dario116 utworzono 31 sierpnia 2010 utworzono 31 sierpnia 2010 Witam. Na dyskach wymiennych jakie podłączyłem do komputera zamiast plików pojawiły się skróty. Pozdrawiam. Log z OTL: [log] OTL logfile created on: 2010-08-31 11:31:56 - Run 3 OTL by OldTimer - Version 3.2.10.0 Folder = C:\Users\Darek\Desktop 64bit- An unknown product (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 64,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 78,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 49,90 Gb Total Space | 6,86 Gb Free Space | 13,74% Space Free | Partition Type: NTFS Drive D: | 240,28 Gb Total Space | 47,48 Gb Free Space | 19,76% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: DAREK-KOMPUTER Current User Name: Darek Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Include 64bit Scans Company Name Whitelist: On Skip Microsoft Files: On File Age = 60 Days Output = Standard [color=#E56717]========== Processes (All) ==========[/color] PRC - [2010-08-30 21:28:37 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe PRC - [2010-08-09 15:27:06 | 000,836,464 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe PRC - [2010-08-06 09:11:58 | 000,248,936 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2010-05-30 16:31:46 | 011,981,408 | ---- | M] (GG Network S.A.) -- C:\Program Files (x86)\Gadu-Gadu 10\gg.exe PRC - [2010-05-14 14:11:08 | 000,066,048 | ---- | M] (PostgreSQL Global Development Group) -- C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe PRC - [2010-05-14 14:09:18 | 004,530,176 | ---- | M] (PostgreSQL Global Development Group) -- C:\Program Files (x86)\PostgreSQL\8.4\bin\postgres.exe PRC - [2010-05-14 11:44:46 | 000,248,552 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe PRC - [2010-03-04 23:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe PRC - [2010-01-22 21:57:08 | 000,395,824 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnat.exe PRC - [2010-01-22 21:56:44 | 000,334,384 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnetdhcp.exe PRC - [2010-01-22 21:56:28 | 000,113,200 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe PRC - [2010-01-22 21:00:48 | 000,563,760 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe PRC - [2010-01-19 10:45:41 | 003,168,216 | ---- | M] (PC Tools) -- C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe PRC - [2009-11-18 19:52:31 | 000,818,432 | ---- | M] (PC Tools) -- C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe PRC - [2009-11-13 19:29:14 | 000,107,832 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe PRC - [2009-11-13 19:28:53 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2009-09-11 17:52:16 | 002,080,768 | ---- | M] (Micro-Star International Co., Ltd.) -- C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe PRC - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe PRC - [2009-07-09 15:54:42 | 000,160,768 | ---- | M] (Micro-Star International Co., Ltd.) -- C:\Program Files (x86)\System Control Manager\MSIService.exe PRC - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe PRC - [2009-03-02 13:08:47 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe PRC - [2009-02-11 17:38:40 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe PRC - [2009-02-11 17:38:38 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe PRC - [2007-09-13 22:26:50 | 000,090,112 | ---- | M] () -- C:\MSI\Advanced Wheel Mouse\wh_exec.exe [color=#E56717]========== Modules (All) ==========[/color] MOD - [2010-08-30 21:28:37 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe MOD - [2010-03-24 08:37:04 | 001,289,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll MOD - [2010-02-18 09:34:01 | 012,867,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll MOD - [2009-12-11 09:39:06 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll MOD - [2009-12-11 09:36:33 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll MOD - [2009-07-14 03:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll MOD - [2009-07-14 03:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll MOD - [2009-07-14 03:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll MOD - [2009-07-14 03:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll MOD - [2009-07-14 03:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll MOD - [2009-07-14 03:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll MOD - [2009-07-14 03:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll MOD - [2009-07-14 03:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll MOD - [2009-07-14 03:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll MOD - [2009-07-14 03:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll MOD - [2009-07-14 03:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll MOD - [2009-07-14 03:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll MOD - [2009-07-14 03:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll MOD - [2009-07-14 03:16:12 | 001,412,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll MOD - [2009-07-14 03:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll MOD - [2009-07-14 03:16:12 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll MOD - [2009-07-14 03:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll MOD - [2009-07-14 03:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll MOD - [2009-07-14 03:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll MOD - [2009-07-14 03:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll MOD - [2009-07-14 03:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll MOD - [2009-07-14 03:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll MOD - [2009-07-14 03:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll MOD - [2009-07-14 03:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll MOD - [2009-07-14 03:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll MOD - [2009-07-14 03:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2009-07-14 03:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll MOD - [2009-07-14 03:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll MOD - [2009-07-14 03:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll MOD - [2009-07-14 03:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll MOD - [2009-07-14 03:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll MOD - [2009-07-14 03:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll MOD - [2009-07-14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009-07-14 03:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv MOD - [2009-07-14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll MOD - [2009-07-14 03:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll MOD - [2009-07-14 03:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll MOD - [2009-07-14 03:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll MOD - [2009-07-14 03:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll MOD - [2009-07-14 03:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll MOD - [2009-07-14 03:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll MOD - [2009-07-14 03:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll MOD - [2009-07-14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll MOD - [2007-09-13 22:26:52 | 000,036,864 | ---- | M] () -- C:\MSI\Advanced Wheel Mouse\wh_hook.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\vmnat.exe -- (VMware NAT Service) SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\vmnetdhcp.exe -- (VMnetDHCP) SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrB.exe -- (PnkBstrB) SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrA.exe -- (PnkBstrA) SRV:[b]64bit:[/b] - [2009-10-20 14:17:21 | 001,030,600 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:[b]64bit:[/b] - [2009-07-14 03:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService) SRV:[b]64bit:[/b] - [2009-07-14 03:41:54 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\StorSvc.dll -- (StorSvc) SRV:[b]64bit:[/b] - [2009-07-14 03:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 03:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService) SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2010-08-06 09:11:58 | 000,248,936 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2010-05-14 14:11:08 | 000,066,048 | ---- | M] (PostgreSQL Global Development Group) [Auto | Running] -- C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe -- (postgresql-8.4) SRV - [2010-03-04 23:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe -- (NMSAccess) SRV - [2010-01-22 21:57:08 | 000,395,824 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service) SRV - [2010-01-22 21:56:44 | 000,334,384 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP) SRV - [2010-01-22 21:56:28 | 000,113,200 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe -- (VMAuthdService) SRV - [2010-01-22 21:00:48 | 000,563,760 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService) SRV - [2009-11-18 19:52:31 | 000,818,432 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe -- (PCToolsFirewallPlus) SRV - [2009-11-13 19:29:14 | 000,107,832 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB) SRV - [2009-11-13 19:28:53 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2009-10-12 14:32:24 | 000,191,024 | ---- | M] (VMware, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe -- (ufad-ws60) SRV - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2009-07-09 15:54:42 | 000,160,768 | ---- | M] (Micro-Star International Co., Ltd.) [Auto | Running] -- C:\Program Files (x86)\System Control Manager\MSIService.exe -- (Micro Star SCM) SRV - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2009-03-17 14:37:10 | 000,189,808 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service) SRV - [2009-02-11 17:38:40 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe -- (IAANTMON) Intel(R) SRV - [2007-05-31 17:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007-05-31 17:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010-06-22 00:07:36 | 000,131,688 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:[b]64bit:[/b] - [2010-02-12 20:30:26 | 000,145,360 | ---- | M] (Sun Microsystems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp) DRV:[b]64bit:[/b] - [2010-02-05 09:17:56 | 000,306,648 | ---- | M] (PC Tools) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\pctgntdi64.sys -- (pctgntdi) DRV:[b]64bit:[/b] - [2010-01-22 21:58:22 | 000,068,656 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmx86.sys -- (vmx86) DRV:[b]64bit:[/b] - [2010-01-22 21:58:20 | 000,029,744 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VMkbd.sys -- (vmkbd) DRV:[b]64bit:[/b] - [2010-01-22 21:58:16 | 000,080,944 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmci.sys -- (vmci) DRV:[b]64bit:[/b] - [2010-01-22 21:58:16 | 000,030,256 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetuserif.sys -- (VMnetuserif) DRV:[b]64bit:[/b] - [2010-01-22 21:00:44 | 000,038,960 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\hcmon.sys -- (hcmon) DRV:[b]64bit:[/b] - [2010-01-22 17:13:00 | 000,037,680 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmusb.sys -- (vmusb) DRV:[b]64bit:[/b] - [2010-01-22 17:12:58 | 000,045,104 | R--- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetbridge.sys -- (VMnetBridge) DRV:[b]64bit:[/b] - [2010-01-22 17:12:58 | 000,020,016 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vmnetadapter.sys -- (VMnetAdapter) DRV:[b]64bit:[/b] - [2010-01-19 10:45:52 | 000,164,496 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pctplfw64.sys -- (pctplfw) DRV:[b]64bit:[/b] - [2010-01-19 10:45:52 | 000,081,584 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pctNdis64.sys -- (pctNDIS) DRV:[b]64bit:[/b] - [2010-01-19 10:45:51 | 000,095,504 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pctNdis-PacketFilter64.sys -- (PCTFW-PacketFilter) DRV:[b]64bit:[/b] - [2010-01-19 10:45:51 | 000,042,456 | ---- | M] (PC Tools) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pctNdis-DNS64.sys -- (PCTFW-DNS) DRV:[b]64bit:[/b] - [2009-12-07 18:11:49 | 000,074,880 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt) DRV:[b]64bit:[/b] - [2009-10-19 15:49:50 | 000,871,408 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2009-09-23 03:46:18 | 000,066,304 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr) DRV:[b]64bit:[/b] - [2009-09-23 03:46:17 | 000,359,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm) DRV:[b]64bit:[/b] - [2009-09-23 03:32:39 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb) DRV:[b]64bit:[/b] - [2009-09-23 03:32:35 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcuxd.sys -- (vpcuxd) DRV:[b]64bit:[/b] - [2009-09-23 03:32:33 | 000,187,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 02:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM) DRV:[b]64bit:[/b] - [2009-07-14 01:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap) DRV:[b]64bit:[/b] - [2009-07-14 01:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID) DRV:[b]64bit:[/b] - [2009-07-14 01:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2009-07-14 01:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC) DRV:[b]64bit:[/b] - [2009-06-29 10:17:00 | 000,070,656 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\enecir.sys -- (enecir) DRV:[b]64bit:[/b] - [2009-06-10 23:01:14 | 001,227,776 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SmSerl64.sys -- (smserial) DRV:[b]64bit:[/b] - [2009-06-10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009-06-10 22:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) Sterownik karty Intel(R) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-05-22 22:52:30 | 000,215,040 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-03-23 17:28:30 | 000,056,320 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TosRfSnd.sys -- (TosRfSnd) DRV:[b]64bit:[/b] - [2009-03-19 14:07:46 | 000,052,736 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfusb.sys -- (Tosrfusb) DRV:[b]64bit:[/b] - [2009-03-12 11:33:06 | 000,020,992 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfnds.sys -- (tosrfnds) DRV:[b]64bit:[/b] - [2009-03-05 11:03:34 | 000,088,576 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Tosrfhid.sys -- (Tosrfhid) DRV:[b]64bit:[/b] - [2009-03-03 15:34:54 | 000,045,056 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfbnp.sys -- (tosrfbnp) DRV:[b]64bit:[/b] - [2009-02-19 16:20:18 | 000,076,160 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tosrfcom.sys -- (Tosrfcom) DRV:[b]64bit:[/b] - [2009-02-11 17:26:18 | 000,407,576 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2008-10-06 17:56:58 | 000,173,696 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfbd.sys -- (tosrfbd) DRV:[b]64bit:[/b] - [2008-09-17 15:14:00 | 000,012,744 | R--- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Entech64.sys -- (ENTECH64) DRV:[b]64bit:[/b] - [2008-08-07 17:01:36 | 000,143,360 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR) DRV:[b]64bit:[/b] - [2008-03-25 13:54:26 | 000,049,152 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosporte.sys -- (tosporte) DRV:[b]64bit:[/b] - [2007-01-26 10:04:36 | 000,009,600 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\whfltr2k.sys -- (whfltr2k) DRV - [2009-10-26 16:05:45 | 000,014,544 | ---- | M] (OpenLibSys.org) [Kernel | Auto | Running] -- C:\Users\Darek\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries21.gadget\WinRing0x64.sys -- (WinRing0_1_2_0) DRV - [2009-10-17 14:42:27 | 000,021,200 | ---- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TVICHW64.SYS -- (TVICHW64) DRV - [2009-10-12 14:31:04 | 000,032,816 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys -- (vstor2-ws60) DRV - [2006-07-24 16:05:00 | 000,005,632 | ---- | M] () [File_System | System | Stopped] -- C:\Windows\SysWow64\drivers\StarOpen.sys -- (StarOpen) DRV - [2004-06-22 15:44:50 | 000,005,632 | ---- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\Entech64.sys -- (ENTECH64) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1264084378-3322303571-3196748977-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2010-04-17 13:37:55 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll (GG Network S.A.) O4:[b]64bit:[/b] - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.DLL (NVIDIA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [00PCTFW] C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe (PC Tools) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [MGSysCtrl] C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe (Micro-Star International Co., Ltd.) O4 - HKLM..\Run: [WheelMouse] C:\MSI\Advanced Wheel Mouse\wh_exec.exe () O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1264084378-3322303571-3196748977-1012..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O4 - HKU\S-1-5-21-1264084378-3322303571-3196748977-1012..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKU\S-1-5-21-1264084378-3322303571-3196748977-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe (PokerStars) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKU\S-1-5-21-1264084378-3322303571-3196748977-1000\..Trusted Domains: mks.com.pl ([www] https in Zaufane witryny) O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab (Reg Error: Key error.) O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} http://service.futuremark.com/virtualmark/tc/FMSI.cab (Reg Error: Key error.) O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab (CKAVWebScan Object) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\http\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-10-21 11:42:07 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ] O32 - AutoRun File - [2010-08-21 12:53:05 | 000,040,092 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk - C:\PROGRA~2\Toshiba\BLUETO~1\TosBtMng.exe - (TOSHIBA CORPORATION.) MsConfig:64bit - StartUpFolder: C:^Users^Darek^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^continuator_automate.exe.lnk - C:\PROGRA~2\FOOBAR~1\COMPON~1\CONTIN~1.EXE - File not found MsConfig:64bit - StartUpReg: [b]Adobe ARM[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) MsConfig:64bit - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) MsConfig:64bit - StartUpReg: [b]Bonus.SSR.FR10[/b] - hkey= - key= - C:\Program Files (x86)\ABBYY FineReader 10\Bonus.ScreenshotReader.exe File not found MsConfig:64bit - StartUpReg: [b]DAEMON Tools Lite[/b] - hkey= - key= - C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe (DT Soft Ltd) MsConfig:64bit - StartUpReg: [b]ElcomSoft DPR Server[/b] - hkey= - key= - C:\Program Files (x86)\ElcomSoft\Distributed Password Recovery\esdprs.exe File not found MsConfig:64bit - StartUpReg: [b]EPSON Stylus DX3800 Series[/b] - hkey= - key= - C:\Windows\SysNative\spool\DRIVERS\x64\3\E_FATIACE.EXE (SEIKO EPSON CORPORATION) MsConfig:64bit - StartUpReg: [b]FlashPlayerUpdate[/b] - hkey= - key= - C:\Program Files (x86)\Opera\program\plugins\NPSWF32_FlashUtil.exe (Adobe Systems, Inc.) MsConfig:64bit - StartUpReg: [b]Gadu-Gadu 10[/b] - hkey= - key= - C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.) MsConfig:64bit - StartUpReg: [b]IPLA![/b] - hkey= - key= - C:\Program Files (x86)\ipla\ipla.exe File not found MsConfig:64bit - StartUpReg: [b]SearchSettings[/b] - hkey= - key= - C:\Program Files (x86)\pdfforge Toolbar\SearchSettings.exe File not found MsConfig:64bit - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.) MsConfig:64bit - StartUpReg: [b]SunJavaUpdateSched[/b] - hkey= - key= - C:\Program Files (x86)\Java\jre6\bin\jusched.exe File not found MsConfig:64bit - StartUpReg: [b]TkBellExe[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.) MsConfig:64bit - StartUpReg: [b]UpdatePDRShortCut[/b] - hkey= - key= - C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe File not found MsConfig:64bit - StartUpReg: [b]VMware hqtray[/b] - hkey= - key= - C:\Program Files (x86)\VMware\VMware Player\hqtray.exe (VMware, Inc.) MsConfig:64bit - StartUpReg: [b]Windows Mobile Device Center[/b] - hkey= - key= - C:\Windows\WindowsMobile\wmdc.exe (Microsoft Corporation) MsConfig:64bit - State: "startup" - Reg Error: Key error. SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Base - Driver Group SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group SafeBootMin:[b]64bit:[/b] File system - Driver Group SafeBootMin:[b]64bit:[/b] Filter - Driver Group SafeBootMin:[b]64bit:[/b] HelpSvc - Service SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group SafeBootMin:[b]64bit:[/b] sacsvr - Service SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] vmms - Service SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Base - Driver Group SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group SafeBootNet:[b]64bit:[/b] File system - Driver Group SafeBootNet:[b]64bit:[/b] Filter - Driver Group SafeBootNet:[b]64bit:[/b] HelpSvc - Service SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group SafeBootNet:[b]64bit:[/b] Network - Driver Group SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group SafeBootNet:[b]64bit:[/b] rdsessmgr - Service SafeBootNet:[b]64bit:[/b] sacsvr - Service SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] TDI - Driver Group SafeBootNet:[b]64bit:[/b] vmms - Service SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2010-08-30 21:55:49 | 000,000,000 | ---D | C] -- C:\Users\Darek\DoctorWeb [2010-08-30 21:51:56 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Roaming\Malwarebytes [2010-08-30 21:51:47 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010-08-30 21:51:46 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010-08-30 21:51:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010-08-30 21:51:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2010-08-30 21:32:42 | 000,000,000 | ---D | C] -- C:\_OTL [2010-08-30 21:28:36 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe [2010-08-30 21:13:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro [2010-08-30 21:12:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET [2010-08-30 21:06:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2010-08-30 21:06:35 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Kaspersky Lab [2010-08-30 16:34:21 | 000,000,000 | ---D | C] -- C:\NVIDIA [2010-08-30 16:33:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation [2010-08-30 16:31:03 | 000,065,128 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2010-08-30 16:31:03 | 000,056,936 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2010-08-30 16:08:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Driver Cleaner [2010-08-30 11:40:32 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation [2010-08-27 09:14:30 | 000,000,000 | ---D | C] -- C:\HMArchive [2010-08-27 09:14:29 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Local\In The Money [2010-08-27 09:14:05 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Roaming\HEM Data [2010-08-27 09:10:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RVG Software [2010-08-27 09:10:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PSQLINSTALL [2010-08-25 13:03:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Acronis [2010-08-25 13:03:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Acronis [2010-08-25 10:14:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2010-08-25 10:14:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2010-08-21 17:36:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Vroom Vroom !!! [2010-08-17 17:40:35 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Local\PokerStars [2010-08-17 17:39:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PokerStars [2010-07-25 18:14:59 | 000,000,000 | ---D | C] -- C:\lezac [2010-07-25 11:26:59 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Local\Apps [2010-07-20 22:40:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AutoMapa EU [2010-07-14 09:15:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Avanquest Bluetooth SDK [2010-07-14 09:10:39 | 000,000,000 | ---D | C] -- C:\ProgramData\BVRP Software [2010-07-13 10:51:11 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Roaming\Samsung [2010-07-13 10:51:11 | 000,000,000 | ---D | C] -- C:\Users\Darek\Documents\My Art [2010-07-13 10:41:19 | 000,000,000 | -HSD | C] -- C:\Windows\SysWow64\Samsung_USB_Drivers [2010-07-08 08:52:33 | 000,000,000 | ---D | C] -- C:\Fraps [2010-07-07 17:09:51 | 000,000,000 | ---D | C] -- C:\Windows\WindowsMobile [2010-07-07 13:06:14 | 000,000,000 | ---D | C] -- C:\Users\Darek\Desktop\Pierwsza_komunia_swieta_od_corki_Anety_Wuppertal_maj_2010r [4 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [2 C:\*.tmp files -> C:\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2010-08-31 11:31:21 | 002,883,584 | -HS- | M] () -- C:\Users\Darek\NTUSER.DAT [2010-08-31 11:03:27 | 000,013,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010-08-31 11:03:27 | 000,013,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010-08-31 10:58:28 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempDc4868.html [2010-08-31 10:58:28 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempFg4868.html [2010-08-31 10:55:38 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-08-31 10:55:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-08-31 10:55:25 | 3220,561,920 | -HS- | M] () -- C:\hiberfil.sys [2010-08-31 10:50:11 | 001,629,679 | -H-- | M] () -- C:\Users\Darek\AppData\Local\IconCache.db [2010-08-31 10:02:59 | 048,855,664 | ---- | M] () -- C:\Users\Darek\Desktop\2rhk4xk7.exe [2010-08-31 08:25:19 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempUK4680.html [2010-08-30 21:54:34 | 048,892,120 | ---- | M] () -- C:\Users\Darek\Desktop\launch.exe [2010-08-30 21:51:50 | 000,001,013 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010-08-30 21:29:33 | 000,293,376 | ---- | M] () -- C:\Users\Darek\Desktop\iu90d21r.exe [2010-08-30 21:28:37 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe [2010-08-30 20:37:09 | 001,531,530 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010-08-30 20:37:09 | 000,692,058 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2010-08-30 20:37:09 | 000,610,412 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010-08-30 20:37:09 | 000,133,208 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2010-08-30 20:37:09 | 000,105,316 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010-08-30 20:10:59 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemptX3480.html [2010-08-30 20:10:59 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempAE3480.html [2010-08-30 16:34:49 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempSK3740.html [2010-08-30 16:34:49 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temprj3740.html [2010-08-30 11:36:05 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempLN3340.html [2010-08-29 18:02:26 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXQ4136.html [2010-08-29 18:02:26 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBj4136.html [2010-08-29 15:48:26 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempwk4792.html [2010-08-29 12:00:50 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempzR4944.html [2010-08-29 12:00:50 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempol4944.html [2010-08-28 22:11:57 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempLG4972.html [2010-08-28 22:11:57 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXa4972.html [2010-08-28 18:24:55 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCp3256.html [2010-08-28 18:24:55 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBw3256.html [2010-08-28 14:12:59 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempkV3200.html [2010-08-28 14:12:59 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempvC3200.html [2010-08-28 10:04:50 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemphT3340.html [2010-08-28 10:04:50 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCl3340.html [2010-08-27 23:49:58 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempsMh896.html [2010-08-27 23:49:58 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempKwG896.html [2010-08-27 16:29:35 | 000,009,672 | ---- | M] () -- C:\bootsqm.dat [2010-08-27 12:39:13 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempjt3028.html [2010-08-27 12:39:13 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempRz3028.html [2010-08-27 09:19:12 | 000,000,000 | ---- | M] () -- C:\Windows\HMHud.INI [2010-08-27 09:10:52 | 000,001,237 | ---- | M] () -- C:\Users\Public\Desktop\HoldemManager.lnk [2010-08-26 22:14:44 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemprA5060.html [2010-08-26 22:14:44 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempof5060.html [2010-08-26 11:26:17 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temphp4780.html [2010-08-26 11:26:17 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempiW4780.html [2010-08-25 19:11:12 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempvCf248.html [2010-08-25 19:11:12 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXBL248.html [2010-08-25 12:08:30 | 000,000,690 | ---- | M] () -- C:\Windows\SysWow64\WindowsPowerShell.lnk [2010-08-25 12:08:30 | 000,000,676 | ---- | M] () -- C:\Windows\SysWow64\New Folder.lnk [2010-08-25 12:08:30 | 000,000,674 | ---- | M] () -- C:\Windows\SysWow64\XPSViewer.lnk [2010-08-25 12:08:30 | 000,000,674 | ---- | M] () -- C:\Windows\SysWow64\Passwords.lnk [2010-08-25 12:08:30 | 000,000,674 | ---- | M] () -- C:\Windows\SysWow64\Documents.lnk [2010-08-25 12:08:30 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\Pictures.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\zh-TW.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\zh-HK.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\zh-CN.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\xlive.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\winrm.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Video.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\uk-UA.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\tr-TR.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Music.lnk [2010-08-25 12:08:30 | 000,000,664 | ---- | M] () -- C:\Windows\SysWow64\wbem.lnk [2010-08-25 12:08:30 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\wdi.lnk [2010-08-25 12:08:30 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\WCN.lnk [2010-08-25 12:08:30 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\Wat.lnk [2010-08-25 12:08:29 | 000,000,694 | ---- | M] () -- C:\Windows\SysWow64\Samsung_USB_Drivers.lnk [2010-08-25 12:08:29 | 000,000,676 | ---- | M] () -- C:\Windows\SysWow64\sr-Latn-CS.lnk [2010-08-25 12:08:29 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\Recovery.lnk [2010-08-25 12:08:29 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\sysprep.lnk [2010-08-25 12:08:29 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\restore.lnk [2010-08-25 12:08:29 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\Speech.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\th-TH.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Tasks.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\sv-SE.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\sppui.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\sl-SI.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\slmgr.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\sk-SK.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Setup.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ru-RU.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\RTCOM.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ro-RO.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\pt-PT.lnk [2010-08-25 12:08:29 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\spp.lnk [2010-08-25 12:08:29 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\ras.lnk [2010-08-25 12:08:28 | 000,000,700 | ---- | M] () -- C:\Windows\SysWow64\Printing_Admin_Scripts.lnk [2010-08-25 12:08:28 | 000,000,682 | ---- | M] () -- C:\Windows\SysWow64\manifeststore.lnk [2010-08-25 12:08:28 | 000,000,678 | ---- | M] () -- C:\Windows\SysWow64\NetworkList.lnk [2010-08-25 12:08:28 | 000,000,674 | ---- | M] () -- C:\Windows\SysWow64\migration.lnk [2010-08-25 12:08:28 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\Macromed.lnk [2010-08-25 12:08:28 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\LogFiles.lnk [2010-08-25 12:08:28 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\migwiz.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\pt-BR.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\pl-PL.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\nl-NL.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\nb-NO.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Msdtc.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\lv-LV.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\lt-LT.lnk [2010-08-25 12:08:28 | 000,000,664 | ---- | M] () -- C:\Windows\SysWow64\oobe.lnk [2010-08-25 12:08:28 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\NDF.lnk [2010-08-25 12:08:28 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\MUI.lnk [2010-08-25 12:08:28 | 000,000,660 | ---- | M] () -- C:\Windows\SysWow64\pl.lnk [2010-08-25 12:08:27 | 000,000,688 | ---- | M] () -- C:\Windows\SysWow64\GroupPolicyUsers.lnk [2010-08-25 12:08:27 | 000,000,682 | ---- | M] () -- C:\Windows\SysWow64\InstallShield.lnk [2010-08-25 12:08:27 | 000,000,678 | ---- | M] () -- C:\Windows\SysWow64\GroupPolicy.lnk [2010-08-25 12:08:27 | 000,000,676 | ---- | M] () -- C:\Windows\SysWow64\Futuremark.lnk [2010-08-25 12:08:27 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\inetsrv.lnk [2010-08-25 12:08:27 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\icsxml.lnk [2010-08-25 12:08:27 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\FxsTmp.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ko-KR.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ja-JP.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\it-IT.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\hu-HU.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\hr-HR.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\he-IL.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\fr-FR.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\fi-FI.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\et-EE.lnk [2010-08-25 12:08:27 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\IME.lnk [2010-08-25 12:08:26 | 000,000,678 | ---- | M] () -- C:\Windows\SysWow64\DriverStore.lnk [2010-08-25 12:08:26 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\eps_icon.avi.lnk [2010-08-25 12:08:26 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\catroot2.lnk [2010-08-25 12:08:26 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\drivers.lnk [2010-08-25 12:08:26 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\config.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\es-ES.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\en-US.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\el-GR.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\de-DE.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\da-DK.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\cs-CZ.lnk [2010-08-25 12:08:26 | 000,000,664 | ---- | M] () -- C:\Windows\SysWow64\Dism.lnk [2010-08-25 12:08:26 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\com.lnk [2010-08-25 12:08:26 | 000,000,660 | ---- | M] () -- C:\Windows\SysWow64\en.lnk [2010-08-25 12:08:25 | 000,000,692 | ---- | M] () -- C:\Windows\SysWow64\AdvancedInstallers.lnk [2010-08-25 12:08:25 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\catroot.lnk [2010-08-25 12:08:25 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\bg-BG.lnk [2010-08-25 12:08:25 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ar-SA.lnk [2010-08-25 12:08:25 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\AGEIA.lnk [2010-08-25 12:08:25 | 000,000,664 | ---- | M] () -- C:\Windows\SysWow64\0409.lnk [2010-08-25 12:08:25 | 000,000,660 | ---- | M] () -- C:\Windows\SysWow64\...lnk [2010-08-25 12:08:25 | 000,000,658 | ---- | M] () -- C:\Windows\SysWow64\..lnk [2010-08-25 12:08:23 | 000,167,936 | RHS- | M] () -- C:\Windows\SysWow64\mqpoy.exe [2010-08-25 12:08:21 | 000,000,134 | RHS- | M] () -- C:\Windows\SysWow64\autorun.inf [2010-08-25 09:21:35 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempjM4976.html [2010-08-24 16:37:03 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempgI4352.html [2010-08-24 16:37:03 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempzG4352.html [2010-08-24 16:28:12 | 000,167,936 | RHS- | M] () -- C:\Windows\SysWow64\mqpoyx.exe [2010-08-24 16:28:12 | 000,167,936 | RHS- | M] () -- C:\Users\Darek\mqpoy.exe [2010-08-24 09:31:55 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempbO2380.html [2010-08-23 21:46:54 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempGq3896.html [2010-08-23 21:46:54 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempTO3896.html [2010-08-19 07:47:55 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempHU4620.html [2010-08-18 17:43:50 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempHR4888.html [2010-08-18 10:43:56 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXY2948.html [2010-08-17 19:29:26 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempzK2284.html [2010-08-17 19:29:26 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temptz2284.html [2010-08-17 18:16:50 | 000,116,464 | ---- | M] () -- C:\Users\Darek\AppData\Local\GDIPFONTCACHEV1.DAT [2010-08-17 17:39:47 | 000,001,065 | ---- | M] () -- C:\Users\Public\Desktop\PokerStars.lnk [2010-08-17 10:04:30 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempun4388.html [2010-08-16 17:56:55 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempPb3716.html [2010-08-16 17:56:55 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempwn3716.html [2010-08-16 11:22:33 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemplU1412.html [2010-08-16 11:22:33 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXx1412.html [2010-08-16 09:21:30 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCE3788.html [2010-08-15 19:00:26 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempMK2040.html [2010-08-15 19:00:26 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempsv2040.html [2010-08-15 13:56:10 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempyX5016.html [2010-08-15 11:55:14 | 000,000,727 | ---- | M] () -- C:\Users\Darek\Desktop\USdx — skrót.lnk [2010-08-15 11:35:39 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempmi3752.html [2010-08-14 22:25:48 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBt3840.html [2010-08-14 22:25:48 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempRV3840.html [2010-08-08 21:31:20 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBtE460.html [2010-08-08 21:31:20 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempalg460.html [2010-08-08 16:10:19 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempIG4500.html [2010-08-08 16:10:19 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempxh4500.html [2010-08-08 13:37:49 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempAb4432.html [2010-08-07 21:35:18 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temppb4264.html [2010-08-07 21:35:18 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemphW4264.html [2010-08-07 12:39:11 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempapL252.html [2010-08-07 12:39:11 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempkFN252.html [2010-08-06 19:23:52 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemprD4228.html [2010-08-06 12:51:17 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempKc4680.html [2010-08-06 12:51:17 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempHl4680.html [2010-08-06 09:58:22 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempqT3164.html [2010-08-06 09:58:22 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempQS3164.html [2010-08-05 20:32:35 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempZm3544.html [2010-08-05 20:32:35 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempJs3544.html [2010-08-05 15:27:00 | 000,012,264 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb [2010-08-05 13:27:00 | 000,065,128 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2010-08-05 13:27:00 | 000,056,936 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2010-08-05 09:34:32 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempfa4716.html [2010-08-05 09:31:32 | 000,444,944 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010-08-04 21:54:23 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempUk4068.html [2010-08-04 21:54:23 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempSC4068.html [2010-08-04 19:32:59 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempEPh664.html [2010-08-04 19:32:59 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempsWz664.html [2010-08-04 18:32:30 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempvP5032.html [2010-08-04 10:08:38 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempZX4880.html [2010-08-03 21:25:04 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempxc5016.html [2010-07-23 14:48:07 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2010-07-20 22:40:55 | 000,000,040 | ---- | M] () -- C:\Windows\SysWow64\Profile.info [2010-07-14 09:42:03 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempZM4820.html [2010-07-14 09:42:03 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempga4820.html [2010-07-13 10:44:40 | 000,000,000 | ---- | M] () -- C:\ProgramData\LauncherAccess.dt [2010-07-09 13:48:19 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempeV2876.html [2010-07-09 11:50:35 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempkZ3940.html [2010-07-09 11:50:35 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temprj3940.html [2010-07-08 21:17:10 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemptUd740.html [2010-07-08 21:17:10 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempssW740.html [2010-07-08 17:39:08 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempdm4376.html [2010-07-08 17:00:44 | 000,037,170 | ---- | M] () -- C:\Users\Darek\Documents\sysop.odt [2010-07-08 11:40:11 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempMs4084.html [2010-07-08 11:40:11 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temptr4084.html [2010-07-08 08:52:33 | 000,000,562 | ---- | M] () -- C:\Users\Darek\Desktop\Fraps.lnk [2010-07-07 17:10:14 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdRapi2_01_00_00.Wdf [2010-07-07 16:52:37 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempEm4536.html [2010-07-07 13:46:24 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempEgs972.html [2010-07-07 13:46:24 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemptSM972.html [2010-07-07 11:21:57 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temphz3012.html [2010-07-07 11:21:57 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempIM3012.html [2010-07-06 17:49:31 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempzu3788.html [2010-07-06 14:01:24 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempKg3716.html [2010-07-06 14:01:24 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempck3716.html [2010-07-06 12:42:10 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempgF3276.html [2010-07-06 12:42:10 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCm3276.html [2010-07-06 08:57:46 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempvUE148.html [2010-07-05 19:51:27 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemplP4524.html [2010-07-05 19:51:27 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCi4524.html [2010-07-05 14:20:19 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempGC4216.html [2010-07-05 14:20:19 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempno4216.html [2010-07-05 09:19:46 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempzm4524.html [2010-07-04 21:58:28 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempVi5096.html [2010-07-04 21:58:28 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempeQ5096.html [2010-07-04 12:56:36 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempVw4332.html [2010-07-04 12:56:36 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempku4332.html [2010-07-04 09:44:25 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBeX816.html [2010-07-04 09:44:25 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempgBf816.html [2010-07-03 19:44:13 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempEo3080.html [2010-07-03 19:44:13 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempSH3080.html [2010-07-03 08:51:45 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempiT4044.html [2010-07-03 08:51:45 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempLI4044.html [2010-07-02 18:16:35 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempSu3252.html [4 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [2 C:\*.tmp files -> C:\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-08-31 10:58:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDc4868.html [2010-08-31 10:58:28 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFg4868.html [2010-08-31 09:59:30 | 048,855,664 | ---- | C] () -- C:\Users\Darek\Desktop\2rhk4xk7.exe [2010-08-31 08:24:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUK4680.html [2010-08-30 21:51:50 | 000,001,013 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010-08-30 21:50:24 | 048,892,120 | ---- | C] () -- C:\Users\Darek\Desktop\launch.exe [2010-08-30 21:29:33 | 000,293,376 | ---- | C] () -- C:\Users\Darek\Desktop\iu90d21r.exe [2010-08-30 17:13:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptX3480.html [2010-08-30 17:13:25 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAE3480.html [2010-08-30 16:19:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSK3740.html [2010-08-30 16:19:46 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprj3740.html [2010-08-30 08:38:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLN3340.html [2010-08-29 16:49:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXQ4136.html [2010-08-29 16:49:43 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBj4136.html [2010-08-29 15:38:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempwk4792.html [2010-08-29 11:26:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzR4944.html [2010-08-29 11:26:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempol4944.html [2010-08-28 21:05:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLG4972.html [2010-08-28 21:05:29 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXa4972.html [2010-08-28 16:16:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCp3256.html [2010-08-28 16:16:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBw3256.html [2010-08-28 10:58:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkV3200.html [2010-08-28 10:58:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvC3200.html [2010-08-28 09:21:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemphT3340.html [2010-08-28 09:21:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCl3340.html [2010-08-27 18:05:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsMh896.html [2010-08-27 18:05:49 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKwG896.html [2010-08-27 16:29:35 | 000,009,672 | ---- | C] () -- C:\bootsqm.dat [2010-08-27 09:19:12 | 000,000,000 | ---- | C] () -- C:\Windows\HMHud.INI [2010-08-27 09:12:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjt3028.html [2010-08-27 09:12:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRz3028.html [2010-08-27 09:10:52 | 000,001,237 | ---- | C] () -- C:\Users\Public\Desktop\HoldemManager.lnk [2010-08-26 18:21:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemprA5060.html [2010-08-26 18:21:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempof5060.html [2010-08-26 09:24:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphp4780.html [2010-08-26 09:24:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiW4780.html [2010-08-25 17:20:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvCf248.html [2010-08-25 17:20:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXBL248.html [2010-08-25 12:08:30 | 000,000,690 | ---- | C] () -- C:\Windows\SysWow64\WindowsPowerShell.lnk [2010-08-25 12:08:30 | 000,000,676 | ---- | C] () -- C:\Windows\SysWow64\New Folder.lnk [2010-08-25 12:08:30 | 000,000,674 | ---- | C] () -- C:\Windows\SysWow64\XPSViewer.lnk [2010-08-25 12:08:30 | 000,000,674 | ---- | C] () -- C:\Windows\SysWow64\Passwords.lnk [2010-08-25 12:08:30 | 000,000,674 | ---- | C] () -- C:\Windows\SysWow64\Documents.lnk [2010-08-25 12:08:30 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\Pictures.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\zh-TW.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\zh-HK.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\zh-CN.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\xlive.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\winrm.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Video.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\uk-UA.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\tr-TR.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Music.lnk [2010-08-25 12:08:30 | 000,000,664 | ---- | C] () -- C:\Windows\SysWow64\wbem.lnk [2010-08-25 12:08:30 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\wdi.lnk [2010-08-25 12:08:30 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\WCN.lnk [2010-08-25 12:08:30 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\Wat.lnk [2010-08-25 12:08:29 | 000,000,694 | ---- | C] () -- C:\Windows\SysWow64\Samsung_USB_Drivers.lnk [2010-08-25 12:08:29 | 000,000,676 | ---- | C] () -- C:\Windows\SysWow64\sr-Latn-CS.lnk [2010-08-25 12:08:29 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\Recovery.lnk [2010-08-25 12:08:29 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\sysprep.lnk [2010-08-25 12:08:29 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\restore.lnk [2010-08-25 12:08:29 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\Speech.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\th-TH.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Tasks.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\sv-SE.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\sppui.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\sl-SI.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\slmgr.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\sk-SK.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Setup.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ru-RU.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\RTCOM.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ro-RO.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\pt-PT.lnk [2010-08-25 12:08:29 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\spp.lnk [2010-08-25 12:08:29 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\ras.lnk [2010-08-25 12:08:28 | 000,000,700 | ---- | C] () -- C:\Windows\SysWow64\Printing_Admin_Scripts.lnk [2010-08-25 12:08:28 | 000,000,682 | ---- | C] () -- C:\Windows\SysWow64\manifeststore.lnk [2010-08-25 12:08:28 | 000,000,678 | ---- | C] () -- C:\Windows\SysWow64\NetworkList.lnk [2010-08-25 12:08:28 | 000,000,674 | ---- | C] () -- C:\Windows\SysWow64\migration.lnk [2010-08-25 12:08:28 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\Macromed.lnk [2010-08-25 12:08:28 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\LogFiles.lnk [2010-08-25 12:08:28 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\migwiz.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\pt-BR.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\pl-PL.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\nl-NL.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\nb-NO.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Msdtc.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\lv-LV.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\lt-LT.lnk [2010-08-25 12:08:28 | 000,000,664 | ---- | C] () -- C:\Windows\SysWow64\oobe.lnk [2010-08-25 12:08:28 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\NDF.lnk [2010-08-25 12:08:28 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\MUI.lnk [2010-08-25 12:08:28 | 000,000,660 | ---- | C] () -- C:\Windows\SysWow64\pl.lnk [2010-08-25 12:08:27 | 000,000,688 | ---- | C] () -- C:\Windows\SysWow64\GroupPolicyUsers.lnk [2010-08-25 12:08:27 | 000,000,682 | ---- | C] () -- C:\Windows\SysWow64\InstallShield.lnk [2010-08-25 12:08:27 | 000,000,678 | ---- | C] () -- C:\Windows\SysWow64\GroupPolicy.lnk [2010-08-25 12:08:27 | 000,000,676 | ---- | C] () -- C:\Windows\SysWow64\Futuremark.lnk [2010-08-25 12:08:27 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\inetsrv.lnk [2010-08-25 12:08:27 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\icsxml.lnk [2010-08-25 12:08:27 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\FxsTmp.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ko-KR.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ja-JP.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\it-IT.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\hu-HU.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\hr-HR.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\he-IL.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\fr-FR.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\fi-FI.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\et-EE.lnk [2010-08-25 12:08:27 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\IME.lnk [2010-08-25 12:08:26 | 000,000,678 | ---- | C] () -- C:\Windows\SysWow64\DriverStore.lnk [2010-08-25 12:08:26 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\eps_icon.avi.lnk [2010-08-25 12:08:26 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\catroot2.lnk [2010-08-25 12:08:26 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\drivers.lnk [2010-08-25 12:08:26 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\config.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\es-ES.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\en-US.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\el-GR.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\de-DE.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\da-DK.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\cs-CZ.lnk [2010-08-25 12:08:26 | 000,000,664 | ---- | C] () -- C:\Windows\SysWow64\Dism.lnk [2010-08-25 12:08:26 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\com.lnk [2010-08-25 12:08:26 | 000,000,660 | ---- | C] () -- C:\Windows\SysWow64\en.lnk [2010-08-25 12:08:25 | 000,000,692 | ---- | C] () -- C:\Windows\SysWow64\AdvancedInstallers.lnk [2010-08-25 12:08:25 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\catroot.lnk [2010-08-25 12:08:25 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\bg-BG.lnk [2010-08-25 12:08:25 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ar-SA.lnk [2010-08-25 12:08:25 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\AGEIA.lnk [2010-08-25 12:08:25 | 000,000,664 | ---- | C] () -- C:\Windows\SysWow64\0409.lnk [2010-08-25 12:08:25 | 000,000,660 | ---- | C] () -- C:\Windows\SysWow64\...lnk [2010-08-25 12:08:25 | 000,000,658 | ---- | C] () -- C:\Windows\SysWow64\..lnk [2010-08-25 12:08:23 | 000,167,936 | RHS- | C] () -- C:\Windows\SysWow64\mqpoy.exe [2010-08-25 12:08:21 | 000,000,134 | RHS- | C] () -- C:\Windows\SysWow64\autorun.inf [2010-08-25 09:11:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjM4976.html [2010-08-24 16:28:12 | 000,167,936 | RHS- | C] () -- C:\Windows\SysWow64\mqpoyx.exe [2010-08-24 16:28:12 | 000,167,936 | RHS- | C] () -- C:\Users\Darek\mqpoy.exe [2010-08-24 16:00:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgI4352.html [2010-08-24 16:00:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzG4352.html [2010-08-24 09:25:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbO2380.html [2010-08-23 18:37:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGq3896.html [2010-08-23 18:37:03 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTO3896.html [2010-08-19 07:47:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHU4620.html [2010-08-18 16:50:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHR4888.html [2010-08-18 10:43:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXY2948.html [2010-08-17 17:39:47 | 000,001,065 | ---- | C] () -- C:\Users\Public\Desktop\PokerStars.lnk [2010-08-17 16:55:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzK2284.html [2010-08-17 16:55:56 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptz2284.html [2010-08-17 10:00:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempun4388.html [2010-08-16 17:03:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPb3716.html [2010-08-16 17:03:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempwn3716.html [2010-08-16 10:47:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplU1412.html [2010-08-16 10:47:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXx1412.html [2010-08-16 09:11:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCE3788.html [2010-08-15 17:08:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMK2040.html [2010-08-15 17:08:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsv2040.html [2010-08-15 13:55:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempyX5016.html [2010-08-15 11:55:14 | 000,000,727 | ---- | C] () -- C:\Users\Darek\Desktop\USdx — skrót.lnk [2010-08-15 11:13:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmi3752.html [2010-08-14 21:35:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBt3840.html [2010-08-14 21:35:03 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRV3840.html [2010-08-08 21:12:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBtE460.html [2010-08-08 21:12:50 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempalg460.html [2010-08-08 15:30:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIG4500.html [2010-08-08 15:30:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxh4500.html [2010-08-08 12:46:10 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAb4432.html [2010-08-07 20:59:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppb4264.html [2010-08-07 20:59:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemphW4264.html [2010-08-07 11:30:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempapL252.html [2010-08-07 11:30:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkFN252.html [2010-08-06 18:05:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemprD4228.html [2010-08-06 12:06:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKc4680.html [2010-08-06 12:06:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHl4680.html [2010-08-06 07:56:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqT3164.html [2010-08-06 07:56:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQS3164.html [2010-08-05 20:17:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZm3544.html [2010-08-05 20:17:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJs3544.html [2010-08-05 09:33:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfa4716.html [2010-08-04 21:32:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUk4068.html [2010-08-04 21:32:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSC4068.html [2010-08-04 19:25:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEPh664.html [2010-08-04 19:25:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsWz664.html [2010-08-04 17:13:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvP5032.html [2010-08-04 09:27:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZX4880.html [2010-08-03 18:19:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxc5016.html [2010-07-23 14:48:07 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2010-07-20 22:40:55 | 000,000,040 | ---- | C] () -- C:\Windows\SysWow64\Profile.info [2010-07-14 09:18:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZM4820.html [2010-07-14 09:18:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempga4820.html [2010-07-13 10:44:40 | 000,000,000 | ---- | C] () -- C:\ProgramData\LauncherAccess.dt [2010-07-13 10:41:02 | 000,000,766 | ---- | C] () -- C:\Windows\SysWow64\Uninstall.ico [2010-07-09 13:43:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeV2876.html [2010-07-09 09:46:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkZ3940.html [2010-07-09 09:46:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprj3940.html [2010-07-08 21:10:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptUd740.html [2010-07-08 21:10:11 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempssW740.html [2010-07-08 17:00:42 | 000,037,170 | ---- | C] () -- C:\Users\Darek\Documents\sysop.odt [2010-07-08 16:51:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempdm4376.html [2010-07-08 10:28:05 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMs4084.html [2010-07-08 10:28:05 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptr4084.html [2010-07-08 08:52:33 | 000,000,562 | ---- | C] () -- C:\Users\Darek\Desktop\Fraps.lnk [2010-07-07 17:10:14 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdRapi2_01_00_00.Wdf [2010-07-07 16:50:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEm4536.html [2010-07-07 13:04:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEgs972.html [2010-07-07 13:04:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptSM972.html [2010-07-07 10:08:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphz3012.html [2010-07-07 10:08:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIM3012.html [2010-07-06 17:01:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzu3788.html [2010-07-06 12:54:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKg3716.html [2010-07-06 12:54:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempck3716.html [2010-07-06 09:05:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgF3276.html [2010-07-06 09:05:11 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCm3276.html [2010-07-06 08:56:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvUE148.html [2010-07-05 17:32:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplP4524.html [2010-07-05 17:32:47 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCi4524.html [2010-07-05 13:59:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGC4216.html [2010-07-05 13:59:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempno4216.html [2010-07-05 08:58:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzm4524.html [2010-07-04 20:51:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVi5096.html [2010-07-04 20:51:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeQ5096.html [2010-07-04 11:44:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVw4332.html [2010-07-04 11:44:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempku4332.html [2010-07-04 07:59:26 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBeX816.html [2010-07-04 07:59:26 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgBf816.html [2010-07-03 18:46:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEo3080.html [2010-07-03 18:46:19 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSH3080.html [2010-07-03 07:43:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiT4044.html [2010-07-03 07:43:49 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLI4044.html [2010-07-02 18:07:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSu3252.html [2010-07-02 08:36:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempah4088.html [2010-07-02 08:36:29 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNR4088.html [2010-07-01 19:53:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsk5080.html [2010-07-01 19:53:49 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsh5080.html [2010-07-01 11:48:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempwK4312.html [2010-07-01 11:48:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempee4312.html [2010-07-01 11:02:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRm5084.html [2010-07-01 07:29:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbr4612.html [2010-06-30 17:42:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVb5012.html [2010-06-30 17:42:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempwe5012.html [2010-06-30 07:45:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJK4268.html [2010-06-30 07:45:47 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppw4268.html [2010-06-29 21:07:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKP4236.html [2010-06-29 21:07:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBw4236.html [2010-06-29 18:46:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYR4296.html [2010-06-29 18:46:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempND4296.html [2010-06-29 12:31:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxR2768.html [2010-06-29 12:31:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAX2768.html [2010-06-29 06:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfi3708.html [2010-06-29 06:32:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGJ3708.html [2010-06-28 17:50:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphs4644.html [2010-06-28 17:50:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcb4644.html [2010-06-28 11:53:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYm3660.html [2010-06-28 11:53:09 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeA3660.html [2010-06-28 07:44:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDP4356.html [2010-06-28 07:44:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphi4356.html [2010-06-27 16:31:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFF1840.html [2010-06-27 16:31:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvO1840.html [2010-06-27 10:22:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGj3448.html [2010-06-27 08:25:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIu2876.html [2010-06-26 22:32:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempge3372.html [2010-06-26 18:38:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCb4328.html [2010-06-26 15:34:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfz4892.html [2010-06-26 15:34:38 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgR4892.html [2010-06-26 12:42:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRO4148.html [2010-06-26 08:06:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVd4904.html [2010-06-26 08:06:50 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuS4904.html [2010-06-25 17:53:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempop4476.html [2010-06-25 17:53:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuV4476.html [2010-06-25 10:45:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempev5056.html [2010-06-25 10:45:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTS5056.html [2010-06-25 08:45:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxH5092.html [2010-06-25 08:45:04 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCU5092.html [2010-06-24 18:00:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbQ4208.html [2010-06-24 07:49:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQv4488.html [2010-06-23 21:32:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuS2248.html [2010-06-23 21:32:20 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsk2248.html [2010-06-23 19:14:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzSj240.html [2010-06-23 19:14:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOCp240.html [2010-06-23 17:56:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFL4904.html [2010-06-23 15:13:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoT4672.html [2010-06-23 15:13:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKI4672.html [2010-06-23 12:09:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYk3096.html [2010-06-23 12:09:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBS3096.html [2010-06-23 08:46:05 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWT3976.html [2010-06-23 08:46:05 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZE3976.html [2010-06-22 18:41:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeZ3692.html [2010-06-22 18:41:28 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvv3692.html [2010-06-22 18:07:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUI4684.html [2010-06-22 10:09:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIn5088.html [2010-06-22 10:09:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJn5088.html [2010-06-22 06:49:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqJ4512.html [2010-06-22 06:49:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTw4512.html [2010-06-21 17:53:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgP3684.html [2010-06-21 17:53:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprz3684.html [2010-06-21 15:59:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempif3032.html [2010-06-21 15:59:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVV3032.html [2010-06-21 12:10:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvc4124.html [2010-06-21 12:10:43 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempab4124.html [2010-06-21 09:32:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAF4208.html [2010-06-20 18:01:52 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuH1492.html [2010-06-20 18:01:52 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFt1492.html [2010-06-18 11:00:06 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCK4196.html [2010-06-17 16:52:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempqf3704.html [2010-06-17 16:52:47 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvR3704.html [2010-06-17 06:35:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSr4464.html [2010-06-17 06:35:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQt4464.html [2010-06-16 19:42:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGl3588.html [2010-06-16 19:42:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeA3588.html [2010-06-16 17:07:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempca5004.html [2010-06-16 17:07:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJM5004.html [2010-06-16 14:58:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWc2656.html [2010-06-16 14:58:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTD2656.html [2010-06-16 08:27:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemphT3408.html [2010-06-16 08:27:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIj3408.html [2010-06-16 06:23:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNP4784.html [2010-06-16 06:23:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZS4784.html [2010-06-15 18:14:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBD2620.html [2010-06-15 18:14:17 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemprL2620.html [2010-06-15 15:59:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempth3596.html [2010-06-15 15:59:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVn3596.html [2010-06-15 10:42:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVb4848.html [2010-06-15 10:42:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnM4848.html [2010-06-15 08:48:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmv2500.html [2010-06-14 18:14:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOv2744.html [2010-06-14 18:14:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNP2744.html [2010-06-14 06:33:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBe4568.html [2010-06-14 06:33:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBw4568.html [2010-06-13 10:36:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiV5088.html [2010-06-13 10:36:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphb5088.html [2010-06-12 17:53:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuV3668.html [2010-06-12 17:53:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNj3668.html [2010-06-12 15:24:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjv4360.html [2010-06-12 15:24:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLV4360.html [2010-06-12 09:42:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXd4496.html [2010-06-12 09:42:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXU4496.html [2010-06-11 22:30:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZi4516.html [2010-06-11 22:30:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYy4516.html [2010-06-11 19:10:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempuj4424.html [2010-06-11 19:10:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZa4424.html [2010-06-11 16:56:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTh2920.html [2010-06-11 16:56:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIP2920.html [2010-06-11 12:05:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSJ2676.html [2010-06-11 12:05:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxp2676.html [2010-06-11 11:09:10 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbB2788.html [2010-06-11 11:09:10 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHg2788.html [2010-06-11 09:44:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvX4140.html [2010-06-10 20:40:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZo3292.html [2010-06-10 20:40:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempql3292.html [2010-06-10 18:56:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaL1180.html [2010-06-10 18:26:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPs3616.html [2010-06-10 10:33:05 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTl4556.html [2010-06-10 10:33:05 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeI4556.html [2010-06-10 06:37:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLw3452.html [2010-06-09 19:35:26 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQJ4840.html [2010-06-09 19:35:26 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQo4840.html [2010-06-09 09:38:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempdS4136.html [2010-06-09 09:38:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPW4136.html [2010-06-08 20:55:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoG4292.html [2010-06-08 20:55:09 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXY4292.html [2010-06-08 16:13:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzZ3056.html [2010-06-08 16:13:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppu3056.html [2010-06-08 11:42:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsn4016.html [2010-06-08 11:42:04 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEX4016.html [2010-06-08 08:41:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbK4680.html [2010-06-08 08:41:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVT4680.html [2010-06-07 20:03:59 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTT1904.html [2010-06-07 20:03:59 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUQ1904.html [2010-06-07 14:49:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZg1052.html [2010-06-07 14:21:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJLK504.html [2010-06-07 06:16:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppH1688.html [2010-06-06 20:14:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjq3964.html [2010-06-06 20:14:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJM3964.html [2010-06-03 08:26:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEZ2016.html [2010-06-02 22:08:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzG3172.html [2010-06-02 22:08:25 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Templh3172.html [2010-06-02 16:58:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWg3376.html [2010-06-02 16:58:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTn3376.html [2010-06-02 15:57:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNr4052.html [2010-06-02 15:57:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVr4052.html [2010-06-02 13:43:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUM3436.html [2010-06-02 13:43:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQt3436.html [2010-06-02 10:38:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZg2932.html [2010-06-02 10:38:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnL2932.html [2010-06-02 09:20:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempId2996.html [2010-06-01 22:40:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBc3552.html [2010-06-01 18:45:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphj2304.html [2010-06-01 18:45:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBX2304.html [2010-06-01 17:20:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSe4972.html [2010-06-01 17:20:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFN4972.html [2010-06-01 15:52:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgW4316.html [2010-06-01 14:33:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppP4184.html [2010-06-01 14:33:25 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBp4184.html [2010-06-01 11:08:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIB3312.html [2010-06-01 11:08:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZI3312.html [2010-06-01 09:04:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZW3712.html [2010-05-31 19:05:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRO2856.html [2010-05-31 19:05:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOR2856.html [2010-05-31 15:12:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHA3788.html [2010-05-31 09:07:06 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNRz408.html [2010-05-31 07:20:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHH4296.html [2010-05-31 07:20:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptR4296.html [2010-05-30 18:38:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXp2824.html [2010-05-30 18:38:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempdb2824.html [2010-05-30 17:56:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTk4476.html [2010-05-30 16:23:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCz2952.html [2010-05-30 12:36:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMh4372.html [2010-05-30 10:57:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYU3432.html [2010-05-29 18:29:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsX3516.html [2010-05-29 18:29:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFO3516.html [2010-05-29 10:59:59 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYE4976.html [2010-05-29 10:59:59 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNZ4976.html [2010-05-29 09:34:14 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHF3572.html [2010-05-29 09:34:14 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAZ3572.html [2010-05-28 19:51:23 | 000,005,077 | ---- | C] () -- C:\ProgramData\bltofzsb.qlf [2010-05-28 18:49:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempuz1312.html [2010-05-28 14:52:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDn1524.html [2010-05-28 14:52:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcf1524.html [2010-05-28 11:54:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempET1040.html [2010-05-28 11:54:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempuu1040.html [2010-05-28 09:42:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprq1236.html [2010-05-27 20:16:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGH2712.html [2010-05-27 19:39:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOE4160.html [2010-05-27 11:33:42 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplL1740.html [2010-05-26 15:09:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempio3068.html [2010-05-26 15:09:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIP3068.html [2010-05-26 07:23:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxJ3404.html [2010-05-26 07:23:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiY3404.html [2010-05-25 20:02:54 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempos2308.html [2010-05-25 20:02:54 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnR2308.html [2010-05-25 16:27:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempru2992.html [2010-05-25 10:52:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptO4500.html [2010-05-24 19:00:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempwW3732.html [2010-05-24 19:00:43 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLw3732.html [2010-05-24 11:18:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNQ1436.html [2010-05-24 11:18:56 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempkp1436.html [2010-05-23 17:59:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempui1756.html [2010-05-23 17:59:43 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQy1756.html [2010-05-23 12:54:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEx1384.html [2010-05-23 12:54:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSd1384.html [2010-05-23 08:04:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFc4820.html [2010-05-23 08:04:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSV4820.html [2010-05-22 21:49:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKs4912.html [2010-05-22 21:49:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGj4912.html [2010-05-22 19:11:21 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoP4004.html [2010-05-22 19:11:21 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKY4004.html [2010-05-22 16:13:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempko4236.html [2010-05-22 16:13:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGF4236.html [2010-05-22 10:59:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPP3484.html [2010-05-22 10:59:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiF3484.html [2010-05-21 21:09:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSh1420.html [2010-05-21 19:58:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWO4520.html [2010-05-21 19:58:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLm4520.html [2010-05-21 17:11:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWx3872.html [2010-05-21 12:50:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFS5024.html [2010-05-21 12:50:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprc5024.html [2010-05-20 19:42:59 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZE4384.html [2010-05-20 19:42:59 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAV4384.html [2010-05-20 16:24:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfx3648.html [2010-05-20 16:24:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeL3648.html [2010-05-20 13:05:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGP3448.html [2010-05-20 13:05:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkA3448.html [2010-05-19 19:16:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZI4568.html [2010-05-19 19:16:28 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbb4568.html [2010-05-19 06:34:54 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVQ1916.html [2010-05-18 17:32:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRb1452.html [2010-05-18 17:32:34 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvs1452.html [2010-05-18 11:27:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvp1828.html [2010-05-18 11:27:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYc1828.html [2010-05-17 18:47:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempmO4000.html [2010-05-17 18:47:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkB4000.html [2010-05-17 08:18:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKs3804.html [2010-05-16 19:58:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphu3332.html [2010-05-16 19:58:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKZ3332.html [2010-05-16 16:12:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBz4296.html [2010-05-16 16:12:03 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempuf4296.html [2010-05-15 22:08:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temped3944.html [2010-05-15 17:24:52 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempdb3568.html [2010-05-15 17:24:52 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBf3568.html [2010-05-13 17:10:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDc4392.html [2010-05-13 17:10:34 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempqy4392.html [2010-05-12 19:37:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqL3772.html [2010-05-12 19:37:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiS3772.html [2010-05-11 18:25:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjX3632.html [2010-05-11 18:25:20 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuS3632.html [2010-05-11 09:24:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVH3728.html [2010-05-11 09:24:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqF3728.html [2010-05-10 18:52:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxh4340.html [2010-05-10 18:52:09 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBm4340.html [2010-05-10 06:44:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxg4568.html [2010-05-09 21:16:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcfA852.html [2010-05-09 19:36:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOe3384.html [2010-05-09 15:41:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQV2796.html [2010-05-09 15:41:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXm2796.html [2010-05-09 11:59:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcU4200.html [2010-05-09 11:59:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjt4200.html [2010-05-09 09:35:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUZ1676.html [2010-05-09 09:35:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFp1676.html [2010-05-08 15:57:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppN3604.html [2010-05-08 15:57:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCB3604.html [2010-05-08 13:30:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIo4204.html [2010-05-08 13:30:17 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAl4204.html [2010-05-07 19:10:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptH3940.html [2010-05-07 19:10:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempyl3940.html [2010-05-07 14:10:26 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTr3960.html [2010-05-07 14:10:26 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaA3960.html [2010-05-07 09:37:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjR4420.html [2010-05-07 09:37:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYt4420.html [2010-05-06 21:25:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxl2088.html [2010-05-06 21:25:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempse2088.html [2010-05-06 06:54:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnm4360.html [2010-05-06 06:54:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYT4360.html [2010-05-05 19:54:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzv4900.html [2010-05-05 19:54:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemprN4900.html [2010-05-05 16:03:21 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppI4868.html [2010-05-05 16:03:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVE4868.html [2010-05-05 07:51:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptI3588.html [2010-05-04 19:56:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSz4532.html [2010-05-04 19:56:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLo4532.html [2010-05-04 11:55:29 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphv4696.html [2010-05-04 11:55:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQM4696.html [2010-05-04 07:51:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPs2576.html [2010-05-04 07:51:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAQ2576.html [2010-05-03 18:02:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTd2776.html [2010-05-03 18:02:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjj2776.html [2010-05-03 16:08:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDC1728.html [2010-05-03 10:57:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxh4852.html [2010-05-03 10:57:00 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOb4852.html [2010-05-02 20:09:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempwj3420.html [2010-04-28 18:27:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempmC4916.html [2010-04-28 18:27:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptl4916.html [2010-04-27 18:31:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphe2868.html [2010-04-27 18:31:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuU2868.html [2010-04-27 17:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcb1664.html [2010-04-27 12:11:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMC1932.html [2010-04-27 12:11:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempdM1932.html [2010-04-27 09:17:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemphW4912.html [2010-04-26 20:41:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJn2844.html [2010-04-26 20:41:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnJ2844.html [2010-04-25 20:15:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAz3784.html [2010-04-25 20:15:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppo3784.html [2010-04-25 14:10:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPJ4372.html [2010-04-25 14:10:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDc4372.html [2010-04-24 20:32:21 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprd4232.html [2010-04-24 20:32:21 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSN4232.html [2010-04-24 07:53:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTJ4204.html [2010-04-24 07:53:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempys4204.html [2010-04-23 18:58:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXw4548.html [2010-04-23 18:58:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempwG4548.html [2010-04-23 08:24:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqO4352.html [2010-04-22 18:12:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOv4976.html [2010-04-22 18:12:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempco4976.html [2010-04-22 06:41:42 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjH4308.html [2010-04-22 06:41:42 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempaa4308.html [2010-04-21 19:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCD4196.html [2010-04-21 19:32:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppc4196.html [2010-04-21 09:26:00 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI [2010-04-21 06:33:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempus4208.html [2010-04-21 06:33:38 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsW4208.html [2010-04-20 19:22:42 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAI4088.html [2010-04-20 18:41:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptx5040.html [2010-04-20 18:41:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempkv5040.html [2010-04-20 16:12:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOx2784.html [2010-04-20 16:12:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbm2784.html [2010-04-20 12:35:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUJ4220.html [2010-04-20 12:35:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJU4220.html [2010-04-20 06:46:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcV2860.html [2010-04-20 06:46:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSe2860.html [2010-04-19 21:09:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLK5340.html [2010-04-19 21:09:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzW5340.html [2010-04-19 08:29:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDF3904.html [2010-04-19 08:29:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnf3904.html [2010-04-18 20:18:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsL3124.html [2010-04-18 15:14:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNR1284.html [2010-04-18 15:14:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvB1284.html [2010-04-18 12:35:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnf4840.html [2010-04-17 16:58:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzm4048.html [2010-04-17 16:58:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjF4048.html [2010-04-17 11:28:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempyq4380.html [2010-04-17 09:28:59 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZZ4808.html [2010-04-17 09:28:59 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqG4808.html [2010-04-16 20:23:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAz4340.html [2010-04-16 20:23:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKK4340.html [2010-04-16 19:05:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIG6652.html [2010-04-16 19:05:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaF6652.html [2010-04-16 17:10:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOe3536.html [2010-04-16 11:00:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAi4412.html [2010-04-15 18:45:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZQ4388.html [2010-04-15 18:45:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFN4388.html [2010-04-15 07:05:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPA4504.html [2010-04-15 07:05:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkP4504.html [2010-04-14 18:55:46 | 000,000,071 | ---- | C] () -- C:\Windows\iltwain.ini [2010-04-14 17:17:10 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnm3144.html [2010-04-14 17:17:10 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcZ3144.html [2010-04-14 09:45:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGa1188.html [2010-04-14 06:33:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptv4348.html [2010-04-13 19:36:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWu2648.html [2010-04-13 17:33:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOCN760.html [2010-04-13 12:19:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvM1292.html [2010-04-13 11:23:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempaf4652.html [2010-04-12 21:50:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuC6100.html [2010-04-12 21:50:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphk6100.html [2010-04-12 19:42:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptVq464.html [2010-04-12 05:51:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptt1988.html [2010-04-12 05:51:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFw1988.html [2010-04-11 16:47:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNB3648.html [2010-04-11 16:47:20 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJj3648.html [2010-04-11 10:20:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcw4044.html [2010-04-10 17:44:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOw3760.html [2010-04-10 17:44:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbC3760.html [2010-04-10 16:14:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptw2012.html [2010-04-10 11:04:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFO3708.html [2010-04-10 11:04:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnv3708.html [2010-04-10 08:34:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVK4040.html [2010-04-09 18:47:04 | 000,000,000 | ---- | C] () -- C:\Windows\NSREX.INI [2010-04-09 16:37:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBmW668.html [2010-04-09 16:37:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempudx668.html [2010-04-09 12:02:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempfA6228.html [2010-04-09 12:02:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempni6228.html [2010-04-09 11:19:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMi4796.html [2010-04-09 09:28:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoP3016.html [2010-04-08 20:36:13 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWb3612.html [2010-04-08 20:36:13 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIi3612.html [2010-04-08 17:02:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNC4768.html [2010-04-08 17:02:50 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempal4768.html [2010-04-08 10:56:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppP3088.html [2010-04-08 10:56:56 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxU3088.html [2010-04-07 19:57:06 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplQ3088.html [2010-04-07 19:57:06 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppK3088.html [2010-04-07 17:26:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSW2300.html [2010-04-07 17:22:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnn2052.html [2010-04-07 12:08:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempmB4800.html [2010-04-07 12:08:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempps4800.html [2010-04-07 08:17:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUX3276.html [2010-04-07 08:17:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRf3276.html [2010-04-06 20:33:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzN4400.html [2010-04-06 20:33:20 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVg4400.html [2010-04-06 16:07:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppx4744.html [2010-04-06 16:07:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVT4744.html [2010-04-06 11:53:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZE1776.html [2010-04-06 11:53:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJN1776.html [2010-04-06 08:17:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppF2332.html [2010-04-06 08:17:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOR2332.html [2010-04-05 19:29:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjj3456.html [2010-04-05 19:29:38 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHa3456.html [2010-04-05 15:50:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempni3304.html [2010-04-05 15:50:04 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcW3304.html [2010-04-05 10:13:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempik3460.html [2010-04-05 10:13:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempei3460.html [2010-04-04 16:44:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGg4824.html [2010-04-04 11:47:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqL1608.html [2010-04-04 11:47:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjg1608.html [2010-04-03 16:11:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPJ3720.html [2010-04-03 16:11:38 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZb3720.html [2010-04-03 13:08:26 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptm8400.html [2010-04-03 13:08:26 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIG8400.html [2010-04-03 11:22:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEh3024.html [2010-04-02 18:48:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmf6084.html [2010-04-02 18:48:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOn6084.html [2010-04-02 17:10:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmh3824.html [2010-04-02 10:12:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqI3412.html [2010-04-02 10:12:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGu3412.html [2010-04-02 07:09:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHv3708.html [2010-04-02 07:09:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPU3708.html [2010-04-01 16:27:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZi3628.html [2010-04-01 16:27:17 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMm3628.html [2010-04-01 09:48:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDY3780.html [2010-04-01 09:48:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKS3780.html [2010-03-31 19:05:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWe5432.html [2010-03-31 18:58:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfr4720.html [2010-03-31 18:58:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFE4720.html [2010-03-31 17:59:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbj4192.html [2010-03-31 17:59:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMd4192.html [2010-03-31 13:41:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcG1924.html [2010-03-31 13:41:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuT1924.html [2010-03-30 17:22:06 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuC3848.html [2010-03-30 17:22:06 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBQ3848.html [2010-03-30 12:47:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsFg856.html [2010-03-30 12:47:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempfyY856.html [2010-03-30 08:57:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxS3752.html [2010-03-30 08:57:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempyB3752.html [2010-03-29 18:27:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvE4848.html [2010-03-29 18:27:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgM4848.html [2010-03-28 19:59:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempqj3668.html [2010-03-28 19:59:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRx3668.html [2010-03-28 12:13:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptg1780.html [2010-03-28 12:13:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNf1780.html [2010-03-27 21:50:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTV2572.html [2010-03-27 21:50:04 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDm2572.html [2010-03-27 17:39:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKf3196.html [2010-03-27 17:39:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempdt3196.html [2010-03-26 20:24:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxiX620.html [2010-03-26 20:24:03 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmrz620.html [2010-03-26 18:20:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIK3180.html [2010-03-26 18:20:46 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLI3180.html [2010-03-26 14:34:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoLb504.html [2010-03-26 14:34:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppUe504.html [2010-03-26 10:26:14 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppW1836.html [2010-03-26 10:26:14 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvd1836.html [2010-03-25 18:17:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHi6912.html [2010-03-25 18:17:25 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempwA6912.html [2010-03-25 17:25:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWU4644.html [2010-03-25 17:25:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMz4644.html [2010-03-24 19:29:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPE2920.html [2010-03-24 19:29:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFV2920.html [2010-03-24 12:13:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUt3620.html [2010-03-24 12:13:11 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoR3620.html [2010-03-24 06:49:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIE4112.html [2010-03-24 06:49:19 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprl4112.html [2010-03-23 18:13:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphc3728.html [2010-03-23 18:13:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYM3728.html [2010-03-23 10:49:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCx2788.html [2010-03-23 10:49:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEt2788.html [2010-03-22 20:12:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmo2576.html [2010-03-22 20:12:47 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjS2576.html [2010-03-22 07:05:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTf1640.html [2010-03-22 07:05:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgD1640.html [2010-03-21 12:08:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBB2684.html [2010-03-21 12:08:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzC2684.html [2010-03-20 20:01:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAG4208.html [2010-03-20 20:01:19 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxe4208.html [2010-03-20 16:06:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempid3844.html [2010-03-20 16:06:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbw3844.html [2010-03-20 13:54:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmn1904.html [2010-03-20 13:54:11 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppD1904.html [2010-03-19 19:37:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEm4500.html [2010-03-19 19:37:34 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQH4500.html [2010-03-19 18:17:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJX3532.html [2010-03-19 18:17:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempce3532.html [2010-03-19 15:44:05 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgJ3680.html [2010-03-19 15:44:05 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjm3680.html [2010-03-19 11:56:14 | 000,005,632 | ---- | C] () -- C:\Windows\SysWow64\drivers\StarOpen.sys [2010-03-19 10:03:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPB3016.html [2010-03-19 10:03:19 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCt3016.html [2010-03-18 19:37:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempph4072.html [2010-03-18 19:37:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaU4072.html [2010-03-18 18:11:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempyi1176.html [2010-03-18 18:11:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoC1176.html [2010-03-18 12:05:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWD3680.html [2010-03-18 12:05:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDQ3680.html [2010-03-17 20:16:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHH4808.html [2010-03-17 20:16:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRY4808.html [2010-03-17 18:37:14 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnoj908.html [2010-03-17 18:37:14 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJpN908.html [2010-03-16 18:07:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvX4064.html [2010-03-16 18:07:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempES4064.html [2010-03-16 14:11:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZM3664.html [2010-03-16 14:11:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempum3664.html [2010-03-16 11:01:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempip4656.html [2010-03-16 11:01:50 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYV4656.html [2010-03-15 06:48:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZYA704.html [2010-03-15 06:48:00 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWNg704.html [2010-03-14 16:10:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTu4928.html [2010-03-14 16:10:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPp4928.html [2010-03-14 10:48:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvR4636.html [2010-03-14 10:48:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsh4636.html [2010-03-13 20:43:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVh4856.html [2010-03-13 20:43:28 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYV4856.html [2010-03-13 14:55:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxV4332.html [2010-03-13 14:55:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWP4332.html [2010-03-13 12:22:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGh4644.html [2010-03-13 12:22:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbJ4644.html [2010-03-12 20:40:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJb4520.html [2010-03-12 20:40:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnB4520.html [2010-03-12 19:48:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempgu4936.html [2010-03-12 19:48:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsV4936.html [2010-03-12 14:44:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNyx568.html [2010-03-12 14:44:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjpm568.html [2010-03-12 11:57:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIM5060.html [2010-03-12 11:57:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqT5060.html [2010-03-11 20:32:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQI4976.html [2010-03-11 20:32:00 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMI4976.html [2010-03-10 20:06:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgX5096.html [2010-03-10 20:06:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptX5096.html [2010-03-10 18:40:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnm4684.html [2010-03-10 18:40:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiP4684.html [2010-03-09 16:04:41 | 000,000,083 | ---- | C] () -- C:\Windows\wwp_game.INI [2010-03-09 09:59:52 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaR4880.html [2010-03-09 09:59:52 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempaj4880.html [2010-03-08 19:57:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplO4924.html [2010-03-08 19:57:34 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgL4924.html [2010-03-08 07:03:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVT3196.html [2010-03-08 07:03:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVA3196.html [2010-03-07 17:00:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLv3600.html [2010-03-07 17:00:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcw3600.html [2010-03-07 13:36:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEA4904.html [2010-03-07 13:36:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBS4904.html [2010-03-06 19:33:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSY5116.html [2010-03-06 19:33:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmn5116.html [2010-03-06 15:27:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLd5112.html [2010-03-06 15:27:29 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempyF5112.html [2010-03-06 13:59:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjj4444.html [2010-03-06 13:59:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLS4444.html [2010-03-06 12:47:54 | 000,000,418 | ---- | C] () -- C:\Windows\ODBC.INI [2010-03-06 12:47:54 | 000,000,063 | ---- | C] () -- C:\Windows\mdm.ini [2010-03-05 12:42:02 | 001,556,556 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010-02-28 12:40:03 | 000,000,095 | ---- | C] () -- C:\Windows\winamp.ini [2010-01-14 18:35:00 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini [2009-11-26 17:41:12 | 000,000,315 | ---- | C] () -- C:\Windows\game.ini [2009-11-07 14:28:59 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2009-10-20 02:23:46 | 000,178,960 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2009-10-16 18:22:21 | 000,003,972 | ---- | C] () -- C:\Windows\SysWow64\drivers\PciBus.sys [2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-04-19 17:35:04 | 000,126,976 | ---- | C] () -- C:\Windows\gdf.dll [2005-02-25 07:15:00 | 000,159,744 | ---- | C] () -- C:\Windows\SysWow64\EPSPTDV.DLL [color=#E56717]========== LOP Check ==========[/color] [2010-01-14 19:38:45 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Ashampoo [2010-01-18 20:51:53 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Autodesk [2010-03-17 20:27:51 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Canneverbe Limited [2009-10-20 19:32:46 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\DAEMON Tools Lite [2009-12-11 18:10:05 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Dev-Cpp [2010-01-14 18:40:17 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\EPSON [2010-08-31 09:55:56 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\foobar2000 [2009-10-17 14:31:48 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Gadu-Gadu [2009-11-22 12:15:48 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Gadu-Gadu 10 [2010-06-13 19:14:42 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\GetRightToGo [2010-05-30 17:55:02 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\gtk-2.0 [2010-08-31 08:21:32 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\HEM Data [2009-11-22 22:54:37 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\IObit [2010-01-24 11:10:00 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\ipla [2010-03-14 12:11:04 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\IrfanView [2010-06-29 06:46:29 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Nokia [2010-03-05 13:16:18 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\NVD [2009-10-17 17:05:23 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\OpenOffice.org [2009-10-16 17:49:49 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Opera [2009-10-16 17:43:08 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\PCToolsFirewallPlus [2010-05-30 16:29:50 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Qrix [2010-07-13 10:59:47 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Samsung [2010-04-09 18:49:28 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\SoftGrid Client [2009-11-03 19:07:10 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Sports Interactive [2010-06-14 14:52:34 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\StreamTorrent [2009-10-19 10:07:24 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Thunderbird [2010-04-09 17:08:10 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\TP [2010-01-23 11:05:17 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\UDC Profiles [2010-08-04 21:33:05 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\uTorrent [2010-07-18 13:19:04 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [2010-06-13 22:17:59 | 000,000,408 | ---- | M] () -- C:\Windows\Tasks\SmartDefrag.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%\*.* >[/color] [2010-06-07 17:07:20 | 000,001,024 | ---- | M] () -- C:\.rnd [2010-01-09 12:24:42 | 000,467,082 | ---- | M] () -- C:\acadminidump.dmp [2010-08-21 12:53:05 | 000,040,092 | ---- | M] () -- C:\AutoMapaSetupLog.txt [2010-08-27 16:29:35 | 000,009,672 | ---- | M] () -- C:\bootsqm.dat [2010-07-13 10:54:51 | 000,000,074 | ---- | M] () -- C:\CMLoader.log [2009-10-16 18:11:47 | 000,011,728 | ---- | M] () -- C:\deviceInfo.txt [2010-08-31 10:55:25 | 3220,561,920 | -HS- | M] () -- C:\hiberfil.sys [2010-02-05 15:56:05 | 000,000,564 | -H-- | M] () -- C:\os582744.bin [2010-08-31 10:55:30 | 4294,082,560 | -HS- | M] () -- C:\pagefile.sys [2010-03-16 19:14:39 | 000,000,029 | ---- | M] () -- C:\Windows.txt [2 C:\*.tmp files -> C:\*.tmp -> ] [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys [2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys [2003-10-29 20:58:30 | 000,021,008 | ---- | M] (Microsoft Corporation) MD5=CDDB71A90077C93BEA5C72507F0B1394 -- C:\Program Files (x86)\Driver Cleaner\nvfix\AGP440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys [2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2009-07-14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysWow64\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys [2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2009-07-14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2009-07-14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe [2009-10-28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe [2009-10-28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:A8ADE5D8 @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:DFC5A2B2 @Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:C31F31E6 < End of report > [/log]
Tomek01 komentarz 31 sierpnia 2010 komentarz 31 sierpnia 2010 Odinstaluj pdfforge Toolbar. Czy znasz te pliki ?: C:\Users\Darek\Desktop\2rhk4xk7.exe C:\Users\Darek\Desktop\iu90d21r.exe Jeśłi nie, doklej pod komendą: files: Zastosuj [b][color=#0000CD][url=http://download.bleepingcomputer.com//sUBs/Flash_Disinfector.exe]Flash Disinfector[/url][/color][/b], najlepiej z podpiętym pendrive'm czy innymi pamięciami USB. W OTL, w oknie Custom scan/fixes wklej: [code]:Processes Explorer.exe :OTL @Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:A8ADE5D8 @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:DFC5A2B2 @Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:C31F31E6 :Files C:\Windows\SysWow64\mqpoy.exe C:\Windows\SysWow64\autorun.inf C:\Windows\SysWow64\mqpoyx.exe C:\Users\Darek\mqpoy.exe C:\ProgramData\bltofzsb.qlf C:\os582744.bin :Commands [emptytemp] [start explorer] [Reboot] [/code] Klikasz run fix, komputer uruchamia się ponownie. Do [url=http://images.malwareremoval.com/jpshortstuff/SystemLook.exe][b]System Look[/b][/url] wklej: Filefind: SearchSettings Wciśnij look, pokaż co wyskoczy. Wrzuć log OTL z usuwania oraz nowe logi OTL i RSIT.
dario116 komentarz 31 sierpnia 2010 Autor komentarz 31 sierpnia 2010 Oba te pliki to GMER i Dr Web. Log z usuwania: [log] All processes killed ========== PROCESSES ========== No active process named Explorer.exe was found! ========== OTL ========== ADS C:\ProgramData\TEMP:A8ADE5D8 deleted successfully. ADS C:\ProgramData\TEMP:DFC5A2B2 deleted successfully. ADS C:\ProgramData\TEMP:C31F31E6 deleted successfully. ========== FILES ========== C:\Windows\SysWow64\mqpoy.exe moved successfully. C:\Windows\SysWow64\autorun.inf moved successfully. C:\Windows\SysWow64\mqpoyx.exe moved successfully. File\Folder C:\Users\Darek\mqpoy.exe not found. C:\ProgramData\bltofzsb.qlf moved successfully. C:\os582744.bin moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Darek ->Temp folder emptied: 87687848 bytes ->Temporary Internet Files folder emptied: 43743307 bytes ->Java cache emptied: 26024479 bytes ->Opera cache emptied: 28722427 bytes ->Flash cache emptied: 7234 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: postgres ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: postgres.Darek-Komputer ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 3229920 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 6962172 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50534 bytes RecycleBin emptied: 651422 bytes Total Files Cleaned = 188,00 mb OTL by OldTimer - Version 3.2.10.0 log created on 08312010_220642 [/log] Log z SystemLook: [log] SystemLook v1.0 by jpshortstuff (11.01.10) Log created at 22:12 on 31/08/2010 by Darek (Administrator - Elevation successful) No Context: Filefind: No Context: SearchSettings -=End Of File=- [/log] Log z OTL: [log] OTL logfile created on: 2010-08-31 22:22:10 - Run 4 OTL by OldTimer - Version 3.2.10.0 Folder = C:\Users\Darek\Desktop 64bit- An unknown product (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 65,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 80,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 49,90 Gb Total Space | 9,23 Gb Free Space | 18,50% Space Free | Partition Type: NTFS Drive D: | 240,28 Gb Total Space | 47,48 Gb Free Space | 19,76% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: DAREK-KOMPUTER Current User Name: Darek Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Include 64bit Scans Company Name Whitelist: On Skip Microsoft Files: On File Age = 60 Days Output = Standard [color=#E56717]========== Processes (All) ==========[/color] PRC - [2010-08-30 21:28:37 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe PRC - [2010-08-09 15:27:06 | 000,836,464 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe PRC - [2010-08-06 09:11:58 | 000,248,936 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2010-05-14 14:11:08 | 000,066,048 | ---- | M] (PostgreSQL Global Development Group) -- C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe PRC - [2010-05-14 14:09:18 | 004,530,176 | ---- | M] (PostgreSQL Global Development Group) -- C:\Program Files (x86)\PostgreSQL\8.4\bin\postgres.exe PRC - [2010-05-14 11:44:46 | 000,248,552 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe PRC - [2010-03-04 23:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe PRC - [2010-01-22 21:57:08 | 000,395,824 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnat.exe PRC - [2010-01-22 21:56:44 | 000,334,384 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnetdhcp.exe PRC - [2010-01-22 21:56:28 | 000,113,200 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe PRC - [2010-01-22 21:00:48 | 000,563,760 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe PRC - [2010-01-19 10:45:41 | 003,168,216 | ---- | M] (PC Tools) -- C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe PRC - [2009-11-18 19:52:31 | 000,818,432 | ---- | M] (PC Tools) -- C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe PRC - [2009-11-13 19:29:14 | 000,107,832 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe PRC - [2009-11-13 19:28:53 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2009-09-23 16:45:50 | 001,287,176 | ---- | M] (Panda Security) -- C:\Program Files (x86)\Panda USB Vaccine\Panda\USBVaccine.exe PRC - [2009-09-11 17:52:16 | 002,080,768 | ---- | M] (Micro-Star International Co., Ltd.) -- C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe PRC - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe PRC - [2009-07-09 15:54:42 | 000,160,768 | ---- | M] (Micro-Star International Co., Ltd.) -- C:\Program Files (x86)\System Control Manager\MSIService.exe PRC - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe PRC - [2009-03-02 13:08:47 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe PRC - [2009-02-11 17:38:40 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe PRC - [2009-02-11 17:38:38 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe PRC - [2007-09-13 22:26:50 | 000,090,112 | ---- | M] () -- C:\MSI\Advanced Wheel Mouse\wh_exec.exe [color=#E56717]========== Modules (All) ==========[/color] MOD - [2010-08-30 21:28:37 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe MOD - [2010-07-27 16:03:24 | 012,867,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll MOD - [2010-03-24 08:37:04 | 001,289,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll MOD - [2009-12-11 09:39:06 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll MOD - [2009-12-11 09:36:33 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll MOD - [2009-07-14 03:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll MOD - [2009-07-14 03:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll MOD - [2009-07-14 03:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll MOD - [2009-07-14 03:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll MOD - [2009-07-14 03:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll MOD - [2009-07-14 03:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll MOD - [2009-07-14 03:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll MOD - [2009-07-14 03:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll MOD - [2009-07-14 03:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll MOD - [2009-07-14 03:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll MOD - [2009-07-14 03:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll MOD - [2009-07-14 03:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll MOD - [2009-07-14 03:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll MOD - [2009-07-14 03:16:12 | 001,412,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll MOD - [2009-07-14 03:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll MOD - [2009-07-14 03:16:12 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll MOD - [2009-07-14 03:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll MOD - [2009-07-14 03:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll MOD - [2009-07-14 03:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll MOD - [2009-07-14 03:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll MOD - [2009-07-14 03:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll MOD - [2009-07-14 03:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll MOD - [2009-07-14 03:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll MOD - [2009-07-14 03:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll MOD - [2009-07-14 03:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll MOD - [2009-07-14 03:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2009-07-14 03:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll MOD - [2009-07-14 03:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll MOD - [2009-07-14 03:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll MOD - [2009-07-14 03:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll MOD - [2009-07-14 03:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll MOD - [2009-07-14 03:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll MOD - [2009-07-14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009-07-14 03:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv MOD - [2009-07-14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll MOD - [2009-07-14 03:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll MOD - [2009-07-14 03:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll MOD - [2009-07-14 03:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll MOD - [2009-07-14 03:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll MOD - [2009-07-14 03:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll MOD - [2009-07-14 03:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll MOD - [2009-07-14 03:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll MOD - [2009-07-14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll MOD - [2007-09-13 22:26:52 | 000,036,864 | ---- | M] () -- C:\MSI\Advanced Wheel Mouse\wh_hook.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\vmnat.exe -- (VMware NAT Service) SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\vmnetdhcp.exe -- (VMnetDHCP) SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrB.exe -- (PnkBstrB) SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrA.exe -- (PnkBstrA) SRV:[b]64bit:[/b] - [2009-10-20 14:17:21 | 001,030,600 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:[b]64bit:[/b] - [2009-07-14 03:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService) SRV:[b]64bit:[/b] - [2009-07-14 03:41:54 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\StorSvc.dll -- (StorSvc) SRV:[b]64bit:[/b] - [2009-07-14 03:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 03:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService) SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2010-08-06 09:11:58 | 000,248,936 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2010-05-14 14:11:08 | 000,066,048 | ---- | M] (PostgreSQL Global Development Group) [Auto | Running] -- C:\Program Files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe -- (postgresql-8.4) SRV - [2010-03-04 23:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe -- (NMSAccess) SRV - [2010-01-22 21:57:08 | 000,395,824 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service) SRV - [2010-01-22 21:56:44 | 000,334,384 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP) SRV - [2010-01-22 21:56:28 | 000,113,200 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe -- (VMAuthdService) SRV - [2010-01-22 21:00:48 | 000,563,760 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService) SRV - [2009-11-18 19:52:31 | 000,818,432 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe -- (PCToolsFirewallPlus) SRV - [2009-11-13 19:29:14 | 000,107,832 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB) SRV - [2009-11-13 19:28:53 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2009-10-12 14:32:24 | 000,191,024 | ---- | M] (VMware, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe -- (ufad-ws60) SRV - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2009-07-09 15:54:42 | 000,160,768 | ---- | M] (Micro-Star International Co., Ltd.) [Auto | Running] -- C:\Program Files (x86)\System Control Manager\MSIService.exe -- (Micro Star SCM) SRV - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2009-03-17 14:37:10 | 000,189,808 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service) SRV - [2009-02-11 17:38:40 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe -- (IAANTMON) Intel(R) SRV - [2007-05-31 17:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007-05-31 17:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010-06-22 00:07:36 | 000,131,688 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:[b]64bit:[/b] - [2010-02-12 20:30:26 | 000,145,360 | ---- | M] (Sun Microsystems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp) DRV:[b]64bit:[/b] - [2010-02-05 09:17:56 | 000,306,648 | ---- | M] (PC Tools) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\pctgntdi64.sys -- (pctgntdi) DRV:[b]64bit:[/b] - [2010-01-22 21:58:22 | 000,068,656 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmx86.sys -- (vmx86) DRV:[b]64bit:[/b] - [2010-01-22 21:58:20 | 000,029,744 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VMkbd.sys -- (vmkbd) DRV:[b]64bit:[/b] - [2010-01-22 21:58:16 | 000,080,944 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmci.sys -- (vmci) DRV:[b]64bit:[/b] - [2010-01-22 21:58:16 | 000,030,256 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetuserif.sys -- (VMnetuserif) DRV:[b]64bit:[/b] - [2010-01-22 21:00:44 | 000,038,960 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\hcmon.sys -- (hcmon) DRV:[b]64bit:[/b] - [2010-01-22 17:13:00 | 000,037,680 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmusb.sys -- (vmusb) DRV:[b]64bit:[/b] - [2010-01-22 17:12:58 | 000,045,104 | R--- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetbridge.sys -- (VMnetBridge) DRV:[b]64bit:[/b] - [2010-01-22 17:12:58 | 000,020,016 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vmnetadapter.sys -- (VMnetAdapter) DRV:[b]64bit:[/b] - [2010-01-19 10:45:52 | 000,164,496 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pctplfw64.sys -- (pctplfw) DRV:[b]64bit:[/b] - [2010-01-19 10:45:52 | 000,081,584 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pctNdis64.sys -- (pctNDIS) DRV:[b]64bit:[/b] - [2010-01-19 10:45:51 | 000,095,504 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pctNdis-PacketFilter64.sys -- (PCTFW-PacketFilter) DRV:[b]64bit:[/b] - [2010-01-19 10:45:51 | 000,042,456 | ---- | M] (PC Tools) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pctNdis-DNS64.sys -- (PCTFW-DNS) DRV:[b]64bit:[/b] - [2009-12-07 18:11:49 | 000,074,880 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt) DRV:[b]64bit:[/b] - [2009-10-19 15:49:50 | 000,871,408 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2009-09-23 03:46:18 | 000,066,304 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr) DRV:[b]64bit:[/b] - [2009-09-23 03:46:17 | 000,359,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm) DRV:[b]64bit:[/b] - [2009-09-23 03:32:39 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb) DRV:[b]64bit:[/b] - [2009-09-23 03:32:35 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcuxd.sys -- (vpcuxd) DRV:[b]64bit:[/b] - [2009-09-23 03:32:33 | 000,187,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 02:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM) DRV:[b]64bit:[/b] - [2009-07-14 01:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap) DRV:[b]64bit:[/b] - [2009-07-14 01:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID) DRV:[b]64bit:[/b] - [2009-07-14 01:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2009-07-14 01:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC) DRV:[b]64bit:[/b] - [2009-06-29 10:17:00 | 000,070,656 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\enecir.sys -- (enecir) DRV:[b]64bit:[/b] - [2009-06-10 23:01:14 | 001,227,776 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SmSerl64.sys -- (smserial) DRV:[b]64bit:[/b] - [2009-06-10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009-06-10 22:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) Sterownik karty Intel(R) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-05-22 22:52:30 | 000,215,040 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-03-23 17:28:30 | 000,056,320 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TosRfSnd.sys -- (TosRfSnd) DRV:[b]64bit:[/b] - [2009-03-19 14:07:46 | 000,052,736 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfusb.sys -- (Tosrfusb) DRV:[b]64bit:[/b] - [2009-03-12 11:33:06 | 000,020,992 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfnds.sys -- (tosrfnds) DRV:[b]64bit:[/b] - [2009-03-05 11:03:34 | 000,088,576 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Tosrfhid.sys -- (Tosrfhid) DRV:[b]64bit:[/b] - [2009-03-03 15:34:54 | 000,045,056 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfbnp.sys -- (tosrfbnp) DRV:[b]64bit:[/b] - [2009-02-19 16:20:18 | 000,076,160 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tosrfcom.sys -- (Tosrfcom) DRV:[b]64bit:[/b] - [2009-02-11 17:26:18 | 000,407,576 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2008-10-06 17:56:58 | 000,173,696 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfbd.sys -- (tosrfbd) DRV:[b]64bit:[/b] - [2008-09-17 15:14:00 | 000,012,744 | R--- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Entech64.sys -- (ENTECH64) DRV:[b]64bit:[/b] - [2008-08-07 17:01:36 | 000,143,360 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR) DRV:[b]64bit:[/b] - [2008-03-25 13:54:26 | 000,049,152 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosporte.sys -- (tosporte) DRV:[b]64bit:[/b] - [2007-01-26 10:04:36 | 000,009,600 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\whfltr2k.sys -- (whfltr2k) DRV - [2009-10-26 16:05:45 | 000,014,544 | ---- | M] (OpenLibSys.org) [Kernel | Auto | Running] -- C:\Users\Darek\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries21.gadget\WinRing0x64.sys -- (WinRing0_1_2_0) DRV - [2009-10-17 14:42:27 | 000,021,200 | ---- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TVICHW64.SYS -- (TVICHW64) DRV - [2009-10-12 14:31:04 | 000,032,816 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys -- (vstor2-ws60) DRV - [2006-07-24 16:05:00 | 000,005,632 | ---- | M] () [File_System | System | Stopped] -- C:\Windows\SysWow64\drivers\StarOpen.sys -- (StarOpen) DRV - [2004-06-22 15:44:50 | 000,005,632 | ---- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\Entech64.sys -- (ENTECH64) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1264084378-3322303571-3196748977-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2010-04-17 13:37:55 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll (GG Network S.A.) O4:[b]64bit:[/b] - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.DLL (NVIDIA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [00PCTFW] C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe (PC Tools) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [MGSysCtrl] C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe (Micro-Star International Co., Ltd.) O4 - HKLM..\Run: [WheelMouse] C:\MSI\Advanced Wheel Mouse\wh_exec.exe () O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1264084378-3322303571-3196748977-1012..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O4 - HKU\S-1-5-21-1264084378-3322303571-3196748977-1012..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKU\S-1-5-21-1264084378-3322303571-3196748977-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe (PokerStars) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKU\S-1-5-21-1264084378-3322303571-3196748977-1000\..Trusted Domains: mks.com.pl ([www] https in Zaufane witryny) O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab (Reg Error: Key error.) O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} http://service.futuremark.com/virtualmark/tc/FMSI.cab (Reg Error: Key error.) O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab (CKAVWebScan Object) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\http\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-10-21 11:42:07 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ] O32 - AutoRun File - [2010-08-21 12:53:05 | 000,040,092 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk - C:\PROGRA~2\Toshiba\BLUETO~1\TosBtMng.exe - (TOSHIBA CORPORATION.) MsConfig:64bit - StartUpFolder: C:^Users^Darek^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^continuator_automate.exe.lnk - C:\PROGRA~2\FOOBAR~1\COMPON~1\CONTIN~1.EXE - File not found MsConfig:64bit - StartUpReg: [b]Adobe ARM[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) MsConfig:64bit - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) MsConfig:64bit - StartUpReg: [b]Bonus.SSR.FR10[/b] - hkey= - key= - C:\Program Files (x86)\ABBYY FineReader 10\Bonus.ScreenshotReader.exe File not found MsConfig:64bit - StartUpReg: [b]DAEMON Tools Lite[/b] - hkey= - key= - C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe (DT Soft Ltd) MsConfig:64bit - StartUpReg: [b]ElcomSoft DPR Server[/b] - hkey= - key= - C:\Program Files (x86)\ElcomSoft\Distributed Password Recovery\esdprs.exe File not found MsConfig:64bit - StartUpReg: [b]EPSON Stylus DX3800 Series[/b] - hkey= - key= - C:\Windows\SysNative\spool\DRIVERS\x64\3\E_FATIACE.EXE (SEIKO EPSON CORPORATION) MsConfig:64bit - StartUpReg: [b]FlashPlayerUpdate[/b] - hkey= - key= - C:\Program Files (x86)\Opera\program\plugins\NPSWF32_FlashUtil.exe (Adobe Systems, Inc.) MsConfig:64bit - StartUpReg: [b]Gadu-Gadu 10[/b] - hkey= - key= - C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.) MsConfig:64bit - StartUpReg: [b]IPLA![/b] - hkey= - key= - C:\Program Files (x86)\ipla\ipla.exe File not found MsConfig:64bit - StartUpReg: [b]SearchSettings[/b] - hkey= - key= - C:\Program Files (x86)\pdfforge Toolbar\SearchSettings.exe File not found MsConfig:64bit - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.) MsConfig:64bit - StartUpReg: [b]SunJavaUpdateSched[/b] - hkey= - key= - C:\Program Files (x86)\Java\jre6\bin\jusched.exe File not found MsConfig:64bit - StartUpReg: [b]TkBellExe[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.) MsConfig:64bit - StartUpReg: [b]UpdatePDRShortCut[/b] - hkey= - key= - C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe File not found MsConfig:64bit - StartUpReg: [b]VMware hqtray[/b] - hkey= - key= - C:\Program Files (x86)\VMware\VMware Player\hqtray.exe (VMware, Inc.) MsConfig:64bit - StartUpReg: [b]Windows Mobile Device Center[/b] - hkey= - key= - C:\Windows\WindowsMobile\wmdc.exe (Microsoft Corporation) MsConfig:64bit - State: "startup" - Reg Error: Key error. SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Base - Driver Group SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group SafeBootMin:[b]64bit:[/b] File system - Driver Group SafeBootMin:[b]64bit:[/b] Filter - Driver Group SafeBootMin:[b]64bit:[/b] HelpSvc - Service SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group SafeBootMin:[b]64bit:[/b] sacsvr - Service SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] vmms - Service SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Base - Driver Group SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group SafeBootNet:[b]64bit:[/b] File system - Driver Group SafeBootNet:[b]64bit:[/b] Filter - Driver Group SafeBootNet:[b]64bit:[/b] HelpSvc - Service SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group SafeBootNet:[b]64bit:[/b] Network - Driver Group SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group SafeBootNet:[b]64bit:[/b] rdsessmgr - Service SafeBootNet:[b]64bit:[/b] sacsvr - Service SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] TDI - Driver Group SafeBootNet:[b]64bit:[/b] vmms - Service SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2010-08-31 21:05:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Panda Security [2010-08-31 21:05:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Panda USB Vaccine [2010-08-31 21:04:19 | 000,848,856 | ---- | C] (Panda Security ) -- C:\Users\Darek\Desktop\USBVaccineSetup.exe [2010-08-30 21:55:49 | 000,000,000 | ---D | C] -- C:\Users\Darek\DoctorWeb [2010-08-30 21:51:56 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Roaming\Malwarebytes [2010-08-30 21:51:47 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010-08-30 21:51:46 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010-08-30 21:51:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010-08-30 21:51:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2010-08-30 21:32:42 | 000,000,000 | ---D | C] -- C:\_OTL [2010-08-30 21:28:36 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe [2010-08-30 21:13:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro [2010-08-30 21:12:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET [2010-08-30 21:06:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2010-08-30 21:06:35 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Kaspersky Lab [2010-08-30 16:34:21 | 000,000,000 | ---D | C] -- C:\NVIDIA [2010-08-30 16:33:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation [2010-08-30 16:31:03 | 000,065,128 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2010-08-30 16:31:03 | 000,056,936 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2010-08-30 16:08:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Driver Cleaner [2010-08-30 11:40:32 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation [2010-08-27 09:14:30 | 000,000,000 | ---D | C] -- C:\HMArchive [2010-08-27 09:14:29 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Local\In The Money [2010-08-27 09:14:05 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Roaming\HEM Data [2010-08-27 09:10:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RVG Software [2010-08-27 09:10:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PSQLINSTALL [2010-08-25 13:03:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Acronis [2010-08-25 13:03:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Acronis [2010-08-25 10:14:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2010-08-25 10:14:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2010-08-21 17:36:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Vroom Vroom !!! [2010-08-17 17:40:35 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Local\PokerStars [2010-08-17 17:39:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PokerStars [2010-07-25 18:14:59 | 000,000,000 | ---D | C] -- C:\lezac [2010-07-25 11:26:59 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Local\Apps [2010-07-20 22:40:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AutoMapa EU [2010-07-14 09:15:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Avanquest Bluetooth SDK [2010-07-14 09:10:39 | 000,000,000 | ---D | C] -- C:\ProgramData\BVRP Software [2010-07-13 10:51:11 | 000,000,000 | ---D | C] -- C:\Users\Darek\AppData\Roaming\Samsung [2010-07-13 10:51:11 | 000,000,000 | ---D | C] -- C:\Users\Darek\Documents\My Art [2010-07-13 10:41:19 | 000,000,000 | -HSD | C] -- C:\Windows\SysWow64\Samsung_USB_Drivers [2010-07-08 08:52:33 | 000,000,000 | ---D | C] -- C:\Fraps [2010-07-07 17:09:51 | 000,000,000 | ---D | C] -- C:\Windows\WindowsMobile [2010-07-07 13:06:14 | 000,000,000 | ---D | C] -- C:\Users\Darek\Desktop\Pierwsza_komunia_swieta_od_corki_Anety_Wuppertal_maj_2010r [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2010-08-31 22:25:06 | 002,883,584 | -HS- | M] () -- C:\Users\Darek\NTUSER.DAT [2010-08-31 22:16:53 | 000,013,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010-08-31 22:16:53 | 000,013,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010-08-31 22:12:43 | 000,339,991 | ---- | M] () -- C:\Users\Darek\Desktop\RSIT.exe [2010-08-31 22:09:00 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-08-31 22:08:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-08-31 22:08:47 | 3220,561,920 | -HS- | M] () -- C:\hiberfil.sys [2010-08-31 22:07:43 | 001,453,849 | -H-- | M] () -- C:\Users\Darek\AppData\Local\IconCache.db [2010-08-31 22:04:29 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempzl3956.html [2010-08-31 21:04:21 | 000,848,856 | ---- | M] (Panda Security ) -- C:\Users\Darek\Desktop\USBVaccineSetup.exe [2010-08-31 20:46:09 | 000,100,908 | ---- | M] () -- C:\Users\Darek\Desktop\SystemLook.exe [2010-08-31 20:42:06 | 000,132,597 | ---- | M] () -- C:\Users\Darek\Desktop\Flash_Disinfector.exe [2010-08-31 20:38:41 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempHh5056.html [2010-08-31 20:38:41 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempig5056.html [2010-08-31 20:36:10 | 001,531,594 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010-08-31 20:36:10 | 000,692,058 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2010-08-31 20:36:10 | 000,610,412 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010-08-31 20:36:10 | 000,133,208 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2010-08-31 20:36:10 | 000,105,316 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010-08-31 13:12:57 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempDc4868.html [2010-08-31 10:02:59 | 048,855,664 | ---- | M] () -- C:\Users\Darek\Desktop\2rhk4xk7.exe [2010-08-31 08:25:19 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempUK4680.html [2010-08-30 21:54:34 | 048,892,120 | ---- | M] () -- C:\Users\Darek\Desktop\launch.exe [2010-08-30 21:51:50 | 000,001,013 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010-08-30 21:29:33 | 000,293,376 | ---- | M] () -- C:\Users\Darek\Desktop\iu90d21r.exe [2010-08-30 21:28:37 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe [2010-08-30 20:10:59 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemptX3480.html [2010-08-30 20:10:59 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempAE3480.html [2010-08-30 16:34:49 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempSK3740.html [2010-08-30 16:34:49 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temprj3740.html [2010-08-30 11:36:05 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempLN3340.html [2010-08-29 18:02:26 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXQ4136.html [2010-08-29 18:02:26 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBj4136.html [2010-08-29 15:48:26 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempwk4792.html [2010-08-29 12:00:50 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempzR4944.html [2010-08-29 12:00:50 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempol4944.html [2010-08-28 22:11:57 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempLG4972.html [2010-08-28 22:11:57 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXa4972.html [2010-08-28 18:24:55 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCp3256.html [2010-08-28 18:24:55 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBw3256.html [2010-08-28 14:12:59 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempkV3200.html [2010-08-28 14:12:59 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempvC3200.html [2010-08-28 10:04:50 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemphT3340.html [2010-08-28 10:04:50 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCl3340.html [2010-08-27 23:49:58 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempsMh896.html [2010-08-27 23:49:58 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempKwG896.html [2010-08-27 16:29:35 | 000,009,672 | ---- | M] () -- C:\bootsqm.dat [2010-08-27 12:39:13 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempjt3028.html [2010-08-27 12:39:13 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempRz3028.html [2010-08-27 09:19:12 | 000,000,000 | ---- | M] () -- C:\Windows\HMHud.INI [2010-08-27 09:10:52 | 000,001,237 | ---- | M] () -- C:\Users\Public\Desktop\HoldemManager.lnk [2010-08-26 22:14:44 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemprA5060.html [2010-08-26 22:14:44 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempof5060.html [2010-08-26 11:26:17 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temphp4780.html [2010-08-26 11:26:17 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempiW4780.html [2010-08-25 19:11:12 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempvCf248.html [2010-08-25 19:11:12 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXBL248.html [2010-08-25 12:08:30 | 000,000,690 | ---- | M] () -- C:\Windows\SysWow64\WindowsPowerShell.lnk [2010-08-25 12:08:30 | 000,000,676 | ---- | M] () -- C:\Windows\SysWow64\New Folder.lnk [2010-08-25 12:08:30 | 000,000,674 | ---- | M] () -- C:\Windows\SysWow64\XPSViewer.lnk [2010-08-25 12:08:30 | 000,000,674 | ---- | M] () -- C:\Windows\SysWow64\Passwords.lnk [2010-08-25 12:08:30 | 000,000,674 | ---- | M] () -- C:\Windows\SysWow64\Documents.lnk [2010-08-25 12:08:30 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\Pictures.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\zh-TW.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\zh-HK.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\zh-CN.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\xlive.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\winrm.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Video.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\uk-UA.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\tr-TR.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Music.lnk [2010-08-25 12:08:30 | 000,000,664 | ---- | M] () -- C:\Windows\SysWow64\wbem.lnk [2010-08-25 12:08:30 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\wdi.lnk [2010-08-25 12:08:30 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\WCN.lnk [2010-08-25 12:08:30 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\Wat.lnk [2010-08-25 12:08:29 | 000,000,694 | ---- | M] () -- C:\Windows\SysWow64\Samsung_USB_Drivers.lnk [2010-08-25 12:08:29 | 000,000,676 | ---- | M] () -- C:\Windows\SysWow64\sr-Latn-CS.lnk [2010-08-25 12:08:29 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\Recovery.lnk [2010-08-25 12:08:29 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\sysprep.lnk [2010-08-25 12:08:29 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\restore.lnk [2010-08-25 12:08:29 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\Speech.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\th-TH.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Tasks.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\sv-SE.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\sppui.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\sl-SI.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\slmgr.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\sk-SK.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Setup.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ru-RU.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\RTCOM.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ro-RO.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\pt-PT.lnk [2010-08-25 12:08:29 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\spp.lnk [2010-08-25 12:08:29 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\ras.lnk [2010-08-25 12:08:28 | 000,000,700 | ---- | M] () -- C:\Windows\SysWow64\Printing_Admin_Scripts.lnk [2010-08-25 12:08:28 | 000,000,682 | ---- | M] () -- C:\Windows\SysWow64\manifeststore.lnk [2010-08-25 12:08:28 | 000,000,678 | ---- | M] () -- C:\Windows\SysWow64\NetworkList.lnk [2010-08-25 12:08:28 | 000,000,674 | ---- | M] () -- C:\Windows\SysWow64\migration.lnk [2010-08-25 12:08:28 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\Macromed.lnk [2010-08-25 12:08:28 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\LogFiles.lnk [2010-08-25 12:08:28 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\migwiz.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\pt-BR.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\pl-PL.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\nl-NL.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\nb-NO.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\Msdtc.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\lv-LV.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\lt-LT.lnk [2010-08-25 12:08:28 | 000,000,664 | ---- | M] () -- C:\Windows\SysWow64\oobe.lnk [2010-08-25 12:08:28 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\NDF.lnk [2010-08-25 12:08:28 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\MUI.lnk [2010-08-25 12:08:28 | 000,000,660 | ---- | M] () -- C:\Windows\SysWow64\pl.lnk [2010-08-25 12:08:27 | 000,000,688 | ---- | M] () -- C:\Windows\SysWow64\GroupPolicyUsers.lnk [2010-08-25 12:08:27 | 000,000,682 | ---- | M] () -- C:\Windows\SysWow64\InstallShield.lnk [2010-08-25 12:08:27 | 000,000,678 | ---- | M] () -- C:\Windows\SysWow64\GroupPolicy.lnk [2010-08-25 12:08:27 | 000,000,676 | ---- | M] () -- C:\Windows\SysWow64\Futuremark.lnk [2010-08-25 12:08:27 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\inetsrv.lnk [2010-08-25 12:08:27 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\icsxml.lnk [2010-08-25 12:08:27 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\FxsTmp.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ko-KR.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ja-JP.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\it-IT.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\hu-HU.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\hr-HR.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\he-IL.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\fr-FR.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\fi-FI.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\et-EE.lnk [2010-08-25 12:08:27 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\IME.lnk [2010-08-25 12:08:26 | 000,000,678 | ---- | M] () -- C:\Windows\SysWow64\DriverStore.lnk [2010-08-25 12:08:26 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\eps_icon.avi.lnk [2010-08-25 12:08:26 | 000,000,672 | ---- | M] () -- C:\Windows\SysWow64\catroot2.lnk [2010-08-25 12:08:26 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\drivers.lnk [2010-08-25 12:08:26 | 000,000,668 | ---- | M] () -- C:\Windows\SysWow64\config.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\es-ES.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\en-US.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\el-GR.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\de-DE.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\da-DK.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\cs-CZ.lnk [2010-08-25 12:08:26 | 000,000,664 | ---- | M] () -- C:\Windows\SysWow64\Dism.lnk [2010-08-25 12:08:26 | 000,000,662 | ---- | M] () -- C:\Windows\SysWow64\com.lnk [2010-08-25 12:08:26 | 000,000,660 | ---- | M] () -- C:\Windows\SysWow64\en.lnk [2010-08-25 12:08:25 | 000,000,692 | ---- | M] () -- C:\Windows\SysWow64\AdvancedInstallers.lnk [2010-08-25 12:08:25 | 000,000,670 | ---- | M] () -- C:\Windows\SysWow64\catroot.lnk [2010-08-25 12:08:25 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\bg-BG.lnk [2010-08-25 12:08:25 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\ar-SA.lnk [2010-08-25 12:08:25 | 000,000,666 | ---- | M] () -- C:\Windows\SysWow64\AGEIA.lnk [2010-08-25 12:08:25 | 000,000,664 | ---- | M] () -- C:\Windows\SysWow64\0409.lnk [2010-08-25 12:08:25 | 000,000,660 | ---- | M] () -- C:\Windows\SysWow64\...lnk [2010-08-25 12:08:25 | 000,000,658 | ---- | M] () -- C:\Windows\SysWow64\..lnk [2010-08-25 09:21:35 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempjM4976.html [2010-08-24 16:37:03 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempgI4352.html [2010-08-24 16:37:03 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempzG4352.html [2010-08-24 09:31:55 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempbO2380.html [2010-08-23 21:46:54 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempGq3896.html [2010-08-23 21:46:54 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempTO3896.html [2010-08-19 07:47:55 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempHU4620.html [2010-08-18 17:43:50 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempHR4888.html [2010-08-18 10:43:56 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXY2948.html [2010-08-17 19:29:26 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempzK2284.html [2010-08-17 19:29:26 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temptz2284.html [2010-08-17 18:16:50 | 000,116,464 | ---- | M] () -- C:\Users\Darek\AppData\Local\GDIPFONTCACHEV1.DAT [2010-08-17 17:39:47 | 000,001,065 | ---- | M] () -- C:\Users\Public\Desktop\PokerStars.lnk [2010-08-17 10:04:30 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempun4388.html [2010-08-16 17:56:55 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempPb3716.html [2010-08-16 17:56:55 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempwn3716.html [2010-08-16 11:22:33 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemplU1412.html [2010-08-16 11:22:33 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempXx1412.html [2010-08-16 09:21:30 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCE3788.html [2010-08-15 19:00:26 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempMK2040.html [2010-08-15 19:00:26 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempsv2040.html [2010-08-15 13:56:10 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempyX5016.html [2010-08-15 11:55:14 | 000,000,727 | ---- | M] () -- C:\Users\Darek\Desktop\USdx — skrót.lnk [2010-08-15 11:35:39 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempmi3752.html [2010-08-14 22:25:48 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBt3840.html [2010-08-14 22:25:48 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempRV3840.html [2010-08-08 21:31:20 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBtE460.html [2010-08-08 21:31:20 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempalg460.html [2010-08-08 16:10:19 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempIG4500.html [2010-08-08 16:10:19 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempxh4500.html [2010-08-08 13:37:49 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempAb4432.html [2010-08-07 21:35:18 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temppb4264.html [2010-08-07 21:35:18 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemphW4264.html [2010-08-07 12:39:11 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempapL252.html [2010-08-07 12:39:11 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempkFN252.html [2010-08-06 19:23:52 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemprD4228.html [2010-08-06 12:51:17 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempKc4680.html [2010-08-06 12:51:17 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempHl4680.html [2010-08-06 09:58:22 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempqT3164.html [2010-08-06 09:58:22 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempQS3164.html [2010-08-05 20:32:35 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempZm3544.html [2010-08-05 20:32:35 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempJs3544.html [2010-08-05 15:27:00 | 000,012,264 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb [2010-08-05 13:27:00 | 000,065,128 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2010-08-05 13:27:00 | 000,056,936 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2010-08-05 09:34:32 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempfa4716.html [2010-08-05 09:31:32 | 000,444,944 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010-08-04 21:54:23 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempUk4068.html [2010-08-04 21:54:23 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempSC4068.html [2010-08-04 19:32:59 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempEPh664.html [2010-08-04 19:32:59 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempsWz664.html [2010-08-04 18:32:30 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempvP5032.html [2010-08-04 10:08:38 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempZX4880.html [2010-08-03 21:25:04 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempxc5016.html [2010-07-23 14:48:07 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2010-07-20 22:40:55 | 000,000,040 | ---- | M] () -- C:\Windows\SysWow64\Profile.info [2010-07-14 09:42:03 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempZM4820.html [2010-07-14 09:42:03 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempga4820.html [2010-07-13 10:44:40 | 000,000,000 | ---- | M] () -- C:\ProgramData\LauncherAccess.dt [2010-07-09 13:48:19 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempeV2876.html [2010-07-09 11:50:35 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempkZ3940.html [2010-07-09 11:50:35 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temprj3940.html [2010-07-08 21:17:10 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemptUd740.html [2010-07-08 21:17:10 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempssW740.html [2010-07-08 17:39:08 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempdm4376.html [2010-07-08 17:00:44 | 000,037,170 | ---- | M] () -- C:\Users\Darek\Documents\sysop.odt [2010-07-08 11:40:11 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempMs4084.html [2010-07-08 11:40:11 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temptr4084.html [2010-07-08 08:52:33 | 000,000,562 | ---- | M] () -- C:\Users\Darek\Desktop\Fraps.lnk [2010-07-07 17:10:14 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdRapi2_01_00_00.Wdf [2010-07-07 16:52:37 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempEm4536.html [2010-07-07 13:46:24 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempEgs972.html [2010-07-07 13:46:24 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemptSM972.html [2010-07-07 11:21:57 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Temphz3012.html [2010-07-07 11:21:57 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempIM3012.html [2010-07-06 17:49:31 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempzu3788.html [2010-07-06 14:01:24 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempKg3716.html [2010-07-06 14:01:24 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempck3716.html [2010-07-06 12:42:10 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempgF3276.html [2010-07-06 12:42:10 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCm3276.html [2010-07-06 08:57:46 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempvUE148.html [2010-07-05 19:51:27 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TemplP4524.html [2010-07-05 19:51:27 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempCi4524.html [2010-07-05 14:20:19 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempGC4216.html [2010-07-05 14:20:19 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempno4216.html [2010-07-05 09:19:46 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempzm4524.html [2010-07-04 21:58:28 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempVi5096.html [2010-07-04 21:58:28 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempeQ5096.html [2010-07-04 12:56:36 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempVw4332.html [2010-07-04 12:56:36 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\Tempku4332.html [2010-07-04 09:44:25 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempBeX816.html [2010-07-04 09:44:25 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempgBf816.html [2010-07-03 19:44:13 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempEo3080.html [2010-07-03 19:44:13 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempSH3080.html [2010-07-03 08:51:45 | 000,002,432 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempiT4044.html [2010-07-03 08:51:45 | 000,002,089 | ---- | M] () -- C:\Users\Darek\AppData\Local\TempLI4044.html [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-08-31 22:12:43 | 000,339,991 | ---- | C] () -- C:\Users\Darek\Desktop\RSIT.exe [2010-08-31 21:44:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzl3956.html [2010-08-31 20:46:09 | 000,100,908 | ---- | C] () -- C:\Users\Darek\Desktop\SystemLook.exe [2010-08-31 20:34:39 | 000,132,597 | ---- | C] () -- C:\Users\Darek\Desktop\Flash_Disinfector.exe [2010-08-31 20:28:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHh5056.html [2010-08-31 20:28:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempig5056.html [2010-08-31 10:58:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDc4868.html [2010-08-31 09:59:30 | 048,855,664 | ---- | C] () -- C:\Users\Darek\Desktop\2rhk4xk7.exe [2010-08-31 08:24:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUK4680.html [2010-08-30 21:51:50 | 000,001,013 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010-08-30 21:50:24 | 048,892,120 | ---- | C] () -- C:\Users\Darek\Desktop\launch.exe [2010-08-30 21:29:33 | 000,293,376 | ---- | C] () -- C:\Users\Darek\Desktop\iu90d21r.exe [2010-08-30 17:13:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptX3480.html [2010-08-30 17:13:25 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAE3480.html [2010-08-30 16:19:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSK3740.html [2010-08-30 16:19:46 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprj3740.html [2010-08-30 08:38:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLN3340.html [2010-08-29 16:49:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXQ4136.html [2010-08-29 16:49:43 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBj4136.html [2010-08-29 15:38:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempwk4792.html [2010-08-29 11:26:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzR4944.html [2010-08-29 11:26:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempol4944.html [2010-08-28 21:05:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLG4972.html [2010-08-28 21:05:29 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXa4972.html [2010-08-28 16:16:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCp3256.html [2010-08-28 16:16:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBw3256.html [2010-08-28 10:58:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkV3200.html [2010-08-28 10:58:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvC3200.html [2010-08-28 09:21:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemphT3340.html [2010-08-28 09:21:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCl3340.html [2010-08-27 18:05:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsMh896.html [2010-08-27 18:05:49 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKwG896.html [2010-08-27 16:29:35 | 000,009,672 | ---- | C] () -- C:\bootsqm.dat [2010-08-27 09:19:12 | 000,000,000 | ---- | C] () -- C:\Windows\HMHud.INI [2010-08-27 09:12:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjt3028.html [2010-08-27 09:12:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRz3028.html [2010-08-27 09:10:52 | 000,001,237 | ---- | C] () -- C:\Users\Public\Desktop\HoldemManager.lnk [2010-08-26 18:21:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemprA5060.html [2010-08-26 18:21:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempof5060.html [2010-08-26 09:24:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphp4780.html [2010-08-26 09:24:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiW4780.html [2010-08-25 17:20:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvCf248.html [2010-08-25 17:20:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXBL248.html [2010-08-25 12:08:30 | 000,000,690 | ---- | C] () -- C:\Windows\SysWow64\WindowsPowerShell.lnk [2010-08-25 12:08:30 | 000,000,676 | ---- | C] () -- C:\Windows\SysWow64\New Folder.lnk [2010-08-25 12:08:30 | 000,000,674 | ---- | C] () -- C:\Windows\SysWow64\XPSViewer.lnk [2010-08-25 12:08:30 | 000,000,674 | ---- | C] () -- C:\Windows\SysWow64\Passwords.lnk [2010-08-25 12:08:30 | 000,000,674 | ---- | C] () -- C:\Windows\SysWow64\Documents.lnk [2010-08-25 12:08:30 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\Pictures.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\zh-TW.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\zh-HK.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\zh-CN.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\xlive.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\winrm.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Video.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\uk-UA.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\tr-TR.lnk [2010-08-25 12:08:30 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Music.lnk [2010-08-25 12:08:30 | 000,000,664 | ---- | C] () -- C:\Windows\SysWow64\wbem.lnk [2010-08-25 12:08:30 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\wdi.lnk [2010-08-25 12:08:30 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\WCN.lnk [2010-08-25 12:08:30 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\Wat.lnk [2010-08-25 12:08:29 | 000,000,694 | ---- | C] () -- C:\Windows\SysWow64\Samsung_USB_Drivers.lnk [2010-08-25 12:08:29 | 000,000,676 | ---- | C] () -- C:\Windows\SysWow64\sr-Latn-CS.lnk [2010-08-25 12:08:29 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\Recovery.lnk [2010-08-25 12:08:29 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\sysprep.lnk [2010-08-25 12:08:29 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\restore.lnk [2010-08-25 12:08:29 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\Speech.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\th-TH.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Tasks.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\sv-SE.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\sppui.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\sl-SI.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\slmgr.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\sk-SK.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Setup.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ru-RU.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\RTCOM.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ro-RO.lnk [2010-08-25 12:08:29 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\pt-PT.lnk [2010-08-25 12:08:29 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\spp.lnk [2010-08-25 12:08:29 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\ras.lnk [2010-08-25 12:08:28 | 000,000,700 | ---- | C] () -- C:\Windows\SysWow64\Printing_Admin_Scripts.lnk [2010-08-25 12:08:28 | 000,000,682 | ---- | C] () -- C:\Windows\SysWow64\manifeststore.lnk [2010-08-25 12:08:28 | 000,000,678 | ---- | C] () -- C:\Windows\SysWow64\NetworkList.lnk [2010-08-25 12:08:28 | 000,000,674 | ---- | C] () -- C:\Windows\SysWow64\migration.lnk [2010-08-25 12:08:28 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\Macromed.lnk [2010-08-25 12:08:28 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\LogFiles.lnk [2010-08-25 12:08:28 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\migwiz.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\pt-BR.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\pl-PL.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\nl-NL.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\nb-NO.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\Msdtc.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\lv-LV.lnk [2010-08-25 12:08:28 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\lt-LT.lnk [2010-08-25 12:08:28 | 000,000,664 | ---- | C] () -- C:\Windows\SysWow64\oobe.lnk [2010-08-25 12:08:28 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\NDF.lnk [2010-08-25 12:08:28 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\MUI.lnk [2010-08-25 12:08:28 | 000,000,660 | ---- | C] () -- C:\Windows\SysWow64\pl.lnk [2010-08-25 12:08:27 | 000,000,688 | ---- | C] () -- C:\Windows\SysWow64\GroupPolicyUsers.lnk [2010-08-25 12:08:27 | 000,000,682 | ---- | C] () -- C:\Windows\SysWow64\InstallShield.lnk [2010-08-25 12:08:27 | 000,000,678 | ---- | C] () -- C:\Windows\SysWow64\GroupPolicy.lnk [2010-08-25 12:08:27 | 000,000,676 | ---- | C] () -- C:\Windows\SysWow64\Futuremark.lnk [2010-08-25 12:08:27 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\inetsrv.lnk [2010-08-25 12:08:27 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\icsxml.lnk [2010-08-25 12:08:27 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\FxsTmp.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ko-KR.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ja-JP.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\it-IT.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\hu-HU.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\hr-HR.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\he-IL.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\fr-FR.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\fi-FI.lnk [2010-08-25 12:08:27 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\et-EE.lnk [2010-08-25 12:08:27 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\IME.lnk [2010-08-25 12:08:26 | 000,000,678 | ---- | C] () -- C:\Windows\SysWow64\DriverStore.lnk [2010-08-25 12:08:26 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\eps_icon.avi.lnk [2010-08-25 12:08:26 | 000,000,672 | ---- | C] () -- C:\Windows\SysWow64\catroot2.lnk [2010-08-25 12:08:26 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\drivers.lnk [2010-08-25 12:08:26 | 000,000,668 | ---- | C] () -- C:\Windows\SysWow64\config.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\es-ES.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\en-US.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\el-GR.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\de-DE.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\da-DK.lnk [2010-08-25 12:08:26 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\cs-CZ.lnk [2010-08-25 12:08:26 | 000,000,664 | ---- | C] () -- C:\Windows\SysWow64\Dism.lnk [2010-08-25 12:08:26 | 000,000,662 | ---- | C] () -- C:\Windows\SysWow64\com.lnk [2010-08-25 12:08:26 | 000,000,660 | ---- | C] () -- C:\Windows\SysWow64\en.lnk [2010-08-25 12:08:25 | 000,000,692 | ---- | C] () -- C:\Windows\SysWow64\AdvancedInstallers.lnk [2010-08-25 12:08:25 | 000,000,670 | ---- | C] () -- C:\Windows\SysWow64\catroot.lnk [2010-08-25 12:08:25 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\bg-BG.lnk [2010-08-25 12:08:25 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\ar-SA.lnk [2010-08-25 12:08:25 | 000,000,666 | ---- | C] () -- C:\Windows\SysWow64\AGEIA.lnk [2010-08-25 12:08:25 | 000,000,664 | ---- | C] () -- C:\Windows\SysWow64\0409.lnk [2010-08-25 12:08:25 | 000,000,660 | ---- | C] () -- C:\Windows\SysWow64\...lnk [2010-08-25 12:08:25 | 000,000,658 | ---- | C] () -- C:\Windows\SysWow64\..lnk [2010-08-25 09:11:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjM4976.html [2010-08-24 16:00:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgI4352.html [2010-08-24 16:00:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzG4352.html [2010-08-24 09:25:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbO2380.html [2010-08-23 18:37:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGq3896.html [2010-08-23 18:37:03 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTO3896.html [2010-08-19 07:47:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHU4620.html [2010-08-18 16:50:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHR4888.html [2010-08-18 10:43:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXY2948.html [2010-08-17 17:39:47 | 000,001,065 | ---- | C] () -- C:\Users\Public\Desktop\PokerStars.lnk [2010-08-17 16:55:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzK2284.html [2010-08-17 16:55:56 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptz2284.html [2010-08-17 10:00:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempun4388.html [2010-08-16 17:03:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPb3716.html [2010-08-16 17:03:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempwn3716.html [2010-08-16 10:47:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplU1412.html [2010-08-16 10:47:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXx1412.html [2010-08-16 09:11:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCE3788.html [2010-08-15 17:08:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMK2040.html [2010-08-15 17:08:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsv2040.html [2010-08-15 13:55:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempyX5016.html [2010-08-15 11:55:14 | 000,000,727 | ---- | C] () -- C:\Users\Darek\Desktop\USdx — skrót.lnk [2010-08-15 11:13:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmi3752.html [2010-08-14 21:35:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBt3840.html [2010-08-14 21:35:03 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRV3840.html [2010-08-08 21:12:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBtE460.html [2010-08-08 21:12:50 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempalg460.html [2010-08-08 15:30:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIG4500.html [2010-08-08 15:30:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxh4500.html [2010-08-08 12:46:10 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAb4432.html [2010-08-07 20:59:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppb4264.html [2010-08-07 20:59:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemphW4264.html [2010-08-07 11:30:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempapL252.html [2010-08-07 11:30:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkFN252.html [2010-08-06 18:05:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemprD4228.html [2010-08-06 12:06:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKc4680.html [2010-08-06 12:06:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHl4680.html [2010-08-06 07:56:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqT3164.html [2010-08-06 07:56:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQS3164.html [2010-08-05 20:17:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZm3544.html [2010-08-05 20:17:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJs3544.html [2010-08-05 09:33:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfa4716.html [2010-08-04 21:32:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUk4068.html [2010-08-04 21:32:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSC4068.html [2010-08-04 19:25:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEPh664.html [2010-08-04 19:25:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsWz664.html [2010-08-04 17:13:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvP5032.html [2010-08-04 09:27:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZX4880.html [2010-08-03 18:19:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxc5016.html [2010-07-23 14:48:07 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2010-07-20 22:40:55 | 000,000,040 | ---- | C] () -- C:\Windows\SysWow64\Profile.info [2010-07-14 09:18:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZM4820.html [2010-07-14 09:18:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempga4820.html [2010-07-13 10:44:40 | 000,000,000 | ---- | C] () -- C:\ProgramData\LauncherAccess.dt [2010-07-13 10:41:02 | 000,000,766 | ---- | C] () -- C:\Windows\SysWow64\Uninstall.ico [2010-07-09 13:43:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeV2876.html [2010-07-09 09:46:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkZ3940.html [2010-07-09 09:46:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprj3940.html [2010-07-08 21:10:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptUd740.html [2010-07-08 21:10:11 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempssW740.html [2010-07-08 17:00:42 | 000,037,170 | ---- | C] () -- C:\Users\Darek\Documents\sysop.odt [2010-07-08 16:51:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempdm4376.html [2010-07-08 10:28:05 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMs4084.html [2010-07-08 10:28:05 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptr4084.html [2010-07-08 08:52:33 | 000,000,562 | ---- | C] () -- C:\Users\Darek\Desktop\Fraps.lnk [2010-07-07 17:10:14 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdRapi2_01_00_00.Wdf [2010-07-07 16:50:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEm4536.html [2010-07-07 13:04:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEgs972.html [2010-07-07 13:04:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptSM972.html [2010-07-07 10:08:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphz3012.html [2010-07-07 10:08:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIM3012.html [2010-07-06 17:01:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzu3788.html [2010-07-06 12:54:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKg3716.html [2010-07-06 12:54:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempck3716.html [2010-07-06 09:05:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgF3276.html [2010-07-06 09:05:11 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCm3276.html [2010-07-06 08:56:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvUE148.html [2010-07-05 17:32:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplP4524.html [2010-07-05 17:32:47 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCi4524.html [2010-07-05 13:59:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGC4216.html [2010-07-05 13:59:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempno4216.html [2010-07-05 08:58:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzm4524.html [2010-07-04 20:51:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVi5096.html [2010-07-04 20:51:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeQ5096.html [2010-07-04 11:44:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVw4332.html [2010-07-04 11:44:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempku4332.html [2010-07-04 07:59:26 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBeX816.html [2010-07-04 07:59:26 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgBf816.html [2010-07-03 18:46:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEo3080.html [2010-07-03 18:46:19 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSH3080.html [2010-07-03 07:43:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiT4044.html [2010-07-03 07:43:49 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLI4044.html [2010-07-02 18:07:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSu3252.html [2010-07-02 08:36:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempah4088.html [2010-07-02 08:36:29 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNR4088.html [2010-07-01 19:53:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsk5080.html [2010-07-01 19:53:49 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsh5080.html [2010-07-01 11:48:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempwK4312.html [2010-07-01 11:48:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempee4312.html [2010-07-01 11:02:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRm5084.html [2010-07-01 07:29:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbr4612.html [2010-06-30 17:42:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVb5012.html [2010-06-30 17:42:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempwe5012.html [2010-06-30 07:45:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJK4268.html [2010-06-30 07:45:47 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppw4268.html [2010-06-29 21:07:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKP4236.html [2010-06-29 21:07:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBw4236.html [2010-06-29 18:46:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYR4296.html [2010-06-29 18:46:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempND4296.html [2010-06-29 12:31:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxR2768.html [2010-06-29 12:31:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAX2768.html [2010-06-29 06:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfi3708.html [2010-06-29 06:32:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGJ3708.html [2010-06-28 17:50:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphs4644.html [2010-06-28 17:50:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcb4644.html [2010-06-28 11:53:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYm3660.html [2010-06-28 11:53:09 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeA3660.html [2010-06-28 07:44:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDP4356.html [2010-06-28 07:44:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphi4356.html [2010-06-27 16:31:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFF1840.html [2010-06-27 16:31:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvO1840.html [2010-06-27 10:22:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGj3448.html [2010-06-27 08:25:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIu2876.html [2010-06-26 22:32:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempge3372.html [2010-06-26 18:38:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCb4328.html [2010-06-26 15:34:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfz4892.html [2010-06-26 15:34:38 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgR4892.html [2010-06-26 12:42:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRO4148.html [2010-06-26 08:06:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVd4904.html [2010-06-26 08:06:50 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuS4904.html [2010-06-25 17:53:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempop4476.html [2010-06-25 17:53:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuV4476.html [2010-06-25 10:45:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempev5056.html [2010-06-25 10:45:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTS5056.html [2010-06-25 08:45:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxH5092.html [2010-06-25 08:45:04 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCU5092.html [2010-06-24 18:00:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbQ4208.html [2010-06-24 07:49:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQv4488.html [2010-06-23 21:32:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuS2248.html [2010-06-23 21:32:20 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsk2248.html [2010-06-23 19:14:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzSj240.html [2010-06-23 19:14:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOCp240.html [2010-06-23 17:56:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFL4904.html [2010-06-23 15:13:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoT4672.html [2010-06-23 15:13:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKI4672.html [2010-06-23 12:09:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYk3096.html [2010-06-23 12:09:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBS3096.html [2010-06-23 08:46:05 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWT3976.html [2010-06-23 08:46:05 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZE3976.html [2010-06-22 18:41:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeZ3692.html [2010-06-22 18:41:28 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvv3692.html [2010-06-22 18:07:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUI4684.html [2010-06-22 10:09:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIn5088.html [2010-06-22 10:09:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJn5088.html [2010-06-22 06:49:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqJ4512.html [2010-06-22 06:49:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTw4512.html [2010-06-21 17:53:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgP3684.html [2010-06-21 17:53:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprz3684.html [2010-06-21 15:59:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempif3032.html [2010-06-21 15:59:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVV3032.html [2010-06-21 12:10:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvc4124.html [2010-06-21 12:10:43 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempab4124.html [2010-06-21 09:32:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAF4208.html [2010-06-20 18:01:52 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuH1492.html [2010-06-20 18:01:52 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFt1492.html [2010-06-18 11:00:06 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCK4196.html [2010-06-17 16:52:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempqf3704.html [2010-06-17 16:52:47 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvR3704.html [2010-06-17 06:35:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSr4464.html [2010-06-17 06:35:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQt4464.html [2010-06-16 19:42:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGl3588.html [2010-06-16 19:42:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeA3588.html [2010-06-16 17:07:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempca5004.html [2010-06-16 17:07:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJM5004.html [2010-06-16 14:58:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWc2656.html [2010-06-16 14:58:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTD2656.html [2010-06-16 08:27:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemphT3408.html [2010-06-16 08:27:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIj3408.html [2010-06-16 06:23:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNP4784.html [2010-06-16 06:23:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZS4784.html [2010-06-15 18:14:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBD2620.html [2010-06-15 18:14:17 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemprL2620.html [2010-06-15 15:59:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempth3596.html [2010-06-15 15:59:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVn3596.html [2010-06-15 10:42:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVb4848.html [2010-06-15 10:42:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnM4848.html [2010-06-15 08:48:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmv2500.html [2010-06-14 18:14:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOv2744.html [2010-06-14 18:14:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNP2744.html [2010-06-14 06:33:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBe4568.html [2010-06-14 06:33:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBw4568.html [2010-06-13 10:36:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiV5088.html [2010-06-13 10:36:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphb5088.html [2010-06-12 17:53:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuV3668.html [2010-06-12 17:53:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNj3668.html [2010-06-12 15:24:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjv4360.html [2010-06-12 15:24:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLV4360.html [2010-06-12 09:42:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXd4496.html [2010-06-12 09:42:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXU4496.html [2010-06-11 22:30:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZi4516.html [2010-06-11 22:30:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYy4516.html [2010-06-11 19:10:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempuj4424.html [2010-06-11 19:10:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZa4424.html [2010-06-11 16:56:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTh2920.html [2010-06-11 16:56:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIP2920.html [2010-06-11 12:05:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSJ2676.html [2010-06-11 12:05:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxp2676.html [2010-06-11 11:09:10 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbB2788.html [2010-06-11 11:09:10 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHg2788.html [2010-06-11 09:44:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvX4140.html [2010-06-10 20:40:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZo3292.html [2010-06-10 20:40:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempql3292.html [2010-06-10 18:56:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaL1180.html [2010-06-10 18:26:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPs3616.html [2010-06-10 10:33:05 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTl4556.html [2010-06-10 10:33:05 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeI4556.html [2010-06-10 06:37:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLw3452.html [2010-06-09 19:35:26 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQJ4840.html [2010-06-09 19:35:26 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQo4840.html [2010-06-09 09:38:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempdS4136.html [2010-06-09 09:38:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPW4136.html [2010-06-08 20:55:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoG4292.html [2010-06-08 20:55:09 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXY4292.html [2010-06-08 16:13:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzZ3056.html [2010-06-08 16:13:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppu3056.html [2010-06-08 11:42:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsn4016.html [2010-06-08 11:42:04 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEX4016.html [2010-06-08 08:41:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbK4680.html [2010-06-08 08:41:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVT4680.html [2010-06-07 20:03:59 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTT1904.html [2010-06-07 20:03:59 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUQ1904.html [2010-06-07 14:49:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZg1052.html [2010-06-07 14:21:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJLK504.html [2010-06-07 06:16:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppH1688.html [2010-06-06 20:14:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjq3964.html [2010-06-06 20:14:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJM3964.html [2010-06-03 08:26:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEZ2016.html [2010-06-02 22:08:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzG3172.html [2010-06-02 22:08:25 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Templh3172.html [2010-06-02 16:58:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWg3376.html [2010-06-02 16:58:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTn3376.html [2010-06-02 15:57:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNr4052.html [2010-06-02 15:57:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVr4052.html [2010-06-02 13:43:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUM3436.html [2010-06-02 13:43:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQt3436.html [2010-06-02 10:38:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZg2932.html [2010-06-02 10:38:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnL2932.html [2010-06-02 09:20:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempId2996.html [2010-06-01 22:40:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBc3552.html [2010-06-01 18:45:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphj2304.html [2010-06-01 18:45:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBX2304.html [2010-06-01 17:20:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSe4972.html [2010-06-01 17:20:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFN4972.html [2010-06-01 15:52:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgW4316.html [2010-06-01 14:33:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppP4184.html [2010-06-01 14:33:25 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBp4184.html [2010-06-01 11:08:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIB3312.html [2010-06-01 11:08:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZI3312.html [2010-06-01 09:04:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZW3712.html [2010-05-31 19:05:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRO2856.html [2010-05-31 19:05:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOR2856.html [2010-05-31 15:12:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHA3788.html [2010-05-31 09:07:06 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNRz408.html [2010-05-31 07:20:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHH4296.html [2010-05-31 07:20:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptR4296.html [2010-05-30 18:38:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXp2824.html [2010-05-30 18:38:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempdb2824.html [2010-05-30 17:56:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTk4476.html [2010-05-30 16:23:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCz2952.html [2010-05-30 12:36:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMh4372.html [2010-05-30 10:57:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYU3432.html [2010-05-29 18:29:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsX3516.html [2010-05-29 18:29:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFO3516.html [2010-05-29 10:59:59 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYE4976.html [2010-05-29 10:59:59 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNZ4976.html [2010-05-29 09:34:14 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHF3572.html [2010-05-29 09:34:14 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAZ3572.html [2010-05-28 18:49:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempuz1312.html [2010-05-28 14:52:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDn1524.html [2010-05-28 14:52:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcf1524.html [2010-05-28 11:54:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempET1040.html [2010-05-28 11:54:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempuu1040.html [2010-05-28 09:42:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprq1236.html [2010-05-27 20:16:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGH2712.html [2010-05-27 19:39:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOE4160.html [2010-05-27 11:33:42 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplL1740.html [2010-05-26 15:09:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempio3068.html [2010-05-26 15:09:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIP3068.html [2010-05-26 07:23:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxJ3404.html [2010-05-26 07:23:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiY3404.html [2010-05-25 20:02:54 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempos2308.html [2010-05-25 20:02:54 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnR2308.html [2010-05-25 16:27:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempru2992.html [2010-05-25 10:52:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptO4500.html [2010-05-24 19:00:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempwW3732.html [2010-05-24 19:00:43 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLw3732.html [2010-05-24 11:18:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNQ1436.html [2010-05-24 11:18:56 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempkp1436.html [2010-05-23 17:59:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempui1756.html [2010-05-23 17:59:43 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQy1756.html [2010-05-23 12:54:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEx1384.html [2010-05-23 12:54:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSd1384.html [2010-05-23 08:04:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFc4820.html [2010-05-23 08:04:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSV4820.html [2010-05-22 21:49:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKs4912.html [2010-05-22 21:49:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGj4912.html [2010-05-22 19:11:21 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoP4004.html [2010-05-22 19:11:21 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKY4004.html [2010-05-22 16:13:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempko4236.html [2010-05-22 16:13:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGF4236.html [2010-05-22 10:59:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPP3484.html [2010-05-22 10:59:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiF3484.html [2010-05-21 21:09:43 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSh1420.html [2010-05-21 19:58:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWO4520.html [2010-05-21 19:58:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLm4520.html [2010-05-21 17:11:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWx3872.html [2010-05-21 12:50:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFS5024.html [2010-05-21 12:50:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprc5024.html [2010-05-20 19:42:59 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZE4384.html [2010-05-20 19:42:59 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAV4384.html [2010-05-20 16:24:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfx3648.html [2010-05-20 16:24:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempeL3648.html [2010-05-20 13:05:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGP3448.html [2010-05-20 13:05:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkA3448.html [2010-05-19 19:16:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZI4568.html [2010-05-19 19:16:28 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbb4568.html [2010-05-19 06:34:54 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVQ1916.html [2010-05-18 17:32:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRb1452.html [2010-05-18 17:32:34 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvs1452.html [2010-05-18 11:27:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvp1828.html [2010-05-18 11:27:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYc1828.html [2010-05-17 18:47:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempmO4000.html [2010-05-17 18:47:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkB4000.html [2010-05-17 08:18:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKs3804.html [2010-05-16 19:58:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphu3332.html [2010-05-16 19:58:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKZ3332.html [2010-05-16 16:12:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBz4296.html [2010-05-16 16:12:03 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempuf4296.html [2010-05-15 22:08:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temped3944.html [2010-05-15 17:24:52 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempdb3568.html [2010-05-15 17:24:52 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBf3568.html [2010-05-13 17:10:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDc4392.html [2010-05-13 17:10:34 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempqy4392.html [2010-05-12 19:37:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqL3772.html [2010-05-12 19:37:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiS3772.html [2010-05-11 18:25:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjX3632.html [2010-05-11 18:25:20 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuS3632.html [2010-05-11 09:24:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVH3728.html [2010-05-11 09:24:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqF3728.html [2010-05-10 18:52:09 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxh4340.html [2010-05-10 18:52:09 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBm4340.html [2010-05-10 06:44:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxg4568.html [2010-05-09 21:16:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcfA852.html [2010-05-09 19:36:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOe3384.html [2010-05-09 15:41:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQV2796.html [2010-05-09 15:41:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXm2796.html [2010-05-09 11:59:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcU4200.html [2010-05-09 11:59:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjt4200.html [2010-05-09 09:35:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUZ1676.html [2010-05-09 09:35:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFp1676.html [2010-05-08 15:57:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppN3604.html [2010-05-08 15:57:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCB3604.html [2010-05-08 13:30:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIo4204.html [2010-05-08 13:30:17 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAl4204.html [2010-05-07 19:10:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptH3940.html [2010-05-07 19:10:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempyl3940.html [2010-05-07 14:10:26 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTr3960.html [2010-05-07 14:10:26 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaA3960.html [2010-05-07 09:37:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjR4420.html [2010-05-07 09:37:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYt4420.html [2010-05-06 21:25:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxl2088.html [2010-05-06 21:25:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempse2088.html [2010-05-06 06:54:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnm4360.html [2010-05-06 06:54:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYT4360.html [2010-05-05 19:54:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzv4900.html [2010-05-05 19:54:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemprN4900.html [2010-05-05 16:03:21 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppI4868.html [2010-05-05 16:03:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVE4868.html [2010-05-05 07:51:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptI3588.html [2010-05-04 19:56:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSz4532.html [2010-05-04 19:56:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLo4532.html [2010-05-04 11:55:29 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphv4696.html [2010-05-04 11:55:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQM4696.html [2010-05-04 07:51:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPs2576.html [2010-05-04 07:51:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAQ2576.html [2010-05-03 18:02:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTd2776.html [2010-05-03 18:02:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjj2776.html [2010-05-03 16:08:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDC1728.html [2010-05-03 10:57:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxh4852.html [2010-05-03 10:57:00 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOb4852.html [2010-05-02 20:09:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempwj3420.html [2010-04-28 18:27:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempmC4916.html [2010-04-28 18:27:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptl4916.html [2010-04-27 18:31:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphe2868.html [2010-04-27 18:31:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuU2868.html [2010-04-27 17:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcb1664.html [2010-04-27 12:11:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMC1932.html [2010-04-27 12:11:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempdM1932.html [2010-04-27 09:17:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemphW4912.html [2010-04-26 20:41:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJn2844.html [2010-04-26 20:41:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnJ2844.html [2010-04-25 20:15:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAz3784.html [2010-04-25 20:15:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppo3784.html [2010-04-25 14:10:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPJ4372.html [2010-04-25 14:10:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDc4372.html [2010-04-24 20:32:21 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprd4232.html [2010-04-24 20:32:21 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSN4232.html [2010-04-24 07:53:41 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTJ4204.html [2010-04-24 07:53:41 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempys4204.html [2010-04-23 18:58:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempXw4548.html [2010-04-23 18:58:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempwG4548.html [2010-04-23 08:24:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqO4352.html [2010-04-22 18:12:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOv4976.html [2010-04-22 18:12:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempco4976.html [2010-04-22 06:41:42 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjH4308.html [2010-04-22 06:41:42 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempaa4308.html [2010-04-21 19:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCD4196.html [2010-04-21 19:32:58 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppc4196.html [2010-04-21 09:26:00 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI [2010-04-21 06:33:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempus4208.html [2010-04-21 06:33:38 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsW4208.html [2010-04-20 19:22:42 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAI4088.html [2010-04-20 18:41:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptx5040.html [2010-04-20 18:41:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempkv5040.html [2010-04-20 16:12:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOx2784.html [2010-04-20 16:12:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbm2784.html [2010-04-20 12:35:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUJ4220.html [2010-04-20 12:35:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJU4220.html [2010-04-20 06:46:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcV2860.html [2010-04-20 06:46:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSe2860.html [2010-04-19 21:09:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLK5340.html [2010-04-19 21:09:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzW5340.html [2010-04-19 08:29:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDF3904.html [2010-04-19 08:29:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnf3904.html [2010-04-18 20:18:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsL3124.html [2010-04-18 15:14:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNR1284.html [2010-04-18 15:14:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvB1284.html [2010-04-18 12:35:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnf4840.html [2010-04-17 16:58:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempzm4048.html [2010-04-17 16:58:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjF4048.html [2010-04-17 11:28:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempyq4380.html [2010-04-17 09:28:59 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZZ4808.html [2010-04-17 09:28:59 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqG4808.html [2010-04-16 20:23:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAz4340.html [2010-04-16 20:23:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKK4340.html [2010-04-16 19:05:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIG6652.html [2010-04-16 19:05:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaF6652.html [2010-04-16 17:10:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOe3536.html [2010-04-16 11:00:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAi4412.html [2010-04-15 18:45:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZQ4388.html [2010-04-15 18:45:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFN4388.html [2010-04-15 07:05:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPA4504.html [2010-04-15 07:05:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempkP4504.html [2010-04-14 18:55:46 | 000,000,071 | ---- | C] () -- C:\Windows\iltwain.ini [2010-04-14 17:17:10 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnm3144.html [2010-04-14 17:17:10 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcZ3144.html [2010-04-14 09:45:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGa1188.html [2010-04-14 06:33:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptv4348.html [2010-04-13 19:36:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWu2648.html [2010-04-13 17:33:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOCN760.html [2010-04-13 12:19:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvM1292.html [2010-04-13 11:23:49 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempaf4652.html [2010-04-12 21:50:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuC6100.html [2010-04-12 21:50:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphk6100.html [2010-04-12 19:42:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptVq464.html [2010-04-12 05:51:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptt1988.html [2010-04-12 05:51:35 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFw1988.html [2010-04-11 16:47:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNB3648.html [2010-04-11 16:47:20 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJj3648.html [2010-04-11 10:20:58 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcw4044.html [2010-04-10 17:44:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOw3760.html [2010-04-10 17:44:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbC3760.html [2010-04-10 16:14:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptw2012.html [2010-04-10 11:04:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFO3708.html [2010-04-10 11:04:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnv3708.html [2010-04-10 08:34:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVK4040.html [2010-04-09 18:47:04 | 000,000,000 | ---- | C] () -- C:\Windows\NSREX.INI [2010-04-09 16:37:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBmW668.html [2010-04-09 16:37:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempudx668.html [2010-04-09 12:02:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempfA6228.html [2010-04-09 12:02:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempni6228.html [2010-04-09 11:19:36 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMi4796.html [2010-04-09 09:28:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoP3016.html [2010-04-08 20:36:13 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWb3612.html [2010-04-08 20:36:13 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIi3612.html [2010-04-08 17:02:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNC4768.html [2010-04-08 17:02:50 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempal4768.html [2010-04-08 10:56:56 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppP3088.html [2010-04-08 10:56:56 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxU3088.html [2010-04-07 19:57:06 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplQ3088.html [2010-04-07 19:57:06 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppK3088.html [2010-04-07 17:26:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSW2300.html [2010-04-07 17:22:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnn2052.html [2010-04-07 12:08:01 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempmB4800.html [2010-04-07 12:08:01 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempps4800.html [2010-04-07 08:17:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUX3276.html [2010-04-07 08:17:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRf3276.html [2010-04-06 20:33:20 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzN4400.html [2010-04-06 20:33:20 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVg4400.html [2010-04-06 16:07:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temppx4744.html [2010-04-06 16:07:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVT4744.html [2010-04-06 11:53:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZE1776.html [2010-04-06 11:53:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJN1776.html [2010-04-06 08:17:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppF2332.html [2010-04-06 08:17:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOR2332.html [2010-04-05 19:29:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjj3456.html [2010-04-05 19:29:38 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHa3456.html [2010-04-05 15:50:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempni3304.html [2010-04-05 15:50:04 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcW3304.html [2010-04-05 10:13:45 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempik3460.html [2010-04-05 10:13:45 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempei3460.html [2010-04-04 16:44:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGg4824.html [2010-04-04 11:47:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqL1608.html [2010-04-04 11:47:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjg1608.html [2010-04-03 16:11:38 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPJ3720.html [2010-04-03 16:11:38 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZb3720.html [2010-04-03 13:08:26 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptm8400.html [2010-04-03 13:08:26 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIG8400.html [2010-04-03 11:22:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEh3024.html [2010-04-02 18:48:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmf6084.html [2010-04-02 18:48:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempOn6084.html [2010-04-02 17:10:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmh3824.html [2010-04-02 10:12:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqI3412.html [2010-04-02 10:12:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGu3412.html [2010-04-02 07:09:30 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHv3708.html [2010-04-02 07:09:30 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPU3708.html [2010-04-01 16:27:17 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZi3628.html [2010-04-01 16:27:17 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMm3628.html [2010-04-01 09:48:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDY3780.html [2010-04-01 09:48:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKS3780.html [2010-03-31 19:05:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWe5432.html [2010-03-31 18:58:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempfr4720.html [2010-03-31 18:58:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFE4720.html [2010-03-31 17:59:57 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbj4192.html [2010-03-31 17:59:57 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMd4192.html [2010-03-31 13:41:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempcG1924.html [2010-03-31 13:41:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuT1924.html [2010-03-30 17:22:06 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempuC3848.html [2010-03-30 17:22:06 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBQ3848.html [2010-03-30 12:47:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsFg856.html [2010-03-30 12:47:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempfyY856.html [2010-03-30 08:57:02 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxS3752.html [2010-03-30 08:57:02 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempyB3752.html [2010-03-29 18:27:48 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvE4848.html [2010-03-29 18:27:48 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgM4848.html [2010-03-28 19:59:27 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempqj3668.html [2010-03-28 19:59:27 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRx3668.html [2010-03-28 12:13:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temptg1780.html [2010-03-28 12:13:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNf1780.html [2010-03-27 21:50:04 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTV2572.html [2010-03-27 21:50:04 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDm2572.html [2010-03-27 17:39:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempKf3196.html [2010-03-27 17:39:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempdt3196.html [2010-03-26 20:24:03 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxiX620.html [2010-03-26 20:24:03 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmrz620.html [2010-03-26 18:20:46 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIK3180.html [2010-03-26 18:20:46 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLI3180.html [2010-03-26 14:34:31 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoLb504.html [2010-03-26 14:34:31 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppUe504.html [2010-03-26 10:26:14 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppW1836.html [2010-03-26 10:26:14 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempvd1836.html [2010-03-25 18:17:25 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHi6912.html [2010-03-25 18:17:25 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempwA6912.html [2010-03-25 17:25:53 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWU4644.html [2010-03-25 17:25:53 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMz4644.html [2010-03-24 19:29:08 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPE2920.html [2010-03-24 19:29:08 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempFV2920.html [2010-03-24 12:13:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempUt3620.html [2010-03-24 12:13:11 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoR3620.html [2010-03-24 06:49:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIE4112.html [2010-03-24 06:49:19 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temprl4112.html [2010-03-23 18:13:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Temphc3728.html [2010-03-23 18:13:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYM3728.html [2010-03-23 10:49:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCx2788.html [2010-03-23 10:49:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEt2788.html [2010-03-22 20:12:47 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmo2576.html [2010-03-22 20:12:47 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempjS2576.html [2010-03-22 07:05:24 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTf1640.html [2010-03-22 07:05:24 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgD1640.html [2010-03-21 12:08:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBB2684.html [2010-03-21 12:08:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempzC2684.html [2010-03-20 20:01:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempAG4208.html [2010-03-20 20:01:19 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempxe4208.html [2010-03-20 16:06:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempid3844.html [2010-03-20 16:06:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempbw3844.html [2010-03-20 13:54:11 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmn1904.html [2010-03-20 13:54:11 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemppD1904.html [2010-03-19 19:37:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEm4500.html [2010-03-19 19:37:34 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQH4500.html [2010-03-19 18:17:07 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJX3532.html [2010-03-19 18:17:07 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempce3532.html [2010-03-19 15:44:05 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgJ3680.html [2010-03-19 15:44:05 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjm3680.html [2010-03-19 11:56:14 | 000,005,632 | ---- | C] () -- C:\Windows\SysWow64\drivers\StarOpen.sys [2010-03-19 10:03:19 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPB3016.html [2010-03-19 10:03:19 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempCt3016.html [2010-03-18 19:37:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempph4072.html [2010-03-18 19:37:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaU4072.html [2010-03-18 18:11:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempyi1176.html [2010-03-18 18:11:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempoC1176.html [2010-03-18 12:05:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWD3680.html [2010-03-18 12:05:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempDQ3680.html [2010-03-17 20:16:51 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempHH4808.html [2010-03-17 20:16:51 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempRY4808.html [2010-03-17 18:37:14 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnoj908.html [2010-03-17 18:37:14 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJpN908.html [2010-03-16 18:07:36 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvX4064.html [2010-03-16 18:07:35 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempES4064.html [2010-03-16 14:11:12 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZM3664.html [2010-03-16 14:11:12 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempum3664.html [2010-03-16 11:01:50 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempip4656.html [2010-03-16 11:01:50 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYV4656.html [2010-03-15 06:48:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempZYA704.html [2010-03-15 06:48:00 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWNg704.html [2010-03-14 16:10:33 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempTu4928.html [2010-03-14 16:10:33 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempPp4928.html [2010-03-14 10:48:22 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempvR4636.html [2010-03-14 10:48:22 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempsh4636.html [2010-03-13 20:43:28 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVh4856.html [2010-03-13 20:43:28 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempYV4856.html [2010-03-13 14:55:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempxV4332.html [2010-03-13 14:55:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempWP4332.html [2010-03-13 12:22:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempGh4644.html [2010-03-13 12:22:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempbJ4644.html [2010-03-12 20:40:55 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempJb4520.html [2010-03-12 20:40:55 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempnB4520.html [2010-03-12 19:48:44 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempgu4936.html [2010-03-12 19:48:44 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempsV4936.html [2010-03-12 14:44:18 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempNyx568.html [2010-03-12 14:44:18 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjpm568.html [2010-03-12 11:57:37 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempIM5060.html [2010-03-12 11:57:37 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempqT5060.html [2010-03-11 20:32:00 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempQI4976.html [2010-03-11 20:32:00 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempMI4976.html [2010-03-10 20:06:16 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgX5096.html [2010-03-10 20:06:16 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemptX5096.html [2010-03-10 18:40:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempnm4684.html [2010-03-10 18:40:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempiP4684.html [2010-03-09 16:04:41 | 000,000,083 | ---- | C] () -- C:\Windows\wwp_game.INI [2010-03-09 09:59:52 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempaR4880.html [2010-03-09 09:59:52 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempaj4880.html [2010-03-08 19:57:34 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TemplO4924.html [2010-03-08 19:57:34 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempgL4924.html [2010-03-08 07:03:32 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVT3196.html [2010-03-08 07:03:32 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempVA3196.html [2010-03-07 17:00:39 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLv3600.html [2010-03-07 17:00:39 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempcw3600.html [2010-03-07 13:36:23 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempEA4904.html [2010-03-07 13:36:23 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempBS4904.html [2010-03-06 19:33:40 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempSY5116.html [2010-03-06 19:33:40 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempmn5116.html [2010-03-06 15:27:29 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLd5112.html [2010-03-06 15:27:29 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempyF5112.html [2010-03-06 13:59:15 | 000,002,432 | ---- | C] () -- C:\Users\Darek\AppData\Local\Tempjj4444.html [2010-03-06 13:59:15 | 000,002,089 | ---- | C] () -- C:\Users\Darek\AppData\Local\TempLS4444.html [2010-03-06 12:47:54 | 000,000,418 | ---- | C] () -- C:\Windows\ODBC.INI [2010-03-06 12:47:54 | 000,000,063 | ---- | C] () -- C:\Windows\mdm.ini [2010-03-05 12:42:02 | 001,556,556 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010-02-28 12:40:03 | 000,000,095 | ---- | C] () -- C:\Windows\winamp.ini [2010-01-14 18:35:00 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini [2009-11-26 17:41:12 | 000,000,315 | ---- | C] () -- C:\Windows\game.ini [2009-11-07 14:28:59 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2009-10-20 02:23:46 | 000,178,960 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2009-10-16 18:22:21 | 000,003,972 | ---- | C] () -- C:\Windows\SysWow64\drivers\PciBus.sys [2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-04-19 17:35:04 | 000,126,976 | ---- | C] () -- C:\Windows\gdf.dll [2005-02-25 07:15:00 | 000,159,744 | ---- | C] () -- C:\Windows\SysWow64\EPSPTDV.DLL [color=#E56717]========== LOP Check ==========[/color] [2010-01-14 19:38:45 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Ashampoo [2010-01-18 20:51:53 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Autodesk [2010-03-17 20:27:51 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Canneverbe Limited [2009-10-20 19:32:46 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\DAEMON Tools Lite [2009-12-11 18:10:05 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Dev-Cpp [2010-01-14 18:40:17 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\EPSON [2010-08-31 14:00:56 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\foobar2000 [2009-10-17 14:31:48 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Gadu-Gadu [2009-11-22 12:15:48 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Gadu-Gadu 10 [2010-06-13 19:14:42 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\GetRightToGo [2010-05-30 17:55:02 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\gtk-2.0 [2010-08-31 21:27:02 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\HEM Data [2009-11-22 22:54:37 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\IObit [2010-01-24 11:10:00 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\ipla [2010-03-14 12:11:04 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\IrfanView [2010-06-29 06:46:29 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Nokia [2010-03-05 13:16:18 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\NVD [2009-10-17 17:05:23 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\OpenOffice.org [2009-10-16 17:49:49 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Opera [2009-10-16 17:43:08 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\PCToolsFirewallPlus [2010-05-30 16:29:50 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Qrix [2010-07-13 10:59:47 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Samsung [2010-04-09 18:49:28 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\SoftGrid Client [2009-11-03 19:07:10 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Sports Interactive [2010-06-14 14:52:34 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\StreamTorrent [2009-10-19 10:07:24 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\Thunderbird [2010-04-09 17:08:10 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\TP [2010-01-23 11:05:17 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\UDC Profiles [2010-08-04 21:33:05 | 000,000,000 | ---D | M] -- C:\Users\Darek\AppData\Roaming\uTorrent [2010-07-18 13:19:04 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [2010-06-13 22:17:59 | 000,000,408 | ---- | M] () -- C:\Windows\Tasks\SmartDefrag.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%\*.* >[/color] [2010-06-07 17:07:20 | 000,001,024 | ---- | M] () -- C:\.rnd [2010-01-09 12:24:42 | 000,467,082 | ---- | M] () -- C:\acadminidump.dmp [2010-08-21 12:53:05 | 000,040,092 | ---- | M] () -- C:\AutoMapaSetupLog.txt [2010-08-27 16:29:35 | 000,009,672 | ---- | M] () -- C:\bootsqm.dat [2010-07-13 10:54:51 | 000,000,074 | ---- | M] () -- C:\CMLoader.log [2009-10-16 18:11:47 | 000,011,728 | ---- | M] () -- C:\deviceInfo.txt [2010-08-31 22:08:47 | 3220,561,920 | -HS- | M] () -- C:\hiberfil.sys [2010-08-31 22:08:49 | 4294,082,560 | -HS- | M] () -- C:\pagefile.sys [2010-03-16 19:14:39 | 000,000,029 | ---- | M] () -- C:\Windows.txt [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys [2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys [2003-10-29 20:58:30 | 000,021,008 | ---- | M] (Microsoft Corporation) MD5=CDDB71A90077C93BEA5C72507F0B1394 -- C:\Program Files (x86)\Driver Cleaner\nvfix\AGP440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys [2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2009-07-14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysWow64\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys [2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2009-07-14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2009-07-14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe [2009-10-28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe [2009-10-28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:C31F31E6 < End of report > [/log] Log z RSIT: [log] Logfile of random's system information tool 1.08 (written by random/random) Run by Darek at 2010-08-31 22:36:05 Microsoft Windows 7 Professional System drive C: has 10 GB (19%) free of 51 GB Total RAM: 4095 MB (62% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 22:36:14, on 2010-08-31 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16385) Boot mode: Normal Running processes: C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe C:\MSI\Advanced Wheel Mouse\wh_exec.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Opera\opera.exe C:\Users\Darek\Desktop\OTL_3.2.10(dobreprogramy.pl).exe C:\Users\Darek\Desktop\RSIT.exe C:\Program Files (x86)\trend micro\Darek.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe" -s O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [MGSysCtrl] C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe O4 - HKLM\..\Run: [WheelMouse] C:\MSI\ADVANC~1\wh_exec.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-21-1264084378-3322303571-3196748977-1012\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'postgres') O4 - HKUS\S-1-5-21-1264084378-3322303571-3196748977-1012\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'postgres') O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe O10 - Unknown file in Winsock LSP: c:\program files (x86)\vmware\vmware player\vsocklib.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\vmware\vmware player\vsocklib.dll O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service 64 - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Micro Star SCM - Micro-Star International Co., Ltd. - C:\Program Files (x86)\System Control Manager\MSIService.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NMSAccess - Unknown owner - C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - Unknown owner - C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe O23 - Service: postgresql-8.4 - PostgreSQL Server 8.4 (postgresql-8.4) - PostgreSQL Global Development Group - C:/Program Files (x86)/PostgreSQL/8.4/bin/pg_ctl.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 9591 bytes ======Scheduled tasks folder====== C:\Windows\tasks\SmartDefrag.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-08-25 41760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}] IEPluginBHO Class - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll [2010-03-12 42080] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "00PCTFW"=C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe [2010-01-19 3168216] "avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153] "MGSysCtrl"=C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe [2009-09-11 2080768] "WheelMouse"=C:\MSI\ADVANC~1\wh_exec.exe [2007-09-13 90112] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=0 "ConsentPromptBehaviorUser"=3 "EnableLUA"=0 "EnableUIADesktopToggle"=0 "PromptOnSecureDesktop"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 "NoDriveTypeAutoRun"=255 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 months====== 2010-08-31 22:36:05 ----D---- C:\rsit 2010-08-31 21:05:44 ----D---- C:\ProgramData\Panda Security 2010-08-31 21:05:40 ----D---- C:\Program Files (x86)\Panda USB Vaccine 2010-08-31 20:54:19 ----A---- C:\Windows\SysWOW64\shell32.dll 2010-08-30 21:51:56 ----D---- C:\Users\Darek\AppData\Roaming\Malwarebytes 2010-08-30 21:51:47 ----A---- C:\Windows\SysWOW64\drivers\mbamswissarmy.sys 2010-08-30 21:51:46 ----D---- C:\ProgramData\Malwarebytes 2010-08-30 21:51:45 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware 2010-08-30 21:32:42 ----D---- C:\_OTL 2010-08-30 21:13:02 ----D---- C:\Program Files (x86)\Trend Micro 2010-08-30 21:12:42 ----D---- C:\Program Files (x86)\ESET 2010-08-30 21:06:36 ----D---- C:\ProgramData\Kaspersky Lab 2010-08-30 21:06:35 ----D---- C:\Windows\SysWOW64\Kaspersky Lab 2010-08-30 16:34:21 ----D---- C:\NVIDIA 2010-08-30 16:33:26 ----D---- C:\Program Files (x86)\NVIDIA Corporation 2010-08-30 16:31:03 ----A---- C:\Windows\SysWOW64\OpenCL.dll 2010-08-30 16:31:03 ----A---- C:\Windows\SysWOW64\nvwgf2um.dll 2010-08-30 16:31:03 ----A---- C:\Windows\SysWOW64\nvoglv32.dll 2010-08-30 16:31:03 ----A---- C:\Windows\SysWOW64\nvdecodemft.dll 2010-08-30 16:31:01 ----A---- C:\Windows\SysWOW64\nvd3dum.dll 2010-08-30 16:31:01 ----A---- C:\Windows\SysWOW64\nvcuvid.dll 2010-08-30 16:31:01 ----A---- C:\Windows\SysWOW64\nvcuvenc.dll 2010-08-30 16:31:01 ----A---- C:\Windows\SysWOW64\nvcuda.dll 2010-08-30 16:31:00 ----A---- C:\Windows\SysWOW64\nvcompiler.dll 2010-08-30 16:31:00 ----A---- C:\Windows\SysWOW64\nvapi.dll 2010-08-30 16:09:29 ----A---- C:\Windows\ntbtlog.txt 2010-08-30 16:08:13 ----D---- C:\Program Files (x86)\Driver Cleaner 2010-08-30 11:40:32 ----D---- C:\ProgramData\NVIDIA Corporation 2010-08-27 09:19:12 ----A---- C:\Windows\HMHud.INI 2010-08-27 09:14:30 ----D---- C:\HMArchive 2010-08-27 09:14:05 ----D---- C:\Users\Darek\AppData\Roaming\HEM Data 2010-08-27 09:10:48 ----D---- C:\Program Files (x86)\RVG Software 2010-08-27 09:10:08 ----D---- C:\Program Files (x86)\PSQLINSTALL 2010-08-25 13:03:21 ----D---- C:\Program Files (x86)\Common Files\Acronis 2010-08-25 13:03:20 ----D---- C:\Program Files (x86)\Acronis 2010-08-25 10:14:40 ----D---- C:\Program Files (x86)\Common Files\Java 2010-08-25 10:14:11 ----D---- C:\Program Files (x86)\Java 2010-08-17 17:39:43 ----D---- C:\Program Files (x86)\PokerStars ======List of files/folders modified in the last 1 months====== 2010-08-31 22:36:13 ----D---- C:\Windows\Temp 2010-08-31 22:34:45 ----RD---- C:\Program Files (x86) 2010-08-31 22:10:29 ----AD---- C:\ProgramData\TEMP 2010-08-31 22:09:37 ----D---- C:\Windows\winsxs 2010-08-31 22:09:17 ----D---- C:\ProgramData\VMware 2010-08-31 22:09:11 ----D---- C:\ProgramData\NVIDIA 2010-08-31 22:07:53 ----SHD---- C:\Windows\SysWOW64 2010-08-31 22:07:53 ----SHD---- C:\Windows\System32 2010-08-31 22:07:17 ----SHD---- C:\Windows 2010-08-31 22:06:43 ----HD---- C:\ProgramData 2010-08-31 22:04:22 ----D---- C:\Program Files (x86)\Full Tilt Poker 2010-08-31 20:54:12 ----SHD---- C:\System Volume Information 2010-08-31 20:36:10 ----D---- C:\Windows\inf 2010-08-31 14:00:56 ----D---- C:\Users\Darek\AppData\Roaming\foobar2000 2010-08-31 08:08:57 ----D---- C:\Program Files (x86)\Common Files\PC Tools 2010-08-30 22:41:55 ----D---- C:\Program Files (x86)\PC Tools Firewall Plus 2010-08-30 21:51:48 ----SHD---- C:\Windows\SysWOW64\drivers 2010-08-30 21:41:41 ----SHD---- C:\Windows\Installer 2010-08-30 21:22:29 ----D---- C:\Windows\Downloaded Program Files 2010-08-30 16:33:42 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2010-08-30 16:33:06 ----D---- C:\Windows\Help 2010-08-27 10:54:01 ----RD---- C:\Users 2010-08-27 10:53:06 ----D---- C:\Program Files (x86)\PostgreSQL 2010-08-26 21:02:14 ----D---- C:\Program Files (x86)\PokerTracker 3 2010-08-25 13:04:18 ----D---- C:\Windows\Prefetch 2010-08-25 13:03:21 ----D---- C:\Program Files (x86)\Common Files 2010-08-21 21:30:34 ----D---- C:\Program Files (x86)\DOSBox-0.73 2010-08-21 12:53:05 ----A---- C:\AutoMapaSetupLog.txt 2010-08-14 21:51:29 ----D---- C:\Program Files (x86)\Opera 2010-08-04 21:39:44 ----RSD---- C:\Windows\assembly 2010-08-04 21:39:44 ----D---- C:\ProgramData\Microsoft Help 2010-08-04 21:39:28 ----D---- C:\Program Files (x86)\Common Files\microsoft shared 2010-08-04 21:39:24 ----D---- C:\Windows\ShellNew 2010-08-04 21:39:13 ----RSD---- C:\Windows\Fonts 2010-08-04 21:37:43 ----RD---- C:\Program Files 2010-08-04 21:34:54 ----D---- C:\Program Files (x86)\Ganymede 2010-08-04 21:33:16 ----D---- C:\Program Files (x86)\Ashampoo 2010-08-04 21:33:05 ----D---- C:\Users\Darek\AppData\Roaming\uTorrent ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [] R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [] R1 pctgntdi;pctgntdi; \??\C:\Windows\system32\drivers\pctgntdi64.sys [] R1 Tosrfcom;Bluetooth RFCOMM; C:\Windows\System32\Drivers\tosrfcom.sys [] R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [] R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [] R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [] R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [] R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [] R2 hcmon;VMware hcmon; \??\C:\Windows\system32\drivers\hcmon.sys [] R2 vmci;VMware vmci; \??\C:\Windows\system32\drivers\vmci.sys [] R2 VMnetBridge;VMware Bridge Protocol; C:\Windows\system32\DRIVERS\vmnetbridge.sys [] R2 VMnetuserif;VMware Network Application Interface; \??\C:\Windows\system32\drivers\vmnetuserif.sys [] R2 vmx86;VMware vmx86; \??\C:\Windows\system32\drivers\vmx86.sys [] R2 vstor2-ws60;Vstor2 WS60 Virtual Storage Driver; \??\C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys [2009-10-12 32816] R2 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Users\Darek\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries21.gadget\WinRing0x64.sys [2009-10-26 14544] R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [] R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [] R3 netw5v64;Sterownik karty Intel(R) Wireless WiFi Link 5000 Series dla systemu Windows Vista w wersji 64-bitowej; C:\Windows\system32\DRIVERS\netw5v64.sys [] R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [] R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver; \??\C:\Windows\system32\drivers\pctNdis-PacketFilter64.sys [] R3 pctNDIS;PC Tools Driver; C:\Windows\system32\DRIVERS\pctNdis64.sys [] R3 pctplfw;pctplfw; \??\C:\Windows\System32\drivers\pctplfw64.sys [] R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [] R3 smserial;smserial; C:\Windows\system32\DRIVERS\SmSerl64.sys [] R3 tosporte;Bluetooth COM Port; C:\Windows\system32\DRIVERS\tosporte.sys [] R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [] R3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [] R3 vmkbd;VMware kbd; \??\C:\Windows\system32\drivers\VMkbd.sys [] R3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys [] R3 vpcbus;Usługa magistrali hosta programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [] R3 vpcusb;Usługa łącznika wirtualizacji USB; C:\Windows\system32\DRIVERS\vpcusb.sys [] R3 whfltr2k;WheelMouse USB Lower Filter Driver; C:\Windows\system32\DRIVERS\whfltr2k.sys [] S1 StarOpen;StarOpen; C:\Windows\SysWOW64\drivers\StarOpen.sys [2006-07-24 5632] S3 BthEnum;Usługa wyliczania Bluetooth; C:\Windows\system32\DRIVERS\BthEnum.sys [] S3 BthPan;Urządzenie Bluetooth (sieć osobista); C:\Windows\system32\DRIVERS\bthpan.sys [] S3 BTHPORT;Sterownik portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [] S3 BTHUSB;Sterownik USB odbiornika radiowego Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [] S3 ENTECH64;ENTECH64; \??\C:\Windows\system32\DRIVERS\ENTECH64.sys [2004-06-22 5632] S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [] S3 PCTFW-DNS;PCTools Firewall - DNS driver; \??\C:\Windows\system32\drivers\pctNdis-DNS64.sys [] S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [] S3 RFCOMM;Urządzenie Bluetooth (Protokół TDI RFCOMM); C:\Windows\system32\DRIVERS\rfcomm.sys [] S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [] S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [] S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [] S3 tosrfbd;Bluetooth RFBUS; C:\Windows\system32\DRIVERS\tosrfbd.sys [] S3 tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys [] S3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys [] S3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys [] S3 TosRfSnd;Bluetooth Audio; C:\Windows\system32\drivers\tosrfsnd.sys [] S3 Tosrfusb;Bluetooth USB Controller; C:\Windows\system32\DRIVERS\tosrfusb.sys [] S3 TVICHW64;TVICHW64; \??\C:\Windows\SysWOW64\Drivers\TVICHW64.SYS [2009-10-17 21200] S3 usbscan;Sterownik skanera USB; C:\Windows\system32\DRIVERS\usbscan.sys [] S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [] S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [] S3 vmusb;VMware USB Client Driver; C:\Windows\System32\Drivers\vmusb.sys [] S3 vpcuxd;Usługa procedury wejścia wirtualizacji USB; C:\Windows\system32\DRIVERS\vpcuxd.sys [] S3 WINUSB;Sterownik WinUsb; C:\Windows\system32\DRIVERS\WinUSB.SYS [] S3 zlportio;zlportio; \??\D:\gry\Ultrastar\us dx 1.0.1a PL\zlportio.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289] R2 AntiVirService;Avira AntiVir Guard; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089] R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992] R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-02-11 354840] R2 Micro Star SCM;Micro Star SCM; C:\Program Files (x86)\System Control Manager\MSIService.exe [2009-07-09 160768] R2 NMSAccess;NMSAccess; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [2010-03-04 71096] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [] R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe [2009-11-18 818432] R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2009-11-13 66872] R2 PnkBstrB;PnkBstrB; C:\Windows\system32\PnkBstrB.exe [2009-11-13 107832] R2 postgresql-8.4;postgresql-8.4 - PostgreSQL Server 8.4; C:/Program Files (x86)/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N postgresql-8.4 -D C:/Program Files (x86)/PostgreSQL/8.4/data -w [] R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 20992] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-08-06 248936] R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2009-03-17 189808] R2 VMAuthdService;VMware Authorization Service; C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe [2010-01-22 113200] R2 VMnetDHCP;VMware DHCP Service; C:\Windows\system32\vmnetdhcp.exe [2010-01-22 334384] R2 VMUSBArbService;VMware USB Arbitration Service; C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe [2010-01-22 563760] R2 VMware NAT Service;VMware NAT Service; C:\Windows\system32\vmnat.exe [2010-01-22 395824] R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 20992] S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992] S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2009-10-20 1030600] S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 ufad-ws60;VMware Agent Service; C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe [2009-10-12 191024] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [] -----------------EOF----------------- [/log]
Tomek01 komentarz 31 sierpnia 2010 komentarz 31 sierpnia 2010 Uciekło mi coś, (gwiazdka ). Do systemlook wklej: [code]Filefind: SearchSetings*[/code] Look...
dario116 komentarz 1 września 2010 Autor komentarz 1 września 2010 Zamieniłem na [b]:Filefind [/b], bo był taki sam log jak wcześniej. [log] SystemLook v1.0 by jpshortstuff (11.01.10) Log created at 07:47 on 01/09/2010 by Darek (Administrator - Elevation successful) ========== Filefind ========== Searching for "SearchSettings*" No files found. -=End Of File=- [/log]
Sohei komentarz 1 września 2010 komentarz 1 września 2010 [code] :regfind SearchSettings* [/code] Jeszcze to możesz do systemlook wrzucic:)
dario116 komentarz 1 września 2010 Autor komentarz 1 września 2010 [log] SystemLook v1.0 by jpshortstuff (11.01.10) Log created at 15:55 on 01/09/2010 by Darek (Administrator - Elevation successful) ========== regfind ========== Searching for "SearchSettings*" No data found. -=End Of File=- [/log]
Tomek01 komentarz 1 września 2010 komentarz 1 września 2010 Jeszcze poproszę log'a [url="http://users.telenet.be/marcvn/tools/reglooks.exe"]Reglooks[/url].
dario116 komentarz 1 września 2010 Autor komentarz 1 września 2010 Niestety Reglooks chyba nie działa na 64 bitowych systemach. Po uruchomieniu w oknie programu pokazuje się: [b]Unsupported operating system[/b], po czym kończy działanie.
Tomek01 komentarz 1 września 2010 komentarz 1 września 2010 W takim razie proszę: [url="http://www.instalki.pl/programy/download_c/116/2295.html"]Silent Runners[/url] Muszę zerknąć na rejestr
dario116 komentarz 1 września 2010 Autor komentarz 1 września 2010 [log] "Silent Runners.vbs", revision 61, http://www.silentrunners.org/ Operating System: Windows 7 Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++} "Sidebar" = "C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" [MS] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} "IAAnotif" = "C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" ["Intel Corporation"] "RtHDVCpl" = "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" ["Realtek Semiconductor"] "Skytel" = "C:\Program Files\Realtek\Audio\HDA\Skytel.exe" ["Realtek Semiconductor Corp."] "nwiz" = "C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet" ["NVIDIA Corporation"] "NvCplDaemon" = "RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup" [MS] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {DBC80044-A445-435b-BC74-9C25C1C588A9}\(Default) = (no title provided) -> {HKLM...CLSID} = "Java(tm) Plug-In 2 SSV Helper" \InProcServer32\(Default) = "C:\Program Files\Java\jre6\bin\jp2ssv.dll" ["Sun Microsystems, Inc."] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ "{45AC2688-0253-4ED8-97DE-B5370FA7D48A}" = "Shell Extension for Malware scanning" -> {HKLM...CLSID} = "Shell Extension for Malware scanning" \InProcServer32\(Default) = "C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll" ["Avira GmbH"] "{B41DB860-64E4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" ["Alexander Roshal"] "{68C471B2-1DC1-4d63-B2DF-682A910668FB}" = "VMC Property Handler" -> {HKLM...CLSID} = "VMC Property Handler" \InProcServer32\(Default) = "C:\Windows\System32\VMCPropertyHandler.dll" [MS] "{45C6AFA5-2C13-402f-BC5D-45CC8172EF6B}" = "Bluetooth" -> {HKCU...CLSID} = "Wymiana informacji - Bluetooth" \InProcServer32\(Default) = "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll" ["TOSHIBA"] -> {HKLM...CLSID} = "Wymiana informacji - Bluetooth" \InProcServer32\(Default) = "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll" ["TOSHIBA"] "{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer" -> {HKLM...CLSID} = "Desktop Explorer" \InProcServer32\(Default) = "C:\Program Files\NVIDIA Corporation\nView\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Program Files\NVIDIA Corporation\nView\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu" -> {HKLM...CLSID} = "nView Desktop Context Menu" \InProcServer32\(Default) = "C:\Program Files\NVIDIA Corporation\nView\nvshell.dll" ["NVIDIA Corporation"] "{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class" -> {HKLM...CLSID} = "DesktopContext Class" \InProcServer32\(Default) = "C:\Windows\system32\nvcpl.dll" ["NVIDIA Corporation"] "{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper" -> {HKLM...CLSID} = "NVIDIA CPL Extension" \InProcServer32\(Default) = "C:\Windows\system32\nvcpl.dll" ["NVIDIA Corporation"] "{3D1975AF-48C6-4f8e-A182-BE0E08FA86A9}" = "NVIDIA Play On My TV Context Menu Extension" -> {HKLM...CLSID} = "NVIDIA CPL Context Menu Extension" \InProcServer32\(Default) = "C:\Windows\system32\nvshext.dll" ["NVIDIA Corporation"] "{A929C4CE-FD36-4270-B4F5-34ECAC5BD63C}" = "NvAppShExt extension" -> {HKLM...CLSID} = "NvAppShExt Class" \InProcServer32\(Default) = "C:\Windows\system32\nv3dappshext.dll" ["NVIDIA Corporation"] "{E97DEC16-A50D-49bb-AE24-CF682282E08D}" = "OpenGLShExt extension" -> {HKLM...CLSID} = "OpenGLShExt Class" \InProcServer32\(Default) = "C:\Windows\system32\nv3dappshext.dll" ["NVIDIA Corporation"] HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\ Shell Extension for Malware scanning\(Default) = "{45AC2688-0253-4ED8-97DE-B5370FA7D48A}" -> {HKLM...CLSID} = "Shell Extension for Malware scanning" \InProcServer32\(Default) = "C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll" ["Avira GmbH"] tosBtShllExt\(Default) = "{6BEF3D0B-53F0-4b0d-B91C-C19ED3D4C9D1}" -> {HKLM...CLSID} = "Bluetooth File Extenstion" \InProcServer32\(Default) = "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtShell.dll" ["TOSHIBA"] WinRAR\(Default) = "{B41DB860-64E4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" ["Alexander Roshal"] HKLM\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\ MBAMShlExt\(Default) = "{57CE581A-0CB6-4266-9CA0-19364C90A0B3}" -> {HKLM...CLSID} = "MBAMShlExt Class" \InProcServer32\(Default) = "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll" ["Malwarebytes Corporation"] HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\ tosBtShllExt\(Default) = "{6BEF3D0B-53F0-4b0d-B91C-C19ED3D4C9D1}" -> {HKLM...CLSID} = "Bluetooth File Extenstion" \InProcServer32\(Default) = "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtShell.dll" ["TOSHIBA"] WinRAR\(Default) = "{B41DB860-64E4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" ["Alexander Roshal"] HKLM\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\ WinRAR\(Default) = "{B41DB860-64E4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" ["Alexander Roshal"] HKLM\SOFTWARE\Classes\Directory\Background\shellex\ContextMenuHandlers\ 00nView\(Default) = "{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" -> {HKLM...CLSID} = "nView Desktop Context Menu" \InProcServer32\(Default) = "C:\Program Files\NVIDIA Corporation\nView\nvshell.dll" ["NVIDIA Corporation"] NvCplDesktopContext\(Default) = "{3D1975AF-48C6-4f8e-A182-BE0E08FA86A9}" -> {HKLM...CLSID} = "NVIDIA CPL Context Menu Extension" \InProcServer32\(Default) = "C:\Windows\system32\nvshext.dll" ["NVIDIA Corporation"] HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\ MBAMShlExt\(Default) = "{57CE581A-0CB6-4266-9CA0-19364C90A0B3}" -> {HKLM...CLSID} = "MBAMShlExt Class" \InProcServer32\(Default) = "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll" ["Malwarebytes Corporation"] Shell Extension for Malware scanning\(Default) = "{45AC2688-0253-4ED8-97DE-B5370FA7D48A}" -> {HKLM...CLSID} = "Shell Extension for Malware scanning" \InProcServer32\(Default) = "C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll" ["Avira GmbH"] WinRAR\(Default) = "{B41DB860-64E4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" ["Alexander Roshal"] HKCU\Software\Classes\Folder\shellex\DragDropHandlers\ tosBtExt\(Default) = "{45C6AFA5-2C13-402f-BC5D-45CC8172EF6B}" -> {HKCU...CLSID} = "Wymiana informacji - Bluetooth" \InProcServer32\(Default) = "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll" ["TOSHIBA"] -> {HKLM...CLSID} = "Wymiana informacji - Bluetooth" \InProcServer32\(Default) = "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll" ["TOSHIBA"] HKLM\SOFTWARE\Classes\Folder\shellex\DragDropHandlers\ tosBtExt\(Default) = "{45C6AFA5-2C13-402f-BC5D-45CC8172EF6B}" -> {HKCU...CLSID} = "Wymiana informacji - Bluetooth" \InProcServer32\(Default) = "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll" ["TOSHIBA"] -> {HKLM...CLSID} = "Wymiana informacji - Bluetooth" \InProcServer32\(Default) = "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll" ["TOSHIBA"] WinRAR\(Default) = "{B41DB860-64E4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" ["Alexander Roshal"] Default executables: -------------------- HKLM\SOFTWARE\Classes\.hta\(Default) = "htafile" <<!>> HKLM\SOFTWARE\Classes\htafile\shell\open\command\(Default) = "C:\Windows\SysWOW64\mshta.exe "%1" %*" [MS] Group Policies {GPedit.msc branch and setting}: ----------------------------------------------- Note: detected settings may not have any effect. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ "NoActiveDesktop" = (REG_DWORD) dword:0x00000001 {unrecognized setting} "NoActiveDesktopChanges" = (REG_DWORD) dword:0x00000001 {unrecognized setting} "ForceActiveDesktopOn" = (REG_DWORD) dword:0x00000000 {unrecognized setting} HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ "ConsentPromptBehaviorAdmin" = (REG_DWORD) dword:0x00000000 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| User Account Control: Behavior Of The Elevation Prompt For Administrators In Admin Approval Mode} "EnableLUA" = (REG_DWORD) dword:0x00000000 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| User Account Control: Run All Administrators In Admin Approval Mode} "PromptOnSecureDesktop" = (REG_DWORD) dword:0x00000000 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| User Account Control: Switch to the secure desktop when prompting for elevation} Active Desktop and Wallpaper: ----------------------------- Active Desktop may be disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState Displayed if Active Desktop disabled and wallpaper not set by Group Policy: HKCU\Control Panel\Desktop\ "Wallpaper" = "C:\Users\Darek\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg" Windows Portable Device AutoPlay Handlers ----------------------------------------- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ CDBurnerXP\ "Provider" = "CDBurnerXP" "InvokeProgID" = "CDBurnerXPOpen" "InvokeVerb" = "open" HKLM\SOFTWARE\Classes\CDBurnerXPOpen\shell\open\command\(Default) = ""C:\Program Files (x86)\CDBurnerXP\cdbxpp.exe"" [null data] MSPlayCDAudioOnArrival\ "Provider" = "@wmploc.dll,-6502" "InvokeProgID" = "WMP.AudioCD" "InvokeVerb" = "play" HKLM\SOFTWARE\Classes\WMP.AudioCD\shell\play\command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:3 /device:AudioCD "%L"" [MS] MSPlayDVDMovieOnArrival\ "Provider" = "@wmploc.dll,-6502" "InvokeProgID" = "WMP.DVD" "InvokeVerb" = "play" HKLM\SOFTWARE\Classes\WMP.DVD\shell\play\command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:4 /device:DVD "%L"" [MS] MSPlaySuperVideoCDMovieOnArrival\ "Provider" = "@wmploc.dll,-6502" "InvokeProgID" = "WMP.VCD" "InvokeVerb" = "play" HKLM\SOFTWARE\Classes\WMP.VCD\shell\play\command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:4 /device:VCD "%L"" [MS] MSPlayVideoCDMovieOnArrival\ "Provider" = "@wmploc.dll,-6502" "InvokeProgID" = "WMP.VCD" "InvokeVerb" = "play" HKLM\SOFTWARE\Classes\WMP.VCD\shell\play\command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:4 /device:VCD "%L"" [MS] MSWMPBurnCDOnArrival\ "Provider" = "@wmploc.dll,-6502" "InvokeProgID" = "WMP.BurnCD" "InvokeVerb" = "Burn" HKLM\SOFTWARE\Classes\WMP.BurnCD\shell\Burn\Command\(Default) = ""C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:3 /Task:CDWrite /Device:"%L"" [MS] NeroAutoPlay9VideoCapture\ "Provider" = "Nero Vision" "ProgID" = "Shell.HWEventHandlerShellExecute" "InitCmdLine" = ""C:\Program Files (x86)\Nero\Nero 9\Nero Vision\NeroVision.exe" /New:VideoCapture" HKLM\SOFTWARE\Classes\Shell.HWEventHandlerShellExecute\CLSID\(Default) = "{FFB8655F-81B9-4fce-B89C-9A6BA76D13E7}" -> {HKLM...CLSID} = "Shell Execute Hardware Event Handler" \LocalServer32\(Default) = "C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {FFB8655F-81B9-4fce-B89C-9A6BA76D13E7}" [MS] RPCDBurningOnArrival\ "Provider" = "RealPlayer" "InvokeProgID" = "RealPlayer.CDBurn.6" "InvokeVerb" = "open" HKCU\Software\Classes\RealPlayer.CDBurn.6\shell\open\command\(Default) = ""C:\Program Files (x86)\Real\RealPlayer\RealPlay.exe" /burn "%1"" ["RealNetworks, Inc."] RPPlayCDAudioOnArrival\ "Provider" = "RealPlayer" "InvokeProgID" = "RealPlayer.AudioCD.6" "InvokeVerb" = "play" HKCU\Software\Classes\RealPlayer.AudioCD.6\shell\play\command\(Default) = ""C:\Program Files (x86)\Real\RealPlayer\RealPlay.exe" /play %1 " ["RealNetworks, Inc."] RPPlayDVDMovieOnArrival\ "Provider" = "RealPlayer" "InvokeProgID" = "RealPlayer.DVD.6" "InvokeVerb" = "play" HKCU\Software\Classes\RealPlayer.DVD.6\shell\play\command\(Default) = ""C:\Program Files (x86)\Real\RealPlayer\RealPlay.exe" /dvd %1 " ["RealNetworks, Inc."] RPPlayMediaOnArrival\ "Provider" = "RealPlayer" "InvokeProgID" = "RealPlayer.AutoPlay.6" "InvokeVerb" = "open" HKCU\Software\Classes\RealPlayer.AutoPlay.6\shell\open\command\(Default) = ""C:\Program Files (x86)\Real\RealPlayer\RealPlay.exe" /autoplay "%1"" ["RealNetworks, Inc."] WIA_{771EA88E-E4D5-40E1-979B-7147E0F454B0}\ "Provider" = "Microsoft Office Word" "CLSID" = "{A55803CC-4D53-404c-8557-FD63DBA95D24}" "InitCmdLine" = "/WiaCmd;C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE /IMG_WIA;" -> {HKLM...CLSID} = "WPDShextAutoplay" \LocalServer32\(Default) = "C:\Windows\system32\WPDShextAutoplay.exe" [MS] WIA_{A7D90654-5EA7-48D2-9702-2D51AA1E3C02}\ "Provider" = "Microsoft Office Word" "CLSID" = "{A55803CC-4D53-404c-8557-FD63DBA95D24}" "InitCmdLine" = "/WiaCmd;Q:\140062.enu\OFFICE14\WINWORD.EXE /IMG_WIA;" -> {HKLM...CLSID} = "WPDShextAutoplay" \LocalServer32\(Default) = "C:\Windows\system32\WPDShextAutoplay.exe" [MS] Windows Sidebar Gadgets: ------------------------ C:\Users\Darek\AppData\Local\Microsoft\Windows Sidebar\Settings.ini "C:%5CProgram%20Files%5CWindows%20Sidebar%5CGadgets%5CWeather.Gadget" "C:%5CUsers%5CDarek%5CAppData%5CLocal%5CMicrosoft%5CWindows%20Sidebar%5CGadgets%5CIntelCoreSeries21.gadget" "C:%5CUsers%5CDarek%5CAppData%5CLocal%5CMicrosoft%5CWindows%20Sidebar%5CGadgets%5Cnvidia20.gadget" Non-disabled Scheduled Tasks: ----------------------------- C:\Windows\System32\Tasks "PandaUSBVaccine" -> launches: ""C:\Program Files (x86)\Panda USB Vaccine\Panda\RunInteractiveWin.exe" "C:\Program Files (x86)\Panda USB Vaccine\Panda\USBVaccine.exe" /resident /autovaccinate /experimentalntfs /agreelicense" [null data] "SmartDefrag" -> launches: "C:\Program Files (x86)\IObit\IObit SmartDefrag\IObit SmartDefrag.exe /Schedule" ["IObit"] "{09085FAA-475A-47B3-B20C-AA45F20B4736}" -> launches: "C:\Windows\system32\pcalua.exe -a G:\Flash_Disinfector.exe -d G:\" [MS] "{32183721-2A11-413F-A695-46BD59AA4D4B}" -> launches: "C:\Windows\system32\pcalua.exe -a C:\Users\Darek\Desktop\Setup_405089_.exe -d C:\Users\Darek\Desktop" [MS] "{41582169-9649-42D6-A8AD-050E379C90B9}" -> launches: "C:\Windows\system32\pcalua.exe -a E:\CDSetup.exe -d E:\" [MS] "{46A8D636-FEFF-440A-B80B-9C2F006DB4CC}" -> launches: "C:\Windows\system32\pcalua.exe -a C:\Users\Darek\Desktop\wmpplugin.exe -d C:\Users\Darek\Desktop" [MS] "{A096DCDA-89B3-4CA6-AAE6-9CBE08D4D459}" -> launches: "C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Xilisoft\HD Video Converter\Uninstall.exe"" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Active Directory Rights Management Services Client "AD RMS Rights Policy Template Management (Manual)" -> launches: "{BF5CB148-7C77-4d8a-A53E-D81C70CF743C}" -> {HKLM...CLSID} = "AD RMS Rights Policy Template Management (Manual) Task Handler" \InProcServer32\(Default) = "C:\Windows\system32\msdrm.dll" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Application Experience "AitAgent" -> launches: "aitagent" [MS] "ProgramDataUpdater" -> launches: "%windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Autochk "Proxy" -> launches: "%windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Bluetooth "UninstallDeviceTask" -> launches: "BthUdTask.exe $(Arg0)" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\CertificateServicesClient "SystemTask" -> launches: "{58fb76b9-ac85-4e55-ac04-427593b1d060}" -> {HKLM...CLSID} = "Certificate Services Client Task Handler" \InProcServer32\(Default) = "C:\Windows\system32\dimsjob.dll" [MS] "UserTask" -> launches: "{58fb76b9-ac85-4e55-ac04-427593b1d060}" -> {HKLM...CLSID} = "Certificate Services Client Task Handler" \InProcServer32\(Default) = "C:\Windows\system32\dimsjob.dll" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program "Consolidator" -> launches: "%SystemRoot%\System32\wsqmcons.exe" [MS] "KernelCeipTask" -> (HIDDEN!) launches: "{e7ed314f-2816-4c26-aeb5-54a34d02404c}" -> {HKLM...CLSID} = "KernelCeipCustomHandler" \InProcServer32\(Default) = "C:\Windows\System32\kernelceip.dll" [MS] "UsbCeip" -> (HIDDEN!) launches: "{c27f6b1d-fe0b-45e4-9257-38799fa69bc8}" -> {HKLM...CLSID} = "UsbCeip" \InProcServer32\(Default) = "C:\Windows\System32\usbceip.dll" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Defrag "ScheduledDefrag" -> launches: "%windir%\system32\defrag.exe -c" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Diagnosis "Scheduled" -> (HIDDEN!) launches: "{c1f85ef8-bcc2-4606-bb39-70c523715eb3}" -> {HKLM...CLSID} = "ScheduledDiagnosticCustomHandler" \InProcServer32\(Default) = "C:\Windows\System32\sdiagschd.dll" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Location "Notifications" -> launches: "%windir%\System32\LocationNotifications.exe" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance "WinSAT" -> launches: "{A9A33436-678B-4C9C-A211-7CC38785E79D}" -> {HKLM...CLSID} = "WinSAT Task Manger Task" \InProcServer32\(Default) = "C:\Windows\system32\WinSATAPI.dll" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Media Center "ActivateWindowsSearch" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch" [MS] "ConfigureInternetTimeService" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService" [MS] "DispatchRecoveryTasks" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)" [MS] "ehDRMInit" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /DRMInit" [MS] "InstallPlayReady" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)" [MS] "mcupdate" -> launches: "%SystemRoot%\ehome\mcupdate $(Arg0)" [MS] "MediaCenterRecoveryTask" -> launches: "%SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask" [MS] "ObjectStoreRecoveryTask" -> launches: "%SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask" [MS] "OCURActivate" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /OCURActivate" [MS] "OCURDiscovery" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)" [MS] "PBDADiscovery" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery" [MS] "PBDADiscoveryW1" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery" [MS] "PBDADiscoveryW2" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery" [MS] "PvrRecoveryTask" -> launches: "%SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask" [MS] "PvrScheduleTask" -> launches: "%SystemRoot%\ehome\mcupdate.exe -PvrSchedule" [MS] "RegisterSearch" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)" [MS] "ReindexSearchRoot" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot" [MS] "SqlLiteRecoveryTask" -> launches: "%SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask" [MS] "UpdateRecordPath" -> launches: "%SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\MemoryDiagnostic "CorruptionDetector" -> (HIDDEN!) launches: "{190BA3F6-0205-4f46-B589-95C6822899D2}" -> {HKLM...CLSID} = "MemoryDiagnosticCustomHandler" \InProcServer32\(Default) = "C:\Windows\System32\memdiag.dll" [MS] "DecompressionFailureDetector" -> (HIDDEN!) launches: "{190BA3F6-0205-4f46-B589-95C6822899D2}" -> {HKLM...CLSID} = "MemoryDiagnosticCustomHandler" \InProcServer32\(Default) = "C:\Windows\System32\memdiag.dll" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\MobilePC "HotStart" -> launches: "{06DA0625-9701-43da-BFD7-FBEEA2180A1E}" -> {HKLM...CLSID} = "HotStart User Agent" \InProcServer32\(Default) = "C:\Windows\System32\HotStartUserAgent.dll" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\MUI "LPRemove" -> launches: "%windir%\system32\lpremove.exe" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Multimedia "SystemSoundsService" -> launches: "{2DEA658F-54C1-4227-AF9B-260AB5FC3543}" -> {HKLM...CLSID} = "Microsoft PlaySoundService Class" \InProcServer32\(Default) = "C:\Windows\System32\PlaySndSrv.dll" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\NetTrace "GatherNetworkInfo" -> launches: "%windir%\system32\gatherNetworkInfo.vbs" [null data] C:\Windows\System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics "AnalyzeSystem" -> launches: "%SystemRoot%\System32\powercfg.exe -energy -auto" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\RAC "RacTask" -> (HIDDEN!) launches: "{42060D27-CA53-41f5-96E4-B1E8169308A6}" -> {HKLM...CLSID} = "ReliabilityAnalysisCustomHandler" \InProcServer32\(Default) = "C:\Windows\system32\RacEngn.dll" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Ras "MobilityManager" -> launches: "{c463a0fc-794f-4fdf-9201-01938ceacafa}" -> {HKLM...CLSID} = "RasMobilityManager" \InProcServer32\(Default) = "C:\Windows\system32\rasmbmgr.dll" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Registry "RegIdleBackup" -> (HIDDEN!) launches: "{ca767aa8-9157-4604-b64b-40747123d5f2}" -> {HKLM...CLSID} = "RegistryIdleBackupHandler" \InProcServer32\(Default) = "C:\Windows\System32\regidle.dll" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\RemoteAssistance "RemoteAssistanceTask" -> (HIDDEN!) launches: "%windir%\system32\RAServer.exe /offerraupdate" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\SideShow "GadgetManager" -> launches: "{FF87090D-4A9A-4f47-879B-29A80C355D61}" -> {HKLM...CLSID} = "GadgetsManager Class" \InProcServer32\(Default) = "C:\Windows\System32\AuxiliaryDisplayServices.dll" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\SystemRestore "SR" -> launches: "%windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Task Manager "Interactive" -> (HIDDEN!) launches: "{855fec53-d2e4-4999-9e87-3414e9cf0ff4}" -> {HKLM...CLSID} = "RunTask" \InProcServer32\(Default) = "C:\Windows\system32\wdc.dll" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Tcpip "IpAddressConflict1" -> launches: "%windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem" [MS] "IpAddressConflict2" -> launches: "%windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\TextServicesFramework "MsCtfMonitor" -> (HIDDEN!) launches: "{01575cfe-9a55-4003-a5e1-f38d1ebdcbe1}" -> {HKLM...CLSID} = "MsCtfMonitor task handler" \InProcServer32\(Default) = "C:\Windows\system32\MsCtfMonitor.dll" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Time Synchronization "SynchronizeTime" -> launches: "%windir%\system32\sc.exe start w32time task_started" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\UPnP "UPnPHostConfig" -> launches: "sc.exe config upnphost start= auto" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\WDI "ResolutionHost" -> (HIDDEN!) launches: "{900be39d-6be8-461a-bc4d-b0fa71f5ecb1}" -> {HKLM...CLSID} = "DiagnosticInfrastructureCustomHandler" \InProcServer32\(Default) = "C:\Windows\System32\wdi.dll" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Windows Activation Technologies "ValidationTask" -> (HIDDEN!) launches: "%SystemRoot%\system32\Wat\WatAdminSvc.exe /run" [MS] "ValidationTaskDeadline" -> (HIDDEN!) launches: "%SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Windows Error Reporting "QueueReporting" -> launches: "%windir%\system32\wermgr.exe -queuereporting" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Windows Filtering Platform "BfeOnServiceStartTypeChange" -> (HIDDEN!) launches: "%windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\Windows Media Sharing "UpdateLibrary" -> launches: ""%ProgramFiles%\Windows Media Player\wmpnscfg.exe"" [MS] C:\Windows\System32\Tasks\Microsoft\Windows\WindowsBackup "ConfigNotification" -> launches: "%systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION" [MS] C:\Windows\System32\Tasks\Microsoft\Windows Defender "MP Scheduled Scan" -> (HIDDEN!) launches: "c:\program files\windows defender\MpCmdRun.exe Scan -ScheduleJob -WinTask -RestrictPrivilegesScan" [MS] "MpIdleTask" -> (HIDDEN!) launches: "c:\program files\windows defender\MpCmdRun.exe -IdleTask -TaskName MpIdleTask" [MS] C:\Windows\System32\Tasks\WPD "SqmUpload_S-1-5-21-1264084378-3322303571-3196748977-1000" -> (HIDDEN!) launches: "%windir%\system32\rundll32.exe portabledeviceapi.dll,#1" [MS] Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = "%SystemRoot%\system32\NLAapi.dll" [MS] 000000000002\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 000000000003\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 000000000004\LibraryPath = "%SystemRoot%\system32\napinsp.dll" [MS] 000000000005\LibraryPath = "%SystemRoot%\system32\pnrpnsp.dll" [MS] 000000000006\LibraryPath = "%SystemRoot%\system32\pnrpnsp.dll" [MS] 000000000007\LibraryPath = "%SystemRoot%\system32\wshbth.dll" [MS] Transport Service Providers HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 11 C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll ["VMware, Inc."], 12 - 13 Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ Avira AntiVir Guard, AntiVirService, ""C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"" ["Avira GmbH"] Avira AntiVir Scheduler, AntiVirSchedulerService, ""C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"" ["Avira GmbH"] Intel(R) Matrix Storage Event Monitor, IAANTMON, "C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe" ["Intel Corporation"] Micro Star SCM, Micro Star SCM, "C:\Program Files (x86)\System Control Manager\MSIService.exe" ["Micro-Star International Co., Ltd."] NMSAccess, NMSAccess, "C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe" [null data] NVIDIA Display Driver Service, nvsvc, "C:\Windows\system32\nvvsvc.exe" ["NVIDIA Corporation"] NVIDIA Stereoscopic 3D Driver Service, Stereo Service, "C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe" ["NVIDIA Corporation"] PC Tools Firewall Plus, PCToolsFirewallPlus, "C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe" ["PC Tools"] PnkBstrA, PnkBstrA, "C:\Windows\system32\PnkBstrA.exe" [file not found] PnkBstrB, PnkBstrB, "C:\Windows\system32\PnkBstrB.exe" [file not found] postgresql-8.4 - PostgreSQL Server 8.4, postgresql-8.4, "C:/Program Files (x86)/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N "postgresql-8.4" -D "C:/Program Files (x86)/PostgreSQL/8.4/data" -w" ["PostgreSQL Global Development Group"] TOSHIBA Bluetooth Service, TOSHIBA Bluetooth Service, "C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe" ["TOSHIBA CORPORATION"] VMware Authorization Service, VMAuthdService, ""C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe"" ["VMware, Inc."] VMware DHCP Service, VMnetDHCP, "C:\Windows\system32\vmnetdhcp.exe" [file not found] VMware NAT Service, VMware NAT Service, "C:\Windows\system32\vmnat.exe" [file not found] VMware USB Arbitration Service, VMUSBArbService, ""C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe"" ["VMware, Inc."] Łączność urządzeń z systemem Windows Mobile, RapiMgr, "C:\Windows\system32\svchost.exe -k WindowsMobile" {"C:\Windows\WindowsMobile\rapimgr.dll" [MS]} Łączność urządzeń z systemem Windows Mobile 2003, WcesComm, "C:\Windows\system32\svchost.exe -k WindowsMobile" {"C:\Windows\WindowsMobile\wcescomm.dll" [MS]} Safe Mode Drivers & Services (subkey name, subkey default value): ----------------------------------------------------------------- HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\ <<!>> MSIServer, "Service" Keyboard Driver Filters: ------------------------ HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}\ <<!>> "UpperFilters" = "kbdclass" [MS],<<!>> "vmkbd" ["VMware, Inc."] Print Monitors: --------------- HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors\ Epson Inbox Language Monitor01\Driver = "EP0SLM01.DLL" ["SEIKO EPSON CORPORATION"] EPSON Stylus DX3800 Series 64MonitorBE\Driver = "E_ILMACE.DLL" ["SEIKO EPSON CORPORATION"] Toshiba Bluetooth Monitor\Driver = "tbtmon.dll" ["TOSHIBA CORPORATION."] ---------- (launch time: 2010-09-01 20:52:35) <<!>>: Suspicious data at a malware launch point. + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + The search for DESKTOP.INI DLL launch points on all local fixed drives took 135 seconds. ---------- (total run time: 191 seconds) [/log]
Tomek01 komentarz 1 września 2010 komentarz 1 września 2010 W OTL zastosuj funkcję Clean Up. Wyłącz a następnie włącz przywracanie systemu na wszystkich partycjach. Zastosuj ATF Cleaner, zaznacz trzy pierwsze fajki i empty slected. Wykonaj pełny skan [url=http://www.instalki.pl/programy/download_c/14/155.html][color=#0000CD][b]DrWebCureIt[/b][/color][/url] oraz [url=http://www.instalki.pl/programy/download_c/13/96.html][color=#0000CD][b]Malwarebytes Anti-Malware[/b][/color][/url] i wyniki podaj na forum.
dario116 komentarz 2 września 2010 Autor komentarz 2 września 2010 Wykonałem wszystkie czynności. DrWeb znalazł jedno (najprawdopodobniej fałszywe) zagrożenie od programu SilentRunners. Malwarebytes Anti-malware nie znalazł nic.
dario116 komentarz 2 września 2010 Autor komentarz 2 września 2010 Nie pozostaje mi w takim razie nic innego jak podziękować za pomoc
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.