x-kom hosting

[Rozwiązany] Skróty plików na dyskach wymiennych

dario116
utworzono
utworzono

Witam.

Na dyskach wymiennych jakie podłączyłem do komputera zamiast plików pojawiły się skróty.
Pozdrawiam.

Log z OTL:
[log]
OTL logfile created on: 2010-08-31 11:31:56 - Run 3
OTL by OldTimer - Version 3.2.10.0 Folder = C:\Users\Darek\Desktop
64bit- An unknown product (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 64,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 78,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 49,90 Gb Total Space | 6,86 Gb Free Space | 13,74% Space Free | Partition Type: NTFS
Drive D: | 240,28 Gb Total Space | 47,48 Gb Free Space | 19,76% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: DAREK-KOMPUTER
Current User Name: Darek
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 60 Days
Output = Standard

[color=#E56717]========== Processes (All) ==========[/color]

PRC - [2010-08-30 21:28:37 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe
PRC - [2010-08-09 15:27:06 | 000,836,464 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe
PRC - [2010-08-06 09:11:58 | 000,248,936 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2010-05-30 16:31:46 | 011,981,408 | ---- | M] (GG Network S.A.) -- C:\Program Files (x86)\Gadu-Gadu 10\gg.exe
PRC - [2010-05-14 14:11:08 | 000,066,048 | ---- | M] (PostgreSQL Global Development Group) -- C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe
PRC - [2010-05-14 14:09:18 | 004,530,176 | ---- | M] (PostgreSQL Global Development Group) -- C:\Program Files (x86)\PostgreSQL\8.4\bin\postgres.exe
PRC - [2010-05-14 11:44:46 | 000,248,552 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
PRC - [2010-03-04 23:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe
PRC - [2010-01-22 21:57:08 | 000,395,824 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnat.exe
PRC - [2010-01-22 21:56:44 | 000,334,384 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnetdhcp.exe
PRC - [2010-01-22 21:56:28 | 000,113,200 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
PRC - [2010-01-22 21:00:48 | 000,563,760 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe
PRC - [2010-01-19 10:45:41 | 003,168,216 | ---- | M] (PC Tools) -- C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe
PRC - [2009-11-18 19:52:31 | 000,818,432 | ---- | M] (PC Tools) -- C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe
PRC - [2009-11-13 19:29:14 | 000,107,832 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe
PRC - [2009-11-13 19:28:53 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2009-09-11 17:52:16 | 002,080,768 | ---- | M] (Micro-Star International Co., Ltd.) -- C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe
PRC - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2009-07-09 15:54:42 | 000,160,768 | ---- | M] (Micro-Star International Co., Ltd.) -- C:\Program Files (x86)\System Control Manager\MSIService.exe
PRC - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2009-03-02 13:08:47 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2009-02-11 17:38:40 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
PRC - [2009-02-11 17:38:38 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2007-09-13 22:26:50 | 000,090,112 | ---- | M] () -- C:\MSI\Advanced Wheel Mouse\wh_exec.exe


[color=#E56717]========== Modules (All) ==========[/color]

MOD - [2010-08-30 21:28:37 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe
MOD - [2010-03-24 08:37:04 | 001,289,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll
MOD - [2010-02-18 09:34:01 | 012,867,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll
MOD - [2009-12-11 09:39:06 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll
MOD - [2009-12-11 09:36:33 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll
MOD - [2009-07-14 03:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll
MOD - [2009-07-14 03:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll
MOD - [2009-07-14 03:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll
MOD - [2009-07-14 03:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll
MOD - [2009-07-14 03:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll
MOD - [2009-07-14 03:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll
MOD - [2009-07-14 03:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll
MOD - [2009-07-14 03:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll
MOD - [2009-07-14 03:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll
MOD - [2009-07-14 03:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll
MOD - [2009-07-14 03:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll
MOD - [2009-07-14 03:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll
MOD - [2009-07-14 03:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll
MOD - [2009-07-14 03:16:12 | 001,412,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll
MOD - [2009-07-14 03:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll
MOD - [2009-07-14 03:16:12 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll
MOD - [2009-07-14 03:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll
MOD - [2009-07-14 03:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll
MOD - [2009-07-14 03:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll
MOD - [2009-07-14 03:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll
MOD - [2009-07-14 03:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll
MOD - [2009-07-14 03:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll
MOD - [2009-07-14 03:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll
MOD - [2009-07-14 03:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll
MOD - [2009-07-14 03:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll
MOD - [2009-07-14 03:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll
MOD - [2009-07-14 03:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll
MOD - [2009-07-14 03:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll
MOD - [2009-07-14 03:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll
MOD - [2009-07-14 03:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll
MOD - [2009-07-14 03:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll
MOD - [2009-07-14 03:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll
MOD - [2009-07-14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
MOD - [2009-07-14 03:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv
MOD - [2009-07-14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll
MOD - [2009-07-14 03:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll
MOD - [2009-07-14 03:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll
MOD - [2009-07-14 03:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll
MOD - [2009-07-14 03:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll
MOD - [2009-07-14 03:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll
MOD - [2009-07-14 03:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll
MOD - [2009-07-14 03:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll
MOD - [2009-07-14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll
MOD - [2007-09-13 22:26:52 | 000,036,864 | ---- | M] () -- C:\MSI\Advanced Wheel Mouse\wh_hook.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\vmnat.exe -- (VMware NAT Service)
SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\vmnetdhcp.exe -- (VMnetDHCP)
SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrB.exe -- (PnkBstrB)
SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrA.exe -- (PnkBstrA)
SRV:[b]64bit:[/b] - [2009-10-20 14:17:21 | 001,030,600 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:54 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\StorSvc.dll -- (StorSvc)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2010-08-06 09:11:58 | 000,248,936 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010-05-14 14:11:08 | 000,066,048 | ---- | M] (PostgreSQL Global Development Group) [Auto | Running] -- C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe -- (postgresql-8.4)
SRV - [2010-03-04 23:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe -- (NMSAccess)
SRV - [2010-01-22 21:57:08 | 000,395,824 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service)
SRV - [2010-01-22 21:56:44 | 000,334,384 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP)
SRV - [2010-01-22 21:56:28 | 000,113,200 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe -- (VMAuthdService)
SRV - [2010-01-22 21:00:48 | 000,563,760 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService)
SRV - [2009-11-18 19:52:31 | 000,818,432 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe -- (PCToolsFirewallPlus)
SRV - [2009-11-13 19:29:14 | 000,107,832 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB)
SRV - [2009-11-13 19:28:53 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2009-10-12 14:32:24 | 000,191,024 | ---- | M] (VMware, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe -- (ufad-ws60)
SRV - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2009-07-09 15:54:42 | 000,160,768 | ---- | M] (Micro-Star International Co., Ltd.) [Auto | Running] -- C:\Program Files (x86)\System Control Manager\MSIService.exe -- (Micro Star SCM)
SRV - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2009-03-17 14:37:10 | 000,189,808 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2009-02-11 17:38:40 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe -- (IAANTMON) Intel(R)
SRV - [2007-05-31 17:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007-05-31 17:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2010-06-22 00:07:36 | 000,131,688 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:[b]64bit:[/b] - [2010-02-12 20:30:26 | 000,145,360 | ---- | M] (Sun Microsystems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:[b]64bit:[/b] - [2010-02-05 09:17:56 | 000,306,648 | ---- | M] (PC Tools) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\pctgntdi64.sys -- (pctgntdi)
DRV:[b]64bit:[/b] - [2010-01-22 21:58:22 | 000,068,656 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmx86.sys -- (vmx86)
DRV:[b]64bit:[/b] - [2010-01-22 21:58:20 | 000,029,744 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VMkbd.sys -- (vmkbd)
DRV:[b]64bit:[/b] - [2010-01-22 21:58:16 | 000,080,944 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmci.sys -- (vmci)
DRV:[b]64bit:[/b] - [2010-01-22 21:58:16 | 000,030,256 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetuserif.sys -- (VMnetuserif)
DRV:[b]64bit:[/b] - [2010-01-22 21:00:44 | 000,038,960 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\hcmon.sys -- (hcmon)
DRV:[b]64bit:[/b] - [2010-01-22 17:13:00 | 000,037,680 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmusb.sys -- (vmusb)
DRV:[b]64bit:[/b] - [2010-01-22 17:12:58 | 000,045,104 | R--- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetbridge.sys -- (VMnetBridge)
DRV:[b]64bit:[/b] - [2010-01-22 17:12:58 | 000,020,016 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vmnetadapter.sys -- (VMnetAdapter)
DRV:[b]64bit:[/b] - [2010-01-19 10:45:52 | 000,164,496 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pctplfw64.sys -- (pctplfw)
DRV:[b]64bit:[/b] - [2010-01-19 10:45:52 | 000,081,584 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pctNdis64.sys -- (pctNDIS)
DRV:[b]64bit:[/b] - [2010-01-19 10:45:51 | 000,095,504 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pctNdis-PacketFilter64.sys -- (PCTFW-PacketFilter)
DRV:[b]64bit:[/b] - [2010-01-19 10:45:51 | 000,042,456 | ---- | M] (PC Tools) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pctNdis-DNS64.sys -- (PCTFW-DNS)
DRV:[b]64bit:[/b] - [2009-12-07 18:11:49 | 000,074,880 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:[b]64bit:[/b] - [2009-10-19 15:49:50 | 000,871,408 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2009-09-23 03:46:18 | 000,066,304 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr)
DRV:[b]64bit:[/b] - [2009-09-23 03:46:17 | 000,359,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm)
DRV:[b]64bit:[/b] - [2009-09-23 03:32:39 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb)
DRV:[b]64bit:[/b] - [2009-09-23 03:32:35 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcuxd.sys -- (vpcuxd)
DRV:[b]64bit:[/b] - [2009-09-23 03:32:33 | 000,187,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-07-14 02:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM)
DRV:[b]64bit:[/b] - [2009-07-14 01:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap)
DRV:[b]64bit:[/b] - [2009-07-14 01:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID)
DRV:[b]64bit:[/b] - [2009-07-14 01:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2009-07-14 01:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC)
DRV:[b]64bit:[/b] - [2009-06-29 10:17:00 | 000,070,656 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\enecir.sys -- (enecir)
DRV:[b]64bit:[/b] - [2009-06-10 23:01:14 | 001,227,776 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SmSerl64.sys -- (smserial)
DRV:[b]64bit:[/b] - [2009-06-10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:[b]64bit:[/b] - [2009-06-10 22:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) Sterownik karty Intel(R)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-05-22 22:52:30 | 000,215,040 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2009-03-23 17:28:30 | 000,056,320 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TosRfSnd.sys -- (TosRfSnd)
DRV:[b]64bit:[/b] - [2009-03-19 14:07:46 | 000,052,736 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfusb.sys -- (Tosrfusb)
DRV:[b]64bit:[/b] - [2009-03-12 11:33:06 | 000,020,992 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfnds.sys -- (tosrfnds)
DRV:[b]64bit:[/b] - [2009-03-05 11:03:34 | 000,088,576 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Tosrfhid.sys -- (Tosrfhid)
DRV:[b]64bit:[/b] - [2009-03-03 15:34:54 | 000,045,056 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV:[b]64bit:[/b] - [2009-02-19 16:20:18 | 000,076,160 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tosrfcom.sys -- (Tosrfcom)
DRV:[b]64bit:[/b] - [2009-02-11 17:26:18 | 000,407,576 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2008-10-06 17:56:58 | 000,173,696 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfbd.sys -- (tosrfbd)
DRV:[b]64bit:[/b] - [2008-09-17 15:14:00 | 000,012,744 | R--- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Entech64.sys -- (ENTECH64)
DRV:[b]64bit:[/b] - [2008-08-07 17:01:36 | 000,143,360 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
DRV:[b]64bit:[/b] - [2008-03-25 13:54:26 | 000,049,152 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosporte.sys -- (tosporte)
DRV:[b]64bit:[/b] - [2007-01-26 10:04:36 | 000,009,600 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\whfltr2k.sys -- (whfltr2k)
DRV - [2009-10-26 16:05:45 | 000,014,544 | ---- | M] (OpenLibSys.org) [Kernel | Auto | Running] -- C:\Users\Darek\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries21.gadget\WinRing0x64.sys -- (WinRing0_1_2_0)
DRV - [2009-10-17 14:42:27 | 000,021,200 | ---- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TVICHW64.SYS -- (TVICHW64)
DRV - [2009-10-12 14:31:04 | 000,032,816 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys -- (vstor2-ws60)
DRV - [2006-07-24 16:05:00 | 000,005,632 | ---- | M] () [File_System | System | Stopped] -- C:\Windows\SysWow64\drivers\StarOpen.sys -- (StarOpen)
DRV - [2004-06-22 15:44:50 | 000,005,632 | ---- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\Entech64.sys -- (ENTECH64)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1264084378-3322303571-3196748977-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2010-04-17 13:37:55 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins


O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll (GG Network S.A.)
O4:[b]64bit:[/b] - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.DLL (NVIDIA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [00PCTFW] C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe (PC Tools)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [MGSysCtrl] C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe (Micro-Star International Co., Ltd.)
O4 - HKLM..\Run: [WheelMouse] C:\MSI\Advanced Wheel Mouse\wh_exec.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1264084378-3322303571-3196748977-1012..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - HKU\S-1-5-21-1264084378-3322303571-3196748977-1012..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-1264084378-3322303571-3196748977-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe (PokerStars)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-1264084378-3322303571-3196748977-1000\..Trusted Domains: mks.com.pl ([www] https in Zaufane witryny)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab (Reg Error: Key error.)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} http://service.futuremark.com/virtualmark/tc/FMSI.cab (Reg Error: Key error.)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab (CKAVWebScan Object)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\http\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\https\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\ipp - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-10-21 11:42:07 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2010-08-21 12:53:05 | 000,040,092 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk - C:\PROGRA~2\Toshiba\BLUETO~1\TosBtMng.exe - (TOSHIBA CORPORATION.)
MsConfig:64bit - StartUpFolder: C:^Users^Darek^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^continuator_automate.exe.lnk - C:\PROGRA~2\FOOBAR~1\COMPON~1\CONTIN~1.EXE - File not found
MsConfig:64bit - StartUpReg: [b]Adobe ARM[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
MsConfig:64bit - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
MsConfig:64bit - StartUpReg: [b]Bonus.SSR.FR10[/b] - hkey= - key= - C:\Program Files (x86)\ABBYY FineReader 10\Bonus.ScreenshotReader.exe File not found
MsConfig:64bit - StartUpReg: [b]DAEMON Tools Lite[/b] - hkey= - key= - C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
MsConfig:64bit - StartUpReg: [b]ElcomSoft DPR Server[/b] - hkey= - key= - C:\Program Files (x86)\ElcomSoft\Distributed Password Recovery\esdprs.exe File not found
MsConfig:64bit - StartUpReg: [b]EPSON Stylus DX3800 Series[/b] - hkey= - key= - C:\Windows\SysNative\spool\DRIVERS\x64\3\E_FATIACE.EXE (SEIKO EPSON CORPORATION)
MsConfig:64bit - StartUpReg: [b]FlashPlayerUpdate[/b] - hkey= - key= - C:\Program Files (x86)\Opera\program\plugins\NPSWF32_FlashUtil.exe (Adobe Systems, Inc.)
MsConfig:64bit - StartUpReg: [b]Gadu-Gadu 10[/b] - hkey= - key= - C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.)
MsConfig:64bit - StartUpReg: [b]IPLA![/b] - hkey= - key= - C:\Program Files (x86)\ipla\ipla.exe File not found
MsConfig:64bit - StartUpReg: [b]SearchSettings[/b] - hkey= - key= - C:\Program Files (x86)\pdfforge Toolbar\SearchSettings.exe File not found
MsConfig:64bit - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
MsConfig:64bit - StartUpReg: [b]SunJavaUpdateSched[/b] - hkey= - key= - C:\Program Files (x86)\Java\jre6\bin\jusched.exe File not found
MsConfig:64bit - StartUpReg: [b]TkBellExe[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
MsConfig:64bit - StartUpReg: [b]UpdatePDRShortCut[/b] - hkey= - key= - C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe File not found
MsConfig:64bit - StartUpReg: [b]VMware hqtray[/b] - hkey= - key= - C:\Program Files (x86)\VMware\VMware Player\hqtray.exe (VMware, Inc.)
MsConfig:64bit - StartUpReg: [b]Windows Mobile Device Center[/b] - hkey= - key= - C:\Windows\WindowsMobile\wmdc.exe (Microsoft Corporation)
MsConfig:64bit - State: "startup" - Reg Error: Key error.

SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

[color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color]

[2010-08-30 21:55:49 | 000,000,000 | ---D | C] -- C:\Users\Darek\DoctorWeb
[2010-08-30 21:51:56 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Roaming\Malwarebytes
[2010-08-30 21:51:47 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010-08-30 21:51:46 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010-08-30 21:51:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010-08-30 21:51:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010-08-30 21:32:42 | 000,000,000 | ---D | C] -- C:\_OTL
[2010-08-30 21:28:36 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe
[2010-08-30 21:13:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro
[2010-08-30 21:12:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2010-08-30 21:06:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
[2010-08-30 21:06:35 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Kaspersky Lab
[2010-08-30 16:34:21 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2010-08-30 16:33:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2010-08-30 16:31:03 | 000,065,128 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2010-08-30 16:31:03 | 000,056,936 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2010-08-30 16:08:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Driver Cleaner
[2010-08-30 11:40:32 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2010-08-27 09:14:30 | 000,000,000 | ---D | C] -- C:\HMArchive
[2010-08-27 09:14:29 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Local\In The Money
[2010-08-27 09:14:05 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Roaming\HEM Data
[2010-08-27 09:10:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RVG Software
[2010-08-27 09:10:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PSQLINSTALL
[2010-08-25 13:03:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Acronis
[2010-08-25 13:03:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Acronis
[2010-08-25 10:14:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2010-08-25 10:14:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2010-08-21 17:36:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Vroom Vroom !!!
[2010-08-17 17:40:35 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Local\PokerStars
[2010-08-17 17:39:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PokerStars
[2010-07-25 18:14:59 | 000,000,000 | ---D | C] -- C:\lezac
[2010-07-25 11:26:59 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Local\Apps
[2010-07-20 22:40:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AutoMapa EU
[2010-07-14 09:15:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Avanquest Bluetooth SDK
[2010-07-14 09:10:39 | 000,000,000 | ---D | C] -- C:\ProgramData\BVRP Software
[2010-07-13 10:51:11 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Roaming\Samsung
[2010-07-13 10:51:11 | 000,000,000 | ---D | C] -- C:\Users\Darek\Documents\My Art
[2010-07-13 10:41:19 | 000,000,000 | -HSD | C] -- C:\Windows\SysWow64\Samsung_USB_Drivers
[2010-07-08 08:52:33 | 000,000,000 | ---D | C] -- C:\Fraps
[2010-07-07 17:09:51 | 000,000,000 | ---D | C] -- C:\Windows\WindowsMobile
[2010-07-07 13:06:14 | 000,000,000 | ---D | C] -- C:\Users\Darek\Desktop\Pierwsza_komunia_swieta_od_corki_Anety_Wuppertal_maj_2010r
[4 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[2 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 60 Days ==========[/color]

[2010-08-31 11:31:21 | 002,883,584 | -HS- | M] () -- C:\Users\Darek\NTUSER.DAT
[2010-08-31 11:03:27 | 000,013,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010-08-31 11:03:27 | 000,013,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010-08-31 10:58:28 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempDc4868.html
[2010-08-31 10:58:28 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempFg4868.html
[2010-08-31 10:55:38 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010-08-31 10:55:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010-08-31 10:55:25 | 3220,561,920 | -HS- | M] () -- C:\hiberfil.sys
[2010-08-31 10:50:11 | 001,629,679 | -H-- | M] () -- C:\Users\Darek\AppData\Local\IconCache.db
[2010-08-31 10:02:59 | 048,855,664 | ---- | M] () -- C:\Users\Darek\Desktop\2rhk4xk7.exe
[2010-08-31 08:25:19 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempUK4680.html
[2010-08-30 21:54:34 | 048,892,120 | ---- | M] () -- C:\Users\Darek\Desktop\launch.exe
[2010-08-30 21:51:50 | 000,001,013 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010-08-30 21:29:33 | 000,293,376 | ---- | M] () -- C:\Users\Darek\Desktop\iu90d21r.exe
[2010-08-30 21:28:37 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe
[2010-08-30 20:37:09 | 001,531,530 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010-08-30 20:37:09 | 000,692,058 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2010-08-30 20:37:09 | 000,610,412 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010-08-30 20:37:09 | 000,133,208 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2010-08-30 20:37:09 | 000,105,316 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010-08-30 20:10:59 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemptX3480.html
[2010-08-30 20:10:59 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempAE3480.html
[2010-08-30 16:34:49 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempSK3740.html
[2010-08-30 16:34:49 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temprj3740.html
[2010-08-30 11:36:05 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempLN3340.html
[2010-08-29 18:02:26 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXQ4136.html
[2010-08-29 18:02:26 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBj4136.html
[2010-08-29 15:48:26 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempwk4792.html
[2010-08-29 12:00:50 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempzR4944.html
[2010-08-29 12:00:50 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempol4944.html
[2010-08-28 22:11:57 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempLG4972.html
[2010-08-28 22:11:57 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXa4972.html
[2010-08-28 18:24:55 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCp3256.html
[2010-08-28 18:24:55 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBw3256.html
[2010-08-28 14:12:59 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempkV3200.html
[2010-08-28 14:12:59 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempvC3200.html
[2010-08-28 10:04:50 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemphT3340.html
[2010-08-28 10:04:50 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCl3340.html
[2010-08-27 23:49:58 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempsMh896.html
[2010-08-27 23:49:58 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempKwG896.html
[2010-08-27 16:29:35 | 000,009,672 | ---- | M] () -- C:\bootsqm.dat
[2010-08-27 12:39:13 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempjt3028.html
[2010-08-27 12:39:13 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempRz3028.html
[2010-08-27 09:19:12 | 000,000,000 | ---- | M] () -- C:\Windows\HMHud.INI
[2010-08-27 09:10:52 | 000,001,237 | ---- | M] () -- C:\Users\Public\Desktop\HoldemManager.lnk
[2010-08-26 22:14:44 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemprA5060.html
[2010-08-26 22:14:44 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempof5060.html
[2010-08-26 11:26:17 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temphp4780.html
[2010-08-26 11:26:17 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempiW4780.html
[2010-08-25 19:11:12 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempvCf248.html
[2010-08-25 19:11:12 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXBL248.html
[2010-08-25 12:08:30 | 000,000,690 | ---- | M] () -- C:\Windows\SysWow64\WindowsPowerShell.lnk
[2010-08-25 12:08:30 | 000,000,676 | ---- | M] () -- C:\Windows\SysWow64\New Folder.lnk
[2010-08-25 12:08:30 | 000,000,674 | ---- | M] () -- C:\Windows\SysWow64\XPSViewer.lnk
[2010-08-25 12:08:30 | 000,000,674 | ---- | M] () -- C:\Windows\SysWow64\Passwords.lnk
[2010-08-25 12:08:30 | 000,000,674 | ---- | M] () -- C:\Windows\SysWow64\Documents.lnk
[2010-08-25 12:08:30 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\Pictures.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\zh-TW.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\zh-HK.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\zh-CN.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\xlive.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\winrm.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Video.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\uk-UA.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\tr-TR.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Music.lnk
[2010-08-25 12:08:30 | 000,000,664 | ---- | M] () -- C:\Windows\SysWow64\wbem.lnk
[2010-08-25 12:08:30 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\wdi.lnk
[2010-08-25 12:08:30 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\WCN.lnk
[2010-08-25 12:08:30 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\Wat.lnk
[2010-08-25 12:08:29 | 000,000,694 | ---- | M] () -- C:\Windows\SysWow64\Samsung_USB_Drivers.lnk
[2010-08-25 12:08:29 | 000,000,676 | ---- | M] () -- C:\Windows\SysWow64\sr-Latn-CS.lnk
[2010-08-25 12:08:29 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\Recovery.lnk
[2010-08-25 12:08:29 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\sysprep.lnk
[2010-08-25 12:08:29 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\restore.lnk
[2010-08-25 12:08:29 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\Speech.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\th-TH.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Tasks.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\sv-SE.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\sppui.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\sl-SI.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\slmgr.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\sk-SK.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Setup.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ru-RU.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\RTCOM.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ro-RO.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\pt-PT.lnk
[2010-08-25 12:08:29 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\spp.lnk
[2010-08-25 12:08:29 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\ras.lnk
[2010-08-25 12:08:28 | 000,000,700 | ---- | M] () -- C:\Windows\SysWow64\Printing_Admin_Scripts.lnk
[2010-08-25 12:08:28 | 000,000,682 | ---- | M] () -- C:\Windows\SysWow64\manifeststore.lnk
[2010-08-25 12:08:28 | 000,000,678 | ---- | M] () -- C:\Windows\SysWow64\NetworkList.lnk
[2010-08-25 12:08:28 | 000,000,674 | ---- | M] () -- C:\Windows\SysWow64\migration.lnk
[2010-08-25 12:08:28 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\Macromed.lnk
[2010-08-25 12:08:28 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\LogFiles.lnk
[2010-08-25 12:08:28 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\migwiz.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\pt-BR.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\pl-PL.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\nl-NL.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\nb-NO.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Msdtc.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\lv-LV.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\lt-LT.lnk
[2010-08-25 12:08:28 | 000,000,664 | ---- | M] () -- C:\Windows\SysWow64\oobe.lnk
[2010-08-25 12:08:28 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\NDF.lnk
[2010-08-25 12:08:28 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\MUI.lnk
[2010-08-25 12:08:28 | 000,000,660 | ---- | M] () -- C:\Windows\SysWow64\pl.lnk
[2010-08-25 12:08:27 | 000,000,688 | ---- | M] () -- C:\Windows\SysWow64\GroupPolicyUsers.lnk
[2010-08-25 12:08:27 | 000,000,682 | ---- | M] () -- C:\Windows\SysWow64\InstallShield.lnk
[2010-08-25 12:08:27 | 000,000,678 | ---- | M] () -- C:\Windows\SysWow64\GroupPolicy.lnk
[2010-08-25 12:08:27 | 000,000,676 | ---- | M] () -- C:\Windows\SysWow64\Futuremark.lnk
[2010-08-25 12:08:27 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\inetsrv.lnk
[2010-08-25 12:08:27 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\icsxml.lnk
[2010-08-25 12:08:27 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\FxsTmp.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ko-KR.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ja-JP.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\it-IT.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\hu-HU.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\hr-HR.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\he-IL.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\fr-FR.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\fi-FI.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\et-EE.lnk
[2010-08-25 12:08:27 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\IME.lnk
[2010-08-25 12:08:26 | 000,000,678 | ---- | M] () -- C:\Windows\SysWow64\DriverStore.lnk
[2010-08-25 12:08:26 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\eps_icon.avi.lnk
[2010-08-25 12:08:26 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\catroot2.lnk
[2010-08-25 12:08:26 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\drivers.lnk
[2010-08-25 12:08:26 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\config.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\es-ES.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\en-US.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\el-GR.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\de-DE.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\da-DK.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\cs-CZ.lnk
[2010-08-25 12:08:26 | 000,000,664 | ---- | M] () -- C:\Windows\SysWow64\Dism.lnk
[2010-08-25 12:08:26 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\com.lnk
[2010-08-25 12:08:26 | 000,000,660 | ---- | M] () -- C:\Windows\SysWow64\en.lnk
[2010-08-25 12:08:25 | 000,000,692 | ---- | M] () -- C:\Windows\SysWow64\AdvancedInstallers.lnk
[2010-08-25 12:08:25 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\catroot.lnk
[2010-08-25 12:08:25 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\bg-BG.lnk
[2010-08-25 12:08:25 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ar-SA.lnk
[2010-08-25 12:08:25 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\AGEIA.lnk
[2010-08-25 12:08:25 | 000,000,664 | ---- | M] () -- C:\Windows\SysWow64\0409.lnk
[2010-08-25 12:08:25 | 000,000,660 | ---- | M] () -- C:\Windows\SysWow64\...lnk
[2010-08-25 12:08:25 | 000,000,658 | ---- | M] () -- C:\Windows\SysWow64\..lnk
[2010-08-25 12:08:23 | 000,167,936 | RHS- | M] () -- C:\Windows\SysWow64\mqpoy.exe
[2010-08-25 12:08:21 | 000,000,134 | RHS- | M] () -- C:\Windows\SysWow64\autorun.inf
[2010-08-25 09:21:35 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempjM4976.html
[2010-08-24 16:37:03 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempgI4352.html
[2010-08-24 16:37:03 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempzG4352.html
[2010-08-24 16:28:12 | 000,167,936 | RHS- | M] () -- C:\Windows\SysWow64\mqpoyx.exe
[2010-08-24 16:28:12 | 000,167,936 | RHS- | M] () -- C:\Users\Darek\mqpoy.exe
[2010-08-24 09:31:55 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempbO2380.html
[2010-08-23 21:46:54 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempGq3896.html
[2010-08-23 21:46:54 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempTO3896.html
[2010-08-19 07:47:55 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempHU4620.html
[2010-08-18 17:43:50 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempHR4888.html
[2010-08-18 10:43:56 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXY2948.html
[2010-08-17 19:29:26 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempzK2284.html
[2010-08-17 19:29:26 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temptz2284.html
[2010-08-17 18:16:50 | 000,116,464 | ---- | M] () -- C:\Users\Darek\AppData\Local\GDIPFONTCACHEV1.DAT
[2010-08-17 17:39:47 | 000,001,065 | ---- | M] () -- C:\Users\Public\Desktop\PokerStars.lnk
[2010-08-17 10:04:30 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempun4388.html
[2010-08-16 17:56:55 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempPb3716.html
[2010-08-16 17:56:55 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempwn3716.html
[2010-08-16 11:22:33 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemplU1412.html
[2010-08-16 11:22:33 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXx1412.html
[2010-08-16 09:21:30 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCE3788.html
[2010-08-15 19:00:26 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempMK2040.html
[2010-08-15 19:00:26 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempsv2040.html
[2010-08-15 13:56:10 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempyX5016.html
[2010-08-15 11:55:14 | 000,000,727 | ---- | M] () -- C:\Users\Darek\Desktop\USdx — skrót.lnk
[2010-08-15 11:35:39 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempmi3752.html
[2010-08-14 22:25:48 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBt3840.html
[2010-08-14 22:25:48 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempRV3840.html
[2010-08-08 21:31:20 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBtE460.html
[2010-08-08 21:31:20 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempalg460.html
[2010-08-08 16:10:19 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempIG4500.html
[2010-08-08 16:10:19 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempxh4500.html
[2010-08-08 13:37:49 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempAb4432.html
[2010-08-07 21:35:18 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temppb4264.html
[2010-08-07 21:35:18 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemphW4264.html
[2010-08-07 12:39:11 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempapL252.html
[2010-08-07 12:39:11 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempkFN252.html
[2010-08-06 19:23:52 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemprD4228.html
[2010-08-06 12:51:17 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempKc4680.html
[2010-08-06 12:51:17 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempHl4680.html
[2010-08-06 09:58:22 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempqT3164.html
[2010-08-06 09:58:22 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempQS3164.html
[2010-08-05 20:32:35 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempZm3544.html
[2010-08-05 20:32:35 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempJs3544.html
[2010-08-05 15:27:00 | 000,012,264 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb
[2010-08-05 13:27:00 | 000,065,128 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2010-08-05 13:27:00 | 000,056,936 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2010-08-05 09:34:32 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempfa4716.html
[2010-08-05 09:31:32 | 000,444,944 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010-08-04 21:54:23 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempUk4068.html
[2010-08-04 21:54:23 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempSC4068.html
[2010-08-04 19:32:59 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempEPh664.html
[2010-08-04 19:32:59 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempsWz664.html
[2010-08-04 18:32:30 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempvP5032.html
[2010-08-04 10:08:38 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempZX4880.html
[2010-08-03 21:25:04 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempxc5016.html
[2010-07-23 14:48:07 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010-07-20 22:40:55 | 000,000,040 | ---- | M] () -- C:\Windows\SysWow64\Profile.info
[2010-07-14 09:42:03 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempZM4820.html
[2010-07-14 09:42:03 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempga4820.html
[2010-07-13 10:44:40 | 000,000,000 | ---- | M] () -- C:\ProgramData\LauncherAccess.dt
[2010-07-09 13:48:19 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempeV2876.html
[2010-07-09 11:50:35 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempkZ3940.html
[2010-07-09 11:50:35 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temprj3940.html
[2010-07-08 21:17:10 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemptUd740.html
[2010-07-08 21:17:10 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempssW740.html
[2010-07-08 17:39:08 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempdm4376.html
[2010-07-08 17:00:44 | 000,037,170 | ---- | M] () -- C:\Users\Darek\Documents\sysop.odt
[2010-07-08 11:40:11 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempMs4084.html
[2010-07-08 11:40:11 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temptr4084.html
[2010-07-08 08:52:33 | 000,000,562 | ---- | M] () -- C:\Users\Darek\Desktop\Fraps.lnk
[2010-07-07 17:10:14 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdRapi2_01_00_00.Wdf
[2010-07-07 16:52:37 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempEm4536.html
[2010-07-07 13:46:24 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempEgs972.html
[2010-07-07 13:46:24 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemptSM972.html
[2010-07-07 11:21:57 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temphz3012.html
[2010-07-07 11:21:57 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempIM3012.html
[2010-07-06 17:49:31 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempzu3788.html
[2010-07-06 14:01:24 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempKg3716.html
[2010-07-06 14:01:24 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempck3716.html
[2010-07-06 12:42:10 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempgF3276.html
[2010-07-06 12:42:10 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCm3276.html
[2010-07-06 08:57:46 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempvUE148.html
[2010-07-05 19:51:27 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemplP4524.html
[2010-07-05 19:51:27 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCi4524.html
[2010-07-05 14:20:19 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempGC4216.html
[2010-07-05 14:20:19 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempno4216.html
[2010-07-05 09:19:46 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempzm4524.html
[2010-07-04 21:58:28 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempVi5096.html
[2010-07-04 21:58:28 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempeQ5096.html
[2010-07-04 12:56:36 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempVw4332.html
[2010-07-04 12:56:36 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempku4332.html
[2010-07-04 09:44:25 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBeX816.html
[2010-07-04 09:44:25 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempgBf816.html
[2010-07-03 19:44:13 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempEo3080.html
[2010-07-03 19:44:13 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempSH3080.html
[2010-07-03 08:51:45 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempiT4044.html
[2010-07-03 08:51:45 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempLI4044.html
[2010-07-02 18:16:35 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempSu3252.html
[4 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[2 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010-08-31 10:58:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDc4868.html
[2010-08-31 10:58:28 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFg4868.html
[2010-08-31 09:59:30 | 048,855,664 | ---- | C] () -- C:\Users\Darek\Desktop\2rhk4xk7.exe
[2010-08-31 08:24:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUK4680.html
[2010-08-30 21:51:50 | 000,001,013 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010-08-30 21:50:24 | 048,892,120 | ---- | C] () -- C:\Users\Darek\Desktop\launch.exe
[2010-08-30 21:29:33 | 000,293,376 | ---- | C] () -- C:\Users\Darek\Desktop\iu90d21r.exe
[2010-08-30 17:13:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptX3480.html
[2010-08-30 17:13:25 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAE3480.html
[2010-08-30 16:19:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSK3740.html
[2010-08-30 16:19:46 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprj3740.html
[2010-08-30 08:38:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLN3340.html
[2010-08-29 16:49:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXQ4136.html
[2010-08-29 16:49:43 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBj4136.html
[2010-08-29 15:38:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempwk4792.html
[2010-08-29 11:26:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzR4944.html
[2010-08-29 11:26:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempol4944.html
[2010-08-28 21:05:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLG4972.html
[2010-08-28 21:05:29 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXa4972.html
[2010-08-28 16:16:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCp3256.html
[2010-08-28 16:16:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBw3256.html
[2010-08-28 10:58:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkV3200.html
[2010-08-28 10:58:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvC3200.html
[2010-08-28 09:21:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemphT3340.html
[2010-08-28 09:21:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCl3340.html
[2010-08-27 18:05:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsMh896.html
[2010-08-27 18:05:49 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKwG896.html
[2010-08-27 16:29:35 | 000,009,672 | ---- | C] () -- C:\bootsqm.dat
[2010-08-27 09:19:12 | 000,000,000 | ---- | C] () -- C:\Windows\HMHud.INI
[2010-08-27 09:12:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjt3028.html
[2010-08-27 09:12:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRz3028.html
[2010-08-27 09:10:52 | 000,001,237 | ---- | C] () -- C:\Users\Public\Desktop\HoldemManager.lnk
[2010-08-26 18:21:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemprA5060.html
[2010-08-26 18:21:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempof5060.html
[2010-08-26 09:24:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphp4780.html
[2010-08-26 09:24:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiW4780.html
[2010-08-25 17:20:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvCf248.html
[2010-08-25 17:20:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXBL248.html
[2010-08-25 12:08:30 | 000,000,690 | ---- | C] () -- C:\Windows\SysWow64\WindowsPowerShell.lnk
[2010-08-25 12:08:30 | 000,000,676 | ---- | C] () -- C:\Windows\SysWow64\New Folder.lnk
[2010-08-25 12:08:30 | 000,000,674 | ---- | C] () -- C:\Windows\SysWow64\XPSViewer.lnk
[2010-08-25 12:08:30 | 000,000,674 | ---- | C] () -- C:\Windows\SysWow64\Passwords.lnk
[2010-08-25 12:08:30 | 000,000,674 | ---- | C] () -- C:\Windows\SysWow64\Documents.lnk
[2010-08-25 12:08:30 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\Pictures.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\zh-TW.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\zh-HK.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\zh-CN.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\xlive.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\winrm.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Video.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\uk-UA.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\tr-TR.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Music.lnk
[2010-08-25 12:08:30 | 000,000,664 | ---- | C] () -- C:\Windows\SysWow64\wbem.lnk
[2010-08-25 12:08:30 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\wdi.lnk
[2010-08-25 12:08:30 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\WCN.lnk
[2010-08-25 12:08:30 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\Wat.lnk
[2010-08-25 12:08:29 | 000,000,694 | ---- | C] () -- C:\Windows\SysWow64\Samsung_USB_Drivers.lnk
[2010-08-25 12:08:29 | 000,000,676 | ---- | C] () -- C:\Windows\SysWow64\sr-Latn-CS.lnk
[2010-08-25 12:08:29 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\Recovery.lnk
[2010-08-25 12:08:29 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\sysprep.lnk
[2010-08-25 12:08:29 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\restore.lnk
[2010-08-25 12:08:29 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\Speech.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\th-TH.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Tasks.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\sv-SE.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\sppui.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\sl-SI.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\slmgr.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\sk-SK.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Setup.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ru-RU.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\RTCOM.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ro-RO.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\pt-PT.lnk
[2010-08-25 12:08:29 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\spp.lnk
[2010-08-25 12:08:29 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\ras.lnk
[2010-08-25 12:08:28 | 000,000,700 | ---- | C] () -- C:\Windows\SysWow64\Printing_Admin_Scripts.lnk
[2010-08-25 12:08:28 | 000,000,682 | ---- | C] () -- C:\Windows\SysWow64\manifeststore.lnk
[2010-08-25 12:08:28 | 000,000,678 | ---- | C] () -- C:\Windows\SysWow64\NetworkList.lnk
[2010-08-25 12:08:28 | 000,000,674 | ---- | C] () -- C:\Windows\SysWow64\migration.lnk
[2010-08-25 12:08:28 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\Macromed.lnk
[2010-08-25 12:08:28 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\LogFiles.lnk
[2010-08-25 12:08:28 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\migwiz.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\pt-BR.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\pl-PL.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\nl-NL.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\nb-NO.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Msdtc.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\lv-LV.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\lt-LT.lnk
[2010-08-25 12:08:28 | 000,000,664 | ---- | C] () -- C:\Windows\SysWow64\oobe.lnk
[2010-08-25 12:08:28 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\NDF.lnk
[2010-08-25 12:08:28 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\MUI.lnk
[2010-08-25 12:08:28 | 000,000,660 | ---- | C] () -- C:\Windows\SysWow64\pl.lnk
[2010-08-25 12:08:27 | 000,000,688 | ---- | C] () -- C:\Windows\SysWow64\GroupPolicyUsers.lnk
[2010-08-25 12:08:27 | 000,000,682 | ---- | C] () -- C:\Windows\SysWow64\InstallShield.lnk
[2010-08-25 12:08:27 | 000,000,678 | ---- | C] () -- C:\Windows\SysWow64\GroupPolicy.lnk
[2010-08-25 12:08:27 | 000,000,676 | ---- | C] () -- C:\Windows\SysWow64\Futuremark.lnk
[2010-08-25 12:08:27 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\inetsrv.lnk
[2010-08-25 12:08:27 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\icsxml.lnk
[2010-08-25 12:08:27 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\FxsTmp.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ko-KR.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ja-JP.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\it-IT.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\hu-HU.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\hr-HR.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\he-IL.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\fr-FR.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\fi-FI.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\et-EE.lnk
[2010-08-25 12:08:27 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\IME.lnk
[2010-08-25 12:08:26 | 000,000,678 | ---- | C] () -- C:\Windows\SysWow64\DriverStore.lnk
[2010-08-25 12:08:26 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\eps_icon.avi.lnk
[2010-08-25 12:08:26 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\catroot2.lnk
[2010-08-25 12:08:26 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\drivers.lnk
[2010-08-25 12:08:26 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\config.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\es-ES.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\en-US.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\el-GR.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\de-DE.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\da-DK.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\cs-CZ.lnk
[2010-08-25 12:08:26 | 000,000,664 | ---- | C] () -- C:\Windows\SysWow64\Dism.lnk
[2010-08-25 12:08:26 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\com.lnk
[2010-08-25 12:08:26 | 000,000,660 | ---- | C] () -- C:\Windows\SysWow64\en.lnk
[2010-08-25 12:08:25 | 000,000,692 | ---- | C] () -- C:\Windows\SysWow64\AdvancedInstallers.lnk
[2010-08-25 12:08:25 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\catroot.lnk
[2010-08-25 12:08:25 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\bg-BG.lnk
[2010-08-25 12:08:25 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ar-SA.lnk
[2010-08-25 12:08:25 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\AGEIA.lnk
[2010-08-25 12:08:25 | 000,000,664 | ---- | C] () -- C:\Windows\SysWow64\0409.lnk
[2010-08-25 12:08:25 | 000,000,660 | ---- | C] () -- C:\Windows\SysWow64\...lnk
[2010-08-25 12:08:25 | 000,000,658 | ---- | C] () -- C:\Windows\SysWow64\..lnk
[2010-08-25 12:08:23 | 000,167,936 | RHS- | C] () -- C:\Windows\SysWow64\mqpoy.exe
[2010-08-25 12:08:21 | 000,000,134 | RHS- | C] () -- C:\Windows\SysWow64\autorun.inf
[2010-08-25 09:11:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjM4976.html
[2010-08-24 16:28:12 | 000,167,936 | RHS- | C] () -- C:\Windows\SysWow64\mqpoyx.exe
[2010-08-24 16:28:12 | 000,167,936 | RHS- | C] () -- C:\Users\Darek\mqpoy.exe
[2010-08-24 16:00:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgI4352.html
[2010-08-24 16:00:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzG4352.html
[2010-08-24 09:25:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbO2380.html
[2010-08-23 18:37:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGq3896.html
[2010-08-23 18:37:03 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTO3896.html
[2010-08-19 07:47:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHU4620.html
[2010-08-18 16:50:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHR4888.html
[2010-08-18 10:43:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXY2948.html
[2010-08-17 17:39:47 | 000,001,065 | ---- | C] () -- C:\Users\Public\Desktop\PokerStars.lnk
[2010-08-17 16:55:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzK2284.html
[2010-08-17 16:55:56 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptz2284.html
[2010-08-17 10:00:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempun4388.html
[2010-08-16 17:03:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPb3716.html
[2010-08-16 17:03:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempwn3716.html
[2010-08-16 10:47:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplU1412.html
[2010-08-16 10:47:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXx1412.html
[2010-08-16 09:11:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCE3788.html
[2010-08-15 17:08:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMK2040.html
[2010-08-15 17:08:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsv2040.html
[2010-08-15 13:55:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempyX5016.html
[2010-08-15 11:55:14 | 000,000,727 | ---- | C] () -- C:\Users\Darek\Desktop\USdx — skrót.lnk
[2010-08-15 11:13:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmi3752.html
[2010-08-14 21:35:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBt3840.html
[2010-08-14 21:35:03 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRV3840.html
[2010-08-08 21:12:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBtE460.html
[2010-08-08 21:12:50 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempalg460.html
[2010-08-08 15:30:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIG4500.html
[2010-08-08 15:30:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxh4500.html
[2010-08-08 12:46:10 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAb4432.html
[2010-08-07 20:59:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppb4264.html
[2010-08-07 20:59:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemphW4264.html
[2010-08-07 11:30:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempapL252.html
[2010-08-07 11:30:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkFN252.html
[2010-08-06 18:05:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemprD4228.html
[2010-08-06 12:06:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKc4680.html
[2010-08-06 12:06:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHl4680.html
[2010-08-06 07:56:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqT3164.html
[2010-08-06 07:56:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQS3164.html
[2010-08-05 20:17:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZm3544.html
[2010-08-05 20:17:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJs3544.html
[2010-08-05 09:33:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfa4716.html
[2010-08-04 21:32:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUk4068.html
[2010-08-04 21:32:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSC4068.html
[2010-08-04 19:25:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEPh664.html
[2010-08-04 19:25:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsWz664.html
[2010-08-04 17:13:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvP5032.html
[2010-08-04 09:27:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZX4880.html
[2010-08-03 18:19:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxc5016.html
[2010-07-23 14:48:07 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010-07-20 22:40:55 | 000,000,040 | ---- | C] () -- C:\Windows\SysWow64\Profile.info
[2010-07-14 09:18:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZM4820.html
[2010-07-14 09:18:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempga4820.html
[2010-07-13 10:44:40 | 000,000,000 | ---- | C] () -- C:\ProgramData\LauncherAccess.dt
[2010-07-13 10:41:02 | 000,000,766 | ---- | C] () -- C:\Windows\SysWow64\Uninstall.ico
[2010-07-09 13:43:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeV2876.html
[2010-07-09 09:46:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkZ3940.html
[2010-07-09 09:46:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprj3940.html
[2010-07-08 21:10:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptUd740.html
[2010-07-08 21:10:11 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempssW740.html
[2010-07-08 17:00:42 | 000,037,170 | ---- | C] () -- C:\Users\Darek\Documents\sysop.odt
[2010-07-08 16:51:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempdm4376.html
[2010-07-08 10:28:05 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMs4084.html
[2010-07-08 10:28:05 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptr4084.html
[2010-07-08 08:52:33 | 000,000,562 | ---- | C] () -- C:\Users\Darek\Desktop\Fraps.lnk
[2010-07-07 17:10:14 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdRapi2_01_00_00.Wdf
[2010-07-07 16:50:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEm4536.html
[2010-07-07 13:04:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEgs972.html
[2010-07-07 13:04:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptSM972.html
[2010-07-07 10:08:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphz3012.html
[2010-07-07 10:08:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIM3012.html
[2010-07-06 17:01:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzu3788.html
[2010-07-06 12:54:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKg3716.html
[2010-07-06 12:54:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempck3716.html
[2010-07-06 09:05:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgF3276.html
[2010-07-06 09:05:11 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCm3276.html
[2010-07-06 08:56:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvUE148.html
[2010-07-05 17:32:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplP4524.html
[2010-07-05 17:32:47 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCi4524.html
[2010-07-05 13:59:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGC4216.html
[2010-07-05 13:59:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempno4216.html
[2010-07-05 08:58:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzm4524.html
[2010-07-04 20:51:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVi5096.html
[2010-07-04 20:51:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeQ5096.html
[2010-07-04 11:44:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVw4332.html
[2010-07-04 11:44:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempku4332.html
[2010-07-04 07:59:26 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBeX816.html
[2010-07-04 07:59:26 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgBf816.html
[2010-07-03 18:46:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEo3080.html
[2010-07-03 18:46:19 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSH3080.html
[2010-07-03 07:43:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiT4044.html
[2010-07-03 07:43:49 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLI4044.html
[2010-07-02 18:07:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSu3252.html
[2010-07-02 08:36:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempah4088.html
[2010-07-02 08:36:29 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNR4088.html
[2010-07-01 19:53:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsk5080.html
[2010-07-01 19:53:49 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsh5080.html
[2010-07-01 11:48:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempwK4312.html
[2010-07-01 11:48:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempee4312.html
[2010-07-01 11:02:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRm5084.html
[2010-07-01 07:29:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbr4612.html
[2010-06-30 17:42:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVb5012.html
[2010-06-30 17:42:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempwe5012.html
[2010-06-30 07:45:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJK4268.html
[2010-06-30 07:45:47 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppw4268.html
[2010-06-29 21:07:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKP4236.html
[2010-06-29 21:07:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBw4236.html
[2010-06-29 18:46:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYR4296.html
[2010-06-29 18:46:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempND4296.html
[2010-06-29 12:31:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxR2768.html
[2010-06-29 12:31:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAX2768.html
[2010-06-29 06:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfi3708.html
[2010-06-29 06:32:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGJ3708.html
[2010-06-28 17:50:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphs4644.html
[2010-06-28 17:50:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcb4644.html
[2010-06-28 11:53:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYm3660.html
[2010-06-28 11:53:09 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeA3660.html
[2010-06-28 07:44:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDP4356.html
[2010-06-28 07:44:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphi4356.html
[2010-06-27 16:31:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFF1840.html
[2010-06-27 16:31:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvO1840.html
[2010-06-27 10:22:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGj3448.html
[2010-06-27 08:25:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIu2876.html
[2010-06-26 22:32:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempge3372.html
[2010-06-26 18:38:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCb4328.html
[2010-06-26 15:34:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfz4892.html
[2010-06-26 15:34:38 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgR4892.html
[2010-06-26 12:42:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRO4148.html
[2010-06-26 08:06:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVd4904.html
[2010-06-26 08:06:50 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuS4904.html
[2010-06-25 17:53:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempop4476.html
[2010-06-25 17:53:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuV4476.html
[2010-06-25 10:45:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempev5056.html
[2010-06-25 10:45:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTS5056.html
[2010-06-25 08:45:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxH5092.html
[2010-06-25 08:45:04 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCU5092.html
[2010-06-24 18:00:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbQ4208.html
[2010-06-24 07:49:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQv4488.html
[2010-06-23 21:32:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuS2248.html
[2010-06-23 21:32:20 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsk2248.html
[2010-06-23 19:14:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzSj240.html
[2010-06-23 19:14:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOCp240.html
[2010-06-23 17:56:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFL4904.html
[2010-06-23 15:13:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoT4672.html
[2010-06-23 15:13:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKI4672.html
[2010-06-23 12:09:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYk3096.html
[2010-06-23 12:09:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBS3096.html
[2010-06-23 08:46:05 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWT3976.html
[2010-06-23 08:46:05 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZE3976.html
[2010-06-22 18:41:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeZ3692.html
[2010-06-22 18:41:28 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvv3692.html
[2010-06-22 18:07:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUI4684.html
[2010-06-22 10:09:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIn5088.html
[2010-06-22 10:09:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJn5088.html
[2010-06-22 06:49:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqJ4512.html
[2010-06-22 06:49:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTw4512.html
[2010-06-21 17:53:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgP3684.html
[2010-06-21 17:53:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprz3684.html
[2010-06-21 15:59:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempif3032.html
[2010-06-21 15:59:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVV3032.html
[2010-06-21 12:10:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvc4124.html
[2010-06-21 12:10:43 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempab4124.html
[2010-06-21 09:32:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAF4208.html
[2010-06-20 18:01:52 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuH1492.html
[2010-06-20 18:01:52 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFt1492.html
[2010-06-18 11:00:06 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCK4196.html
[2010-06-17 16:52:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempqf3704.html
[2010-06-17 16:52:47 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvR3704.html
[2010-06-17 06:35:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSr4464.html
[2010-06-17 06:35:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQt4464.html
[2010-06-16 19:42:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGl3588.html
[2010-06-16 19:42:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeA3588.html
[2010-06-16 17:07:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempca5004.html
[2010-06-16 17:07:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJM5004.html
[2010-06-16 14:58:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWc2656.html
[2010-06-16 14:58:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTD2656.html
[2010-06-16 08:27:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemphT3408.html
[2010-06-16 08:27:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIj3408.html
[2010-06-16 06:23:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNP4784.html
[2010-06-16 06:23:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZS4784.html
[2010-06-15 18:14:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBD2620.html
[2010-06-15 18:14:17 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemprL2620.html
[2010-06-15 15:59:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempth3596.html
[2010-06-15 15:59:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVn3596.html
[2010-06-15 10:42:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVb4848.html
[2010-06-15 10:42:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnM4848.html
[2010-06-15 08:48:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmv2500.html
[2010-06-14 18:14:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOv2744.html
[2010-06-14 18:14:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNP2744.html
[2010-06-14 06:33:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBe4568.html
[2010-06-14 06:33:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBw4568.html
[2010-06-13 10:36:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiV5088.html
[2010-06-13 10:36:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphb5088.html
[2010-06-12 17:53:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuV3668.html
[2010-06-12 17:53:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNj3668.html
[2010-06-12 15:24:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjv4360.html
[2010-06-12 15:24:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLV4360.html
[2010-06-12 09:42:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXd4496.html
[2010-06-12 09:42:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXU4496.html
[2010-06-11 22:30:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZi4516.html
[2010-06-11 22:30:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYy4516.html
[2010-06-11 19:10:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempuj4424.html
[2010-06-11 19:10:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZa4424.html
[2010-06-11 16:56:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTh2920.html
[2010-06-11 16:56:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIP2920.html
[2010-06-11 12:05:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSJ2676.html
[2010-06-11 12:05:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxp2676.html
[2010-06-11 11:09:10 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbB2788.html
[2010-06-11 11:09:10 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHg2788.html
[2010-06-11 09:44:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvX4140.html
[2010-06-10 20:40:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZo3292.html
[2010-06-10 20:40:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempql3292.html
[2010-06-10 18:56:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaL1180.html
[2010-06-10 18:26:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPs3616.html
[2010-06-10 10:33:05 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTl4556.html
[2010-06-10 10:33:05 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeI4556.html
[2010-06-10 06:37:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLw3452.html
[2010-06-09 19:35:26 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQJ4840.html
[2010-06-09 19:35:26 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQo4840.html
[2010-06-09 09:38:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempdS4136.html
[2010-06-09 09:38:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPW4136.html
[2010-06-08 20:55:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoG4292.html
[2010-06-08 20:55:09 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXY4292.html
[2010-06-08 16:13:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzZ3056.html
[2010-06-08 16:13:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppu3056.html
[2010-06-08 11:42:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsn4016.html
[2010-06-08 11:42:04 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEX4016.html
[2010-06-08 08:41:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbK4680.html
[2010-06-08 08:41:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVT4680.html
[2010-06-07 20:03:59 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTT1904.html
[2010-06-07 20:03:59 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUQ1904.html
[2010-06-07 14:49:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZg1052.html
[2010-06-07 14:21:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJLK504.html
[2010-06-07 06:16:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppH1688.html
[2010-06-06 20:14:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjq3964.html
[2010-06-06 20:14:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJM3964.html
[2010-06-03 08:26:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEZ2016.html
[2010-06-02 22:08:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzG3172.html
[2010-06-02 22:08:25 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Templh3172.html
[2010-06-02 16:58:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWg3376.html
[2010-06-02 16:58:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTn3376.html
[2010-06-02 15:57:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNr4052.html
[2010-06-02 15:57:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVr4052.html
[2010-06-02 13:43:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUM3436.html
[2010-06-02 13:43:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQt3436.html
[2010-06-02 10:38:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZg2932.html
[2010-06-02 10:38:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnL2932.html
[2010-06-02 09:20:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempId2996.html
[2010-06-01 22:40:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBc3552.html
[2010-06-01 18:45:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphj2304.html
[2010-06-01 18:45:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBX2304.html
[2010-06-01 17:20:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSe4972.html
[2010-06-01 17:20:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFN4972.html
[2010-06-01 15:52:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgW4316.html
[2010-06-01 14:33:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppP4184.html
[2010-06-01 14:33:25 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBp4184.html
[2010-06-01 11:08:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIB3312.html
[2010-06-01 11:08:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZI3312.html
[2010-06-01 09:04:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZW3712.html
[2010-05-31 19:05:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRO2856.html
[2010-05-31 19:05:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOR2856.html
[2010-05-31 15:12:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHA3788.html
[2010-05-31 09:07:06 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNRz408.html
[2010-05-31 07:20:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHH4296.html
[2010-05-31 07:20:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptR4296.html
[2010-05-30 18:38:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXp2824.html
[2010-05-30 18:38:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempdb2824.html
[2010-05-30 17:56:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTk4476.html
[2010-05-30 16:23:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCz2952.html
[2010-05-30 12:36:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMh4372.html
[2010-05-30 10:57:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYU3432.html
[2010-05-29 18:29:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsX3516.html
[2010-05-29 18:29:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFO3516.html
[2010-05-29 10:59:59 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYE4976.html
[2010-05-29 10:59:59 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNZ4976.html
[2010-05-29 09:34:14 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHF3572.html
[2010-05-29 09:34:14 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAZ3572.html
[2010-05-28 19:51:23 | 000,005,077 | ---- | C] () -- C:\ProgramData\bltofzsb.qlf
[2010-05-28 18:49:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempuz1312.html
[2010-05-28 14:52:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDn1524.html
[2010-05-28 14:52:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcf1524.html
[2010-05-28 11:54:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempET1040.html
[2010-05-28 11:54:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempuu1040.html
[2010-05-28 09:42:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprq1236.html
[2010-05-27 20:16:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGH2712.html
[2010-05-27 19:39:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOE4160.html
[2010-05-27 11:33:42 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplL1740.html
[2010-05-26 15:09:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempio3068.html
[2010-05-26 15:09:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIP3068.html
[2010-05-26 07:23:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxJ3404.html
[2010-05-26 07:23:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiY3404.html
[2010-05-25 20:02:54 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempos2308.html
[2010-05-25 20:02:54 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnR2308.html
[2010-05-25 16:27:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempru2992.html
[2010-05-25 10:52:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptO4500.html
[2010-05-24 19:00:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempwW3732.html
[2010-05-24 19:00:43 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLw3732.html
[2010-05-24 11:18:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNQ1436.html
[2010-05-24 11:18:56 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempkp1436.html
[2010-05-23 17:59:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempui1756.html
[2010-05-23 17:59:43 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQy1756.html
[2010-05-23 12:54:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEx1384.html
[2010-05-23 12:54:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSd1384.html
[2010-05-23 08:04:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFc4820.html
[2010-05-23 08:04:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSV4820.html
[2010-05-22 21:49:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKs4912.html
[2010-05-22 21:49:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGj4912.html
[2010-05-22 19:11:21 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoP4004.html
[2010-05-22 19:11:21 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKY4004.html
[2010-05-22 16:13:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempko4236.html
[2010-05-22 16:13:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGF4236.html
[2010-05-22 10:59:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPP3484.html
[2010-05-22 10:59:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiF3484.html
[2010-05-21 21:09:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSh1420.html
[2010-05-21 19:58:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWO4520.html
[2010-05-21 19:58:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLm4520.html
[2010-05-21 17:11:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWx3872.html
[2010-05-21 12:50:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFS5024.html
[2010-05-21 12:50:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprc5024.html
[2010-05-20 19:42:59 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZE4384.html
[2010-05-20 19:42:59 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAV4384.html
[2010-05-20 16:24:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfx3648.html
[2010-05-20 16:24:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeL3648.html
[2010-05-20 13:05:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGP3448.html
[2010-05-20 13:05:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkA3448.html
[2010-05-19 19:16:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZI4568.html
[2010-05-19 19:16:28 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbb4568.html
[2010-05-19 06:34:54 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVQ1916.html
[2010-05-18 17:32:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRb1452.html
[2010-05-18 17:32:34 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvs1452.html
[2010-05-18 11:27:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvp1828.html
[2010-05-18 11:27:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYc1828.html
[2010-05-17 18:47:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempmO4000.html
[2010-05-17 18:47:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkB4000.html
[2010-05-17 08:18:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKs3804.html
[2010-05-16 19:58:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphu3332.html
[2010-05-16 19:58:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKZ3332.html
[2010-05-16 16:12:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBz4296.html
[2010-05-16 16:12:03 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempuf4296.html
[2010-05-15 22:08:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temped3944.html
[2010-05-15 17:24:52 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempdb3568.html
[2010-05-15 17:24:52 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBf3568.html
[2010-05-13 17:10:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDc4392.html
[2010-05-13 17:10:34 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempqy4392.html
[2010-05-12 19:37:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqL3772.html
[2010-05-12 19:37:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiS3772.html
[2010-05-11 18:25:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjX3632.html
[2010-05-11 18:25:20 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuS3632.html
[2010-05-11 09:24:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVH3728.html
[2010-05-11 09:24:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqF3728.html
[2010-05-10 18:52:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxh4340.html
[2010-05-10 18:52:09 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBm4340.html
[2010-05-10 06:44:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxg4568.html
[2010-05-09 21:16:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcfA852.html
[2010-05-09 19:36:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOe3384.html
[2010-05-09 15:41:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQV2796.html
[2010-05-09 15:41:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXm2796.html
[2010-05-09 11:59:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcU4200.html
[2010-05-09 11:59:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjt4200.html
[2010-05-09 09:35:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUZ1676.html
[2010-05-09 09:35:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFp1676.html
[2010-05-08 15:57:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppN3604.html
[2010-05-08 15:57:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCB3604.html
[2010-05-08 13:30:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIo4204.html
[2010-05-08 13:30:17 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAl4204.html
[2010-05-07 19:10:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptH3940.html
[2010-05-07 19:10:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempyl3940.html
[2010-05-07 14:10:26 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTr3960.html
[2010-05-07 14:10:26 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaA3960.html
[2010-05-07 09:37:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjR4420.html
[2010-05-07 09:37:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYt4420.html
[2010-05-06 21:25:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxl2088.html
[2010-05-06 21:25:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempse2088.html
[2010-05-06 06:54:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnm4360.html
[2010-05-06 06:54:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYT4360.html
[2010-05-05 19:54:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzv4900.html
[2010-05-05 19:54:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemprN4900.html
[2010-05-05 16:03:21 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppI4868.html
[2010-05-05 16:03:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVE4868.html
[2010-05-05 07:51:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptI3588.html
[2010-05-04 19:56:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSz4532.html
[2010-05-04 19:56:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLo4532.html
[2010-05-04 11:55:29 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphv4696.html
[2010-05-04 11:55:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQM4696.html
[2010-05-04 07:51:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPs2576.html
[2010-05-04 07:51:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAQ2576.html
[2010-05-03 18:02:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTd2776.html
[2010-05-03 18:02:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjj2776.html
[2010-05-03 16:08:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDC1728.html
[2010-05-03 10:57:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxh4852.html
[2010-05-03 10:57:00 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOb4852.html
[2010-05-02 20:09:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempwj3420.html
[2010-04-28 18:27:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempmC4916.html
[2010-04-28 18:27:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptl4916.html
[2010-04-27 18:31:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphe2868.html
[2010-04-27 18:31:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuU2868.html
[2010-04-27 17:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcb1664.html
[2010-04-27 12:11:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMC1932.html
[2010-04-27 12:11:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempdM1932.html
[2010-04-27 09:17:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemphW4912.html
[2010-04-26 20:41:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJn2844.html
[2010-04-26 20:41:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnJ2844.html
[2010-04-25 20:15:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAz3784.html
[2010-04-25 20:15:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppo3784.html
[2010-04-25 14:10:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPJ4372.html
[2010-04-25 14:10:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDc4372.html
[2010-04-24 20:32:21 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprd4232.html
[2010-04-24 20:32:21 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSN4232.html
[2010-04-24 07:53:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTJ4204.html
[2010-04-24 07:53:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempys4204.html
[2010-04-23 18:58:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXw4548.html
[2010-04-23 18:58:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempwG4548.html
[2010-04-23 08:24:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqO4352.html
[2010-04-22 18:12:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOv4976.html
[2010-04-22 18:12:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempco4976.html
[2010-04-22 06:41:42 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjH4308.html
[2010-04-22 06:41:42 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempaa4308.html
[2010-04-21 19:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCD4196.html
[2010-04-21 19:32:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppc4196.html
[2010-04-21 09:26:00 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2010-04-21 06:33:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempus4208.html
[2010-04-21 06:33:38 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsW4208.html
[2010-04-20 19:22:42 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAI4088.html
[2010-04-20 18:41:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptx5040.html
[2010-04-20 18:41:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempkv5040.html
[2010-04-20 16:12:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOx2784.html
[2010-04-20 16:12:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbm2784.html
[2010-04-20 12:35:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUJ4220.html
[2010-04-20 12:35:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJU4220.html
[2010-04-20 06:46:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcV2860.html
[2010-04-20 06:46:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSe2860.html
[2010-04-19 21:09:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLK5340.html
[2010-04-19 21:09:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzW5340.html
[2010-04-19 08:29:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDF3904.html
[2010-04-19 08:29:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnf3904.html
[2010-04-18 20:18:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsL3124.html
[2010-04-18 15:14:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNR1284.html
[2010-04-18 15:14:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvB1284.html
[2010-04-18 12:35:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnf4840.html
[2010-04-17 16:58:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzm4048.html
[2010-04-17 16:58:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjF4048.html
[2010-04-17 11:28:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempyq4380.html
[2010-04-17 09:28:59 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZZ4808.html
[2010-04-17 09:28:59 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqG4808.html
[2010-04-16 20:23:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAz4340.html
[2010-04-16 20:23:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKK4340.html
[2010-04-16 19:05:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIG6652.html
[2010-04-16 19:05:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaF6652.html
[2010-04-16 17:10:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOe3536.html
[2010-04-16 11:00:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAi4412.html
[2010-04-15 18:45:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZQ4388.html
[2010-04-15 18:45:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFN4388.html
[2010-04-15 07:05:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPA4504.html
[2010-04-15 07:05:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkP4504.html
[2010-04-14 18:55:46 | 000,000,071 | ---- | C] () -- C:\Windows\iltwain.ini
[2010-04-14 17:17:10 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnm3144.html
[2010-04-14 17:17:10 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcZ3144.html
[2010-04-14 09:45:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGa1188.html
[2010-04-14 06:33:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptv4348.html
[2010-04-13 19:36:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWu2648.html
[2010-04-13 17:33:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOCN760.html
[2010-04-13 12:19:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvM1292.html
[2010-04-13 11:23:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempaf4652.html
[2010-04-12 21:50:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuC6100.html
[2010-04-12 21:50:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphk6100.html
[2010-04-12 19:42:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptVq464.html
[2010-04-12 05:51:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptt1988.html
[2010-04-12 05:51:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFw1988.html
[2010-04-11 16:47:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNB3648.html
[2010-04-11 16:47:20 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJj3648.html
[2010-04-11 10:20:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcw4044.html
[2010-04-10 17:44:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOw3760.html
[2010-04-10 17:44:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbC3760.html
[2010-04-10 16:14:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptw2012.html
[2010-04-10 11:04:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFO3708.html
[2010-04-10 11:04:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnv3708.html
[2010-04-10 08:34:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVK4040.html
[2010-04-09 18:47:04 | 000,000,000 | ---- | C] () -- C:\Windows\NSREX.INI
[2010-04-09 16:37:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBmW668.html
[2010-04-09 16:37:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempudx668.html
[2010-04-09 12:02:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempfA6228.html
[2010-04-09 12:02:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempni6228.html
[2010-04-09 11:19:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMi4796.html
[2010-04-09 09:28:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoP3016.html
[2010-04-08 20:36:13 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWb3612.html
[2010-04-08 20:36:13 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIi3612.html
[2010-04-08 17:02:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNC4768.html
[2010-04-08 17:02:50 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempal4768.html
[2010-04-08 10:56:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppP3088.html
[2010-04-08 10:56:56 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxU3088.html
[2010-04-07 19:57:06 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplQ3088.html
[2010-04-07 19:57:06 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppK3088.html
[2010-04-07 17:26:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSW2300.html
[2010-04-07 17:22:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnn2052.html
[2010-04-07 12:08:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempmB4800.html
[2010-04-07 12:08:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempps4800.html
[2010-04-07 08:17:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUX3276.html
[2010-04-07 08:17:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRf3276.html
[2010-04-06 20:33:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzN4400.html
[2010-04-06 20:33:20 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVg4400.html
[2010-04-06 16:07:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppx4744.html
[2010-04-06 16:07:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVT4744.html
[2010-04-06 11:53:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZE1776.html
[2010-04-06 11:53:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJN1776.html
[2010-04-06 08:17:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppF2332.html
[2010-04-06 08:17:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOR2332.html
[2010-04-05 19:29:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjj3456.html
[2010-04-05 19:29:38 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHa3456.html
[2010-04-05 15:50:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempni3304.html
[2010-04-05 15:50:04 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcW3304.html
[2010-04-05 10:13:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempik3460.html
[2010-04-05 10:13:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempei3460.html
[2010-04-04 16:44:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGg4824.html
[2010-04-04 11:47:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqL1608.html
[2010-04-04 11:47:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjg1608.html
[2010-04-03 16:11:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPJ3720.html
[2010-04-03 16:11:38 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZb3720.html
[2010-04-03 13:08:26 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptm8400.html
[2010-04-03 13:08:26 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIG8400.html
[2010-04-03 11:22:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEh3024.html
[2010-04-02 18:48:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmf6084.html
[2010-04-02 18:48:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOn6084.html
[2010-04-02 17:10:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmh3824.html
[2010-04-02 10:12:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqI3412.html
[2010-04-02 10:12:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGu3412.html
[2010-04-02 07:09:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHv3708.html
[2010-04-02 07:09:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPU3708.html
[2010-04-01 16:27:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZi3628.html
[2010-04-01 16:27:17 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMm3628.html
[2010-04-01 09:48:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDY3780.html
[2010-04-01 09:48:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKS3780.html
[2010-03-31 19:05:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWe5432.html
[2010-03-31 18:58:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfr4720.html
[2010-03-31 18:58:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFE4720.html
[2010-03-31 17:59:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbj4192.html
[2010-03-31 17:59:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMd4192.html
[2010-03-31 13:41:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcG1924.html
[2010-03-31 13:41:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuT1924.html
[2010-03-30 17:22:06 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuC3848.html
[2010-03-30 17:22:06 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBQ3848.html
[2010-03-30 12:47:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsFg856.html
[2010-03-30 12:47:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempfyY856.html
[2010-03-30 08:57:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxS3752.html
[2010-03-30 08:57:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempyB3752.html
[2010-03-29 18:27:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvE4848.html
[2010-03-29 18:27:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgM4848.html
[2010-03-28 19:59:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempqj3668.html
[2010-03-28 19:59:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRx3668.html
[2010-03-28 12:13:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptg1780.html
[2010-03-28 12:13:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNf1780.html
[2010-03-27 21:50:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTV2572.html
[2010-03-27 21:50:04 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDm2572.html
[2010-03-27 17:39:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKf3196.html
[2010-03-27 17:39:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempdt3196.html
[2010-03-26 20:24:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxiX620.html
[2010-03-26 20:24:03 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmrz620.html
[2010-03-26 18:20:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIK3180.html
[2010-03-26 18:20:46 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLI3180.html
[2010-03-26 14:34:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoLb504.html
[2010-03-26 14:34:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppUe504.html
[2010-03-26 10:26:14 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppW1836.html
[2010-03-26 10:26:14 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvd1836.html
[2010-03-25 18:17:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHi6912.html
[2010-03-25 18:17:25 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempwA6912.html
[2010-03-25 17:25:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWU4644.html
[2010-03-25 17:25:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMz4644.html
[2010-03-24 19:29:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPE2920.html
[2010-03-24 19:29:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFV2920.html
[2010-03-24 12:13:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUt3620.html
[2010-03-24 12:13:11 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoR3620.html
[2010-03-24 06:49:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIE4112.html
[2010-03-24 06:49:19 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprl4112.html
[2010-03-23 18:13:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphc3728.html
[2010-03-23 18:13:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYM3728.html
[2010-03-23 10:49:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCx2788.html
[2010-03-23 10:49:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEt2788.html
[2010-03-22 20:12:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmo2576.html
[2010-03-22 20:12:47 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjS2576.html
[2010-03-22 07:05:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTf1640.html
[2010-03-22 07:05:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgD1640.html
[2010-03-21 12:08:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBB2684.html
[2010-03-21 12:08:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzC2684.html
[2010-03-20 20:01:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAG4208.html
[2010-03-20 20:01:19 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxe4208.html
[2010-03-20 16:06:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempid3844.html
[2010-03-20 16:06:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbw3844.html
[2010-03-20 13:54:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmn1904.html
[2010-03-20 13:54:11 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppD1904.html
[2010-03-19 19:37:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEm4500.html
[2010-03-19 19:37:34 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQH4500.html
[2010-03-19 18:17:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJX3532.html
[2010-03-19 18:17:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempce3532.html
[2010-03-19 15:44:05 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgJ3680.html
[2010-03-19 15:44:05 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjm3680.html
[2010-03-19 11:56:14 | 000,005,632 | ---- | C] () -- C:\Windows\SysWow64\drivers\StarOpen.sys
[2010-03-19 10:03:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPB3016.html
[2010-03-19 10:03:19 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCt3016.html
[2010-03-18 19:37:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempph4072.html
[2010-03-18 19:37:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaU4072.html
[2010-03-18 18:11:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempyi1176.html
[2010-03-18 18:11:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoC1176.html
[2010-03-18 12:05:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWD3680.html
[2010-03-18 12:05:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDQ3680.html
[2010-03-17 20:16:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHH4808.html
[2010-03-17 20:16:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRY4808.html
[2010-03-17 18:37:14 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnoj908.html
[2010-03-17 18:37:14 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJpN908.html
[2010-03-16 18:07:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvX4064.html
[2010-03-16 18:07:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempES4064.html
[2010-03-16 14:11:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZM3664.html
[2010-03-16 14:11:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempum3664.html
[2010-03-16 11:01:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempip4656.html
[2010-03-16 11:01:50 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYV4656.html
[2010-03-15 06:48:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZYA704.html
[2010-03-15 06:48:00 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWNg704.html
[2010-03-14 16:10:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTu4928.html
[2010-03-14 16:10:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPp4928.html
[2010-03-14 10:48:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvR4636.html
[2010-03-14 10:48:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsh4636.html
[2010-03-13 20:43:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVh4856.html
[2010-03-13 20:43:28 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYV4856.html
[2010-03-13 14:55:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxV4332.html
[2010-03-13 14:55:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWP4332.html
[2010-03-13 12:22:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGh4644.html
[2010-03-13 12:22:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbJ4644.html
[2010-03-12 20:40:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJb4520.html
[2010-03-12 20:40:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnB4520.html
[2010-03-12 19:48:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempgu4936.html
[2010-03-12 19:48:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsV4936.html
[2010-03-12 14:44:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNyx568.html
[2010-03-12 14:44:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjpm568.html
[2010-03-12 11:57:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIM5060.html
[2010-03-12 11:57:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqT5060.html
[2010-03-11 20:32:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQI4976.html
[2010-03-11 20:32:00 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMI4976.html
[2010-03-10 20:06:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgX5096.html
[2010-03-10 20:06:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptX5096.html
[2010-03-10 18:40:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnm4684.html
[2010-03-10 18:40:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiP4684.html
[2010-03-09 16:04:41 | 000,000,083 | ---- | C] () -- C:\Windows\wwp_game.INI
[2010-03-09 09:59:52 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaR4880.html
[2010-03-09 09:59:52 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempaj4880.html
[2010-03-08 19:57:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplO4924.html
[2010-03-08 19:57:34 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgL4924.html
[2010-03-08 07:03:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVT3196.html
[2010-03-08 07:03:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVA3196.html
[2010-03-07 17:00:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLv3600.html
[2010-03-07 17:00:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcw3600.html
[2010-03-07 13:36:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEA4904.html
[2010-03-07 13:36:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBS4904.html
[2010-03-06 19:33:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSY5116.html
[2010-03-06 19:33:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmn5116.html
[2010-03-06 15:27:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLd5112.html
[2010-03-06 15:27:29 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempyF5112.html
[2010-03-06 13:59:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjj4444.html
[2010-03-06 13:59:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLS4444.html
[2010-03-06 12:47:54 | 000,000,418 | ---- | C] () -- C:\Windows\ODBC.INI
[2010-03-06 12:47:54 | 000,000,063 | ---- | C] () -- C:\Windows\mdm.ini
[2010-03-05 12:42:02 | 001,556,556 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010-02-28 12:40:03 | 000,000,095 | ---- | C] () -- C:\Windows\winamp.ini
[2010-01-14 18:35:00 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini
[2009-11-26 17:41:12 | 000,000,315 | ---- | C] () -- C:\Windows\game.ini
[2009-11-07 14:28:59 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2009-10-20 02:23:46 | 000,178,960 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2009-10-16 18:22:21 | 000,003,972 | ---- | C] () -- C:\Windows\SysWow64\drivers\PciBus.sys
[2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009-04-19 17:35:04 | 000,126,976 | ---- | C] () -- C:\Windows\gdf.dll
[2005-02-25 07:15:00 | 000,159,744 | ---- | C] () -- C:\Windows\SysWow64\EPSPTDV.DLL

[color=#E56717]========== LOP Check ==========[/color]

[2010-01-14 19:38:45 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Ashampoo
[2010-01-18 20:51:53 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Autodesk
[2010-03-17 20:27:51 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Canneverbe Limited
[2009-10-20 19:32:46 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\DAEMON Tools Lite
[2009-12-11 18:10:05 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Dev-Cpp
[2010-01-14 18:40:17 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\EPSON
[2010-08-31 09:55:56 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\foobar2000
[2009-10-17 14:31:48 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Gadu-Gadu
[2009-11-22 12:15:48 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Gadu-Gadu 10
[2010-06-13 19:14:42 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\GetRightToGo
[2010-05-30 17:55:02 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\gtk-2.0
[2010-08-31 08:21:32 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\HEM Data
[2009-11-22 22:54:37 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\IObit
[2010-01-24 11:10:00 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\ipla
[2010-03-14 12:11:04 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\IrfanView
[2010-06-29 06:46:29 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Nokia
[2010-03-05 13:16:18 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\NVD
[2009-10-17 17:05:23 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\OpenOffice.org
[2009-10-16 17:49:49 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Opera
[2009-10-16 17:43:08 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\PCToolsFirewallPlus
[2010-05-30 16:29:50 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Qrix
[2010-07-13 10:59:47 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Samsung
[2010-04-09 18:49:28 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\SoftGrid Client
[2009-11-03 19:07:10 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Sports Interactive
[2010-06-14 14:52:34 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\StreamTorrent
[2009-10-19 10:07:24 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Thunderbird
[2010-04-09 17:08:10 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\TP
[2010-01-23 11:05:17 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\UDC Profiles
[2010-08-04 21:33:05 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\uTorrent
[2010-07-18 13:19:04 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010-06-13 22:17:59 | 000,000,408 | ---- | M] () -- C:\Windows\Tasks\SmartDefrag.job

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]


[color=#A23BEC]< %systemdrive%\*.* >[/color]
[2010-06-07 17:07:20 | 000,001,024 | ---- | M] () -- C:\.rnd
[2010-01-09 12:24:42 | 000,467,082 | ---- | M] () -- C:\acadminidump.dmp
[2010-08-21 12:53:05 | 000,040,092 | ---- | M] () -- C:\AutoMapaSetupLog.txt
[2010-08-27 16:29:35 | 000,009,672 | ---- | M] () -- C:\bootsqm.dat
[2010-07-13 10:54:51 | 000,000,074 | ---- | M] () -- C:\CMLoader.log
[2009-10-16 18:11:47 | 000,011,728 | ---- | M] () -- C:\deviceInfo.txt
[2010-08-31 10:55:25 | 3220,561,920 | -HS- | M] () -- C:\hiberfil.sys
[2010-02-05 15:56:05 | 000,000,564 | -H-- | M] () -- C:\os582744.bin
[2010-08-31 10:55:30 | 4294,082,560 | -HS- | M] () -- C:\pagefile.sys
[2010-03-16 19:14:39 | 000,000,029 | ---- | M] () -- C:\Windows.txt
[2 C:\*.tmp files -> C:\*.tmp -> ]


[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys
[2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2003-10-29 20:58:30 | 000,021,008 | ---- | M] (Microsoft Corporation) MD5=CDDB71A90077C93BEA5C72507F0B1394 -- C:\Program Files (x86)\Driver Cleaner\nvfix\AGP440.sys

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2009-07-14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys

[color=#A23BEC]< MD5 for: CDROM.SYS >[/color]
[2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysWow64\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys
[2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2009-07-14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2009-07-14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009-10-28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009-10-28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:A8ADE5D8
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:C31F31E6
< End of report >
[/log]

Tomek01
komentarz
komentarz

Odinstaluj pdfforge Toolbar.

Czy znasz te pliki ?:
C:\Users\Darek\Desktop\2rhk4xk7.exe
C:\Users\Darek\Desktop\iu90d21r.exe

Jeśłi nie, doklej pod komendą: files:



Zastosuj [b][color=#0000CD][url=http://download.bleepingcomputer.com//sUBs/Flash_Disinfector.exe]Flash Disinfector[/url][/color][/b], najlepiej z podpiętym pendrive'm czy innymi pamięciami USB.

W OTL, w oknie Custom scan/fixes wklej:
[code]:Processes
Explorer.exe

:OTL
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:A8ADE5D8
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:C31F31E6

:Files
C:\Windows\SysWow64\mqpoy.exe
C:\Windows\SysWow64\autorun.inf
C:\Windows\SysWow64\mqpoyx.exe
C:\Users\Darek\mqpoy.exe
C:\ProgramData\bltofzsb.qlf
C:\os582744.bin

:Commands
[emptytemp]
[start explorer]
[Reboot]
[/code]
Klikasz run fix, komputer uruchamia się ponownie.



Do [url=http://images.malwareremoval.com/jpshortstuff/SystemLook.exe][b]System Look[/b][/url] wklej:
Filefind:
SearchSettings

Wciśnij look, pokaż co wyskoczy.


Wrzuć log OTL z usuwania oraz nowe logi OTL i RSIT.

dario116
komentarz
komentarz

Oba te pliki to GMER i Dr Web.

Log z usuwania:
[log]
All processes killed
========== PROCESSES ==========
No active process named Explorer.exe was found!
========== OTL ==========
ADS C:\ProgramData\TEMP:A8ADE5D8 deleted successfully.
ADS C:\ProgramData\TEMP:DFC5A2B2 deleted successfully.
ADS C:\ProgramData\TEMP:C31F31E6 deleted successfully.
========== FILES ==========
C:\Windows\SysWow64\mqpoy.exe moved successfully.
C:\Windows\SysWow64\autorun.inf moved successfully.
C:\Windows\SysWow64\mqpoyx.exe moved successfully.
File\Folder C:\Users\Darek\mqpoy.exe not found.
C:\ProgramData\bltofzsb.qlf moved successfully.
C:\os582744.bin moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Darek
->Temp folder emptied: 87687848 bytes
->Temporary Internet Files folder emptied: 43743307 bytes
->Java cache emptied: 26024479 bytes
->Opera cache emptied: 28722427 bytes
->Flash cache emptied: 7234 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: postgres
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: postgres.Darek-Komputer
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 3229920 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 6962172 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50534 bytes
RecycleBin emptied: 651422 bytes

Total Files Cleaned = 188,00 mb


OTL by OldTimer - Version 3.2.10.0 log created on 08312010_220642
[/log]

Log z SystemLook:
[log]
SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 22:12 on 31/08/2010 by Darek (Administrator - Elevation successful)

No Context: Filefind:

No Context: SearchSettings

-=End Of File=-
[/log]

Log z OTL:
[log]
OTL logfile created on: 2010-08-31 22:22:10 - Run 4
OTL by OldTimer - Version 3.2.10.0 Folder = C:\Users\Darek\Desktop
64bit- An unknown product (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 65,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 80,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 49,90 Gb Total Space | 9,23 Gb Free Space | 18,50% Space Free | Partition Type: NTFS
Drive D: | 240,28 Gb Total Space | 47,48 Gb Free Space | 19,76% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: DAREK-KOMPUTER
Current User Name: Darek
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 60 Days
Output = Standard

[color=#E56717]========== Processes (All) ==========[/color]

PRC - [2010-08-30 21:28:37 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe
PRC - [2010-08-09 15:27:06 | 000,836,464 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe
PRC - [2010-08-06 09:11:58 | 000,248,936 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2010-05-14 14:11:08 | 000,066,048 | ---- | M] (PostgreSQL Global Development Group) -- C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe
PRC - [2010-05-14 14:09:18 | 004,530,176 | ---- | M] (PostgreSQL Global Development Group) -- C:\Program Files (x86)\PostgreSQL\8.4\bin\postgres.exe
PRC - [2010-05-14 11:44:46 | 000,248,552 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
PRC - [2010-03-04 23:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe
PRC - [2010-01-22 21:57:08 | 000,395,824 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnat.exe
PRC - [2010-01-22 21:56:44 | 000,334,384 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnetdhcp.exe
PRC - [2010-01-22 21:56:28 | 000,113,200 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
PRC - [2010-01-22 21:00:48 | 000,563,760 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe
PRC - [2010-01-19 10:45:41 | 003,168,216 | ---- | M] (PC Tools) -- C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe
PRC - [2009-11-18 19:52:31 | 000,818,432 | ---- | M] (PC Tools) -- C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe
PRC - [2009-11-13 19:29:14 | 000,107,832 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe
PRC - [2009-11-13 19:28:53 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2009-09-23 16:45:50 | 001,287,176 | ---- | M] (Panda Security) -- C:\Program Files (x86)\Panda USB Vaccine\Panda\USBVaccine.exe
PRC - [2009-09-11 17:52:16 | 002,080,768 | ---- | M] (Micro-Star International Co., Ltd.) -- C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe
PRC - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2009-07-09 15:54:42 | 000,160,768 | ---- | M] (Micro-Star International Co., Ltd.) -- C:\Program Files (x86)\System Control Manager\MSIService.exe
PRC - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2009-03-02 13:08:47 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2009-02-11 17:38:40 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
PRC - [2009-02-11 17:38:38 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2007-09-13 22:26:50 | 000,090,112 | ---- | M] () -- C:\MSI\Advanced Wheel Mouse\wh_exec.exe


[color=#E56717]========== Modules (All) ==========[/color]

MOD - [2010-08-30 21:28:37 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe
MOD - [2010-07-27 16:03:24 | 012,867,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll
MOD - [2010-03-24 08:37:04 | 001,289,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll
MOD - [2009-12-11 09:39:06 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll
MOD - [2009-12-11 09:36:33 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll
MOD - [2009-07-14 03:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll
MOD - [2009-07-14 03:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll
MOD - [2009-07-14 03:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll
MOD - [2009-07-14 03:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll
MOD - [2009-07-14 03:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll
MOD - [2009-07-14 03:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll
MOD - [2009-07-14 03:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll
MOD - [2009-07-14 03:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll
MOD - [2009-07-14 03:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll
MOD - [2009-07-14 03:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll
MOD - [2009-07-14 03:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll
MOD - [2009-07-14 03:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll
MOD - [2009-07-14 03:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll
MOD - [2009-07-14 03:16:12 | 001,412,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll
MOD - [2009-07-14 03:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll
MOD - [2009-07-14 03:16:12 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll
MOD - [2009-07-14 03:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll
MOD - [2009-07-14 03:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll
MOD - [2009-07-14 03:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll
MOD - [2009-07-14 03:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll
MOD - [2009-07-14 03:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll
MOD - [2009-07-14 03:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll
MOD - [2009-07-14 03:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll
MOD - [2009-07-14 03:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll
MOD - [2009-07-14 03:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll
MOD - [2009-07-14 03:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll
MOD - [2009-07-14 03:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll
MOD - [2009-07-14 03:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll
MOD - [2009-07-14 03:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll
MOD - [2009-07-14 03:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll
MOD - [2009-07-14 03:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll
MOD - [2009-07-14 03:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll
MOD - [2009-07-14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
MOD - [2009-07-14 03:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv
MOD - [2009-07-14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll
MOD - [2009-07-14 03:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll
MOD - [2009-07-14 03:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll
MOD - [2009-07-14 03:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll
MOD - [2009-07-14 03:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll
MOD - [2009-07-14 03:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll
MOD - [2009-07-14 03:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll
MOD - [2009-07-14 03:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll
MOD - [2009-07-14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll
MOD - [2007-09-13 22:26:52 | 000,036,864 | ---- | M] () -- C:\MSI\Advanced Wheel Mouse\wh_hook.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\vmnat.exe -- (VMware NAT Service)
SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\vmnetdhcp.exe -- (VMnetDHCP)
SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrB.exe -- (PnkBstrB)
SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrA.exe -- (PnkBstrA)
SRV:[b]64bit:[/b] - [2009-10-20 14:17:21 | 001,030,600 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:54 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\StorSvc.dll -- (StorSvc)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2010-08-06 09:11:58 | 000,248,936 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010-05-14 14:11:08 | 000,066,048 | ---- | M] (PostgreSQL Global Development Group) [Auto | Running] -- C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe -- (postgresql-8.4)
SRV - [2010-03-04 23:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe -- (NMSAccess)
SRV - [2010-01-22 21:57:08 | 000,395,824 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service)
SRV - [2010-01-22 21:56:44 | 000,334,384 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP)
SRV - [2010-01-22 21:56:28 | 000,113,200 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe -- (VMAuthdService)
SRV - [2010-01-22 21:00:48 | 000,563,760 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService)
SRV - [2009-11-18 19:52:31 | 000,818,432 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe -- (PCToolsFirewallPlus)
SRV - [2009-11-13 19:29:14 | 000,107,832 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB)
SRV - [2009-11-13 19:28:53 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2009-10-12 14:32:24 | 000,191,024 | ---- | M] (VMware, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe -- (ufad-ws60)
SRV - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2009-07-09 15:54:42 | 000,160,768 | ---- | M] (Micro-Star International Co., Ltd.) [Auto | Running] -- C:\Program Files (x86)\System Control Manager\MSIService.exe -- (Micro Star SCM)
SRV - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2009-03-17 14:37:10 | 000,189,808 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2009-02-11 17:38:40 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe -- (IAANTMON) Intel(R)
SRV - [2007-05-31 17:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007-05-31 17:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2010-06-22 00:07:36 | 000,131,688 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:[b]64bit:[/b] - [2010-02-12 20:30:26 | 000,145,360 | ---- | M] (Sun Microsystems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:[b]64bit:[/b] - [2010-02-05 09:17:56 | 000,306,648 | ---- | M] (PC Tools) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\pctgntdi64.sys -- (pctgntdi)
DRV:[b]64bit:[/b] - [2010-01-22 21:58:22 | 000,068,656 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmx86.sys -- (vmx86)
DRV:[b]64bit:[/b] - [2010-01-22 21:58:20 | 000,029,744 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VMkbd.sys -- (vmkbd)
DRV:[b]64bit:[/b] - [2010-01-22 21:58:16 | 000,080,944 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmci.sys -- (vmci)
DRV:[b]64bit:[/b] - [2010-01-22 21:58:16 | 000,030,256 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetuserif.sys -- (VMnetuserif)
DRV:[b]64bit:[/b] - [2010-01-22 21:00:44 | 000,038,960 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\hcmon.sys -- (hcmon)
DRV:[b]64bit:[/b] - [2010-01-22 17:13:00 | 000,037,680 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmusb.sys -- (vmusb)
DRV:[b]64bit:[/b] - [2010-01-22 17:12:58 | 000,045,104 | R--- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetbridge.sys -- (VMnetBridge)
DRV:[b]64bit:[/b] - [2010-01-22 17:12:58 | 000,020,016 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vmnetadapter.sys -- (VMnetAdapter)
DRV:[b]64bit:[/b] - [2010-01-19 10:45:52 | 000,164,496 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pctplfw64.sys -- (pctplfw)
DRV:[b]64bit:[/b] - [2010-01-19 10:45:52 | 000,081,584 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pctNdis64.sys -- (pctNDIS)
DRV:[b]64bit:[/b] - [2010-01-19 10:45:51 | 000,095,504 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pctNdis-PacketFilter64.sys -- (PCTFW-PacketFilter)
DRV:[b]64bit:[/b] - [2010-01-19 10:45:51 | 000,042,456 | ---- | M] (PC Tools) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pctNdis-DNS64.sys -- (PCTFW-DNS)
DRV:[b]64bit:[/b] - [2009-12-07 18:11:49 | 000,074,880 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:[b]64bit:[/b] - [2009-10-19 15:49:50 | 000,871,408 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2009-09-23 03:46:18 | 000,066,304 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr)
DRV:[b]64bit:[/b] - [2009-09-23 03:46:17 | 000,359,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm)
DRV:[b]64bit:[/b] - [2009-09-23 03:32:39 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb)
DRV:[b]64bit:[/b] - [2009-09-23 03:32:35 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcuxd.sys -- (vpcuxd)
DRV:[b]64bit:[/b] - [2009-09-23 03:32:33 | 000,187,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-07-14 02:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM)
DRV:[b]64bit:[/b] - [2009-07-14 01:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap)
DRV:[b]64bit:[/b] - [2009-07-14 01:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID)
DRV:[b]64bit:[/b] - [2009-07-14 01:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2009-07-14 01:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC)
DRV:[b]64bit:[/b] - [2009-06-29 10:17:00 | 000,070,656 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\enecir.sys -- (enecir)
DRV:[b]64bit:[/b] - [2009-06-10 23:01:14 | 001,227,776 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SmSerl64.sys -- (smserial)
DRV:[b]64bit:[/b] - [2009-06-10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:[b]64bit:[/b] - [2009-06-10 22:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) Sterownik karty Intel(R)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-05-22 22:52:30 | 000,215,040 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2009-03-23 17:28:30 | 000,056,320 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TosRfSnd.sys -- (TosRfSnd)
DRV:[b]64bit:[/b] - [2009-03-19 14:07:46 | 000,052,736 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfusb.sys -- (Tosrfusb)
DRV:[b]64bit:[/b] - [2009-03-12 11:33:06 | 000,020,992 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfnds.sys -- (tosrfnds)
DRV:[b]64bit:[/b] - [2009-03-05 11:03:34 | 000,088,576 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Tosrfhid.sys -- (Tosrfhid)
DRV:[b]64bit:[/b] - [2009-03-03 15:34:54 | 000,045,056 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV:[b]64bit:[/b] - [2009-02-19 16:20:18 | 000,076,160 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tosrfcom.sys -- (Tosrfcom)
DRV:[b]64bit:[/b] - [2009-02-11 17:26:18 | 000,407,576 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2008-10-06 17:56:58 | 000,173,696 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfbd.sys -- (tosrfbd)
DRV:[b]64bit:[/b] - [2008-09-17 15:14:00 | 000,012,744 | R--- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Entech64.sys -- (ENTECH64)
DRV:[b]64bit:[/b] - [2008-08-07 17:01:36 | 000,143,360 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
DRV:[b]64bit:[/b] - [2008-03-25 13:54:26 | 000,049,152 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosporte.sys -- (tosporte)
DRV:[b]64bit:[/b] - [2007-01-26 10:04:36 | 000,009,600 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\whfltr2k.sys -- (whfltr2k)
DRV - [2009-10-26 16:05:45 | 000,014,544 | ---- | M] (OpenLibSys.org) [Kernel | Auto | Running] -- C:\Users\Darek\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries21.gadget\WinRing0x64.sys -- (WinRing0_1_2_0)
DRV - [2009-10-17 14:42:27 | 000,021,200 | ---- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TVICHW64.SYS -- (TVICHW64)
DRV - [2009-10-12 14:31:04 | 000,032,816 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys -- (vstor2-ws60)
DRV - [2006-07-24 16:05:00 | 000,005,632 | ---- | M] () [File_System | System | Stopped] -- C:\Windows\SysWow64\drivers\StarOpen.sys -- (StarOpen)
DRV - [2004-06-22 15:44:50 | 000,005,632 | ---- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\Entech64.sys -- (ENTECH64)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1264084378-3322303571-3196748977-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2010-04-17 13:37:55 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins


O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll (GG Network S.A.)
O4:[b]64bit:[/b] - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.DLL (NVIDIA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [00PCTFW] C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe (PC Tools)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [MGSysCtrl] C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe (Micro-Star International Co., Ltd.)
O4 - HKLM..\Run: [WheelMouse] C:\MSI\Advanced Wheel Mouse\wh_exec.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1264084378-3322303571-3196748977-1012..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - HKU\S-1-5-21-1264084378-3322303571-3196748977-1012..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-1264084378-3322303571-3196748977-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe (PokerStars)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-1264084378-3322303571-3196748977-1000\..Trusted Domains: mks.com.pl ([www] https in Zaufane witryny)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab (Reg Error: Key error.)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} http://service.futuremark.com/virtualmark/tc/FMSI.cab (Reg Error: Key error.)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab (CKAVWebScan Object)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\http\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\https\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\ipp - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-10-21 11:42:07 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2010-08-21 12:53:05 | 000,040,092 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk - C:\PROGRA~2\Toshiba\BLUETO~1\TosBtMng.exe - (TOSHIBA CORPORATION.)
MsConfig:64bit - StartUpFolder: C:^Users^Darek^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^continuator_automate.exe.lnk - C:\PROGRA~2\FOOBAR~1\COMPON~1\CONTIN~1.EXE - File not found
MsConfig:64bit - StartUpReg: [b]Adobe ARM[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
MsConfig:64bit - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
MsConfig:64bit - StartUpReg: [b]Bonus.SSR.FR10[/b] - hkey= - key= - C:\Program Files (x86)\ABBYY FineReader 10\Bonus.ScreenshotReader.exe File not found
MsConfig:64bit - StartUpReg: [b]DAEMON Tools Lite[/b] - hkey= - key= - C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
MsConfig:64bit - StartUpReg: [b]ElcomSoft DPR Server[/b] - hkey= - key= - C:\Program Files (x86)\ElcomSoft\Distributed Password Recovery\esdprs.exe File not found
MsConfig:64bit - StartUpReg: [b]EPSON Stylus DX3800 Series[/b] - hkey= - key= - C:\Windows\SysNative\spool\DRIVERS\x64\3\E_FATIACE.EXE (SEIKO EPSON CORPORATION)
MsConfig:64bit - StartUpReg: [b]FlashPlayerUpdate[/b] - hkey= - key= - C:\Program Files (x86)\Opera\program\plugins\NPSWF32_FlashUtil.exe (Adobe Systems, Inc.)
MsConfig:64bit - StartUpReg: [b]Gadu-Gadu 10[/b] - hkey= - key= - C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.)
MsConfig:64bit - StartUpReg: [b]IPLA![/b] - hkey= - key= - C:\Program Files (x86)\ipla\ipla.exe File not found
MsConfig:64bit - StartUpReg: [b]SearchSettings[/b] - hkey= - key= - C:\Program Files (x86)\pdfforge Toolbar\SearchSettings.exe File not found
MsConfig:64bit - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
MsConfig:64bit - StartUpReg: [b]SunJavaUpdateSched[/b] - hkey= - key= - C:\Program Files (x86)\Java\jre6\bin\jusched.exe File not found
MsConfig:64bit - StartUpReg: [b]TkBellExe[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
MsConfig:64bit - StartUpReg: [b]UpdatePDRShortCut[/b] - hkey= - key= - C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe File not found
MsConfig:64bit - StartUpReg: [b]VMware hqtray[/b] - hkey= - key= - C:\Program Files (x86)\VMware\VMware Player\hqtray.exe (VMware, Inc.)
MsConfig:64bit - StartUpReg: [b]Windows Mobile Device Center[/b] - hkey= - key= - C:\Windows\WindowsMobile\wmdc.exe (Microsoft Corporation)
MsConfig:64bit - State: "startup" - Reg Error: Key error.

SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

[color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color]

[2010-08-31 21:05:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Panda Security
[2010-08-31 21:05:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Panda USB Vaccine
[2010-08-31 21:04:19 | 000,848,856 | ---- | C] (Panda Security ) -- C:\Users\Darek\Desktop\USBVaccineSetup.exe
[2010-08-30 21:55:49 | 000,000,000 | ---D | C] -- C:\Users\Darek\DoctorWeb
[2010-08-30 21:51:56 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Roaming\Malwarebytes
[2010-08-30 21:51:47 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010-08-30 21:51:46 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010-08-30 21:51:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010-08-30 21:51:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010-08-30 21:32:42 | 000,000,000 | ---D | C] -- C:\_OTL
[2010-08-30 21:28:36 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe
[2010-08-30 21:13:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro
[2010-08-30 21:12:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2010-08-30 21:06:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
[2010-08-30 21:06:35 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Kaspersky Lab
[2010-08-30 16:34:21 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2010-08-30 16:33:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2010-08-30 16:31:03 | 000,065,128 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2010-08-30 16:31:03 | 000,056,936 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2010-08-30 16:08:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Driver Cleaner
[2010-08-30 11:40:32 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2010-08-27 09:14:30 | 000,000,000 | ---D | C] -- C:\HMArchive
[2010-08-27 09:14:29 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Local\In The Money
[2010-08-27 09:14:05 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Roaming\HEM Data
[2010-08-27 09:10:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RVG Software
[2010-08-27 09:10:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PSQLINSTALL
[2010-08-25 13:03:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Acronis
[2010-08-25 13:03:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Acronis
[2010-08-25 10:14:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2010-08-25 10:14:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2010-08-21 17:36:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Vroom Vroom !!!
[2010-08-17 17:40:35 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Local\PokerStars
[2010-08-17 17:39:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PokerStars
[2010-07-25 18:14:59 | 000,000,000 | ---D | C] -- C:\lezac
[2010-07-25 11:26:59 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Local\Apps
[2010-07-20 22:40:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AutoMapa EU
[2010-07-14 09:15:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Avanquest Bluetooth SDK
[2010-07-14 09:10:39 | 000,000,000 | ---D | C] -- C:\ProgramData\BVRP Software
[2010-07-13 10:51:11 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Roaming\Samsung
[2010-07-13 10:51:11 | 000,000,000 | ---D | C] -- C:\Users\Darek\Documents\My Art
[2010-07-13 10:41:19 | 000,000,000 | -HSD | C] -- C:\Windows\SysWow64\Samsung_USB_Drivers
[2010-07-08 08:52:33 | 000,000,000 | ---D | C] -- C:\Fraps
[2010-07-07 17:09:51 | 000,000,000 | ---D | C] -- C:\Windows\WindowsMobile
[2010-07-07 13:06:14 | 000,000,000 | ---D | C] -- C:\Users\Darek\Desktop\Pierwsza_komunia_swieta_od_corki_Anety_Wuppertal_maj_2010r

[color=#E56717]========== Files - Modified Within 60 Days ==========[/color]

[2010-08-31 22:25:06 | 002,883,584 | -HS- | M] () -- C:\Users\Darek\NTUSER.DAT
[2010-08-31 22:16:53 | 000,013,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010-08-31 22:16:53 | 000,013,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010-08-31 22:12:43 | 000,339,991 | ---- | M] () -- C:\Users\Darek\Desktop\RSIT.exe
[2010-08-31 22:09:00 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010-08-31 22:08:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010-08-31 22:08:47 | 3220,561,920 | -HS- | M] () -- C:\hiberfil.sys
[2010-08-31 22:07:43 | 001,453,849 | -H-- | M] () -- C:\Users\Darek\AppData\Local\IconCache.db
[2010-08-31 22:04:29 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempzl3956.html
[2010-08-31 21:04:21 | 000,848,856 | ---- | M] (Panda Security ) -- C:\Users\Darek\Desktop\USBVaccineSetup.exe
[2010-08-31 20:46:09 | 000,100,908 | ---- | M] () -- C:\Users\Darek\Desktop\SystemLook.exe
[2010-08-31 20:42:06 | 000,132,597 | ---- | M] () -- C:\Users\Darek\Desktop\Flash_Disinfector.exe
[2010-08-31 20:38:41 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempHh5056.html
[2010-08-31 20:38:41 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempig5056.html
[2010-08-31 20:36:10 | 001,531,594 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010-08-31 20:36:10 | 000,692,058 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2010-08-31 20:36:10 | 000,610,412 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010-08-31 20:36:10 | 000,133,208 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2010-08-31 20:36:10 | 000,105,316 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010-08-31 13:12:57 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempDc4868.html
[2010-08-31 10:02:59 | 048,855,664 | ---- | M] () -- C:\Users\Darek\Desktop\2rhk4xk7.exe
[2010-08-31 08:25:19 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempUK4680.html
[2010-08-30 21:54:34 | 048,892,120 | ---- | M] () -- C:\Users\Darek\Desktop\launch.exe
[2010-08-30 21:51:50 | 000,001,013 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010-08-30 21:29:33 | 000,293,376 | ---- | M] () -- C:\Users\Darek\Desktop\iu90d21r.exe
[2010-08-30 21:28:37 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe
[2010-08-30 20:10:59 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemptX3480.html
[2010-08-30 20:10:59 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempAE3480.html
[2010-08-30 16:34:49 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempSK3740.html
[2010-08-30 16:34:49 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temprj3740.html
[2010-08-30 11:36:05 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempLN3340.html
[2010-08-29 18:02:26 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXQ4136.html
[2010-08-29 18:02:26 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBj4136.html
[2010-08-29 15:48:26 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempwk4792.html
[2010-08-29 12:00:50 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempzR4944.html
[2010-08-29 12:00:50 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempol4944.html
[2010-08-28 22:11:57 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempLG4972.html
[2010-08-28 22:11:57 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXa4972.html
[2010-08-28 18:24:55 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCp3256.html
[2010-08-28 18:24:55 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBw3256.html
[2010-08-28 14:12:59 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempkV3200.html
[2010-08-28 14:12:59 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempvC3200.html
[2010-08-28 10:04:50 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemphT3340.html
[2010-08-28 10:04:50 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCl3340.html
[2010-08-27 23:49:58 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempsMh896.html
[2010-08-27 23:49:58 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempKwG896.html
[2010-08-27 16:29:35 | 000,009,672 | ---- | M] () -- C:\bootsqm.dat
[2010-08-27 12:39:13 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempjt3028.html
[2010-08-27 12:39:13 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempRz3028.html
[2010-08-27 09:19:12 | 000,000,000 | ---- | M] () -- C:\Windows\HMHud.INI
[2010-08-27 09:10:52 | 000,001,237 | ---- | M] () -- C:\Users\Public\Desktop\HoldemManager.lnk
[2010-08-26 22:14:44 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemprA5060.html
[2010-08-26 22:14:44 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempof5060.html
[2010-08-26 11:26:17 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temphp4780.html
[2010-08-26 11:26:17 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempiW4780.html
[2010-08-25 19:11:12 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempvCf248.html
[2010-08-25 19:11:12 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXBL248.html
[2010-08-25 12:08:30 | 000,000,690 | ---- | M] () -- C:\Windows\SysWow64\WindowsPowerShell.lnk
[2010-08-25 12:08:30 | 000,000,676 | ---- | M] () -- C:\Windows\SysWow64\New Folder.lnk
[2010-08-25 12:08:30 | 000,000,674 | ---- | M] () -- C:\Windows\SysWow64\XPSViewer.lnk
[2010-08-25 12:08:30 | 000,000,674 | ---- | M] () -- C:\Windows\SysWow64\Passwords.lnk
[2010-08-25 12:08:30 | 000,000,674 | ---- | M] () -- C:\Windows\SysWow64\Documents.lnk
[2010-08-25 12:08:30 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\Pictures.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\zh-TW.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\zh-HK.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\zh-CN.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\xlive.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\winrm.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Video.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\uk-UA.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\tr-TR.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Music.lnk
[2010-08-25 12:08:30 | 000,000,664 | ---- | M] () -- C:\Windows\SysWow64\wbem.lnk
[2010-08-25 12:08:30 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\wdi.lnk
[2010-08-25 12:08:30 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\WCN.lnk
[2010-08-25 12:08:30 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\Wat.lnk
[2010-08-25 12:08:29 | 000,000,694 | ---- | M] () -- C:\Windows\SysWow64\Samsung_USB_Drivers.lnk
[2010-08-25 12:08:29 | 000,000,676 | ---- | M] () -- C:\Windows\SysWow64\sr-Latn-CS.lnk
[2010-08-25 12:08:29 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\Recovery.lnk
[2010-08-25 12:08:29 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\sysprep.lnk
[2010-08-25 12:08:29 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\restore.lnk
[2010-08-25 12:08:29 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\Speech.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\th-TH.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Tasks.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\sv-SE.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\sppui.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\sl-SI.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\slmgr.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\sk-SK.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Setup.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ru-RU.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\RTCOM.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ro-RO.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\pt-PT.lnk
[2010-08-25 12:08:29 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\spp.lnk
[2010-08-25 12:08:29 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\ras.lnk
[2010-08-25 12:08:28 | 000,000,700 | ---- | M] () -- C:\Windows\SysWow64\Printing_Admin_Scripts.lnk
[2010-08-25 12:08:28 | 000,000,682 | ---- | M] () -- C:\Windows\SysWow64\manifeststore.lnk
[2010-08-25 12:08:28 | 000,000,678 | ---- | M] () -- C:\Windows\SysWow64\NetworkList.lnk
[2010-08-25 12:08:28 | 000,000,674 | ---- | M] () -- C:\Windows\SysWow64\migration.lnk
[2010-08-25 12:08:28 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\Macromed.lnk
[2010-08-25 12:08:28 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\LogFiles.lnk
[2010-08-25 12:08:28 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\migwiz.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\pt-BR.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\pl-PL.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\nl-NL.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\nb-NO.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Msdtc.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\lv-LV.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\lt-LT.lnk
[2010-08-25 12:08:28 | 000,000,664 | ---- | M] () -- C:\Windows\SysWow64\oobe.lnk
[2010-08-25 12:08:28 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\NDF.lnk
[2010-08-25 12:08:28 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\MUI.lnk
[2010-08-25 12:08:28 | 000,000,660 | ---- | M] () -- C:\Windows\SysWow64\pl.lnk
[2010-08-25 12:08:27 | 000,000,688 | ---- | M] () -- C:\Windows\SysWow64\GroupPolicyUsers.lnk
[2010-08-25 12:08:27 | 000,000,682 | ---- | M] () -- C:\Windows\SysWow64\InstallShield.lnk
[2010-08-25 12:08:27 | 000,000,678 | ---- | M] () -- C:\Windows\SysWow64\GroupPolicy.lnk
[2010-08-25 12:08:27 | 000,000,676 | ---- | M] () -- C:\Windows\SysWow64\Futuremark.lnk
[2010-08-25 12:08:27 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\inetsrv.lnk
[2010-08-25 12:08:27 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\icsxml.lnk
[2010-08-25 12:08:27 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\FxsTmp.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ko-KR.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ja-JP.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\it-IT.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\hu-HU.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\hr-HR.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\he-IL.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\fr-FR.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\fi-FI.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\et-EE.lnk
[2010-08-25 12:08:27 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\IME.lnk
[2010-08-25 12:08:26 | 000,000,678 | ---- | M] () -- C:\Windows\SysWow64\DriverStore.lnk
[2010-08-25 12:08:26 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\eps_icon.avi.lnk
[2010-08-25 12:08:26 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\catroot2.lnk
[2010-08-25 12:08:26 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\drivers.lnk
[2010-08-25 12:08:26 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\config.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\es-ES.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\en-US.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\el-GR.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\de-DE.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\da-DK.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\cs-CZ.lnk
[2010-08-25 12:08:26 | 000,000,664 | ---- | M] () -- C:\Windows\SysWow64\Dism.lnk
[2010-08-25 12:08:26 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\com.lnk
[2010-08-25 12:08:26 | 000,000,660 | ---- | M] () -- C:\Windows\SysWow64\en.lnk
[2010-08-25 12:08:25 | 000,000,692 | ---- | M] () -- C:\Windows\SysWow64\AdvancedInstallers.lnk
[2010-08-25 12:08:25 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\catroot.lnk
[2010-08-25 12:08:25 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\bg-BG.lnk
[2010-08-25 12:08:25 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ar-SA.lnk
[2010-08-25 12:08:25 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\AGEIA.lnk
[2010-08-25 12:08:25 | 000,000,664 | ---- | M] () -- C:\Windows\SysWow64\0409.lnk
[2010-08-25 12:08:25 | 000,000,660 | ---- | M] () -- C:\Windows\SysWow64\...lnk
[2010-08-25 12:08:25 | 000,000,658 | ---- | M] () -- C:\Windows\SysWow64\..lnk
[2010-08-25 09:21:35 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempjM4976.html
[2010-08-24 16:37:03 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempgI4352.html
[2010-08-24 16:37:03 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempzG4352.html
[2010-08-24 09:31:55 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempbO2380.html
[2010-08-23 21:46:54 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempGq3896.html
[2010-08-23 21:46:54 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempTO3896.html
[2010-08-19 07:47:55 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempHU4620.html
[2010-08-18 17:43:50 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempHR4888.html
[2010-08-18 10:43:56 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXY2948.html
[2010-08-17 19:29:26 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempzK2284.html
[2010-08-17 19:29:26 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temptz2284.html
[2010-08-17 18:16:50 | 000,116,464 | ---- | M] () -- C:\Users\Darek\AppData\Local\GDIPFONTCACHEV1.DAT
[2010-08-17 17:39:47 | 000,001,065 | ---- | M] () -- C:\Users\Public\Desktop\PokerStars.lnk
[2010-08-17 10:04:30 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempun4388.html
[2010-08-16 17:56:55 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempPb3716.html
[2010-08-16 17:56:55 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempwn3716.html
[2010-08-16 11:22:33 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemplU1412.html
[2010-08-16 11:22:33 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXx1412.html
[2010-08-16 09:21:30 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCE3788.html
[2010-08-15 19:00:26 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempMK2040.html
[2010-08-15 19:00:26 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempsv2040.html
[2010-08-15 13:56:10 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempyX5016.html
[2010-08-15 11:55:14 | 000,000,727 | ---- | M] () -- C:\Users\Darek\Desktop\USdx — skrót.lnk
[2010-08-15 11:35:39 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempmi3752.html
[2010-08-14 22:25:48 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBt3840.html
[2010-08-14 22:25:48 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempRV3840.html
[2010-08-08 21:31:20 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBtE460.html
[2010-08-08 21:31:20 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempalg460.html
[2010-08-08 16:10:19 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempIG4500.html
[2010-08-08 16:10:19 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempxh4500.html
[2010-08-08 13:37:49 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempAb4432.html
[2010-08-07 21:35:18 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temppb4264.html
[2010-08-07 21:35:18 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemphW4264.html
[2010-08-07 12:39:11 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempapL252.html
[2010-08-07 12:39:11 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempkFN252.html
[2010-08-06 19:23:52 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemprD4228.html
[2010-08-06 12:51:17 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempKc4680.html
[2010-08-06 12:51:17 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempHl4680.html
[2010-08-06 09:58:22 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempqT3164.html
[2010-08-06 09:58:22 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempQS3164.html
[2010-08-05 20:32:35 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempZm3544.html
[2010-08-05 20:32:35 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempJs3544.html
[2010-08-05 15:27:00 | 000,012,264 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb
[2010-08-05 13:27:00 | 000,065,128 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2010-08-05 13:27:00 | 000,056,936 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2010-08-05 09:34:32 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempfa4716.html
[2010-08-05 09:31:32 | 000,444,944 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010-08-04 21:54:23 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempUk4068.html
[2010-08-04 21:54:23 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempSC4068.html
[2010-08-04 19:32:59 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempEPh664.html
[2010-08-04 19:32:59 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempsWz664.html
[2010-08-04 18:32:30 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempvP5032.html
[2010-08-04 10:08:38 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempZX4880.html
[2010-08-03 21:25:04 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempxc5016.html
[2010-07-23 14:48:07 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010-07-20 22:40:55 | 000,000,040 | ---- | M] () -- C:\Windows\SysWow64\Profile.info
[2010-07-14 09:42:03 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempZM4820.html
[2010-07-14 09:42:03 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempga4820.html
[2010-07-13 10:44:40 | 000,000,000 | ---- | M] () -- C:\ProgramData\LauncherAccess.dt
[2010-07-09 13:48:19 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempeV2876.html
[2010-07-09 11:50:35 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempkZ3940.html
[2010-07-09 11:50:35 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temprj3940.html
[2010-07-08 21:17:10 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemptUd740.html
[2010-07-08 21:17:10 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempssW740.html
[2010-07-08 17:39:08 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempdm4376.html
[2010-07-08 17:00:44 | 000,037,170 | ---- | M] () -- C:\Users\Darek\Documents\sysop.odt
[2010-07-08 11:40:11 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempMs4084.html
[2010-07-08 11:40:11 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temptr4084.html
[2010-07-08 08:52:33 | 000,000,562 | ---- | M] () -- C:\Users\Darek\Desktop\Fraps.lnk
[2010-07-07 17:10:14 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdRapi2_01_00_00.Wdf
[2010-07-07 16:52:37 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempEm4536.html
[2010-07-07 13:46:24 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempEgs972.html
[2010-07-07 13:46:24 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemptSM972.html
[2010-07-07 11:21:57 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temphz3012.html
[2010-07-07 11:21:57 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempIM3012.html
[2010-07-06 17:49:31 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempzu3788.html
[2010-07-06 14:01:24 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempKg3716.html
[2010-07-06 14:01:24 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempck3716.html
[2010-07-06 12:42:10 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempgF3276.html
[2010-07-06 12:42:10 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCm3276.html
[2010-07-06 08:57:46 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempvUE148.html
[2010-07-05 19:51:27 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemplP4524.html
[2010-07-05 19:51:27 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCi4524.html
[2010-07-05 14:20:19 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempGC4216.html
[2010-07-05 14:20:19 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempno4216.html
[2010-07-05 09:19:46 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempzm4524.html
[2010-07-04 21:58:28 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempVi5096.html
[2010-07-04 21:58:28 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempeQ5096.html
[2010-07-04 12:56:36 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempVw4332.html
[2010-07-04 12:56:36 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempku4332.html
[2010-07-04 09:44:25 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBeX816.html
[2010-07-04 09:44:25 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempgBf816.html
[2010-07-03 19:44:13 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempEo3080.html
[2010-07-03 19:44:13 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempSH3080.html
[2010-07-03 08:51:45 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempiT4044.html
[2010-07-03 08:51:45 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempLI4044.html

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010-08-31 22:12:43 | 000,339,991 | ---- | C] () -- C:\Users\Darek\Desktop\RSIT.exe
[2010-08-31 21:44:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzl3956.html
[2010-08-31 20:46:09 | 000,100,908 | ---- | C] () -- C:\Users\Darek\Desktop\SystemLook.exe
[2010-08-31 20:34:39 | 000,132,597 | ---- | C] () -- C:\Users\Darek\Desktop\Flash_Disinfector.exe
[2010-08-31 20:28:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHh5056.html
[2010-08-31 20:28:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempig5056.html
[2010-08-31 10:58:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDc4868.html
[2010-08-31 09:59:30 | 048,855,664 | ---- | C] () -- C:\Users\Darek\Desktop\2rhk4xk7.exe
[2010-08-31 08:24:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUK4680.html
[2010-08-30 21:51:50 | 000,001,013 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010-08-30 21:50:24 | 048,892,120 | ---- | C] () -- C:\Users\Darek\Desktop\launch.exe
[2010-08-30 21:29:33 | 000,293,376 | ---- | C] () -- C:\Users\Darek\Desktop\iu90d21r.exe
[2010-08-30 17:13:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptX3480.html
[2010-08-30 17:13:25 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAE3480.html
[2010-08-30 16:19:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSK3740.html
[2010-08-30 16:19:46 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprj3740.html
[2010-08-30 08:38:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLN3340.html
[2010-08-29 16:49:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXQ4136.html
[2010-08-29 16:49:43 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBj4136.html
[2010-08-29 15:38:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempwk4792.html
[2010-08-29 11:26:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzR4944.html
[2010-08-29 11:26:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempol4944.html
[2010-08-28 21:05:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLG4972.html
[2010-08-28 21:05:29 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXa4972.html
[2010-08-28 16:16:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCp3256.html
[2010-08-28 16:16:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBw3256.html
[2010-08-28 10:58:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkV3200.html
[2010-08-28 10:58:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvC3200.html
[2010-08-28 09:21:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemphT3340.html
[2010-08-28 09:21:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCl3340.html
[2010-08-27 18:05:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsMh896.html
[2010-08-27 18:05:49 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKwG896.html
[2010-08-27 16:29:35 | 000,009,672 | ---- | C] () -- C:\bootsqm.dat
[2010-08-27 09:19:12 | 000,000,000 | ---- | C] () -- C:\Windows\HMHud.INI
[2010-08-27 09:12:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjt3028.html
[2010-08-27 09:12:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRz3028.html
[2010-08-27 09:10:52 | 000,001,237 | ---- | C] () -- C:\Users\Public\Desktop\HoldemManager.lnk
[2010-08-26 18:21:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemprA5060.html
[2010-08-26 18:21:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempof5060.html
[2010-08-26 09:24:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphp4780.html
[2010-08-26 09:24:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiW4780.html
[2010-08-25 17:20:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvCf248.html
[2010-08-25 17:20:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXBL248.html
[2010-08-25 12:08:30 | 000,000,690 | ---- | C] () -- C:\Windows\SysWow64\WindowsPowerShell.lnk
[2010-08-25 12:08:30 | 000,000,676 | ---- | C] () -- C:\Windows\SysWow64\New Folder.lnk
[2010-08-25 12:08:30 | 000,000,674 | ---- | C] () -- C:\Windows\SysWow64\XPSViewer.lnk
[2010-08-25 12:08:30 | 000,000,674 | ---- | C] () -- C:\Windows\SysWow64\Passwords.lnk
[2010-08-25 12:08:30 | 000,000,674 | ---- | C] () -- C:\Windows\SysWow64\Documents.lnk
[2010-08-25 12:08:30 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\Pictures.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\zh-TW.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\zh-HK.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\zh-CN.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\xlive.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\winrm.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Video.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\uk-UA.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\tr-TR.lnk
[2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Music.lnk
[2010-08-25 12:08:30 | 000,000,664 | ---- | C] () -- C:\Windows\SysWow64\wbem.lnk
[2010-08-25 12:08:30 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\wdi.lnk
[2010-08-25 12:08:30 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\WCN.lnk
[2010-08-25 12:08:30 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\Wat.lnk
[2010-08-25 12:08:29 | 000,000,694 | ---- | C] () -- C:\Windows\SysWow64\Samsung_USB_Drivers.lnk
[2010-08-25 12:08:29 | 000,000,676 | ---- | C] () -- C:\Windows\SysWow64\sr-Latn-CS.lnk
[2010-08-25 12:08:29 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\Recovery.lnk
[2010-08-25 12:08:29 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\sysprep.lnk
[2010-08-25 12:08:29 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\restore.lnk
[2010-08-25 12:08:29 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\Speech.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\th-TH.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Tasks.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\sv-SE.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\sppui.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\sl-SI.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\slmgr.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\sk-SK.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Setup.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ru-RU.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\RTCOM.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ro-RO.lnk
[2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\pt-PT.lnk
[2010-08-25 12:08:29 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\spp.lnk
[2010-08-25 12:08:29 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\ras.lnk
[2010-08-25 12:08:28 | 000,000,700 | ---- | C] () -- C:\Windows\SysWow64\Printing_Admin_Scripts.lnk
[2010-08-25 12:08:28 | 000,000,682 | ---- | C] () -- C:\Windows\SysWow64\manifeststore.lnk
[2010-08-25 12:08:28 | 000,000,678 | ---- | C] () -- C:\Windows\SysWow64\NetworkList.lnk
[2010-08-25 12:08:28 | 000,000,674 | ---- | C] () -- C:\Windows\SysWow64\migration.lnk
[2010-08-25 12:08:28 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\Macromed.lnk
[2010-08-25 12:08:28 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\LogFiles.lnk
[2010-08-25 12:08:28 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\migwiz.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\pt-BR.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\pl-PL.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\nl-NL.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\nb-NO.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Msdtc.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\lv-LV.lnk
[2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\lt-LT.lnk
[2010-08-25 12:08:28 | 000,000,664 | ---- | C] () -- C:\Windows\SysWow64\oobe.lnk
[2010-08-25 12:08:28 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\NDF.lnk
[2010-08-25 12:08:28 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\MUI.lnk
[2010-08-25 12:08:28 | 000,000,660 | ---- | C] () -- C:\Windows\SysWow64\pl.lnk
[2010-08-25 12:08:27 | 000,000,688 | ---- | C] () -- C:\Windows\SysWow64\GroupPolicyUsers.lnk
[2010-08-25 12:08:27 | 000,000,682 | ---- | C] () -- C:\Windows\SysWow64\InstallShield.lnk
[2010-08-25 12:08:27 | 000,000,678 | ---- | C] () -- C:\Windows\SysWow64\GroupPolicy.lnk
[2010-08-25 12:08:27 | 000,000,676 | ---- | C] () -- C:\Windows\SysWow64\Futuremark.lnk
[2010-08-25 12:08:27 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\inetsrv.lnk
[2010-08-25 12:08:27 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\icsxml.lnk
[2010-08-25 12:08:27 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\FxsTmp.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ko-KR.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ja-JP.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\it-IT.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\hu-HU.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\hr-HR.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\he-IL.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\fr-FR.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\fi-FI.lnk
[2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\et-EE.lnk
[2010-08-25 12:08:27 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\IME.lnk
[2010-08-25 12:08:26 | 000,000,678 | ---- | C] () -- C:\Windows\SysWow64\DriverStore.lnk
[2010-08-25 12:08:26 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\eps_icon.avi.lnk
[2010-08-25 12:08:26 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\catroot2.lnk
[2010-08-25 12:08:26 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\drivers.lnk
[2010-08-25 12:08:26 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\config.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\es-ES.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\en-US.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\el-GR.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\de-DE.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\da-DK.lnk
[2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\cs-CZ.lnk
[2010-08-25 12:08:26 | 000,000,664 | ---- | C] () -- C:\Windows\SysWow64\Dism.lnk
[2010-08-25 12:08:26 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\com.lnk
[2010-08-25 12:08:26 | 000,000,660 | ---- | C] () -- C:\Windows\SysWow64\en.lnk
[2010-08-25 12:08:25 | 000,000,692 | ---- | C] () -- C:\Windows\SysWow64\AdvancedInstallers.lnk
[2010-08-25 12:08:25 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\catroot.lnk
[2010-08-25 12:08:25 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\bg-BG.lnk
[2010-08-25 12:08:25 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ar-SA.lnk
[2010-08-25 12:08:25 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\AGEIA.lnk
[2010-08-25 12:08:25 | 000,000,664 | ---- | C] () -- C:\Windows\SysWow64\0409.lnk
[2010-08-25 12:08:25 | 000,000,660 | ---- | C] () -- C:\Windows\SysWow64\...lnk
[2010-08-25 12:08:25 | 000,000,658 | ---- | C] () -- C:\Windows\SysWow64\..lnk
[2010-08-25 09:11:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjM4976.html
[2010-08-24 16:00:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgI4352.html
[2010-08-24 16:00:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzG4352.html
[2010-08-24 09:25:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbO2380.html
[2010-08-23 18:37:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGq3896.html
[2010-08-23 18:37:03 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTO3896.html
[2010-08-19 07:47:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHU4620.html
[2010-08-18 16:50:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHR4888.html
[2010-08-18 10:43:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXY2948.html
[2010-08-17 17:39:47 | 000,001,065 | ---- | C] () -- C:\Users\Public\Desktop\PokerStars.lnk
[2010-08-17 16:55:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzK2284.html
[2010-08-17 16:55:56 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptz2284.html
[2010-08-17 10:00:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempun4388.html
[2010-08-16 17:03:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPb3716.html
[2010-08-16 17:03:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempwn3716.html
[2010-08-16 10:47:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplU1412.html
[2010-08-16 10:47:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXx1412.html
[2010-08-16 09:11:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCE3788.html
[2010-08-15 17:08:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMK2040.html
[2010-08-15 17:08:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsv2040.html
[2010-08-15 13:55:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempyX5016.html
[2010-08-15 11:55:14 | 000,000,727 | ---- | C] () -- C:\Users\Darek\Desktop\USdx — skrót.lnk
[2010-08-15 11:13:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmi3752.html
[2010-08-14 21:35:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBt3840.html
[2010-08-14 21:35:03 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRV3840.html
[2010-08-08 21:12:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBtE460.html
[2010-08-08 21:12:50 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempalg460.html
[2010-08-08 15:30:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIG4500.html
[2010-08-08 15:30:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxh4500.html
[2010-08-08 12:46:10 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAb4432.html
[2010-08-07 20:59:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppb4264.html
[2010-08-07 20:59:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemphW4264.html
[2010-08-07 11:30:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempapL252.html
[2010-08-07 11:30:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkFN252.html
[2010-08-06 18:05:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemprD4228.html
[2010-08-06 12:06:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKc4680.html
[2010-08-06 12:06:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHl4680.html
[2010-08-06 07:56:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqT3164.html
[2010-08-06 07:56:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQS3164.html
[2010-08-05 20:17:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZm3544.html
[2010-08-05 20:17:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJs3544.html
[2010-08-05 09:33:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfa4716.html
[2010-08-04 21:32:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUk4068.html
[2010-08-04 21:32:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSC4068.html
[2010-08-04 19:25:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEPh664.html
[2010-08-04 19:25:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsWz664.html
[2010-08-04 17:13:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvP5032.html
[2010-08-04 09:27:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZX4880.html
[2010-08-03 18:19:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxc5016.html
[2010-07-23 14:48:07 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010-07-20 22:40:55 | 000,000,040 | ---- | C] () -- C:\Windows\SysWow64\Profile.info
[2010-07-14 09:18:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZM4820.html
[2010-07-14 09:18:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempga4820.html
[2010-07-13 10:44:40 | 000,000,000 | ---- | C] () -- C:\ProgramData\LauncherAccess.dt
[2010-07-13 10:41:02 | 000,000,766 | ---- | C] () -- C:\Windows\SysWow64\Uninstall.ico
[2010-07-09 13:43:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeV2876.html
[2010-07-09 09:46:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkZ3940.html
[2010-07-09 09:46:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprj3940.html
[2010-07-08 21:10:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptUd740.html
[2010-07-08 21:10:11 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempssW740.html
[2010-07-08 17:00:42 | 000,037,170 | ---- | C] () -- C:\Users\Darek\Documents\sysop.odt
[2010-07-08 16:51:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempdm4376.html
[2010-07-08 10:28:05 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMs4084.html
[2010-07-08 10:28:05 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptr4084.html
[2010-07-08 08:52:33 | 000,000,562 | ---- | C] () -- C:\Users\Darek\Desktop\Fraps.lnk
[2010-07-07 17:10:14 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdRapi2_01_00_00.Wdf
[2010-07-07 16:50:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEm4536.html
[2010-07-07 13:04:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEgs972.html
[2010-07-07 13:04:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptSM972.html
[2010-07-07 10:08:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphz3012.html
[2010-07-07 10:08:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIM3012.html
[2010-07-06 17:01:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzu3788.html
[2010-07-06 12:54:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKg3716.html
[2010-07-06 12:54:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempck3716.html
[2010-07-06 09:05:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgF3276.html
[2010-07-06 09:05:11 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCm3276.html
[2010-07-06 08:56:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvUE148.html
[2010-07-05 17:32:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplP4524.html
[2010-07-05 17:32:47 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCi4524.html
[2010-07-05 13:59:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGC4216.html
[2010-07-05 13:59:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempno4216.html
[2010-07-05 08:58:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzm4524.html
[2010-07-04 20:51:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVi5096.html
[2010-07-04 20:51:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeQ5096.html
[2010-07-04 11:44:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVw4332.html
[2010-07-04 11:44:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempku4332.html
[2010-07-04 07:59:26 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBeX816.html
[2010-07-04 07:59:26 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgBf816.html
[2010-07-03 18:46:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEo3080.html
[2010-07-03 18:46:19 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSH3080.html
[2010-07-03 07:43:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiT4044.html
[2010-07-03 07:43:49 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLI4044.html
[2010-07-02 18:07:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSu3252.html
[2010-07-02 08:36:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempah4088.html
[2010-07-02 08:36:29 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNR4088.html
[2010-07-01 19:53:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsk5080.html
[2010-07-01 19:53:49 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsh5080.html
[2010-07-01 11:48:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempwK4312.html
[2010-07-01 11:48:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempee4312.html
[2010-07-01 11:02:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRm5084.html
[2010-07-01 07:29:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbr4612.html
[2010-06-30 17:42:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVb5012.html
[2010-06-30 17:42:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempwe5012.html
[2010-06-30 07:45:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJK4268.html
[2010-06-30 07:45:47 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppw4268.html
[2010-06-29 21:07:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKP4236.html
[2010-06-29 21:07:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBw4236.html
[2010-06-29 18:46:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYR4296.html
[2010-06-29 18:46:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempND4296.html
[2010-06-29 12:31:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxR2768.html
[2010-06-29 12:31:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAX2768.html
[2010-06-29 06:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfi3708.html
[2010-06-29 06:32:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGJ3708.html
[2010-06-28 17:50:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphs4644.html
[2010-06-28 17:50:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcb4644.html
[2010-06-28 11:53:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYm3660.html
[2010-06-28 11:53:09 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeA3660.html
[2010-06-28 07:44:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDP4356.html
[2010-06-28 07:44:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphi4356.html
[2010-06-27 16:31:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFF1840.html
[2010-06-27 16:31:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvO1840.html
[2010-06-27 10:22:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGj3448.html
[2010-06-27 08:25:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIu2876.html
[2010-06-26 22:32:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempge3372.html
[2010-06-26 18:38:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCb4328.html
[2010-06-26 15:34:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfz4892.html
[2010-06-26 15:34:38 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgR4892.html
[2010-06-26 12:42:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRO4148.html
[2010-06-26 08:06:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVd4904.html
[2010-06-26 08:06:50 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuS4904.html
[2010-06-25 17:53:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempop4476.html
[2010-06-25 17:53:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuV4476.html
[2010-06-25 10:45:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempev5056.html
[2010-06-25 10:45:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTS5056.html
[2010-06-25 08:45:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxH5092.html
[2010-06-25 08:45:04 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCU5092.html
[2010-06-24 18:00:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbQ4208.html
[2010-06-24 07:49:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQv4488.html
[2010-06-23 21:32:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuS2248.html
[2010-06-23 21:32:20 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsk2248.html
[2010-06-23 19:14:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzSj240.html
[2010-06-23 19:14:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOCp240.html
[2010-06-23 17:56:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFL4904.html
[2010-06-23 15:13:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoT4672.html
[2010-06-23 15:13:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKI4672.html
[2010-06-23 12:09:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYk3096.html
[2010-06-23 12:09:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBS3096.html
[2010-06-23 08:46:05 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWT3976.html
[2010-06-23 08:46:05 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZE3976.html
[2010-06-22 18:41:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeZ3692.html
[2010-06-22 18:41:28 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvv3692.html
[2010-06-22 18:07:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUI4684.html
[2010-06-22 10:09:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIn5088.html
[2010-06-22 10:09:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJn5088.html
[2010-06-22 06:49:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqJ4512.html
[2010-06-22 06:49:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTw4512.html
[2010-06-21 17:53:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgP3684.html
[2010-06-21 17:53:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprz3684.html
[2010-06-21 15:59:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempif3032.html
[2010-06-21 15:59:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVV3032.html
[2010-06-21 12:10:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvc4124.html
[2010-06-21 12:10:43 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempab4124.html
[2010-06-21 09:32:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAF4208.html
[2010-06-20 18:01:52 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuH1492.html
[2010-06-20 18:01:52 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFt1492.html
[2010-06-18 11:00:06 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCK4196.html
[2010-06-17 16:52:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempqf3704.html
[2010-06-17 16:52:47 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvR3704.html
[2010-06-17 06:35:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSr4464.html
[2010-06-17 06:35:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQt4464.html
[2010-06-16 19:42:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGl3588.html
[2010-06-16 19:42:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeA3588.html
[2010-06-16 17:07:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempca5004.html
[2010-06-16 17:07:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJM5004.html
[2010-06-16 14:58:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWc2656.html
[2010-06-16 14:58:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTD2656.html
[2010-06-16 08:27:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemphT3408.html
[2010-06-16 08:27:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIj3408.html
[2010-06-16 06:23:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNP4784.html
[2010-06-16 06:23:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZS4784.html
[2010-06-15 18:14:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBD2620.html
[2010-06-15 18:14:17 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemprL2620.html
[2010-06-15 15:59:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempth3596.html
[2010-06-15 15:59:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVn3596.html
[2010-06-15 10:42:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVb4848.html
[2010-06-15 10:42:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnM4848.html
[2010-06-15 08:48:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmv2500.html
[2010-06-14 18:14:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOv2744.html
[2010-06-14 18:14:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNP2744.html
[2010-06-14 06:33:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBe4568.html
[2010-06-14 06:33:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBw4568.html
[2010-06-13 10:36:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiV5088.html
[2010-06-13 10:36:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphb5088.html
[2010-06-12 17:53:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuV3668.html
[2010-06-12 17:53:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNj3668.html
[2010-06-12 15:24:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjv4360.html
[2010-06-12 15:24:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLV4360.html
[2010-06-12 09:42:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXd4496.html
[2010-06-12 09:42:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXU4496.html
[2010-06-11 22:30:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZi4516.html
[2010-06-11 22:30:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYy4516.html
[2010-06-11 19:10:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempuj4424.html
[2010-06-11 19:10:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZa4424.html
[2010-06-11 16:56:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTh2920.html
[2010-06-11 16:56:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIP2920.html
[2010-06-11 12:05:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSJ2676.html
[2010-06-11 12:05:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxp2676.html
[2010-06-11 11:09:10 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbB2788.html
[2010-06-11 11:09:10 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHg2788.html
[2010-06-11 09:44:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvX4140.html
[2010-06-10 20:40:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZo3292.html
[2010-06-10 20:40:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempql3292.html
[2010-06-10 18:56:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaL1180.html
[2010-06-10 18:26:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPs3616.html
[2010-06-10 10:33:05 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTl4556.html
[2010-06-10 10:33:05 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeI4556.html
[2010-06-10 06:37:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLw3452.html
[2010-06-09 19:35:26 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQJ4840.html
[2010-06-09 19:35:26 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQo4840.html
[2010-06-09 09:38:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempdS4136.html
[2010-06-09 09:38:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPW4136.html
[2010-06-08 20:55:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoG4292.html
[2010-06-08 20:55:09 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXY4292.html
[2010-06-08 16:13:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzZ3056.html
[2010-06-08 16:13:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppu3056.html
[2010-06-08 11:42:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsn4016.html
[2010-06-08 11:42:04 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEX4016.html
[2010-06-08 08:41:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbK4680.html
[2010-06-08 08:41:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVT4680.html
[2010-06-07 20:03:59 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTT1904.html
[2010-06-07 20:03:59 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUQ1904.html
[2010-06-07 14:49:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZg1052.html
[2010-06-07 14:21:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJLK504.html
[2010-06-07 06:16:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppH1688.html
[2010-06-06 20:14:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjq3964.html
[2010-06-06 20:14:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJM3964.html
[2010-06-03 08:26:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEZ2016.html
[2010-06-02 22:08:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzG3172.html
[2010-06-02 22:08:25 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Templh3172.html
[2010-06-02 16:58:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWg3376.html
[2010-06-02 16:58:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTn3376.html
[2010-06-02 15:57:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNr4052.html
[2010-06-02 15:57:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVr4052.html
[2010-06-02 13:43:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUM3436.html
[2010-06-02 13:43:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQt3436.html
[2010-06-02 10:38:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZg2932.html
[2010-06-02 10:38:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnL2932.html
[2010-06-02 09:20:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempId2996.html
[2010-06-01 22:40:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBc3552.html
[2010-06-01 18:45:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphj2304.html
[2010-06-01 18:45:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBX2304.html
[2010-06-01 17:20:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSe4972.html
[2010-06-01 17:20:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFN4972.html
[2010-06-01 15:52:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgW4316.html
[2010-06-01 14:33:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppP4184.html
[2010-06-01 14:33:25 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBp4184.html
[2010-06-01 11:08:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIB3312.html
[2010-06-01 11:08:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZI3312.html
[2010-06-01 09:04:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZW3712.html
[2010-05-31 19:05:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRO2856.html
[2010-05-31 19:05:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOR2856.html
[2010-05-31 15:12:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHA3788.html
[2010-05-31 09:07:06 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNRz408.html
[2010-05-31 07:20:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHH4296.html
[2010-05-31 07:20:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptR4296.html
[2010-05-30 18:38:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXp2824.html
[2010-05-30 18:38:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempdb2824.html
[2010-05-30 17:56:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTk4476.html
[2010-05-30 16:23:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCz2952.html
[2010-05-30 12:36:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMh4372.html
[2010-05-30 10:57:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYU3432.html
[2010-05-29 18:29:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsX3516.html
[2010-05-29 18:29:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFO3516.html
[2010-05-29 10:59:59 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYE4976.html
[2010-05-29 10:59:59 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNZ4976.html
[2010-05-29 09:34:14 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHF3572.html
[2010-05-29 09:34:14 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAZ3572.html
[2010-05-28 18:49:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempuz1312.html
[2010-05-28 14:52:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDn1524.html
[2010-05-28 14:52:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcf1524.html
[2010-05-28 11:54:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempET1040.html
[2010-05-28 11:54:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempuu1040.html
[2010-05-28 09:42:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprq1236.html
[2010-05-27 20:16:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGH2712.html
[2010-05-27 19:39:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOE4160.html
[2010-05-27 11:33:42 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplL1740.html
[2010-05-26 15:09:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempio3068.html
[2010-05-26 15:09:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIP3068.html
[2010-05-26 07:23:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxJ3404.html
[2010-05-26 07:23:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiY3404.html
[2010-05-25 20:02:54 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempos2308.html
[2010-05-25 20:02:54 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnR2308.html
[2010-05-25 16:27:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempru2992.html
[2010-05-25 10:52:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptO4500.html
[2010-05-24 19:00:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempwW3732.html
[2010-05-24 19:00:43 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLw3732.html
[2010-05-24 11:18:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNQ1436.html
[2010-05-24 11:18:56 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempkp1436.html
[2010-05-23 17:59:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempui1756.html
[2010-05-23 17:59:43 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQy1756.html
[2010-05-23 12:54:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEx1384.html
[2010-05-23 12:54:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSd1384.html
[2010-05-23 08:04:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFc4820.html
[2010-05-23 08:04:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSV4820.html
[2010-05-22 21:49:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKs4912.html
[2010-05-22 21:49:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGj4912.html
[2010-05-22 19:11:21 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoP4004.html
[2010-05-22 19:11:21 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKY4004.html
[2010-05-22 16:13:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempko4236.html
[2010-05-22 16:13:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGF4236.html
[2010-05-22 10:59:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPP3484.html
[2010-05-22 10:59:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiF3484.html
[2010-05-21 21:09:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSh1420.html
[2010-05-21 19:58:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWO4520.html
[2010-05-21 19:58:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLm4520.html
[2010-05-21 17:11:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWx3872.html
[2010-05-21 12:50:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFS5024.html
[2010-05-21 12:50:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprc5024.html
[2010-05-20 19:42:59 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZE4384.html
[2010-05-20 19:42:59 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAV4384.html
[2010-05-20 16:24:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfx3648.html
[2010-05-20 16:24:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeL3648.html
[2010-05-20 13:05:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGP3448.html
[2010-05-20 13:05:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkA3448.html
[2010-05-19 19:16:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZI4568.html
[2010-05-19 19:16:28 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbb4568.html
[2010-05-19 06:34:54 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVQ1916.html
[2010-05-18 17:32:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRb1452.html
[2010-05-18 17:32:34 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvs1452.html
[2010-05-18 11:27:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvp1828.html
[2010-05-18 11:27:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYc1828.html
[2010-05-17 18:47:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempmO4000.html
[2010-05-17 18:47:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkB4000.html
[2010-05-17 08:18:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKs3804.html
[2010-05-16 19:58:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphu3332.html
[2010-05-16 19:58:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKZ3332.html
[2010-05-16 16:12:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBz4296.html
[2010-05-16 16:12:03 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempuf4296.html
[2010-05-15 22:08:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temped3944.html
[2010-05-15 17:24:52 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempdb3568.html
[2010-05-15 17:24:52 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBf3568.html
[2010-05-13 17:10:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDc4392.html
[2010-05-13 17:10:34 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempqy4392.html
[2010-05-12 19:37:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqL3772.html
[2010-05-12 19:37:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiS3772.html
[2010-05-11 18:25:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjX3632.html
[2010-05-11 18:25:20 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuS3632.html
[2010-05-11 09:24:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVH3728.html
[2010-05-11 09:24:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqF3728.html
[2010-05-10 18:52:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxh4340.html
[2010-05-10 18:52:09 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBm4340.html
[2010-05-10 06:44:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxg4568.html
[2010-05-09 21:16:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcfA852.html
[2010-05-09 19:36:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOe3384.html
[2010-05-09 15:41:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQV2796.html
[2010-05-09 15:41:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXm2796.html
[2010-05-09 11:59:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcU4200.html
[2010-05-09 11:59:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjt4200.html
[2010-05-09 09:35:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUZ1676.html
[2010-05-09 09:35:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFp1676.html
[2010-05-08 15:57:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppN3604.html
[2010-05-08 15:57:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCB3604.html
[2010-05-08 13:30:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIo4204.html
[2010-05-08 13:30:17 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAl4204.html
[2010-05-07 19:10:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptH3940.html
[2010-05-07 19:10:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempyl3940.html
[2010-05-07 14:10:26 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTr3960.html
[2010-05-07 14:10:26 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaA3960.html
[2010-05-07 09:37:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjR4420.html
[2010-05-07 09:37:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYt4420.html
[2010-05-06 21:25:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxl2088.html
[2010-05-06 21:25:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempse2088.html
[2010-05-06 06:54:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnm4360.html
[2010-05-06 06:54:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYT4360.html
[2010-05-05 19:54:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzv4900.html
[2010-05-05 19:54:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemprN4900.html
[2010-05-05 16:03:21 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppI4868.html
[2010-05-05 16:03:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVE4868.html
[2010-05-05 07:51:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptI3588.html
[2010-05-04 19:56:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSz4532.html
[2010-05-04 19:56:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLo4532.html
[2010-05-04 11:55:29 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphv4696.html
[2010-05-04 11:55:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQM4696.html
[2010-05-04 07:51:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPs2576.html
[2010-05-04 07:51:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAQ2576.html
[2010-05-03 18:02:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTd2776.html
[2010-05-03 18:02:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjj2776.html
[2010-05-03 16:08:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDC1728.html
[2010-05-03 10:57:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxh4852.html
[2010-05-03 10:57:00 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOb4852.html
[2010-05-02 20:09:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempwj3420.html
[2010-04-28 18:27:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempmC4916.html
[2010-04-28 18:27:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptl4916.html
[2010-04-27 18:31:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphe2868.html
[2010-04-27 18:31:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuU2868.html
[2010-04-27 17:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcb1664.html
[2010-04-27 12:11:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMC1932.html
[2010-04-27 12:11:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempdM1932.html
[2010-04-27 09:17:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemphW4912.html
[2010-04-26 20:41:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJn2844.html
[2010-04-26 20:41:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnJ2844.html
[2010-04-25 20:15:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAz3784.html
[2010-04-25 20:15:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppo3784.html
[2010-04-25 14:10:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPJ4372.html
[2010-04-25 14:10:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDc4372.html
[2010-04-24 20:32:21 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprd4232.html
[2010-04-24 20:32:21 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSN4232.html
[2010-04-24 07:53:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTJ4204.html
[2010-04-24 07:53:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempys4204.html
[2010-04-23 18:58:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXw4548.html
[2010-04-23 18:58:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempwG4548.html
[2010-04-23 08:24:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqO4352.html
[2010-04-22 18:12:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOv4976.html
[2010-04-22 18:12:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempco4976.html
[2010-04-22 06:41:42 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjH4308.html
[2010-04-22 06:41:42 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempaa4308.html
[2010-04-21 19:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCD4196.html
[2010-04-21 19:32:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppc4196.html
[2010-04-21 09:26:00 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2010-04-21 06:33:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempus4208.html
[2010-04-21 06:33:38 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsW4208.html
[2010-04-20 19:22:42 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAI4088.html
[2010-04-20 18:41:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptx5040.html
[2010-04-20 18:41:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempkv5040.html
[2010-04-20 16:12:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOx2784.html
[2010-04-20 16:12:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbm2784.html
[2010-04-20 12:35:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUJ4220.html
[2010-04-20 12:35:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJU4220.html
[2010-04-20 06:46:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcV2860.html
[2010-04-20 06:46:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSe2860.html
[2010-04-19 21:09:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLK5340.html
[2010-04-19 21:09:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzW5340.html
[2010-04-19 08:29:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDF3904.html
[2010-04-19 08:29:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnf3904.html
[2010-04-18 20:18:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsL3124.html
[2010-04-18 15:14:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNR1284.html
[2010-04-18 15:14:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvB1284.html
[2010-04-18 12:35:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnf4840.html
[2010-04-17 16:58:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzm4048.html
[2010-04-17 16:58:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjF4048.html
[2010-04-17 11:28:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempyq4380.html
[2010-04-17 09:28:59 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZZ4808.html
[2010-04-17 09:28:59 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqG4808.html
[2010-04-16 20:23:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAz4340.html
[2010-04-16 20:23:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKK4340.html
[2010-04-16 19:05:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIG6652.html
[2010-04-16 19:05:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaF6652.html
[2010-04-16 17:10:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOe3536.html
[2010-04-16 11:00:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAi4412.html
[2010-04-15 18:45:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZQ4388.html
[2010-04-15 18:45:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFN4388.html
[2010-04-15 07:05:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPA4504.html
[2010-04-15 07:05:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkP4504.html
[2010-04-14 18:55:46 | 000,000,071 | ---- | C] () -- C:\Windows\iltwain.ini
[2010-04-14 17:17:10 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnm3144.html
[2010-04-14 17:17:10 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcZ3144.html
[2010-04-14 09:45:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGa1188.html
[2010-04-14 06:33:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptv4348.html
[2010-04-13 19:36:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWu2648.html
[2010-04-13 17:33:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOCN760.html
[2010-04-13 12:19:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvM1292.html
[2010-04-13 11:23:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempaf4652.html
[2010-04-12 21:50:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuC6100.html
[2010-04-12 21:50:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphk6100.html
[2010-04-12 19:42:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptVq464.html
[2010-04-12 05:51:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptt1988.html
[2010-04-12 05:51:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFw1988.html
[2010-04-11 16:47:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNB3648.html
[2010-04-11 16:47:20 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJj3648.html
[2010-04-11 10:20:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcw4044.html
[2010-04-10 17:44:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOw3760.html
[2010-04-10 17:44:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbC3760.html
[2010-04-10 16:14:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptw2012.html
[2010-04-10 11:04:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFO3708.html
[2010-04-10 11:04:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnv3708.html
[2010-04-10 08:34:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVK4040.html
[2010-04-09 18:47:04 | 000,000,000 | ---- | C] () -- C:\Windows\NSREX.INI
[2010-04-09 16:37:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBmW668.html
[2010-04-09 16:37:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempudx668.html
[2010-04-09 12:02:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempfA6228.html
[2010-04-09 12:02:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempni6228.html
[2010-04-09 11:19:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMi4796.html
[2010-04-09 09:28:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoP3016.html
[2010-04-08 20:36:13 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWb3612.html
[2010-04-08 20:36:13 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIi3612.html
[2010-04-08 17:02:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNC4768.html
[2010-04-08 17:02:50 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempal4768.html
[2010-04-08 10:56:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppP3088.html
[2010-04-08 10:56:56 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxU3088.html
[2010-04-07 19:57:06 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplQ3088.html
[2010-04-07 19:57:06 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppK3088.html
[2010-04-07 17:26:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSW2300.html
[2010-04-07 17:22:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnn2052.html
[2010-04-07 12:08:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempmB4800.html
[2010-04-07 12:08:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempps4800.html
[2010-04-07 08:17:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUX3276.html
[2010-04-07 08:17:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRf3276.html
[2010-04-06 20:33:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzN4400.html
[2010-04-06 20:33:20 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVg4400.html
[2010-04-06 16:07:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppx4744.html
[2010-04-06 16:07:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVT4744.html
[2010-04-06 11:53:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZE1776.html
[2010-04-06 11:53:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJN1776.html
[2010-04-06 08:17:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppF2332.html
[2010-04-06 08:17:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOR2332.html
[2010-04-05 19:29:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjj3456.html
[2010-04-05 19:29:38 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHa3456.html
[2010-04-05 15:50:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempni3304.html
[2010-04-05 15:50:04 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcW3304.html
[2010-04-05 10:13:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempik3460.html
[2010-04-05 10:13:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempei3460.html
[2010-04-04 16:44:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGg4824.html
[2010-04-04 11:47:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqL1608.html
[2010-04-04 11:47:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjg1608.html
[2010-04-03 16:11:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPJ3720.html
[2010-04-03 16:11:38 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZb3720.html
[2010-04-03 13:08:26 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptm8400.html
[2010-04-03 13:08:26 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIG8400.html
[2010-04-03 11:22:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEh3024.html
[2010-04-02 18:48:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmf6084.html
[2010-04-02 18:48:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOn6084.html
[2010-04-02 17:10:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmh3824.html
[2010-04-02 10:12:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqI3412.html
[2010-04-02 10:12:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGu3412.html
[2010-04-02 07:09:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHv3708.html
[2010-04-02 07:09:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPU3708.html
[2010-04-01 16:27:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZi3628.html
[2010-04-01 16:27:17 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMm3628.html
[2010-04-01 09:48:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDY3780.html
[2010-04-01 09:48:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKS3780.html
[2010-03-31 19:05:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWe5432.html
[2010-03-31 18:58:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfr4720.html
[2010-03-31 18:58:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFE4720.html
[2010-03-31 17:59:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbj4192.html
[2010-03-31 17:59:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMd4192.html
[2010-03-31 13:41:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcG1924.html
[2010-03-31 13:41:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuT1924.html
[2010-03-30 17:22:06 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuC3848.html
[2010-03-30 17:22:06 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBQ3848.html
[2010-03-30 12:47:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsFg856.html
[2010-03-30 12:47:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempfyY856.html
[2010-03-30 08:57:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxS3752.html
[2010-03-30 08:57:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempyB3752.html
[2010-03-29 18:27:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvE4848.html
[2010-03-29 18:27:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgM4848.html
[2010-03-28 19:59:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempqj3668.html
[2010-03-28 19:59:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRx3668.html
[2010-03-28 12:13:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptg1780.html
[2010-03-28 12:13:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNf1780.html
[2010-03-27 21:50:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTV2572.html
[2010-03-27 21:50:04 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDm2572.html
[2010-03-27 17:39:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKf3196.html
[2010-03-27 17:39:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempdt3196.html
[2010-03-26 20:24:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxiX620.html
[2010-03-26 20:24:03 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmrz620.html
[2010-03-26 18:20:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIK3180.html
[2010-03-26 18:20:46 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLI3180.html
[2010-03-26 14:34:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoLb504.html
[2010-03-26 14:34:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppUe504.html
[2010-03-26 10:26:14 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppW1836.html
[2010-03-26 10:26:14 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvd1836.html
[2010-03-25 18:17:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHi6912.html
[2010-03-25 18:17:25 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempwA6912.html
[2010-03-25 17:25:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWU4644.html
[2010-03-25 17:25:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMz4644.html
[2010-03-24 19:29:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPE2920.html
[2010-03-24 19:29:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFV2920.html
[2010-03-24 12:13:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUt3620.html
[2010-03-24 12:13:11 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoR3620.html
[2010-03-24 06:49:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIE4112.html
[2010-03-24 06:49:19 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprl4112.html
[2010-03-23 18:13:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphc3728.html
[2010-03-23 18:13:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYM3728.html
[2010-03-23 10:49:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCx2788.html
[2010-03-23 10:49:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEt2788.html
[2010-03-22 20:12:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmo2576.html
[2010-03-22 20:12:47 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjS2576.html
[2010-03-22 07:05:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTf1640.html
[2010-03-22 07:05:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgD1640.html
[2010-03-21 12:08:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBB2684.html
[2010-03-21 12:08:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzC2684.html
[2010-03-20 20:01:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAG4208.html
[2010-03-20 20:01:19 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxe4208.html
[2010-03-20 16:06:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempid3844.html
[2010-03-20 16:06:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbw3844.html
[2010-03-20 13:54:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmn1904.html
[2010-03-20 13:54:11 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppD1904.html
[2010-03-19 19:37:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEm4500.html
[2010-03-19 19:37:34 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQH4500.html
[2010-03-19 18:17:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJX3532.html
[2010-03-19 18:17:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempce3532.html
[2010-03-19 15:44:05 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgJ3680.html
[2010-03-19 15:44:05 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjm3680.html
[2010-03-19 11:56:14 | 000,005,632 | ---- | C] () -- C:\Windows\SysWow64\drivers\StarOpen.sys
[2010-03-19 10:03:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPB3016.html
[2010-03-19 10:03:19 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCt3016.html
[2010-03-18 19:37:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempph4072.html
[2010-03-18 19:37:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaU4072.html
[2010-03-18 18:11:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempyi1176.html
[2010-03-18 18:11:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoC1176.html
[2010-03-18 12:05:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWD3680.html
[2010-03-18 12:05:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDQ3680.html
[2010-03-17 20:16:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHH4808.html
[2010-03-17 20:16:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRY4808.html
[2010-03-17 18:37:14 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnoj908.html
[2010-03-17 18:37:14 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJpN908.html
[2010-03-16 18:07:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvX4064.html
[2010-03-16 18:07:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempES4064.html
[2010-03-16 14:11:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZM3664.html
[2010-03-16 14:11:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempum3664.html
[2010-03-16 11:01:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempip4656.html
[2010-03-16 11:01:50 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYV4656.html
[2010-03-15 06:48:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZYA704.html
[2010-03-15 06:48:00 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWNg704.html
[2010-03-14 16:10:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTu4928.html
[2010-03-14 16:10:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPp4928.html
[2010-03-14 10:48:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvR4636.html
[2010-03-14 10:48:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsh4636.html
[2010-03-13 20:43:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVh4856.html
[2010-03-13 20:43:28 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYV4856.html
[2010-03-13 14:55:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxV4332.html
[2010-03-13 14:55:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWP4332.html
[2010-03-13 12:22:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGh4644.html
[2010-03-13 12:22:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbJ4644.html
[2010-03-12 20:40:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJb4520.html
[2010-03-12 20:40:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnB4520.html
[2010-03-12 19:48:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempgu4936.html
[2010-03-12 19:48:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsV4936.html
[2010-03-12 14:44:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNyx568.html
[2010-03-12 14:44:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjpm568.html
[2010-03-12 11:57:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIM5060.html
[2010-03-12 11:57:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqT5060.html
[2010-03-11 20:32:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQI4976.html
[2010-03-11 20:32:00 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMI4976.html
[2010-03-10 20:06:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgX5096.html
[2010-03-10 20:06:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptX5096.html
[2010-03-10 18:40:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnm4684.html
[2010-03-10 18:40:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiP4684.html
[2010-03-09 16:04:41 | 000,000,083 | ---- | C] () -- C:\Windows\wwp_game.INI
[2010-03-09 09:59:52 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaR4880.html
[2010-03-09 09:59:52 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempaj4880.html
[2010-03-08 19:57:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplO4924.html
[2010-03-08 19:57:34 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgL4924.html
[2010-03-08 07:03:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVT3196.html
[2010-03-08 07:03:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVA3196.html
[2010-03-07 17:00:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLv3600.html
[2010-03-07 17:00:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcw3600.html
[2010-03-07 13:36:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEA4904.html
[2010-03-07 13:36:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBS4904.html
[2010-03-06 19:33:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSY5116.html
[2010-03-06 19:33:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmn5116.html
[2010-03-06 15:27:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLd5112.html
[2010-03-06 15:27:29 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempyF5112.html
[2010-03-06 13:59:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjj4444.html
[2010-03-06 13:59:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLS4444.html
[2010-03-06 12:47:54 | 000,000,418 | ---- | C] () -- C:\Windows\ODBC.INI
[2010-03-06 12:47:54 | 000,000,063 | ---- | C] () -- C:\Windows\mdm.ini
[2010-03-05 12:42:02 | 001,556,556 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010-02-28 12:40:03 | 000,000,095 | ---- | C] () -- C:\Windows\winamp.ini
[2010-01-14 18:35:00 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini
[2009-11-26 17:41:12 | 000,000,315 | ---- | C] () -- C:\Windows\game.ini
[2009-11-07 14:28:59 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2009-10-20 02:23:46 | 000,178,960 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2009-10-16 18:22:21 | 000,003,972 | ---- | C] () -- C:\Windows\SysWow64\drivers\PciBus.sys
[2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009-04-19 17:35:04 | 000,126,976 | ---- | C] () -- C:\Windows\gdf.dll
[2005-02-25 07:15:00 | 000,159,744 | ---- | C] () -- C:\Windows\SysWow64\EPSPTDV.DLL

[color=#E56717]========== LOP Check ==========[/color]

[2010-01-14 19:38:45 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Ashampoo
[2010-01-18 20:51:53 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Autodesk
[2010-03-17 20:27:51 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Canneverbe Limited
[2009-10-20 19:32:46 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\DAEMON Tools Lite
[2009-12-11 18:10:05 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Dev-Cpp
[2010-01-14 18:40:17 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\EPSON
[2010-08-31 14:00:56 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\foobar2000
[2009-10-17 14:31:48 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Gadu-Gadu
[2009-11-22 12:15:48 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Gadu-Gadu 10
[2010-06-13 19:14:42 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\GetRightToGo
[2010-05-30 17:55:02 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\gtk-2.0
[2010-08-31 21:27:02 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\HEM Data
[2009-11-22 22:54:37 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\IObit
[2010-01-24 11:10:00 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\ipla
[2010-03-14 12:11:04 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\IrfanView
[2010-06-29 06:46:29 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Nokia
[2010-03-05 13:16:18 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\NVD
[2009-10-17 17:05:23 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\OpenOffice.org
[2009-10-16 17:49:49 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Opera
[2009-10-16 17:43:08 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\PCToolsFirewallPlus
[2010-05-30 16:29:50 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Qrix
[2010-07-13 10:59:47 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Samsung
[2010-04-09 18:49:28 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\SoftGrid Client
[2009-11-03 19:07:10 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Sports Interactive
[2010-06-14 14:52:34 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\StreamTorrent
[2009-10-19 10:07:24 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Thunderbird
[2010-04-09 17:08:10 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\TP
[2010-01-23 11:05:17 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\UDC Profiles
[2010-08-04 21:33:05 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\uTorrent
[2010-07-18 13:19:04 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010-06-13 22:17:59 | 000,000,408 | ---- | M] () -- C:\Windows\Tasks\SmartDefrag.job

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]


[color=#A23BEC]< %systemdrive%\*.* >[/color]
[2010-06-07 17:07:20 | 000,001,024 | ---- | M] () -- C:\.rnd
[2010-01-09 12:24:42 | 000,467,082 | ---- | M] () -- C:\acadminidump.dmp
[2010-08-21 12:53:05 | 000,040,092 | ---- | M] () -- C:\AutoMapaSetupLog.txt
[2010-08-27 16:29:35 | 000,009,672 | ---- | M] () -- C:\bootsqm.dat
[2010-07-13 10:54:51 | 000,000,074 | ---- | M] () -- C:\CMLoader.log
[2009-10-16 18:11:47 | 000,011,728 | ---- | M] () -- C:\deviceInfo.txt
[2010-08-31 22:08:47 | 3220,561,920 | -HS- | M] () -- C:\hiberfil.sys
[2010-08-31 22:08:49 | 4294,082,560 | -HS- | M] () -- C:\pagefile.sys
[2010-03-16 19:14:39 | 000,000,029 | ---- | M] () -- C:\Windows.txt


[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys
[2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2003-10-29 20:58:30 | 000,021,008 | ---- | M] (Microsoft Corporation) MD5=CDDB71A90077C93BEA5C72507F0B1394 -- C:\Program Files (x86)\Driver Cleaner\nvfix\AGP440.sys

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2009-07-14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys

[color=#A23BEC]< MD5 for: CDROM.SYS >[/color]
[2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysWow64\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys
[2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2009-07-14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2009-07-14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009-10-28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009-10-28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:C31F31E6
< End of report >
[/log]

Log z RSIT:
[log]
Logfile of random's system information tool 1.08 (written by random/random)
Run by Darek at 2010-08-31 22:36:05
Microsoft Windows 7 Professional
System drive C: has 10 GB (19%) free of 51 GB
Total RAM: 4095 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:36:14, on 2010-08-31
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe
C:\MSI\Advanced Wheel Mouse\wh_exec.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe
C:\Users\Darek\Desktop\RSIT.exe
C:\Program Files (x86)\trend micro\Darek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll
O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [MGSysCtrl] C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe
O4 - HKLM\..\Run: [WheelMouse] C:\MSI\ADVANC~1\wh_exec.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-21-1264084378-3322303571-3196748977-1012\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'postgres')
O4 - HKUS\S-1-5-21-1264084378-3322303571-3196748977-1012\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'postgres')
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe
O10 - Unknown file in Winsock LSP: c:\program files (x86)\vmware\vmware player\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\vmware\vmware player\vsocklib.dll
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Micro Star SCM - Micro-Star International Co., Ltd. - C:\Program Files (x86)\System Control Manager\MSIService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMSAccess - Unknown owner - C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - Unknown owner - C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: postgresql-8.4 - PostgreSQL Server 8.4 (postgresql-8.4) - PostgreSQL Global Development Group - C:/Program Files (x86)/PostgreSQL/8.4/bin/pg_ctl.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9591 bytes

======Scheduled tasks folder======

C:\Windows\tasks\SmartDefrag.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-08-25 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}]
IEPluginBHO Class - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll [2010-03-12 42080]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"00PCTFW"=C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe [2010-01-19 3168216]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"MGSysCtrl"=C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe [2009-09-11 2080768]
"WheelMouse"=C:\MSI\ADVANC~1\wh_exec.exe [2007-09-13 90112]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=255

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-08-31 22:36:05 ----D---- C:\rsit
2010-08-31 21:05:44 ----D---- C:\ProgramData\Panda Security
2010-08-31 21:05:40 ----D---- C:\Program Files (x86)\Panda USB Vaccine
2010-08-31 20:54:19 ----A---- C:\Windows\SysWOW64\shell32.dll
2010-08-30 21:51:56 ----D---- C:\Users\Darek\AppData\Roaming\Malwarebytes
2010-08-30 21:51:47 ----A---- C:\Windows\SysWOW64\drivers\mbamswissarmy.sys
2010-08-30 21:51:46 ----D---- C:\ProgramData\Malwarebytes
2010-08-30 21:51:45 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2010-08-30 21:32:42 ----D---- C:\_OTL
2010-08-30 21:13:02 ----D---- C:\Program Files (x86)\Trend Micro
2010-08-30 21:12:42 ----D---- C:\Program Files (x86)\ESET
2010-08-30 21:06:36 ----D---- C:\ProgramData\Kaspersky Lab
2010-08-30 21:06:35 ----D---- C:\Windows\SysWOW64\Kaspersky Lab
2010-08-30 16:34:21 ----D---- C:\NVIDIA
2010-08-30 16:33:26 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2010-08-30 16:31:03 ----A---- C:\Windows\SysWOW64\OpenCL.dll
2010-08-30 16:31:03 ----A---- C:\Windows\SysWOW64\nvwgf2um.dll
2010-08-30 16:31:03 ----A---- C:\Windows\SysWOW64\nvoglv32.dll
2010-08-30 16:31:03 ----A---- C:\Windows\SysWOW64\nvdecodemft.dll
2010-08-30 16:31:01 ----A---- C:\Windows\SysWOW64\nvd3dum.dll
2010-08-30 16:31:01 ----A---- C:\Windows\SysWOW64\nvcuvid.dll
2010-08-30 16:31:01 ----A---- C:\Windows\SysWOW64\nvcuvenc.dll
2010-08-30 16:31:01 ----A---- C:\Windows\SysWOW64\nvcuda.dll
2010-08-30 16:31:00 ----A---- C:\Windows\SysWOW64\nvcompiler.dll
2010-08-30 16:31:00 ----A---- C:\Windows\SysWOW64\nvapi.dll
2010-08-30 16:09:29 ----A---- C:\Windows\ntbtlog.txt
2010-08-30 16:08:13 ----D---- C:\Program Files (x86)\Driver Cleaner
2010-08-30 11:40:32 ----D---- C:\ProgramData\NVIDIA Corporation
2010-08-27 09:19:12 ----A---- C:\Windows\HMHud.INI
2010-08-27 09:14:30 ----D---- C:\HMArchive
2010-08-27 09:14:05 ----D---- C:\Users\Darek\AppData\Roaming\HEM Data
2010-08-27 09:10:48 ----D---- C:\Program Files (x86)\RVG Software
2010-08-27 09:10:08 ----D---- C:\Program Files (x86)\PSQLINSTALL
2010-08-25 13:03:21 ----D---- C:\Program Files (x86)\Common Files\Acronis
2010-08-25 13:03:20 ----D---- C:\Program Files (x86)\Acronis
2010-08-25 10:14:40 ----D---- C:\Program Files (x86)\Common Files\Java
2010-08-25 10:14:11 ----D---- C:\Program Files (x86)\Java
2010-08-17 17:39:43 ----D---- C:\Program Files (x86)\PokerStars

======List of files/folders modified in the last 1 months======

2010-08-31 22:36:13 ----D---- C:\Windows\Temp
2010-08-31 22:34:45 ----RD---- C:\Program Files (x86)
2010-08-31 22:10:29 ----AD---- C:\ProgramData\TEMP
2010-08-31 22:09:37 ----D---- C:\Windows\winsxs
2010-08-31 22:09:17 ----D---- C:\ProgramData\VMware
2010-08-31 22:09:11 ----D---- C:\ProgramData\NVIDIA
2010-08-31 22:07:53 ----SHD---- C:\Windows\SysWOW64
2010-08-31 22:07:53 ----SHD---- C:\Windows\System32
2010-08-31 22:07:17 ----SHD---- C:\Windows
2010-08-31 22:06:43 ----HD---- C:\ProgramData
2010-08-31 22:04:22 ----D---- C:\Program Files (x86)\Full Tilt Poker
2010-08-31 20:54:12 ----SHD---- C:\System Volume Information
2010-08-31 20:36:10 ----D---- C:\Windows\inf
2010-08-31 14:00:56 ----D---- C:\Users\Darek\AppData\Roaming\foobar2000
2010-08-31 08:08:57 ----D---- C:\Program Files (x86)\Common Files\PC Tools
2010-08-30 22:41:55 ----D---- C:\Program Files (x86)\PC Tools Firewall Plus
2010-08-30 21:51:48 ----SHD---- C:\Windows\SysWOW64\drivers
2010-08-30 21:41:41 ----SHD---- C:\Windows\Installer
2010-08-30 21:22:29 ----D---- C:\Windows\Downloaded Program Files
2010-08-30 16:33:42 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-08-30 16:33:06 ----D---- C:\Windows\Help
2010-08-27 10:54:01 ----RD---- C:\Users
2010-08-27 10:53:06 ----D---- C:\Program Files (x86)\PostgreSQL
2010-08-26 21:02:14 ----D---- C:\Program Files (x86)\PokerTracker 3
2010-08-25 13:04:18 ----D---- C:\Windows\Prefetch
2010-08-25 13:03:21 ----D---- C:\Program Files (x86)\Common Files
2010-08-21 21:30:34 ----D---- C:\Program Files (x86)\DOSBox-0.73
2010-08-21 12:53:05 ----A---- C:\AutoMapaSetupLog.txt
2010-08-14 21:51:29 ----D---- C:\Program Files (x86)\Opera
2010-08-04 21:39:44 ----RSD---- C:\Windows\assembly
2010-08-04 21:39:44 ----D---- C:\ProgramData\Microsoft Help
2010-08-04 21:39:28 ----D---- C:\Program Files (x86)\Common Files\microsoft shared
2010-08-04 21:39:24 ----D---- C:\Windows\ShellNew
2010-08-04 21:39:13 ----RSD---- C:\Windows\Fonts
2010-08-04 21:37:43 ----RD---- C:\Program Files
2010-08-04 21:34:54 ----D---- C:\Program Files (x86)\Ganymede
2010-08-04 21:33:16 ----D---- C:\Program Files (x86)\Ashampoo
2010-08-04 21:33:05 ----D---- C:\Users\Darek\AppData\Roaming\uTorrent

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys []
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys []
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys []
R1 pctgntdi;pctgntdi; \??\C:\Windows\system32\drivers\pctgntdi64.sys []
R1 Tosrfcom;Bluetooth RFCOMM; C:\Windows\System32\Drivers\tosrfcom.sys []
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys []
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys []
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys []
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys []
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys []
R2 hcmon;VMware hcmon; \??\C:\Windows\system32\drivers\hcmon.sys []
R2 vmci;VMware vmci; \??\C:\Windows\system32\drivers\vmci.sys []
R2 VMnetBridge;VMware Bridge Protocol; C:\Windows\system32\DRIVERS\vmnetbridge.sys []
R2 VMnetuserif;VMware Network Application Interface; \??\C:\Windows\system32\drivers\vmnetuserif.sys []
R2 vmx86;VMware vmx86; \??\C:\Windows\system32\drivers\vmx86.sys []
R2 vstor2-ws60;Vstor2 WS60 Virtual Storage Driver; \??\C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys [2009-10-12 32816]
R2 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Users\Darek\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries21.gadget\WinRing0x64.sys [2009-10-26 14544]
R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys []
R3 netw5v64;Sterownik karty Intel(R) Wireless WiFi Link 5000 Series dla systemu Windows Vista w wersji 64-bitowej; C:\Windows\system32\DRIVERS\netw5v64.sys []
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys []
R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver; \??\C:\Windows\system32\drivers\pctNdis-PacketFilter64.sys []
R3 pctNDIS;PC Tools Driver; C:\Windows\system32\DRIVERS\pctNdis64.sys []
R3 pctplfw;pctplfw; \??\C:\Windows\System32\drivers\pctplfw64.sys []
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys []
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys []
R3 smserial;smserial; C:\Windows\system32\DRIVERS\SmSerl64.sys []
R3 tosporte;Bluetooth COM Port; C:\Windows\system32\DRIVERS\tosporte.sys []
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys []
R3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
R3 vmkbd;VMware kbd; \??\C:\Windows\system32\drivers\VMkbd.sys []
R3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys []
R3 vpcbus;Usługa magistrali hosta programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys []
R3 vpcusb;Usługa łącznika wirtualizacji USB; C:\Windows\system32\DRIVERS\vpcusb.sys []
R3 whfltr2k;WheelMouse USB Lower Filter Driver; C:\Windows\system32\DRIVERS\whfltr2k.sys []
S1 StarOpen;StarOpen; C:\Windows\SysWOW64\drivers\StarOpen.sys [2006-07-24 5632]
S3 BthEnum;Usługa wyliczania Bluetooth; C:\Windows\system32\DRIVERS\BthEnum.sys []
S3 BthPan;Urządzenie Bluetooth (sieć osobista); C:\Windows\system32\DRIVERS\bthpan.sys []
S3 BTHPORT;Sterownik portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys []
S3 BTHUSB;Sterownik USB odbiornika radiowego Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys []
S3 ENTECH64;ENTECH64; \??\C:\Windows\system32\DRIVERS\ENTECH64.sys [2004-06-22 5632]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys []
S3 PCTFW-DNS;PCTools Firewall - DNS driver; \??\C:\Windows\system32\drivers\pctNdis-DNS64.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys []
S3 RFCOMM;Urządzenie Bluetooth (Protokół TDI RFCOMM); C:\Windows\system32\DRIVERS\rfcomm.sys []
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys []
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys []
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys []
S3 tosrfbd;Bluetooth RFBUS; C:\Windows\system32\DRIVERS\tosrfbd.sys []
S3 tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys []
S3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys []
S3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys []
S3 TosRfSnd;Bluetooth Audio; C:\Windows\system32\drivers\tosrfsnd.sys []
S3 Tosrfusb;Bluetooth USB Controller; C:\Windows\system32\DRIVERS\tosrfusb.sys []
S3 TVICHW64;TVICHW64; \??\C:\Windows\SysWOW64\Drivers\TVICHW64.SYS [2009-10-17 21200]
S3 usbscan;Sterownik skanera USB; C:\Windows\system32\DRIVERS\usbscan.sys []
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys []
S3 vmusb;VMware USB Client Driver; C:\Windows\System32\Drivers\vmusb.sys []
S3 vpcuxd;Usługa procedury wejścia wirtualizacji USB; C:\Windows\system32\DRIVERS\vpcuxd.sys []
S3 WINUSB;Sterownik WinUsb; C:\Windows\system32\DRIVERS\WinUSB.SYS []
S3 zlportio;zlportio; \??\D:\gry\Ultrastar\us dx 1.0.1a PL\zlportio.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-02-11 354840]
R2 Micro Star SCM;Micro Star SCM; C:\Program Files (x86)\System Control Manager\MSIService.exe [2009-07-09 160768]
R2 NMSAccess;NMSAccess; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [2010-03-04 71096]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe []
R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe [2009-11-18 818432]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2009-11-13 66872]
R2 PnkBstrB;PnkBstrB; C:\Windows\system32\PnkBstrB.exe [2009-11-13 107832]
R2 postgresql-8.4;postgresql-8.4 - PostgreSQL Server 8.4; C:/Program Files (x86)/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N postgresql-8.4 -D C:/Program Files (x86)/PostgreSQL/8.4/data -w []
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-08-06 248936]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2009-03-17 189808]
R2 VMAuthdService;VMware Authorization Service; C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe [2010-01-22 113200]
R2 VMnetDHCP;VMware DHCP Service; C:\Windows\system32\vmnetdhcp.exe [2010-01-22 334384]
R2 VMUSBArbService;VMware USB Arbitration Service; C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe [2010-01-22 563760]
R2 VMware NAT Service;VMware NAT Service; C:\Windows\system32\vmnat.exe [2010-01-22 395824]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2009-10-20 1030600]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 ufad-ws60;VMware Agent Service; C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe [2009-10-12 191024]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []

-----------------EOF-----------------
[/log]

Tomek01
komentarz
komentarz

Uciekło mi coś, (gwiazdka :) ).

Do systemlook wklej:
[code]Filefind:
SearchSetings*[/code]

Look...

dario116
komentarz
komentarz

Zamieniłem na [b]:Filefind [/b], bo był taki sam log jak wcześniej.

[log]
SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 07:47 on 01/09/2010 by Darek (Administrator - Elevation successful)

========== Filefind ==========

Searching for "SearchSettings*"
No files found.

-=End Of File=-
[/log]

Sohei
komentarz
komentarz

[code]
:regfind
SearchSettings*
[/code]

Jeszcze to możesz do systemlook wrzucic:)

dario116
komentarz
komentarz

[log]
SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 15:55 on 01/09/2010 by Darek (Administrator - Elevation successful)

========== regfind ==========

Searching for "SearchSettings*"
No data found.

-=End Of File=-
[/log]

Tomek01
komentarz
komentarz

Jeszcze poproszę log'a [url="http://users.telenet.be/marcvn/tools/reglooks.exe"]Reglooks[/url].

dario116
komentarz
komentarz

Niestety Reglooks chyba nie działa na 64 bitowych systemach. Po uruchomieniu w oknie programu pokazuje się: [b]Unsupported operating system[/b], po czym kończy działanie.

Tomek01
komentarz
komentarz

W takim razie proszę: [url="http://www.instalki.pl/programy/download_c/116/2295.html"]Silent Runners[/url]

Muszę zerknąć na rejestr :)

dario116
komentarz
komentarz

[log]
"Silent Runners.vbs", revision 61, http://www.silentrunners.org/
Operating System: Windows 7
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"Sidebar" = "C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" [MS]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"IAAnotif" = "C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" ["Intel Corporation"]
"RtHDVCpl" = "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" ["Realtek Semiconductor"]
"Skytel" = "C:\Program Files\Realtek\Audio\HDA\Skytel.exe" ["Realtek Semiconductor Corp."]
"nwiz" = "C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet" ["NVIDIA Corporation"]
"NvCplDaemon" = "RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup" [MS]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\

{DBC80044-A445-435b-BC74-9C25C1C588A9}\(Default) = (no title provided)
-> {HKLM...CLSID} = "Java(tm) Plug-In 2 SSV Helper"
\InProcServer32\(Default) = "C:\Program Files\Java\jre6\bin\jp2ssv.dll" ["Sun Microsystems, Inc."]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\

"{45AC2688-0253-4ED8-97DE-B5370FA7D48A}" = "Shell Extension for Malware scanning"
-> {HKLM...CLSID} = "Shell Extension for Malware scanning"
\InProcServer32\(Default) = "C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll" ["Avira GmbH"]

"{B41DB860-64E4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" ["Alexander Roshal"]

"{68C471B2-1DC1-4d63-B2DF-682A910668FB}" = "VMC Property Handler"
-> {HKLM...CLSID} = "VMC Property Handler"
\InProcServer32\(Default) = "C:\Windows\System32\VMCPropertyHandler.dll" [MS]

"{45C6AFA5-2C13-402f-BC5D-45CC8172EF6B}" = "Bluetooth"
-> {HKCU...CLSID} = "Wymiana informacji - Bluetooth"
\InProcServer32\(Default) = "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll" ["TOSHIBA"]
-> {HKLM...CLSID} = "Wymiana informacji - Bluetooth"
\InProcServer32\(Default) = "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll" ["TOSHIBA"]

"{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer"
-> {HKLM...CLSID} = "Desktop Explorer"
\InProcServer32\(Default) = "C:\Program Files\NVIDIA Corporation\nView\nvshell.dll" ["NVIDIA Corporation"]

"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\Program Files\NVIDIA Corporation\nView\nvshell.dll" ["NVIDIA Corporation"]

"{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu"
-> {HKLM...CLSID} = "nView Desktop Context Menu"
\InProcServer32\(Default) = "C:\Program Files\NVIDIA Corporation\nView\nvshell.dll" ["NVIDIA Corporation"]

"{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class"
-> {HKLM...CLSID} = "DesktopContext Class"
\InProcServer32\(Default) = "C:\Windows\system32\nvcpl.dll" ["NVIDIA Corporation"]

"{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper"
-> {HKLM...CLSID} = "NVIDIA CPL Extension"
\InProcServer32\(Default) = "C:\Windows\system32\nvcpl.dll" ["NVIDIA Corporation"]

"{3D1975AF-48C6-4f8e-A182-BE0E08FA86A9}" = "NVIDIA Play On My TV Context Menu Extension"
-> {HKLM...CLSID} = "NVIDIA CPL Context Menu Extension"
\InProcServer32\(Default) = "C:\Windows\system32\nvshext.dll" ["NVIDIA Corporation"]

"{A929C4CE-FD36-4270-B4F5-34ECAC5BD63C}" = "NvAppShExt extension"
-> {HKLM...CLSID} = "NvAppShExt Class"
\InProcServer32\(Default) = "C:\Windows\system32\nv3dappshext.dll" ["NVIDIA Corporation"]

"{E97DEC16-A50D-49bb-AE24-CF682282E08D}" = "OpenGLShExt extension"
-> {HKLM...CLSID} = "OpenGLShExt Class"
\InProcServer32\(Default) = "C:\Windows\system32\nv3dappshext.dll" ["NVIDIA Corporation"]

HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\

Shell Extension for Malware scanning\(Default) = "{45AC2688-0253-4ED8-97DE-B5370FA7D48A}"
-> {HKLM...CLSID} = "Shell Extension for Malware scanning"
\InProcServer32\(Default) = "C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll" ["Avira GmbH"]

tosBtShllExt\(Default) = "{6BEF3D0B-53F0-4b0d-B91C-C19ED3D4C9D1}"
-> {HKLM...CLSID} = "Bluetooth File Extenstion"
\InProcServer32\(Default) = "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtShell.dll" ["TOSHIBA"]

WinRAR\(Default) = "{B41DB860-64E4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" ["Alexander Roshal"]

HKLM\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\

MBAMShlExt\(Default) = "{57CE581A-0CB6-4266-9CA0-19364C90A0B3}"
-> {HKLM...CLSID} = "MBAMShlExt Class"
\InProcServer32\(Default) = "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll" ["Malwarebytes Corporation"]

HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\

tosBtShllExt\(Default) = "{6BEF3D0B-53F0-4b0d-B91C-C19ED3D4C9D1}"
-> {HKLM...CLSID} = "Bluetooth File Extenstion"
\InProcServer32\(Default) = "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtShell.dll" ["TOSHIBA"]

WinRAR\(Default) = "{B41DB860-64E4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" ["Alexander Roshal"]

HKLM\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\

WinRAR\(Default) = "{B41DB860-64E4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" ["Alexander Roshal"]

HKLM\SOFTWARE\Classes\Directory\Background\shellex\ContextMenuHandlers\

00nView\(Default) = "{1E9B04FB-F9E5-4718-997B-B8DA88302A48}"
-> {HKLM...CLSID} = "nView Desktop Context Menu"
\InProcServer32\(Default) = "C:\Program Files\NVIDIA Corporation\nView\nvshell.dll" ["NVIDIA Corporation"]

NvCplDesktopContext\(Default) = "{3D1975AF-48C6-4f8e-A182-BE0E08FA86A9}"
-> {HKLM...CLSID} = "NVIDIA CPL Context Menu Extension"
\InProcServer32\(Default) = "C:\Windows\system32\nvshext.dll" ["NVIDIA Corporation"]

HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\

MBAMShlExt\(Default) = "{57CE581A-0CB6-4266-9CA0-19364C90A0B3}"
-> {HKLM...CLSID} = "MBAMShlExt Class"
\InProcServer32\(Default) = "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll" ["Malwarebytes Corporation"]

Shell Extension for Malware scanning\(Default) = "{45AC2688-0253-4ED8-97DE-B5370FA7D48A}"
-> {HKLM...CLSID} = "Shell Extension for Malware scanning"
\InProcServer32\(Default) = "C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll" ["Avira GmbH"]

WinRAR\(Default) = "{B41DB860-64E4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" ["Alexander Roshal"]

HKCU\Software\Classes\Folder\shellex\DragDropHandlers\

tosBtExt\(Default) = "{45C6AFA5-2C13-402f-BC5D-45CC8172EF6B}"
-> {HKCU...CLSID} = "Wymiana informacji - Bluetooth"
\InProcServer32\(Default) = "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll" ["TOSHIBA"]
-> {HKLM...CLSID} = "Wymiana informacji - Bluetooth"
\InProcServer32\(Default) = "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll" ["TOSHIBA"]

HKLM\SOFTWARE\Classes\Folder\shellex\DragDropHandlers\

tosBtExt\(Default) = "{45C6AFA5-2C13-402f-BC5D-45CC8172EF6B}"
-> {HKCU...CLSID} = "Wymiana informacji - Bluetooth"
\InProcServer32\(Default) = "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll" ["TOSHIBA"]
-> {HKLM...CLSID} = "Wymiana informacji - Bluetooth"
\InProcServer32\(Default) = "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll" ["TOSHIBA"]

WinRAR\(Default) = "{B41DB860-64E4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" ["Alexander Roshal"]


Default executables:
--------------------

HKLM\SOFTWARE\Classes\.hta\(Default) = "htafile"
<<!>> HKLM\SOFTWARE\Classes\htafile\shell\open\command\(Default) = "C:\Windows\SysWOW64\mshta.exe "%1" %*" [MS]


Group Policies {GPedit.msc branch and setting}:
-----------------------------------------------

Note: detected settings may not have any effect.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\

"NoActiveDesktop" = (REG_DWORD) dword:0x00000001
{unrecognized setting}

"NoActiveDesktopChanges" = (REG_DWORD) dword:0x00000001
{unrecognized setting}

"ForceActiveDesktopOn" = (REG_DWORD) dword:0x00000000
{unrecognized setting}

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\

"ConsentPromptBehaviorAdmin" = (REG_DWORD) dword:0x00000000
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
User Account Control: Behavior Of The Elevation Prompt For Administrators In Admin Approval Mode}

"EnableLUA" = (REG_DWORD) dword:0x00000000
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
User Account Control: Run All Administrators In Admin Approval Mode}

"PromptOnSecureDesktop" = (REG_DWORD) dword:0x00000000
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
User Account Control: Switch to the secure desktop when prompting for elevation}


Active Desktop and Wallpaper:
-----------------------------

Active Desktop may be disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

Displayed if Active Desktop disabled and wallpaper not set by Group Policy:
HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\Users\Darek\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg"


Windows Portable Device AutoPlay Handlers
-----------------------------------------

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\

CDBurnerXP\
"Provider" = "CDBurnerXP"
"InvokeProgID" = "CDBurnerXPOpen"
"InvokeVerb" = "open"
HKLM\SOFTWARE\Classes\CDBurnerXPOpen\shell\open\command\(Default) = ""C:\Program Files (x86)\CDBurnerXP\cdbxpp.exe"" [null data]

MSPlayCDAudioOnArrival\
"Provider" = "@wmploc.dll,-6502"
"InvokeProgID" = "WMP.AudioCD"
"InvokeVerb" = "play"
HKLM\SOFTWARE\Classes\WMP.AudioCD\shell\play\command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:3 /device:AudioCD "%L"" [MS]

MSPlayDVDMovieOnArrival\
"Provider" = "@wmploc.dll,-6502"
"InvokeProgID" = "WMP.DVD"
"InvokeVerb" = "play"
HKLM\SOFTWARE\Classes\WMP.DVD\shell\play\command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:4 /device:DVD "%L"" [MS]

MSPlaySuperVideoCDMovieOnArrival\
"Provider" = "@wmploc.dll,-6502"
"InvokeProgID" = "WMP.VCD"
"InvokeVerb" = "play"
HKLM\SOFTWARE\Classes\WMP.VCD\shell\play\command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:4 /device:VCD "%L"" [MS]

MSPlayVideoCDMovieOnArrival\
"Provider" = "@wmploc.dll,-6502"
"InvokeProgID" = "WMP.VCD"
"InvokeVerb" = "play"
HKLM\SOFTWARE\Classes\WMP.VCD\shell\play\command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:4 /device:VCD "%L"" [MS]

MSWMPBurnCDOnArrival\
"Provider" = "@wmploc.dll,-6502"
"InvokeProgID" = "WMP.BurnCD"
"InvokeVerb" = "Burn"
HKLM\SOFTWARE\Classes\WMP.BurnCD\shell\Burn\Command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:3 /Task:CDWrite /Device:"%L"" [MS]

NeroAutoPlay9VideoCapture\
"Provider" = "Nero Vision"
"ProgID" = "Shell.HWEventHandlerShellExecute"
"InitCmdLine" = ""C:\Program Files (x86)\Nero\Nero 9\Nero Vision\NeroVision.exe" /New:VideoCapture"
HKLM\SOFTWARE\Classes\Shell.HWEventHandlerShellExecute\CLSID\(Default) = "{FFB8655F-81B9-4fce-B89C-9A6BA76D13E7}"
-> {HKLM...CLSID} = "Shell Execute Hardware Event Handler"
\LocalServer32\(Default) = "C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {FFB8655F-81B9-4fce-B89C-9A6BA76D13E7}" [MS]

RPCDBurningOnArrival\
"Provider" = "RealPlayer"
"InvokeProgID" = "RealPlayer.CDBurn.6"
"InvokeVerb" = "open"
HKCU\Software\Classes\RealPlayer.CDBurn.6\shell\open\command\(Default) = ""C:\Program Files (x86)\Real\RealPlayer\RealPlay.exe" /burn "%1"" ["RealNetworks, Inc."]

RPPlayCDAudioOnArrival\
"Provider" = "RealPlayer"
"InvokeProgID" = "RealPlayer.AudioCD.6"
"InvokeVerb" = "play"
HKCU\Software\Classes\RealPlayer.AudioCD.6\shell\play\command\(Default) = ""C:\Program Files (x86)\Real\RealPlayer\RealPlay.exe" /play %1 " ["RealNetworks, Inc."]

RPPlayDVDMovieOnArrival\
"Provider" = "RealPlayer"
"InvokeProgID" = "RealPlayer.DVD.6"
"InvokeVerb" = "play"
HKCU\Software\Classes\RealPlayer.DVD.6\shell\play\command\(Default) = ""C:\Program Files (x86)\Real\RealPlayer\RealPlay.exe" /dvd %1 " ["RealNetworks, Inc."]

RPPlayMediaOnArrival\
"Provider" = "RealPlayer"
"InvokeProgID" = "RealPlayer.AutoPlay.6"
"InvokeVerb" = "open"
HKCU\Software\Classes\RealPlayer.AutoPlay.6\shell\open\command\(Default) = ""C:\Program Files (x86)\Real\RealPlayer\RealPlay.exe" /autoplay "%1"" ["RealNetworks, Inc."]

WIA_{771EA88E-E4D5-40E1-979B-7147E0F454B0}\
"Provider" = "Microsoft Office Word"
"CLSID" = "{A55803CC-4D53-404c-8557-FD63DBA95D24}"
"InitCmdLine" = "/WiaCmd;C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE /IMG_WIA;"
-> {HKLM...CLSID} = "WPDShextAutoplay"
\LocalServer32\(Default) = "C:\Windows\system32\WPDShextAutoplay.exe" [MS]

WIA_{A7D90654-5EA7-48D2-9702-2D51AA1E3C02}\
"Provider" = "Microsoft Office Word"
"CLSID" = "{A55803CC-4D53-404c-8557-FD63DBA95D24}"
"InitCmdLine" = "/WiaCmd;Q:\140062.enu\OFFICE14\WINWORD.EXE /IMG_WIA;"
-> {HKLM...CLSID} = "WPDShextAutoplay"
\LocalServer32\(Default) = "C:\Windows\system32\WPDShextAutoplay.exe" [MS]


Windows Sidebar Gadgets:
------------------------

C:\Users\Darek\AppData\Local\Microsoft\Windows Sidebar\Settings.ini
"C:%5CProgram%20Files%5CWindows%20Sidebar%5CGadgets%5CWeather.Gadget"
"C:%5CUsers%5CDarek%5CAppData%5CLocal%5CMicrosoft%5CWindows%20Sidebar%5CGadgets%5CIntelCoreSeries21.gadget"
"C:%5CUsers%5CDarek%5CAppData%5CLocal%5CMicrosoft%5CWindows%20Sidebar%5CGadgets%5Cnvidia20.gadget"


Non-disabled Scheduled Tasks:
-----------------------------

C:\Windows\System32\Tasks
"PandaUSBVaccine" -> launches: ""C:\Program Files (x86)\Panda USB Vaccine\Panda\RunInteractiveWin.exe" "C:\Program Files (x86)\Panda USB Vaccine\Panda\USBVaccine.exe" /resident /autovaccinate /experimentalntfs /agreelicense" [null data]
"SmartDefrag" -> launches: "C:\Program Files (x86)\IObit\IObit SmartDefrag\IObit SmartDefrag.exe /Schedule" ["IObit"]
"{09085FAA-475A-47B3-B20C-AA45F20B4736}" -> launches: "C:\Windows\system32\pcalua.exe -a G:\Flash_Disinfector.exe -d G:\" [MS]
"{32183721-2A11-413F-A695-46BD59AA4D4B}" -> launches: "C:\Windows\system32\pcalua.exe -a C:\Users\Darek\Desktop\Setup_405089_.exe -d C:\Users\Darek\Desktop" [MS]
"{41582169-9649-42D6-A8AD-050E379C90B9}" -> launches: "C:\Windows\system32\pcalua.exe -a E:\CDSetup.exe -d E:\" [MS]
"{46A8D636-FEFF-440A-B80B-9C2F006DB4CC}" -> launches: "C:\Windows\system32\pcalua.exe -a C:\Users\Darek\Desktop\wmpplugin.exe -d C:\Users\Darek\Desktop" [MS]
"{A096DCDA-89B3-4CA6-AAE6-9CBE08D4D459}" -> launches: "C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Xilisoft\HD Video Converter\Uninstall.exe"" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Active Directory Rights Management Services Client
"AD RMS Rights Policy Template Management (Manual)" -> launches: "{BF5CB148-7C77-4d8a-A53E-D81C70CF743C}"
-> {HKLM...CLSID} = "AD RMS Rights Policy Template Management (Manual) Task Handler"
\InProcServer32\(Default) = "C:\Windows\system32\msdrm.dll" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Application Experience
"AitAgent" -> launches: "aitagent" [MS]
"ProgramDataUpdater" -> launches: "%windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Autochk
"Proxy" -> launches: "%windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Bluetooth
"UninstallDeviceTask" -> launches: "BthUdTask.exe $(Arg0)" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\CertificateServicesClient
"SystemTask" -> launches: "{58fb76b9-ac85-4e55-ac04-427593b1d060}"
-> {HKLM...CLSID} = "Certificate Services Client Task Handler"
\InProcServer32\(Default) = "C:\Windows\system32\dimsjob.dll" [MS]
"UserTask" -> launches: "{58fb76b9-ac85-4e55-ac04-427593b1d060}"
-> {HKLM...CLSID} = "Certificate Services Client Task Handler"
\InProcServer32\(Default) = "C:\Windows\system32\dimsjob.dll" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program
"Consolidator" -> launches: "%SystemRoot%\System32\wsqmcons.exe" [MS]
"KernelCeipTask" -> (HIDDEN!) launches: "{e7ed314f-2816-4c26-aeb5-54a34d02404c}"
-> {HKLM...CLSID} = "KernelCeipCustomHandler"
\InProcServer32\(Default) = "C:\Windows\System32\kernelceip.dll" [MS]
"UsbCeip" -> (HIDDEN!) launches: "{c27f6b1d-fe0b-45e4-9257-38799fa69bc8}"
-> {HKLM...CLSID} = "UsbCeip"
\InProcServer32\(Default) = "C:\Windows\System32\usbceip.dll" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Defrag
"ScheduledDefrag" -> launches: "%windir%\system32\defrag.exe -c" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Diagnosis
"Scheduled" -> (HIDDEN!) launches: "{c1f85ef8-bcc2-4606-bb39-70c523715eb3}"
-> {HKLM...CLSID} = "ScheduledDiagnosticCustomHandler"
\InProcServer32\(Default) = "C:\Windows\System32\sdiagschd.dll" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Location
"Notifications" -> launches: "%windir%\System32\LocationNotifications.exe" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance
"WinSAT" -> launches: "{A9A33436-678B-4C9C-A211-7CC38785E79D}"
-> {HKLM...CLSID} = "WinSAT Task Manger Task"
\InProcServer32\(Default) = "C:\Windows\system32\WinSATAPI.dll" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Media Center
"ActivateWindowsSearch" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch" [MS]
"ConfigureInternetTimeService" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService" [MS]
"DispatchRecoveryTasks" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)" [MS]
"ehDRMInit" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /DRMInit" [MS]
"InstallPlayReady" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)" [MS]
"mcupdate" -> launches: "%SystemRoot%\ehome\mcupdate $(Arg0)" [MS]
"MediaCenterRecoveryTask" -> launches: "%SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask" [MS]
"ObjectStoreRecoveryTask" -> launches: "%SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask" [MS]
"OCURActivate" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /OCURActivate" [MS]
"OCURDiscovery" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)" [MS]
"PBDADiscovery" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery" [MS]
"PBDADiscoveryW1" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery" [MS]
"PBDADiscoveryW2" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery" [MS]
"PvrRecoveryTask" -> launches: "%SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask" [MS]
"PvrScheduleTask" -> launches: "%SystemRoot%\ehome\mcupdate.exe -PvrSchedule" [MS]
"RegisterSearch" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)" [MS]
"ReindexSearchRoot" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot" [MS]
"SqlLiteRecoveryTask" -> launches: "%SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask" [MS]
"UpdateRecordPath" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\MemoryDiagnostic
"CorruptionDetector" -> (HIDDEN!) launches: "{190BA3F6-0205-4f46-B589-95C6822899D2}"
-> {HKLM...CLSID} = "MemoryDiagnosticCustomHandler"
\InProcServer32\(Default) = "C:\Windows\System32\memdiag.dll" [MS]
"DecompressionFailureDetector" -> (HIDDEN!) launches: "{190BA3F6-0205-4f46-B589-95C6822899D2}"
-> {HKLM...CLSID} = "MemoryDiagnosticCustomHandler"
\InProcServer32\(Default) = "C:\Windows\System32\memdiag.dll" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\MobilePC
"HotStart" -> launches: "{06DA0625-9701-43da-BFD7-FBEEA2180A1E}"
-> {HKLM...CLSID} = "HotStart User Agent"
\InProcServer32\(Default) = "C:\Windows\System32\HotStartUserAgent.dll" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\MUI
"LPRemove" -> launches: "%windir%\system32\lpremove.exe" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Multimedia
"SystemSoundsService" -> launches: "{2DEA658F-54C1-4227-AF9B-260AB5FC3543}"
-> {HKLM...CLSID} = "Microsoft PlaySoundService Class"
\InProcServer32\(Default) = "C:\Windows\System32\PlaySndSrv.dll" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\NetTrace
"GatherNetworkInfo" -> launches: "%windir%\system32\gatherNetworkInfo.vbs" [null data]

C:\Windows\System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics
"AnalyzeSystem" -> launches: "%SystemRoot%\System32\powercfg.exe -energy -auto" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\RAC
"RacTask" -> (HIDDEN!) launches: "{42060D27-CA53-41f5-96E4-B1E8169308A6}"
-> {HKLM...CLSID} = "ReliabilityAnalysisCustomHandler"
\InProcServer32\(Default) = "C:\Windows\system32\RacEngn.dll" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Ras
"MobilityManager" -> launches: "{c463a0fc-794f-4fdf-9201-01938ceacafa}"
-> {HKLM...CLSID} = "RasMobilityManager"
\InProcServer32\(Default) = "C:\Windows\system32\rasmbmgr.dll" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Registry
"RegIdleBackup" -> (HIDDEN!) launches: "{ca767aa8-9157-4604-b64b-40747123d5f2}"
-> {HKLM...CLSID} = "RegistryIdleBackupHandler"
\InProcServer32\(Default) = "C:\Windows\System32\regidle.dll" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\RemoteAssistance
"RemoteAssistanceTask" -> (HIDDEN!) launches: "%windir%\system32\RAServer.exe /offerraupdate" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\SideShow
"GadgetManager" -> launches: "{FF87090D-4A9A-4f47-879B-29A80C355D61}"
-> {HKLM...CLSID} = "GadgetsManager Class"
\InProcServer32\(Default) = "C:\Windows\System32\AuxiliaryDisplayServices.dll" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\SystemRestore
"SR" -> launches: "%windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Task Manager
"Interactive" -> (HIDDEN!) launches: "{855fec53-d2e4-4999-9e87-3414e9cf0ff4}"
-> {HKLM...CLSID} = "RunTask"
\InProcServer32\(Default) = "C:\Windows\system32\wdc.dll" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Tcpip
"IpAddressConflict1" -> launches: "%windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem" [MS]
"IpAddressConflict2" -> launches: "%windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\TextServicesFramework
"MsCtfMonitor" -> (HIDDEN!) launches: "{01575cfe-9a55-4003-a5e1-f38d1ebdcbe1}"
-> {HKLM...CLSID} = "MsCtfMonitor task handler"
\InProcServer32\(Default) = "C:\Windows\system32\MsCtfMonitor.dll" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Time Synchronization
"SynchronizeTime" -> launches: "%windir%\system32\sc.exe start w32time task_started" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\UPnP
"UPnPHostConfig" -> launches: "sc.exe config upnphost start= auto" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\WDI
"ResolutionHost" -> (HIDDEN!) launches: "{900be39d-6be8-461a-bc4d-b0fa71f5ecb1}"
-> {HKLM...CLSID} = "DiagnosticInfrastructureCustomHandler"
\InProcServer32\(Default) = "C:\Windows\System32\wdi.dll" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Windows Activation Technologies
"ValidationTask" -> (HIDDEN!) launches: "%SystemRoot%\system32\Wat\WatAdminSvc.exe /run" [MS]
"ValidationTaskDeadline" -> (HIDDEN!) launches: "%SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Windows Error Reporting
"QueueReporting" -> launches: "%windir%\system32\wermgr.exe -queuereporting" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Windows Filtering Platform
"BfeOnServiceStartTypeChange" -> (HIDDEN!) launches: "%windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Windows Media Sharing
"UpdateLibrary" -> launches: ""%ProgramFiles%\Windows Media Player\wmpnscfg.exe"" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\WindowsBackup
"ConfigNotification" -> launches: "%systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows Defender
"MP Scheduled Scan" -> (HIDDEN!) launches: "c:\program files\windows defender\MpCmdRun.exe Scan -ScheduleJob -WinTask -RestrictPrivilegesScan" [MS]
"MpIdleTask" -> (HIDDEN!) launches: "c:\program files\windows defender\MpCmdRun.exe -IdleTask -TaskName MpIdleTask" [MS]

C:\Windows\System32\Tasks\WPD
"SqmUpload_S-1-5-21-1264084378-3322303571-3196748977-1000" -> (HIDDEN!) launches: "%windir%\system32\rundll32.exe portabledeviceapi.dll,#1" [MS]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\system32\NLAapi.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000004\LibraryPath = "%SystemRoot%\system32\napinsp.dll" [MS]
000000000005\LibraryPath = "%SystemRoot%\system32\pnrpnsp.dll" [MS]
000000000006\LibraryPath = "%SystemRoot%\system32\pnrpnsp.dll" [MS]
000000000007\LibraryPath = "%SystemRoot%\system32\wshbth.dll" [MS]

Transport Service Providers

HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 11
C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll ["VMware, Inc."], 12 - 13


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

Avira AntiVir Guard, AntiVirService, ""C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"" ["Avira GmbH"]
Avira AntiVir Scheduler, AntiVirSchedulerService, ""C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"" ["Avira GmbH"]
Intel(R) Matrix Storage Event Monitor, IAANTMON, "C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe" ["Intel Corporation"]
Micro Star SCM, Micro Star SCM, "C:\Program Files (x86)\System Control Manager\MSIService.exe" ["Micro-Star International Co., Ltd."]
NMSAccess, NMSAccess, "C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe" [null data]
NVIDIA Display Driver Service, nvsvc, "C:\Windows\system32\nvvsvc.exe" ["NVIDIA Corporation"]
NVIDIA Stereoscopic 3D Driver Service, Stereo Service, "C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe" ["NVIDIA Corporation"]
PC Tools Firewall Plus, PCToolsFirewallPlus, "C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe" ["PC Tools"]
PnkBstrA, PnkBstrA, "C:\Windows\system32\PnkBstrA.exe" [file not found]
PnkBstrB, PnkBstrB, "C:\Windows\system32\PnkBstrB.exe" [file not found]
postgresql-8.4 - PostgreSQL Server 8.4, postgresql-8.4, "C:/Program Files (x86)/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N "postgresql-8.4" -D "C:/Program Files (x86)/PostgreSQL/8.4/data" -w" ["PostgreSQL Global Development Group"]
TOSHIBA Bluetooth Service, TOSHIBA Bluetooth Service, "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe" ["TOSHIBA CORPORATION"]
VMware Authorization Service, VMAuthdService, ""C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe"" ["VMware, Inc."]
VMware DHCP Service, VMnetDHCP, "C:\Windows\system32\vmnetdhcp.exe" [file not found]
VMware NAT Service, VMware NAT Service, "C:\Windows\system32\vmnat.exe" [file not found]
VMware USB Arbitration Service, VMUSBArbService, ""C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe"" ["VMware, Inc."]
Łączność urządzeń z systemem Windows Mobile, RapiMgr, "C:\Windows\system32\svchost.exe -k WindowsMobile" {"C:\Windows\WindowsMobile\rapimgr.dll" [MS]}
Łączność urządzeń z systemem Windows Mobile 2003, WcesComm, "C:\Windows\system32\svchost.exe -k WindowsMobile" {"C:\Windows\WindowsMobile\wcescomm.dll" [MS]}


Safe Mode Drivers & Services (subkey name, subkey default value):
-----------------------------------------------------------------

HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\

<<!>> MSIServer, "Service"


Keyboard Driver Filters:
------------------------

HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}\
<<!>> "UpperFilters" = "kbdclass" [MS],<<!>> "vmkbd" ["VMware, Inc."]


Print Monitors:
---------------

HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors\
Epson Inbox Language Monitor01\Driver = "EP0SLM01.DLL" ["SEIKO EPSON CORPORATION"]
EPSON Stylus DX3800 Series 64MonitorBE\Driver = "E_ILMACE.DLL" ["SEIKO EPSON CORPORATION"]
Toshiba Bluetooth Monitor\Driver = "tbtmon.dll" ["TOSHIBA CORPORATION."]


---------- (launch time: 2010-09-01 20:52:35)
<<!>>: Suspicious data at a malware launch point.

+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
launch it from a command prompt or a shortcut with the -all parameter.
+ The search for DESKTOP.INI DLL launch points on all local fixed drives
took 135 seconds.
---------- (total run time: 191 seconds)
[/log]

Tomek01
komentarz
komentarz

W OTL zastosuj funkcję Clean Up.

Wyłącz a następnie włącz przywracanie systemu na wszystkich partycjach.
Zastosuj ATF Cleaner, zaznacz trzy pierwsze fajki i empty slected.

Wykonaj pełny skan [url=http://www.instalki.pl/programy/download_c/14/155.html][color=#0000CD][b]DrWebCureIt[/b][/color][/url] oraz [url=http://www.instalki.pl/programy/download_c/13/96.html][color=#0000CD][b]Malwarebytes Anti-Malware[/b][/color][/url] i wyniki podaj na forum.

dario116
komentarz
komentarz

Wykonałem wszystkie czynności.

DrWeb znalazł jedno (najprawdopodobniej fałszywe) zagrożenie od programu SilentRunners.
Malwarebytes Anti-malware nie znalazł nic.

Tomek01
komentarz
komentarz

W takim razie jest czysto.

dario116
komentarz
komentarz

Nie pozostaje mi w takim razie nic innego jak podziękować za pomoc :)

Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!

Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.

×
×
  • Dodaj nową pozycję...

Powiadomienie o plikach cookie

Strona wykorzystuje pliki cookies w celu prawidłowego świadczenia usług i wygody użytkowników. Warunki przechowywania i dostępu do plików cookies możesz zmienić w ustawieniach przeglądarki.