432.html
[2010-08-21 18:29:49 | 000,026,424 | --S- | C] () -- C:\Windows\SysNative\drivers\DRIVER_BIN64
[2010-08-21 18:14:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAI3712.html
[2010-08-21 18:14:38 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDH3712.html
[2010-08-21 14:17:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNh3232.html
[2010-08-21 14:17:15 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTO3232.html
[2010-08-21 09:44:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempkD2824.html
[2010-08-21 09:44:42 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGn2824.html
[2010-08-21 08:41:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempbF3608.html
[2010-08-21 08:08:06 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYl3624.html
[2010-08-20 22:48:14 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNW1488.html
[2010-08-20 20:07:30 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcd2444.html
[2010-08-20 20:07:30 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempvI2444.html
[2010-08-20 18:23:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZm3968.html
[2010-08-20 18:23:00 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXK3968.html
[2010-08-20 18:15:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempeXq644.html
[2010-08-20 17:37:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiC4004.html
[2010-08-20 15:53:14 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZS3992.html
[2010-08-20 15:52:40 | 000,001,003 | ---- | C] () -- C:\Users\Tomek\Desktop\Gadu-Gadu 10.lnk
[2010-08-20 14:19:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Templo3784.html
[2010-08-20 14:19:31 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTy3784.html
[2010-08-20 11:05:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempKw1300.html
[2010-08-20 11:05:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjN1300.html
[2010-08-20 10:57:08 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIx3192.html
[2010-08-20 10:37:35 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempri3628.html
[2010-08-20 10:34:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBI2208.html
[2010-08-20 10:17:10 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempMw3708.html
[2010-08-20 08:35:53 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempRM3764.html
[2010-08-19 22:11:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempva3420.html
[2010-08-19 10:33:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGA3788.html
[2010-08-19 09:43:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIk2508.html
[2010-08-19 09:17:37 | 000,000,460 | ---- | C] () -- C:\Users\Tomek\Documents\cc_20100819_091735.reg
[2010-08-19 09:05:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwM3888.html
[2010-08-18 17:18:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTk3608.html
[2010-08-18 15:43:53 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempSrE620.html
[2010-08-18 14:04:19 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzJ2880.html
[2010-08-18 11:03:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLK3492.html
[2010-08-18 09:52:57 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcl3484.html
[2010-08-17 22:29:17 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempjp4576.html
[2010-08-17 22:29:17 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYZ4576.html
[2010-08-17 20:19:47 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemplM1448.html
[2010-08-17 20:19:47 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwI1448.html
[2010-08-17 17:08:30 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010-08-17 17:08:30 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2010-08-17 17:08:28 | 000,790,528 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2010-08-17 17:08:28 | 000,134,144 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2010-08-17 17:08:28 | 000,000,547 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll.manifest
[2010-08-17 17:08:28 | 000,000,414 | ---- | C] () -- C:\Windows\SysWow64\lame_acm.xml
[2010-08-17 17:08:27 | 000,108,032 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2010-08-17 15:42:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWl3080.html
[2010-08-17 15:42:48 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempzi3080.html
[2010-08-17 12:43:01 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temphl3460.html
[2010-08-17 12:43:01 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemppX3460.html
[2010-08-17 12:27:06 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWl2324.html
[2010-08-17 12:27:06 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempte2324.html
[2010-08-16 21:43:27 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempMd1572.html
[2010-08-16 21:43:27 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDD1572.html
[2010-08-16 21:18:32 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempnh3416.html
[2010-08-16 19:14:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaP2448.html
[2010-08-16 19:14:16 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGG2448.html
[2010-08-16 18:06:34 | 000,001,511 | ---- | C] () -- C:\Users\Tomek\Desktop\BFBC2Game — skrót.lnk
[2010-08-16 18:05:54 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdc3012.html
[2010-08-16 17:45:11 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJtB568.html
[2010-08-16 17:45:11 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWKR568.html
[2010-08-16 17:37:55 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqV2152.html
[2010-08-16 16:11:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJT1460.html
[2010-08-16 09:33:20 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempqS3820.html
[2010-08-15 22:56:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempqn3132.html
[2010-08-15 22:56:44 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempoi3132.html
[2010-08-15 21:56:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempsa3228.html
[2010-08-15 21:55:07 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDs3668.html
[2010-08-15 20:17:41 | 000,081,920 | ---- | C] () -- C:\Windows\System\CAPI2032.DLL
[2010-08-15 20:17:40 | 000,306,688 | ---- | C] () -- C:\Windows\System\LFFPX7.DLL
[2010-08-15 20:17:40 | 000,095,232 | ---- | C] () -- C:\Windows\System\LFKODAK.DLL
[2010-08-15 17:43:21 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuE4260.html
[2010-08-15 17:43:21 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempcs4260.html
[2010-08-15 17:11:34 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempVW1652.html
[2010-08-15 12:40:36 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempyu3880.html
[2010-08-14 19:16:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempir3892.html
[2010-08-14 19:16:44 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBS3892.html
[2010-08-14 18:53:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemptI1148.html
[2010-08-14 17:57:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQF3680.html
[2010-08-14 17:23:32 | 000,000,232 | ---- | C] () -- C:\Users\Tomek\Desktop\Battlefield Bad Company™ 2.lnk
[2010-08-14 16:49:42 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempbH3280.html
[2010-08-14 13:35:38 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPO2952.html
[2010-08-14 13:35:38 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxF2952.html
[2010-08-14 10:34:47 | 000,001,048 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010-08-14 10:34:46 | 000,001,044 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010-08-14 08:57:53 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiG4084.html
[2010-08-13 20:30:20 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgl4048.html
[2010-08-13 20:30:20 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZm4048.html
[2010-08-13 19:27:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdk2236.html
[2010-08-13 19:27:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNU2236.html
[2010-08-13 18:10:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemprF3652.html
[2010-08-13 18:10:03 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempRh3652.html
[2010-08-13 17:42:17 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJH3848.html
[2010-08-13 15:45:35 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPr1964.html
[2010-08-13 09:59:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempeE2020.html
[2010-08-13 09:09:05 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempnV3680.html
[2010-08-12 21:21:19 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiE2632.html
[2010-08-12 21:15:21 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempEn4084.html
[2010-08-12 20:52:21 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempei2292.html
[2010-08-12 18:33:17 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempSo2356.html
[2010-08-12 18:33:17 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempuV2356.html
[2010-08-12 18:19:01 | 000,001,514 | ---- | C] () -- C:\Users\Tomek\Desktop\Resume Download of The Lord of the Rings Online Siege of Mirkwood.lnk
[2010-08-12 18:04:57 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempnw3760.html
[2010-08-12 18:04:57 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdv3760.html
[2010-08-12 18:00:37 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwI2584.html
[2010-08-12 18:00:37 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzN2584.html
[2010-08-12 17:52:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWo2252.html
[2010-08-12 17:52:18 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIM2252.html
[2010-08-12 17:50:34 | 000,002,189 | ---- | C] () -- C:\Users\Tomek\Desktop\cstrike.rar
[2010-08-12 17:15:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempGH1064.html
[2010-08-12 15:51:51 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJF2528.html
[2010-08-12 15:51:51 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgq2528.html
[2010-08-12 11:24:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempmI1508.html
[2010-08-12 09:43:09 | 000,001,084 | ---- | C] () -- C:\Users\Tomek\Documents\cc_20100812_094308.reg
[2010-08-12 09:39:52 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempHI2728.html
[2010-08-11 21:15:28 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempsI3148.html
[2010-08-11 21:15:28 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempCB3148.html
[2010-08-11 20:38:12 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempCS2156.html
[2010-08-11 17:41:43 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemppL3612.html
[2010-08-11 17:41:43 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempMo3612.html
[2010-08-11 16:02:37 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempnYC224.html
[2010-08-11 10:06:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYP3176.html
[2010-08-10 21:43:03 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAd3796.html
[2010-08-10 21:41:23 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempsr3420.html
[2010-08-10 19:04:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjQ3408.html
[2010-08-10 16:03:34 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempun1052.html
[2010-08-10 13:49:05 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemptK3660.html
[2010-08-10 12:37:04 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempun3676.html
[2010-08-10 12:37:04 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxH3676.html
[2010-08-10 10:57:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaDq316.html
[2010-08-10 09:06:58 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempHy4088.html
[2010-08-09 22:31:15 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIW2740.html
[2010-08-09 22:31:15 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNU2740.html
[2010-08-09 21:35:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempmx1372.html
[2010-08-09 21:35:00 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempoX1372.html
[2010-08-09 20:17:00 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwH1428.html
[2010-08-09 18:32:18 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTo1168.html
[2010-08-09 17:17:08 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempjW1980.html
[2010-08-09 16:11:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYI2104.html
[2010-08-09 15:08:31 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZh3532.html
[2010-08-09 13:54:53 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempHB3524.html
[2010-08-09 13:54:53 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempxk3524.html
[2010-08-09 13:27:44 | 200,000,000 | ---- | C] () -- C:\Users\Tomek\met33.part02.rar
[2010-08-09 13:14:37 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNe3576.html
[2010-08-09 12:25:47 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempXS1016.html
[2010-08-09 12:25:47 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempFi1016.html
[2010-08-09 12:24:09 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLCJ852.html
[2010-08-09 11:20:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzT3992.html
[2010-08-09 10:15:44 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempVH2328.html
[2010-08-09 09:18:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAz3216.html
[2010-08-08 21:50:29 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDE1820.html
[2010-08-08 21:50:29 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempiB1820.html
[2010-08-08 18:26:47 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempZG3652.html
[2010-08-08 17:53:59 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempeB3024.html
[2010-08-08 17:45:02 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempCi3560.html
[2010-08-08 17:17:26 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempgr2792.html
[2010-08-08 17:17:26 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempzH2792.html
[2010-08-08 17:04:17 | 000,000,136 | ---- | C] () -- C:\Users\Tomek\Desktop\winsockfix.bat
[2010-08-08 16:18:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempNr1172.html
[2010-08-08 15:58:37 | 001,053,056 | ---- | C] () -- C:\Windows\SysWow64\drivers\CAMTHWDM.sys
[2010-08-08 14:56:28 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempde2288.html
[2010-08-08 14:56:28 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempdk2288.html
[2010-08-08 14:49:34 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempvD3768.html
[2010-08-08 14:27:50 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempsI2544.html
[2010-08-08 14:02:41 | 000,000,192 | ---- | C] () -- C:\Users\Tomek\Desktop\FIFA 10.lnk
[2010-08-08 13:54:48 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempYS3844.html
[2010-08-08 13:45:50 | 000,834,544 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys
[2010-08-08 13:28:37 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOk2924.html
[2010-08-08 13:28:37 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBa2924.html
[2010-08-08 12:40:50 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010-08-08 11:33:25 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempTR1260.html
[2010-08-08 09:14:23 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempkA3832.html
[2010-08-08 07:13:39 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPs1796.html
[2010-08-07 22:00:40 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempAe3624.html
[2010-08-07 22:00:40 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempxD3624.html
[2010-08-07 20:36:13 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempcJG952.html
[2010-08-07 20:36:13 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempHDA952.html
[2010-08-07 18:53:06 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemprcV716.html
[2010-08-07 18:53:06 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempwSt716.html
[2010-08-07 16:36:56 | 000,000,414 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2010-08-07 16:36:02 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempIB1228.html
[2010-08-07 16:36:02 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempbP1228.html
[2010-08-07 14:23:40 | 000,007,597 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Resmon.ResmonCfg
[2010-08-07 13:47:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempBu2632.html
[2010-08-07 09:03:07 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempJT2868.html
[2010-08-06 21:49:49 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempOH1780.html
[2010-08-06 21:42:25 | 000,000,000 | ---- | C] () -- C:\Windows\Setup.INI
[2010-08-06 21:42:13 | 000,000,089 | ---- | C] () -- C:\Windows\LManager.UNI
[2010-08-06 21:41:15 | 000,001,939 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010-08-06 21:35:39 | 000,113,543 | ---- | C] () -- C:\Windows\SysWow64\slmgr.vbs
[2010-08-06 21:35:39 | 000,002,048 | ---- | C] () -- C:\Windows\SysWow64\winver.exe
[2010-08-06 21:33:30 | 001,835,008 | -HS- | C] () -- C:\Users\Tomek\NTUSER.DAT
[2010-08-06 21:33:30 | 000,524,288 | -HS- | C] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2010-08-06 21:33:30 | 000,524,288 | -HS- | C] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2010-08-06 21:33:30 | 000,262,144 | -HS- | C] () -- C:\Users\Tomek\ntuser.dat.LOG1
[2010-08-06 21:33:30 | 000,065,536 | -HS- | C] () -- C:\Users\Tomek\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2010-08-06 21:33:30 | 000,000,020 | -HS- | C] () -- C:\Users\Tomek\ntuser.ini
[2010-08-06 21:33:30 | 000,000,000 | -HS- | C] () -- C:\Users\Tomek\ntuser.dat.LOG2
[2010-08-06 21:27:55 | 3111,518,208 | -HS- | C] () -- C:\hiberfil.sys
[2010-08-06 20:38:07 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempDk3572.html
[2010-08-06 20:38:07 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempWB3572.html
[2010-08-06 19:57:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempLu3016.html
[2010-08-06 19:52:13 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TemphUZ988.html
[2010-08-06 19:52:13 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempEea988.html
[2010-08-06 19:45:25 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempQX3396.html
[2010-08-06 19:22:41 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPDa568.html
[2010-08-06 18:41:16 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Temple1308.html
[2010-08-06 17:01:51 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_point64k_01009.Wdf
[2010-08-06 16:32:55 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2010-08-06 16:31:38 | 000,626,688 | ---- | C] () -- C:\Windows\Image.dll
[2010-08-06 16:31:38 | 000,222,382 | ---- | C] () -- C:\Windows\Acer Crystal Eye webcam.ico
[2010-08-06 16:31:38 | 000,200,704 | ---- | C] () -- C:\Windows\PLFSetI.exe
[2010-08-06 16:31:38 | 000,020,480 | ---- | C] () -- C:\Windows\USB_VIDEO_REG.exe
[2010-08-06 16:31:38 | 000,008,362 | ---- | C] () -- C:\Windows\Suyin.reg
[2010-08-06 16:31:38 | 000,000,323 | ---- | C] () -- C:\Windows\PidList.ini
[2010-08-06 16:29:33 | 000,006,656 | ---- | C] () -- C:\Windows\SysNative\bcmwlrc.dll
[2010-08-06 16:28:37 | 000,308,477 | ---- | C] () -- C:\Windows\SysNative\netathrx.inf
[2010-08-06 16:28:37 | 000,051,232 | ---- | C] () -- C:\Windows\SysNative\athrextx.cat
[2010-08-06 16:22:52 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2010-08-06 16:19:23 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01007.Wdf
[2010-08-06 16:17:06 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010-08-06 16:12:37 | 000,000,218 | ---- | C] () -- C:\Users\Tomek\Desktop\Counter-Strike.url
[2010-08-06 16:10:00 | 000,019,462 | ---- | C] () -- C:\Windows\atiogl.xml
[2010-08-06 16:10:00 | 000,001,035 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2010-08-06 16:10:00 | 000,001,035 | ---- | C] () -- C:\Windows\SysNative\atipblag.dat
[2010-08-06 16:08:51 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempaPR452.html
[2010-08-06 16:08:51 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempctK452.html
[2010-08-06 16:04:47 | 000,001,256 | R--- | C] () -- C:\Windows\SysNative\drivers\RTHDATEX.DAT
[2010-08-06 16:04:47 | 000,000,520 | R--- | C] () -- C:\Windows\SysNative\drivers\RTEQEX2.DAT
[2010-08-06 16:04:47 | 000,000,520 | R--- | C] () -- C:\Windows\SysNative\drivers\RTEQEX1.DAT
[2010-08-06 16:04:47 | 000,000,520 | R--- | C] () -- C:\Windows\SysNative\drivers\RTEQEX0.DAT
[2010-08-06 16:04:47 | 000,000,008 | R--- | C] () -- C:\Windows\SysNative\drivers\RTKHDAUD.DAT
[2010-08-06 16:04:46 | 000,214,552 | R--- | C] () -- C:\Windows\SysNative\drivers\RTCONVEQ.DAT
[2010-08-06 16:01:54 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempPl2024.html
[2010-08-06 15:53:23 | 000,002,432 | ---- | C] () -- C:\Users\Tomek\AppData\Local\Tempsf2812.html
[2010-08-06 15:53:23 | 000,002,089 | ---- | C] () -- C:\Users\Tomek\AppData\Local\TempcX2812.html
[2010-08-06 15:50:14 | 000,110,602 | ---- | C] () -- C:\Windows\SysWow64\xcdsfx32.bin
[2010-07-07 03:54:32 | 000,063,416 | ---- | C] () -- C:\Windows\SysNative\atiapfxx.blb
[2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll

[color=#E56717]========== LOP Check ==========[/color]

[2010-08-11 12:15:44 | 000,000,000 | ---D | M] -- C:\Users\cs\AppData\Roaming\ESET
[2010-08-07 12:02:55 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\ESET
[2010-08-08 15:29:17 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\Gadu-Gadu 10
[2010-08-15 20:06:10 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\IrfanView
[2010-08-08 15:37:08 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\OpenFM
[2010-08-20 22:03:45 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\Tibia
[2010-08-08 15:58:41 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\WebcamMax
[2010-08-13 17:33:24 | 000,000,000 | ---D | M] -- C:\Users\Sławek\AppData\Roaming\YoWindow
[2010-08-17 17:06:31 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\BESTplayer
[2010-08-08 13:49:09 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\DAEMON Tools Lite
[2010-08-07 09:43:06 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\ESET
[2010-08-06 16:00:25 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Gadu-Gadu 10
[2010-08-08 14:02:59 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Leadertech
[2010-08-27 18:19:48 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\MotioninJoy
[2010-08-20 16:04:03 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Tibia
[2010-08-08 16:40:46 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\WebcamMax
[2010-08-17 22:24:51 | 000,032,592 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]


[color=#A23BEC]< %systemdrive%\*.* >[/color]
[2010-08-29 20:08:10 | 000,002,035 | ---- | M] () -- C:\aaw7boot.log
[2010-08-29 20:08:11 | 3111,518,208 | -HS- | M] () -- C:\hiberfil.sys
[2010-08-29 08:51:50 | 000,015,190 | ---- | M] () -- C:\mksbasel.cpp.log
[2010-08-29 20:08:10 | 4148,690,944 | -HS- | M] () -- C:\pagefile.sys


[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys
[2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2009-07-14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys

[color=#A23BEC]< MD5 for: CDROM.SYS >[/color]
[2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysWow64\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys
[2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2009-07-14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2009-07-14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
< End of report >
[/log]

Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!

Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.

×
×
  • Dodaj nową pozycję...

Powiadomienie o plikach cookie

Strona wykorzystuje pliki cookies w celu prawidłowego świadczenia usług i wygody użytkowników. Warunki przechowywania i dostępu do plików cookies możesz zmienić w ustawieniach przeglądarki.