Demonrex utworzono 21 września 2010 utworzono 21 września 2010 Rutynowa kontrola, lecz jedna rzecz mnie zaniepokoiła. Jak grałem sobie dzisiaj w League of Legends, rozłączyło mi neta, potem połączyło, ale zmieniło nazwę sieci na Sieć 2. Tutaj logi : OTL.Txt [log]OTL logfile created on: 2010-09-19 20:24:55 - Run 4 OTL by OldTimer - Version 3.2.14.0 Folder = C:\Users\Michal\Downloads Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18943) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 54,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 72,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 68,82 Gb Total Space | 9,30 Gb Free Space | 13,51% Space Free | Partition Type: NTFS Drive D: | 164,06 Gb Total Space | 51,30 Gb Free Space | 31,27% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: MICHAL-PC Current User Name: Michal Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: On File Age = 60 Days Output = Standard [color=#E56717]========== Processes (All) ==========[/color] PRC - [2010-09-19 20:24:08 | 000,576,000 | ---- | M] (OldTimer Tools) -- C:\Users\Michal\Downloads\OTL.exe PRC - [2010-09-17 01:01:42 | 000,975,928 | ---- | M] (Google Inc.) -- C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe PRC - [2010-09-13 01:09:56 | 012,653,152 | ---- | M] (GG Network S.A.) -- D:\Gadu-Gadu 10\gg.exe PRC - [2010-08-17 16:11:37 | 000,128,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spoolsv.exe PRC - [2010-08-10 10:59:13 | 000,219,128 | ---- | M] () -- C:\Windows\System32\PnkBstrB.exe PRC - [2010-07-30 10:11:36 | 001,935,656 | ---- | M] (Emsi Software GmbH) -- C:\Program Files\Emsisoft Anti-Malware\a2service.exe PRC - [2010-07-10 17:47:53 | 000,075,064 | ---- | M] () -- C:\Windows\System32\PnkBstrA.exe PRC - [2010-05-26 13:05:04 | 002,437,176 | ---- | M] (Check Point Software Technologies LTD) -- C:\Windows\System32\ZoneLabs\vsmon.exe PRC - [2010-05-26 13:03:36 | 001,043,968 | ---- | M] (Check Point Software Technologies LTD) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe PRC - [2010-05-14 23:58:15 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsass.exe PRC - [2010-05-14 11:44:46 | 000,248,552 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe PRC - [2010-04-01 13:33:19 | 000,267,432 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe PRC - [2010-03-26 12:02:56 | 008,546,848 | ---- | M] (Realtek Semiconductor) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe PRC - [2010-03-02 11:28:31 | 000,282,792 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe PRC - [2010-02-24 10:28:09 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe PRC - [2010-01-14 22:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe PRC - [2009-05-16 05:24:24 | 000,335,872 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe PRC - [2009-05-16 05:23:56 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe PRC - [2009-04-22 21:11:32 | 001,675,776 | ---- | M] (Flagship Industries, Inc.) -- C:\Program Files\Ventrilo\Ventrilo.exe PRC - [2009-04-22 17:38:50 | 000,065,536 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe PRC - [2009-04-22 17:37:16 | 000,065,536 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe PRC - [2009-04-11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winlogon.exe PRC - [2009-04-11 08:28:07 | 000,169,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskeng.exe PRC - [2009-04-11 08:28:07 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\servicing\TrustedInstaller.exe PRC - [2009-04-11 08:28:04 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\smss.exe PRC - [2009-04-11 08:27:59 | 000,441,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchIndexer.exe PRC - [2009-04-11 08:27:59 | 000,279,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\services.exe PRC - [2009-04-11 08:27:59 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchProtocolHost.exe PRC - [2009-04-11 08:27:58 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchFilterHost.exe PRC - [2009-04-11 08:27:49 | 003,408,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SLsvc.exe PRC - [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009-04-11 08:27:33 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe PRC - [2008-10-25 11:44:34 | 000,031,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe PRC - [2008-01-18 23:33:42 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFHost.exe PRC - [2008-01-18 23:33:38 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininit.exe PRC - [2008-01-18 23:33:34 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2008-01-18 23:33:34 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2008-01-18 23:33:34 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2008-01-18 23:33:34 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2008-01-18 23:33:34 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2008-01-18 23:33:34 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2008-01-18 23:33:34 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2008-01-18 23:33:34 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2008-01-18 23:33:34 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2008-01-18 23:33:34 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2008-01-18 23:33:34 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2008-01-18 23:33:34 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2008-01-18 23:33:34 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2008-01-18 23:33:34 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2008-01-18 23:33:16 | 000,229,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsm.exe PRC - [2008-01-18 23:33:16 | 000,095,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mobsync.exe PRC - [2008-01-18 23:33:06 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrss.exe [color=#E56717]========== Modules (All) ==========[/color] MOD - [2010-09-19 20:24:08 | 000,576,000 | ---- | M] (OldTimer Tools) -- C:\Users\Michal\Downloads\OTL.exe MOD - [2010-09-04 09:38:20 | 000,211,432 | ---- | M] (Emsi Software GmbH) -- C:\Program Files\Emsisoft Anti-Malware\a2hooks32.dll MOD - [2010-07-26 17:51:48 | 011,584,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shell32.dll MOD - [2010-05-15 00:10:38 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpk.dll MOD - [2010-05-14 23:58:15 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secur32.dll MOD - [2010-05-14 23:49:19 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\atl.dll MOD - [2010-05-14 22:30:26 | 000,784,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpcrt4.dll MOD - [2010-04-16 18:46:48 | 000,502,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usp10.dll MOD - [2009-09-25 00:54:55 | 000,258,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winspool.drv MOD - [2009-04-11 08:28:25 | 001,077,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vssapi.dll MOD - [2009-04-11 08:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\user32.dll MOD - [2009-04-11 08:28:25 | 000,287,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wldap32.dll MOD - [2009-04-11 08:28:25 | 000,108,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\userenv.dll MOD - [2009-04-11 08:28:25 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\version.dll MOD - [2009-04-11 08:28:24 | 001,591,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupapi.dll MOD - [2009-04-11 08:28:24 | 001,068,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shdocvw.dll MOD - [2009-04-11 08:28:24 | 000,353,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shlwapi.dll MOD - [2009-04-11 08:28:24 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spp.dll MOD - [2009-04-11 08:28:24 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samlib.dll MOD - [2009-04-11 08:28:23 | 001,316,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ole32.dll MOD - [2009-04-11 08:28:23 | 000,754,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\propsys.dll MOD - [2009-04-11 08:28:23 | 000,563,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleaut32.dll MOD - [2009-04-11 08:28:23 | 000,467,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netapi32.dll MOD - [2009-04-11 08:28:23 | 000,121,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntmarta.dll MOD - [2009-04-11 08:28:23 | 000,088,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olepro32.dll MOD - [2009-04-11 08:28:22 | 000,679,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcrt.dll MOD - [2009-04-11 08:28:20 | 000,891,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kernel32.dll MOD - [2009-04-11 08:28:20 | 000,807,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msctf.dll MOD - [2009-04-11 08:28:20 | 000,114,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imm32.dll MOD - [2009-04-11 08:28:20 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mpr.dll MOD - [2009-04-11 08:28:19 | 000,297,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gdi32.dll MOD - [2009-04-11 08:28:18 | 000,450,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comdlg32.dll MOD - [2009-04-11 08:28:18 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authz.dll MOD - [2009-04-11 08:28:17 | 000,800,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\advapi32.dll MOD - [2009-04-11 08:28:17 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apphelp.dll MOD - [2009-04-11 08:27:49 | 001,202,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntdll.dll MOD - [2009-04-11 08:21:38 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll MOD - [2008-01-18 23:37:14 | 000,183,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xmllite.dll MOD - [2008-01-18 23:37:10 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ws2_32.dll MOD - [2008-01-18 23:36:50 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vsstrace.dll MOD - [2008-01-18 23:36:48 | 000,240,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uxtheme.dll MOD - [2008-01-18 23:36:36 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srclient.dll MOD - [2008-01-18 23:35:58 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nsi.dll MOD - [2008-01-18 23:33:54 | 000,523,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clbcatq.dll MOD - [2008-01-18 23:33:02 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx MOD - [2006-11-02 11:46:12 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psapi.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2010-07-30 10:11:36 | 001,935,656 | ---- | M] (Emsi Software GmbH) [Auto | Running] -- C:\Program Files\Emsisoft Anti-Malware\a2service.exe -- (a2AntiMalware) SRV - [2010-07-21 12:06:05 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2010-05-26 13:05:04 | 002,437,176 | ---- | M] (Check Point Software Technologies LTD) [Auto | Running] -- C:\Windows\System32\ZoneLabs\vsmon.exe -- (vsmon) SRV - [2010-05-03 19:01:00 | 003,658,096 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\System32\GameMon.des -- (npggsvc) SRV - [2010-04-01 13:33:19 | 000,267,432 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2010-02-24 10:28:09 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2009-09-25 03:27:04 | 000,793,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache) SRV - [2009-05-16 05:23:56 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility) SRV - [2008-01-18 23:38:26 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2005-08-02 23:18:49 | 000,086,016 | ---- | M] (CACE Technologies) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vsdatant.win7.sys -- (vsdatant7) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive) DRV - [2010-08-15 10:42:15 | 000,041,816 | ---- | M] (Emsi Software GmbH) [File_System | System | Running] -- C:\Program Files\Emsisoft Anti-Malware\a2dix86.sys -- (a2injectiondriver) DRV - [2010-07-19 19:29:56 | 000,071,008 | ---- | M] (Emsi Software GmbH) [File_System | On_Demand | Running] -- C:\Program Files\Emsisoft Anti-Malware\a2accx86.sys -- (a2acc) DRV - [2010-06-05 19:21:15 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd) DRV - [2010-05-15 16:30:46 | 000,457,304 | ---- | M] (Check Point Software Technologies LTD) [Kernel | System | Running] -- C:\Windows\System32\drivers\vsdatant.sys -- (Vsdatant) DRV - [2010-05-05 09:40:32 | 000,011,776 | ---- | M] (Emsi Software GmbH) [Kernel | System | Running] -- C:\Program Files\Emsisoft Anti-Malware\a2util32.sys -- (a2util) DRV - [2010-04-12 10:44:34 | 000,059,388 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu) DRV - [2010-03-26 12:24:58 | 003,048,096 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2010-03-01 10:05:24 | 000,124,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2010-02-16 14:24:01 | 000,060,936 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2009-09-02 05:09:24 | 000,176,128 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169) DRV - [2009-05-16 06:01:22 | 004,933,632 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) DRV - [2009-05-11 10:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009-04-24 07:43:36 | 000,095,544 | ---- | M] (ATI Research Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV - [2006-11-02 11:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300) DRV - [2006-11-02 11:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx) DRV - [2006-11-02 11:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor) DRV - [2006-11-02 11:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci) DRV - [2006-11-02 11:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci) DRV - [2006-11-02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV) DRV - [2006-11-02 11:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320) DRV - [2006-11-02 11:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2) DRV - [2006-11-02 11:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid) DRV - [2006-11-02 11:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx) DRV - [2006-11-02 11:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata) DRV - [2006-11-02 11:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m) DRV - [2006-11-02 11:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid) DRV - [2006-11-02 11:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960) DRV - [2006-11-02 11:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp) DRV - [2006-11-02 11:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4) DRV - [2006-11-02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor) DRV - [2006-11-02 11:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx) DRV - [2006-11-02 11:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas) DRV - [2006-11-02 11:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI) DRV - [2006-11-02 11:50:10 | 000,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2) DRV - [2006-11-02 11:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs) DRV - [2006-11-02 11:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc) DRV - [2006-11-02 11:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid) DRV - [2006-11-02 11:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi) DRV - [2006-11-02 11:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS) DRV - [2006-11-02 11:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx) DRV - [2006-11-02 11:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC) DRV - [2006-11-02 11:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3) DRV - [2006-11-02 11:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x) DRV - [2006-11-02 11:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi) DRV - [2006-11-02 11:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas) DRV - [2006-11-02 11:49:30 | 000,017,512 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide) DRV - [2006-11-02 11:49:28 | 000,016,488 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide) DRV - [2006-11-02 11:49:20 | 000,014,952 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide) DRV - [2006-11-02 10:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM) DRV - [2006-11-02 10:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer) DRV - [2006-11-02 10:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp) DRV - [2006-11-02 10:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo) DRV - [2006-11-02 10:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm) DRV - [2006-11-02 10:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm) DRV - [2006-11-02 09:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi) DRV - [2006-11-02 09:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R) DRV - [2005-08-02 23:10:13 | 000,032,512 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\npf.sys -- (NPF) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2383811976-2136801530-783135697-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKU\S-1-5-21-2383811976-2136801530-783135697-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 2 IE - HKU\S-1-5-21-2383811976-2136801530-783135697-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - HKLM\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\TrustChecker FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-05-15 15:37:28 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-08-24 09:55:50 | 000,000,000 | ---D | M] [2010-05-15 15:37:32 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\mozilla\Extensions [2010-09-18 14:54:38 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\mozilla\Firefox\Profiles\cj88mru7.default\extensions [2010-06-02 18:36:41 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Michal\AppData\Roaming\mozilla\Firefox\Profiles\cj88mru7.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-09-18 14:54:38 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2010-05-17 18:37:19 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2010-05-22 10:47:55 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010-09-07 14:59:31 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010-07-17 05:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll [2010-05-19 16:38:12 | 000,063,488 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll [2010-04-01 19:33:11 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2010-04-01 19:33:11 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2010-04-01 19:33:11 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2010-04-01 19:33:11 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2010-04-01 19:33:11 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010-04-01 19:33:11 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2006-09-18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found. O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [EPSON Stylus DX3800 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKLM..\Run: [ZoneAlarm Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD) O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.172.224.160 89.228.7.226 O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Michal\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\Michal\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{fca3d9ed-70c6-11df-b081-001d7d77753b}\Shell - "" = AutoRun O33 - MountPoints2\{fca3d9ed-70c6-11df-b081-001d7d77753b}\Shell\AutoRun\command - "" = J:\autorun.exe -- File not found O33 - MountPoints2\K\Shell - "" = AutoRun O33 - MountPoints2\K\Shell\AutoRun\command - "" = K:\setup.exe -- File not found O33 - MountPoints2\K\Shell\dinstall\command - "" = K:\DirectX9\DXSETUP.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - File not found NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation) NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^diPhoto Home diUpdate.lnk - C:\PROGRA~1\River\DIPHOT~1\diupdate.exe - File not found MsConfig - StartUpReg: [b]DAEMON Tools Lite[/b] - hkey= - key= - C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) MsConfig - StartUpReg: [b]PrzyspieszKomputer[/b] - hkey= - key= - C:\Program Files\Przyspiesz Komputer\PrzyspieszKomputer.exe File not found MsConfig - StartUpReg: [b]PWRISOVM.EXE[/b] - hkey= - key= - C:\Program Files\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.) MsConfig - StartUpReg: [b]Steam[/b] - hkey= - key= - C:\Program Files\Steam\Steam.exe (Valve Corporation) MsConfig - State: "startup" - 2 MsConfig - State: "bootini" - 2 SafeBootMin: AppMgmt - Service SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: NTDS - File not found SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: AppMgmt - Service SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: NTDS - File not found SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vsmon - C:\Windows\System32\ZoneLabs\vsmon.exe (Check Point Software Technologies LTD) SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet: WudfPf - Driver SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2010-09-11 11:50:54 | 000,000,000 | ---D | C] -- C:\Program Files\Ashampoo [2010-09-07 14:59:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2010-09-01 12:56:20 | 000,000,000 | ---D | C] -- C:\Windows\Sun [2010-08-30 16:36:58 | 000,000,000 | ---D | C] -- C:\Users\Michal\Desktop\pacze [2010-08-30 12:33:11 | 000,000,000 | ---D | C] -- C:\Users\Michal\AppData\Roaming\Sierra [2010-08-30 12:33:11 | 000,000,000 | ---D | C] -- C:\Users\Michal\Documents\Empire Earth II [2010-08-30 12:26:55 | 000,000,000 | ---D | C] -- C:\Users\Michal\AppData\Roaming\InstallShield [2010-08-30 12:02:58 | 000,000,000 | ---D | C] -- C:\Users\Michal\Documents\JoWooD [2010-08-30 11:33:09 | 000,418,480 | ---- | C] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll [2010-08-30 11:33:09 | 000,115,432 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll [2010-08-30 11:33:09 | 000,000,000 | ---D | C] -- C:\Program Files\OpenAL [2010-08-26 15:37:13 | 000,000,000 | ---D | C] -- C:\Users\Michal\AppData\Roaming\Avira [2010-08-25 18:42:34 | 000,000,000 | ---D | C] -- C:\Users\Michal\AppData\Roaming\Teeworlds [2010-08-14 23:28:54 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2010-08-14 14:44:55 | 000,000,000 | ---D | C] -- C:\Users\Michal\Desktop\Particles [2010-08-14 14:40:01 | 000,000,000 | ---D | C] -- C:\Users\Michal\Desktop\champions [2010-08-10 17:14:03 | 000,000,000 | ---D | C] -- C:\Users\Michal\AppData\Local\PokerStars [2010-08-10 17:13:51 | 000,000,000 | ---D | C] -- C:\Program Files\PokerStars [2010-08-10 11:31:37 | 000,000,000 | ---D | C] -- C:\Program Files\Ventrilo [2010-08-09 17:38:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment [2010-07-30 11:59:52 | 000,000,000 | ---D | C] -- C:\Users\Michal\Desktop\09. Necropolis (2009) [2010-07-23 23:05:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Blizzard Entertainment [2010-07-23 17:18:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard [2010-07-23 17:10:11 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Blizzard Entertainment [2010-07-23 15:44:07 | 000,000,000 | ---D | C] -- C:\Users\Michal\AppData\Local\SpeedUpMyPC [2010-07-23 15:43:56 | 000,000,000 | ---D | C] -- C:\Users\Michal\AppData\Local\Przyspiesz_Komputer [2010-07-23 15:43:32 | 000,000,000 | ---D | C] -- C:\Program Files\Przyspiesz Komputer [2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2010-09-19 20:28:19 | 001,572,864 | -HS- | M] () -- C:\Users\Michal\NTUSER.DAT [2010-09-19 20:22:57 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempyC2292.html [2010-09-19 20:22:57 | 000,002,089 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempkg2292.html [2010-09-19 20:18:23 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-09-19 20:18:22 | 000,004,048 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2010-09-19 20:18:22 | 000,004,048 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2010-09-19 20:18:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-09-19 20:18:15 | 2145,902,592 | -HS- | M] () -- C:\hiberfil.sys [2010-09-19 20:16:57 | 000,524,288 | -HS- | M] () -- C:\Users\Michal\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms [2010-09-19 20:16:57 | 000,065,536 | -HS- | M] () -- C:\Users\Michal\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf [2010-09-19 20:16:32 | 003,430,682 | -H-- | M] () -- C:\Users\Michal\AppData\Local\IconCache.db [2010-09-19 19:44:01 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2383811976-2136801530-783135697-1000UA.job [2010-09-19 15:51:28 | 000,167,277 | ---- | M] () -- C:\Users\Michal\Desktop\Mich to nup i naf to nup.docx [2010-09-18 23:25:16 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempfm5488.html [2010-09-18 22:21:30 | 000,223,300 | ---- | M] () -- C:\Users\Michal\Desktop\lol!.jpg [2010-09-18 19:29:21 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempgw4340.html [2010-09-18 18:26:09 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempeF5076.html [2010-09-18 15:08:05 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempgA3508.html [2010-09-18 14:52:56 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempiF3764.html [2010-09-18 14:52:56 | 000,002,089 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempNB3764.html [2010-09-18 10:45:45 | 000,002,047 | ---- | M] () -- C:\Users\Michal\Desktop\Google Chrome.lnk [2010-09-17 22:36:28 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempjT2512.html [2010-09-17 22:36:28 | 000,002,089 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempOG2512.html [2010-09-17 21:24:57 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempWO3496.html [2010-09-17 19:33:20 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempXK1124.html [2010-09-17 14:29:23 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempYB1384.html [2010-09-17 14:29:23 | 000,002,089 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempPx1384.html [2010-09-16 18:33:11 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempHz3648.html [2010-09-16 17:36:42 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempVR3536.html [2010-09-14 16:38:29 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempukC268.html [2010-09-14 16:21:35 | 001,477,664 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2010-09-14 16:21:35 | 000,665,166 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2010-09-14 16:21:35 | 000,589,884 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2010-09-14 16:21:35 | 000,127,958 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2010-09-14 16:21:35 | 000,101,896 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2010-09-13 10:46:56 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempda1440.html [2010-09-13 09:40:34 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempxo2436.html [2010-09-12 15:30:05 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempUQ1092.html [2010-09-12 15:27:26 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempYB1420.html [2010-09-11 17:00:20 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempml4304.html [2010-09-11 16:15:55 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempMg3160.html [2010-09-11 15:01:00 | 000,005,632 | ---- | M] () -- C:\Users\Michal\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-09-11 12:08:32 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Temprr3212.html [2010-09-11 11:52:20 | 000,000,986 | ---- | M] () -- C:\Users\Public\Desktop\Ashampoo Burning Studio 10.lnk [2010-09-11 10:38:07 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TemppY3240.html [2010-09-11 10:03:25 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempMg3152.html [2010-09-11 08:44:00 | 000,001,010 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2383811976-2136801530-783135697-1000Core.job [2010-09-10 22:14:27 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempwx3364.html [2010-09-10 21:30:01 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempYV2592.html [2010-09-10 14:26:21 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempth2680.html [2010-09-10 13:53:28 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempybo900.html [2010-09-09 20:20:17 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempHJ5980.html [2010-09-09 19:56:51 | 000,016,215 | ---- | M] () -- C:\Users\Michal\Documents\Windows_XP_Professional_SP3_VLK_[PL]_[IE8 WMP11 SATA]_[Wrzesien2009-NiKKA][Torrenty.org].torrent [2010-09-09 18:13:48 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempqi3204.html [2010-09-08 16:23:54 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempGLW900.html [2010-09-07 19:27:21 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempBb5428.html [2010-09-07 17:36:42 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempJZ5436.html [2010-09-06 16:12:51 | 000,000,574 | ---- | M] () -- C:\Users\Public\Desktop\Gimnazjum klasa 1 - Puls życia.lnk [2010-09-06 10:07:23 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempEQ3864.html [2010-09-04 16:33:46 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempgx6012.html [2010-09-04 13:56:01 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempVp4228.html [2010-09-04 12:18:37 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempVa2816.html [2010-09-04 10:24:11 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Templb2400.html [2010-09-04 10:18:36 | 001,199,275 | ---- | M] () -- C:\Users\Michal\Documents\DSCF3053.jpg [2010-09-03 21:20:12 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempPM6056.html [2010-09-03 20:27:57 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempvw2564.html [2010-09-03 15:44:39 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempoJ2428.html [2010-09-02 16:29:51 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempYf2888.html [2010-09-02 15:46:17 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempba1108.html [2010-09-02 14:15:50 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempMo3012.html [2010-09-01 20:23:48 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempyr2476.html [2010-09-01 19:41:40 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempvQ4032.html [2010-09-01 15:24:30 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempCa3420.html [2010-09-01 10:05:51 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempyFU580.html [2010-08-30 16:02:47 | 000,000,671 | ---- | M] () -- C:\Users\Public\Desktop\World of Warcraft.lnk [2010-08-30 12:32:00 | 000,000,510 | ---- | M] () -- C:\Users\Public\Desktop\Uruchom Empire Earth II.lnk [2010-08-30 11:58:50 | 000,000,747 | ---- | M] () -- C:\Users\Public\Desktop\Sąsiedzi z Piekła Rodem 2 - Na Wakacjach.lnk [2010-08-30 11:58:50 | 000,000,747 | ---- | M] () -- C:\Users\Public\Desktop\Sąsiedzi z Piekła Rodem 1 - Słodka Zemsta.lnk [2010-08-30 11:33:09 | 000,418,480 | ---- | M] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll [2010-08-30 11:33:09 | 000,115,432 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll [2010-08-30 11:06:15 | 000,000,578 | ---- | M] () -- C:\Users\Public\Desktop\Conflict Denied Ops.lnk [2010-08-30 10:27:04 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempkB4316.html [2010-08-29 12:45:26 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempuv3572.html [2010-08-28 09:05:31 | 000,001,356 | ---- | M] () -- C:\Users\Michal\AppData\Local\d3d9caps.dat [2010-08-27 20:51:46 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempXE5032.html [2010-08-27 09:59:59 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempBp3272.html [2010-08-26 20:48:14 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempMe5624.html [2010-08-26 17:07:20 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempvg4672.html [2010-08-26 15:03:36 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempQW6104.html [2010-08-25 18:44:36 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempwt5224.html [2010-08-25 13:46:59 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempgp5000.html [2010-08-24 19:07:02 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempEL2820.html [2010-08-24 18:22:01 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempJl4584.html [2010-08-24 15:47:01 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempmr5432.html [2010-08-24 12:46:36 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempTas840.html [2010-08-24 09:55:51 | 000,001,887 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk [2010-08-23 20:37:17 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TemplP3616.html [2010-08-23 13:09:55 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempsC1712.html [2010-08-23 10:45:40 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempLg3424.html [2010-08-23 08:15:31 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempiv4044.html [2010-08-22 16:42:36 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempnD1372.html [2010-08-22 16:23:12 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempwd3500.html [2010-08-21 20:19:42 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempYl2464.html [2010-08-21 14:37:21 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TemprM3676.html [2010-08-21 11:37:06 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempSR2304.html [2010-08-21 11:26:23 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempyx3728.html [2010-08-21 10:31:16 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TemprG3676.html [2010-08-20 21:18:35 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempdv5004.html [2010-08-20 20:17:18 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempYp5872.html [2010-08-20 19:17:19 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempiD3308.html [2010-08-20 17:26:58 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempsm2096.html [2010-08-20 16:45:46 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempDj6088.html [2010-08-20 15:52:38 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempis3832.html [2010-08-20 14:47:16 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempyv4344.html [2010-08-20 14:26:07 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempiO2580.html [2010-08-20 13:09:23 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempmo3696.html [2010-08-19 16:57:29 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempXC5308.html [2010-08-19 14:38:35 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempuI3016.html [2010-08-19 12:40:19 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempBQ2344.html [2010-08-19 11:29:53 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempda2060.html [2010-08-19 09:46:27 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempJN2612.html [2010-08-18 15:53:55 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempMV3420.html [2010-08-18 14:25:46 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempYY3664.html [2010-08-18 13:27:10 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempQZ1156.html [2010-08-18 10:59:33 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Temptc3716.html [2010-08-18 09:55:26 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TemplQ2564.html [2010-08-18 09:28:45 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempim2508.html [2010-08-16 22:50:15 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempiv4848.html [2010-08-16 16:04:17 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempZI5824.html [2010-08-16 08:38:41 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempyp1988.html [2010-08-15 22:44:52 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempsa5352.html [2010-08-15 21:36:08 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempvT6120.html [2010-08-15 21:35:31 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempvN1008.html [2010-08-15 18:21:00 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempDD5660.html [2010-08-14 23:28:50 | 152,562,207 | ---- | M] () -- C:\Windows\MEMORY.DMP [2010-08-12 12:02:44 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempkmG828.html [2010-08-12 11:47:13 | 000,385,416 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2010-08-11 22:37:27 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempIw5796.html [2010-08-11 18:37:26 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempnp4912.html [2010-08-11 16:20:22 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempPQ1512.html [2010-08-11 14:36:28 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempbk5156.html [2010-08-11 12:32:28 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempuF1468.html [2010-08-11 11:03:51 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempfA3304.html [2010-08-10 17:14:02 | 000,000,858 | ---- | M] () -- C:\Users\Public\Desktop\PokerStars.lnk [2010-08-10 14:06:08 | 000,221,395 | ---- | M] () -- C:\Users\Michal\Desktop\asdas.jpg [2010-08-10 13:25:49 | 000,218,350 | ---- | M] () -- C:\Users\Michal\Desktop\lul.jpg [2010-08-10 11:31:41 | 000,000,262 | ---- | M] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini [2010-08-10 11:31:39 | 000,000,752 | ---- | M] () -- C:\Users\Public\Desktop\Ventrilo.lnk [2010-08-10 11:22:15 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempeL3308.html [2010-08-10 10:59:33 | 000,138,592 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2010-08-10 10:59:13 | 000,219,128 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr [2010-08-10 09:10:05 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempwn3704.html [2010-08-09 19:58:14 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Temprq6000.html [2010-08-09 17:30:25 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempVP2432.html [2010-08-09 16:33:21 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempuj3296.html [2010-08-09 12:35:54 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempGi3212.html [2010-08-09 12:35:54 | 000,002,089 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempeW3212.html [2010-08-08 16:08:30 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempqW2996.html [2010-08-08 16:01:28 | 000,103,303 | ---- | M] () -- C:\Users\Michal\Desktop\masteries.jpg [2010-08-08 13:18:31 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempCw2684.html [2010-08-08 09:56:48 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempWp1872.html [2010-08-08 09:37:03 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempVhJ928.html [2010-08-08 09:37:03 | 000,002,089 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempENz928.html [2010-08-08 09:33:53 | 000,632,259 | ---- | M] () -- C:\Users\Michal\Documents\150 up xd.jpg [2010-08-07 21:59:33 | 000,000,511 | ---- | M] () -- C:\Users\Public\Desktop\Heroes of Might and Magic III - Złota Edycja.lnk [2010-07-29 10:49:31 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempUT3288.html [2010-07-29 10:49:31 | 000,002,089 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempdD3288.html [2010-07-28 10:11:18 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempgH2240.html [2010-07-24 20:28:10 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempEN4540.html [2010-07-24 15:23:38 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempEe5176.html [2010-07-24 14:21:33 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Temped4160.html [2010-07-24 12:28:16 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempaL5676.html [2010-07-24 11:50:02 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TemptE4204.html [2010-07-24 07:45:40 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempu36792.html [2010-07-23 23:05:28 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempvQ3144.html [2010-07-23 21:20:06 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempbZ3124.html [2010-07-23 17:27:19 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempoGf900.html [2010-07-23 16:18:12 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempHC3204.html [2010-07-23 14:32:22 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempdg2532.html [2010-07-23 14:01:44 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempwR6092.html [2010-07-23 13:26:13 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempsq3288.html [2010-07-23 10:34:32 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempcz5552.html [2010-07-23 09:59:18 | 000,392,254 | ---- | M] () -- C:\Users\Michal\Documents\20100722_003.jpg [2010-07-23 09:40:23 | 000,555,492 | ---- | M] () -- C:\Users\Michal\Documents\20100723_002.jpg [2010-07-22 21:19:16 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempmB4920.html [2010-07-22 20:53:47 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempKz4960.html [2010-07-22 15:11:27 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempJr2464.html [2010-07-21 20:30:38 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempti3608.html [2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-09-19 20:22:57 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempyC2292.html [2010-09-19 20:22:57 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempkg2292.html [2010-09-19 15:04:15 | 000,167,277 | ---- | C] () -- C:\Users\Michal\Desktop\Mich to nup i naf to nup.docx [2010-09-18 23:03:11 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempfm5488.html [2010-09-18 22:21:29 | 000,223,300 | ---- | C] () -- C:\Users\Michal\Desktop\lol!.jpg [2010-09-18 19:17:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempgw4340.html [2010-09-18 17:28:50 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempeF5076.html [2010-09-18 14:55:02 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempgA3508.html [2010-09-18 14:51:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempiF3764.html [2010-09-18 14:51:33 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempNB3764.html [2010-09-17 22:31:01 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempjT2512.html [2010-09-17 22:31:01 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempOG2512.html [2010-09-17 20:12:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempWO3496.html [2010-09-17 19:32:53 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXK1124.html [2010-09-17 13:59:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYB1384.html [2010-09-17 13:59:22 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPx1384.html [2010-09-16 17:56:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempHz3648.html [2010-09-16 17:22:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVR3536.html [2010-09-14 15:43:13 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempukC268.html [2010-09-13 10:25:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempda1440.html [2010-09-13 09:05:38 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempxo2436.html [2010-09-12 15:28:35 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempUQ1092.html [2010-09-12 15:24:19 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYB1420.html [2010-09-11 16:57:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempml4304.html [2010-09-11 16:02:41 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMg3160.html [2010-09-11 11:52:20 | 000,000,986 | ---- | C] () -- C:\Users\Public\Desktop\Ashampoo Burning Studio 10.lnk [2010-09-11 11:50:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temprr3212.html [2010-09-11 10:24:41 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemppY3240.html [2010-09-11 08:45:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMg3152.html [2010-09-10 22:02:16 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempwx3364.html [2010-09-10 21:09:51 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYV2592.html [2010-09-10 14:04:03 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempth2680.html [2010-09-10 13:51:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempybo900.html [2010-09-09 19:56:48 | 000,016,215 | ---- | C] () -- C:\Users\Michal\Documents\Windows_XP_Professional_SP3_VLK_[PL]_[IE8 WMP11 SATA]_[Wrzesien2009-NiKKA][Torrenty.org].torrent [2010-09-09 19:50:50 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempHJ5980.html [2010-09-09 17:56:15 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempqi3204.html [2010-09-08 16:22:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempGLW900.html [2010-09-07 19:20:53 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBb5428.html [2010-09-07 17:10:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempJZ5436.html [2010-09-06 16:12:51 | 000,000,574 | ---- | C] () -- C:\Users\Public\Desktop\Gimnazjum klasa 1 - Puls życia.lnk [2010-09-06 09:43:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEQ3864.html [2010-09-04 15:14:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempgx6012.html [2010-09-04 13:07:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVp4228.html [2010-09-04 11:59:55 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVa2816.html [2010-09-04 10:17:57 | 001,199,275 | ---- | C] () -- C:\Users\Michal\Documents\DSCF3053.jpg [2010-09-04 09:59:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Templb2400.html [2010-09-03 21:08:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPM6056.html [2010-09-03 20:02:35 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempvw2564.html [2010-09-03 15:20:38 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempoJ2428.html [2010-09-02 16:24:04 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYf2888.html [2010-09-02 15:38:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempba1108.html [2010-09-02 14:03:02 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMo3012.html [2010-09-01 20:18:35 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyr2476.html [2010-09-01 19:20:27 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempvQ4032.html [2010-09-01 15:13:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempCa3420.html [2010-09-01 09:16:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempyFU580.html [2010-08-30 12:32:00 | 000,000,510 | ---- | C] () -- C:\Users\Public\Desktop\Uruchom Empire Earth II.lnk [2010-08-30 11:58:50 | 000,000,747 | ---- | C] () -- C:\Users\Public\Desktop\Sąsiedzi z Piekła Rodem 2 - Na Wakacjach.lnk [2010-08-30 11:58:50 | 000,000,747 | ---- | C] () -- C:\Users\Public\Desktop\Sąsiedzi z Piekła Rodem 1 - Słodka Zemsta.lnk [2010-08-30 11:06:15 | 000,000,578 | ---- | C] () -- C:\Users\Public\Desktop\Conflict Denied Ops.lnk [2010-08-30 10:24:32 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempkB4316.html [2010-08-29 12:32:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempuv3572.html [2010-08-27 20:51:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXE5032.html [2010-08-27 09:23:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBp3272.html [2010-08-26 20:39:30 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMe5624.html [2010-08-26 15:42:21 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempvg4672.html [2010-08-26 14:54:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQW6104.html [2010-08-25 18:08:14 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempwt5224.html [2010-08-25 13:27:03 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempgp5000.html [2010-08-24 19:06:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEL2820.html [2010-08-24 17:34:31 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempJl4584.html [2010-08-24 15:14:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempmr5432.html [2010-08-24 12:34:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempTas840.html [2010-08-23 20:30:13 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemplP3616.html [2010-08-23 12:29:51 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempsC1712.html [2010-08-23 09:06:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempLg3424.html [2010-08-23 08:14:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempiv4044.html [2010-08-22 16:37:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempnD1372.html [2010-08-22 16:11:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempwd3500.html [2010-08-21 20:00:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYl2464.html [2010-08-21 14:19:58 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemprM3676.html [2010-08-21 11:27:57 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempSR2304.html [2010-08-21 11:22:13 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyx3728.html [2010-08-21 10:25:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemprG3676.html [2010-08-20 21:18:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempdv5004.html [2010-08-20 20:00:14 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYp5872.html [2010-08-20 19:15:11 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempiD3308.html [2010-08-20 17:21:31 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempsm2096.html [2010-08-20 16:38:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempDj6088.html [2010-08-20 15:28:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempis3832.html [2010-08-20 14:39:59 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyv4344.html [2010-08-20 14:18:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempiO2580.html [2010-08-20 13:05:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempmo3696.html [2010-08-19 15:51:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXC5308.html [2010-08-19 14:22:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempuI3016.html [2010-08-19 12:35:31 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBQ2344.html [2010-08-19 11:15:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempda2060.html [2010-08-19 09:00:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempJN2612.html [2010-08-18 15:51:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMV3420.html [2010-08-18 13:56:16 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYY3664.html [2010-08-18 13:23:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQZ1156.html [2010-08-18 10:52:28 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temptc3716.html [2010-08-18 09:55:13 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemplQ2564.html [2010-08-18 09:05:59 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempim2508.html [2010-08-16 22:40:27 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempiv4848.html [2010-08-16 15:53:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempZI5824.html [2010-08-16 08:35:21 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyp1988.html [2010-08-15 22:26:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempsa5352.html [2010-08-15 21:35:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempvT6120.html [2010-08-15 21:33:49 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempvN1008.html [2010-08-15 18:19:50 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempDD5660.html [2010-08-14 23:28:50 | 152,562,207 | ---- | C] () -- C:\Windows\MEMORY.DMP [2010-08-12 11:52:49 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempkmG828.html [2010-08-11 22:09:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempIw5796.html [2010-08-11 18:30:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempnp4912.html [2010-08-11 16:08:32 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPQ1512.html [2010-08-11 14:28:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempbk5156.html [2010-08-11 11:36:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempuF1468.html [2010-08-11 10:53:01 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempfA3304.html [2010-08-10 17:14:02 | 000,000,858 | ---- | C] () -- C:\Users\Public\Desktop\PokerStars.lnk [2010-08-10 14:06:08 | 000,221,395 | ---- | C] () -- C:\Users\Michal\Desktop\asdas.jpg [2010-08-10 13:25:49 | 000,218,350 | ---- | C] () -- C:\Users\Michal\Desktop\lul.jpg [2010-08-10 11:31:39 | 000,000,752 | ---- | C] () -- C:\Users\Public\Desktop\Ventrilo.lnk [2010-08-10 11:31:35 | 000,000,262 | ---- | C] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini [2010-08-10 11:02:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempeL3308.html [2010-08-10 09:03:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempwn3704.html [2010-08-09 19:35:16 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temprq6000.html [2010-08-09 17:19:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVP2432.html [2010-08-09 16:09:27 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempuj3296.html [2010-08-09 12:11:44 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempGi3212.html [2010-08-09 12:11:44 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempeW3212.html [2010-08-08 16:01:28 | 000,103,303 | ---- | C] () -- C:\Users\Michal\Desktop\masteries.jpg [2010-08-08 15:00:30 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempqW2996.html [2010-08-08 13:14:59 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempCw2684.html [2010-08-08 09:37:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempWp1872.html [2010-08-08 09:33:32 | 000,632,259 | ---- | C] () -- C:\Users\Michal\Documents\150 up xd.jpg [2010-08-08 09:27:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVhJ928.html [2010-08-08 09:27:06 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempENz928.html [2010-08-07 21:59:33 | 000,000,511 | ---- | C] () -- C:\Users\Public\Desktop\Heroes of Might and Magic III - Złota Edycja.lnk [2010-07-29 10:40:57 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempUT3288.html [2010-07-29 10:40:57 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempdD3288.html [2010-07-28 09:57:27 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempgH2240.html [2010-07-24 20:20:32 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEN4540.html [2010-07-24 14:53:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEe5176.html [2010-07-24 14:13:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temped4160.html [2010-07-24 12:18:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempaL5676.html [2010-07-24 11:31:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemptE4204.html [2010-07-24 07:39:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempu36792.html [2010-07-23 23:05:00 | 000,000,671 | ---- | C] () -- C:\Users\Public\Desktop\World of Warcraft.lnk [2010-07-23 23:01:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempvQ3144.html [2010-07-23 21:09:16 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempbZ3124.html [2010-07-23 17:09:41 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempoGf900.html [2010-07-23 15:42:19 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempHC3204.html [2010-07-23 14:24:07 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempdg2532.html [2010-07-23 14:01:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempwR6092.html [2010-07-23 12:53:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempsq3288.html [2010-07-23 09:57:24 | 000,392,254 | ---- | C] () -- C:\Users\Michal\Documents\20100722_003.jpg [2010-07-23 09:39:29 | 000,555,492 | ---- | C] () -- C:\Users\Michal\Documents\20100723_002.jpg [2010-07-23 09:33:35 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempcz5552.html [2010-07-22 21:13:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempmB4920.html [2010-07-22 20:21:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempKz4960.html [2010-07-22 15:06:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempJr2464.html [2010-07-21 20:30:28 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempti3608.html [2010-07-21 16:20:21 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempGLC552.html [2010-07-21 09:47:23 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempAp3832.html [2010-07-20 15:25:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempyM3832.html [2010-07-20 10:58:35 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempwb1400.html [2010-07-19 18:43:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempkb2540.html [2010-07-19 17:30:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempyV4052.html [2010-07-19 17:30:47 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBD4052.html [2010-07-19 13:05:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempkP3808.html [2010-07-18 20:53:44 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQQ5228.html [2010-07-18 20:11:15 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBL3844.html [2010-07-18 19:24:13 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXh5388.html [2010-07-17 11:32:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyw3488.html [2010-07-16 17:37:27 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQY4420.html [2010-07-16 16:56:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempke4796.html [2010-07-15 11:29:15 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempZs5148.html [2010-07-15 10:08:11 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYw3424.html [2010-07-14 21:20:35 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempho1956.html [2010-07-14 21:20:35 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temptc1956.html [2010-07-14 20:13:53 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXk3280.html [2010-07-14 19:17:53 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempmN3860.html [2010-07-13 21:56:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemphP1228.html [2010-07-13 18:35:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempzdy168.html [2010-07-13 16:39:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempWA4008.html [2010-07-13 14:20:03 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempqR1776.html [2010-07-13 13:55:55 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPa1864.html [2010-07-13 09:34:30 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempRI2348.html [2010-07-12 21:36:21 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEH3400.html [2010-07-12 20:36:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempDk1320.html [2010-07-12 20:36:00 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempdy1320.html [2010-07-10 19:13:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQW4372.html [2010-07-10 17:04:57 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempvA4232.html [2010-07-10 16:46:18 | 000,138,592 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2010-07-10 16:46:18 | 000,022,328 | ---- | C] () -- C:\Users\Michal\AppData\Roaming\PnkBstrK.sys [2010-07-10 16:45:31 | 000,000,269 | ---- | C] () -- C:\Windows\game.ini [2010-07-10 12:01:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQY6036.html [2010-07-10 10:45:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempaf3180.html [2010-07-09 21:04:40 | 000,041,872 | ---- | C] () -- C:\Windows\System32\xfcodec.dll [2010-07-08 21:08:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemphU4980.html [2010-07-08 18:49:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPe4652.html [2010-07-08 17:17:43 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempKW4892.html [2010-07-08 16:37:01 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempCy2124.html [2010-07-08 14:48:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQq4488.html [2010-07-08 13:10:51 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temppt4072.html [2010-07-08 12:33:05 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempfC5508.html [2010-07-08 12:33:05 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPk5508.html [2010-07-08 12:01:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBj4076.html [2010-07-08 11:03:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYJ1720.html [2010-07-08 09:21:37 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempwl4692.html [2010-07-07 20:46:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempxN4956.html [2010-07-07 20:46:29 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempbP4956.html [2010-07-07 18:07:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYI1876.html [2010-07-07 15:20:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempLi4972.html [2010-07-07 12:51:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBq4892.html [2010-07-07 12:30:02 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMI5388.html [2010-07-07 11:10:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempDe5144.html [2010-07-07 10:57:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempot3608.html [2010-07-07 09:04:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemprZ2216.html [2010-07-06 16:38:23 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempdr3832.html [2010-07-06 16:03:51 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempsV2780.html [2010-07-06 16:02:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempJB1612.html [2010-07-06 16:02:09 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempgC1612.html [2010-07-04 14:02:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemptI3452.html [2010-07-04 12:39:01 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempnu5400.html [2010-07-04 09:57:44 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempxZ3000.html [2010-07-03 22:46:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempye5680.html [2010-07-03 16:12:15 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempmq5512.html [2010-07-03 09:07:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQk3404.html [2010-07-03 07:42:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempnT3768.html [2010-07-02 19:55:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempFp4088.html [2010-07-02 17:54:49 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEsX304.html [2010-07-02 14:07:41 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBC3924.html [2010-07-02 11:17:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempxk2244.html [2010-07-02 10:52:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temphv3464.html [2010-07-02 09:52:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempiV2076.html [2010-07-01 17:05:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPC1168.html [2010-07-01 17:05:18 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempwE1168.html [2010-06-30 11:19:39 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYy4896.html [2010-06-30 10:25:27 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempCi2648.html [2010-06-30 09:32:39 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPj1100.html [2010-06-29 22:02:50 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempUH5036.html [2010-06-29 14:50:58 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempAb5012.html [2010-06-29 13:29:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyv5672.html [2010-06-28 21:39:43 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempcg4844.html [2010-06-28 18:57:11 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempez4068.html [2010-06-28 16:23:30 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempthD540.html [2010-06-27 21:17:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempGa4924.html [2010-06-27 17:35:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempKM5440.html [2010-06-27 16:30:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPz4032.html [2010-06-27 09:35:37 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempbO3132.html [2010-06-26 14:23:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempqG6120.html [2010-06-26 12:48:48 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempeH2844.html [2010-06-26 11:15:49 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempoK3284.html [2010-06-26 10:56:30 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempNLM468.html [2010-06-26 10:41:51 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYiA216.html [2010-06-25 21:44:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempqI1512.html [2010-06-25 20:17:36 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempSr1776.html [2010-06-25 18:58:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempZS4528.html [2010-06-25 17:56:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempRn6012.html [2010-06-25 15:36:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempqw3296.html [2010-06-25 12:32:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempNB4200.html [2010-06-25 11:48:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempkT4512.html [2010-06-25 11:01:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempLj5160.html [2010-06-25 09:33:01 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempFx1396.html [2010-06-24 21:54:55 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempWV4352.html [2010-06-24 21:54:55 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempsp4352.html [2010-06-24 18:56:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempaG4344.html [2010-06-24 17:40:42 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempjU2112.html [2010-06-24 13:52:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temphe3272.html [2010-06-24 10:15:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemptI3292.html [2010-06-24 08:27:51 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYY3336.html [2010-06-23 21:00:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempvH2092.html [2010-06-23 17:32:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempnW4936.html [2010-06-23 15:51:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempqF3504.html [2010-06-23 11:12:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempbe5596.html [2010-06-22 22:24:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMV5016.html [2010-06-22 21:38:45 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempIM3264.html [2010-06-22 17:16:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempNV4976.html [2010-06-22 16:20:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempJy4992.html [2010-06-22 14:48:42 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempxx6036.html [2010-06-22 13:53:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempql1436.html [2010-06-22 13:05:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempZS4532.html [2010-06-22 10:48:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempJN3864.html [2010-06-21 20:43:30 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempTt2232.html [2010-06-21 19:44:23 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempSw2712.html [2010-06-21 14:45:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBV5660.html [2010-06-21 13:29:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempmG3944.html [2010-06-21 12:01:58 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempgE2284.html [2010-06-20 19:25:43 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempdF2668.html [2010-06-20 15:31:38 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempaXd636.html [2010-06-20 15:31:38 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempdhz636.html [2010-06-20 10:48:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempfv3696.html [2010-06-20 10:27:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempIV3336.html [2010-06-20 10:27:00 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempff3336.html [2010-06-19 23:40:31 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempsJ3868.html [2010-06-19 20:21:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempZu4456.html [2010-06-19 15:55:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempbh2680.html [2010-06-19 15:48:38 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXM2948.html [2010-06-19 14:27:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemptZ4976.html [2010-06-19 13:56:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempCW1204.html [2010-06-19 08:46:45 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempxR1240.html [2010-06-18 17:14:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempGs3768.html [2010-06-18 15:13:13 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempLP2404.html [2010-06-18 14:06:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyc3420.html [2010-06-18 10:49:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEW4420.html [2010-06-17 20:31:36 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempcA3816.html [2010-06-17 15:44:04 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempRAY880.html [2010-06-17 10:34:19 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempbt2916.html [2010-06-17 07:27:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempdi2332.html [2010-06-16 20:56:50 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemptM5720.html [2010-06-16 16:38:21 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempTh4408.html [2010-06-16 11:40:50 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempAA3808.html [2010-06-16 10:11:04 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempAG1508.html [2010-06-16 08:42:11 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempNB3916.html [2010-06-16 08:00:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemplN3876.html [2010-06-15 21:06:19 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempqX3484.html [2010-06-15 20:07:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temphz4996.html [2010-06-15 18:02:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempbT5936.html [2010-06-15 14:42:23 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempJP3348.html [2010-06-15 14:17:01 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempeo4408.html [2010-06-15 13:46:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempaU4784.html [2010-06-14 19:13:44 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempmJ1540.html [2010-06-14 19:09:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempez2900.html [2010-06-14 12:48:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQn3448.html [2010-06-13 15:43:37 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXU5876.html [2010-06-13 11:32:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempgZd660.html [2010-06-13 10:48:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempgC3392.html [2010-06-13 09:57:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempIK3756.html [2010-06-13 09:27:51 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPw3884.html [2010-06-12 19:59:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQc5324.html [2010-06-12 19:33:03 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempWn3376.html [2010-06-12 15:19:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempjh5784.html [2010-06-12 12:42:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempTO4204.html [2010-06-12 09:32:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temppl2908.html [2010-06-12 09:16:17 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempHV2184.html [2010-06-12 09:16:17 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempaV2184.html [2010-06-11 21:34:36 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempAV2224.html [2010-06-11 20:31:32 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempKt5052.html [2010-06-11 18:00:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempdJ3408.html [2010-06-11 14:47:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempxLj156.html [2010-06-11 14:10:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemptQ1276.html [2010-06-10 15:43:59 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVt3688.html [2010-06-09 19:25:41 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempzJ5156.html [2010-06-09 14:47:14 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempvFk124.html [2010-06-08 17:52:38 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemphL3204.html [2010-06-08 17:13:37 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempzIA728.html [2010-06-08 14:35:51 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempnI2264.html [2010-06-08 13:52:43 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQg3580.html [2010-06-07 19:50:07 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempnV2580.html [2010-06-07 16:24:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXq2904.html [2010-06-07 15:34:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempsm2560.html [2010-06-07 15:11:21 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMN2328.html [2010-06-07 13:55:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemprS2472.html [2010-06-07 12:58:39 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPKH992.html [2010-06-06 08:59:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemplV3724.html [2010-06-05 20:22:15 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempva1388.html [2010-06-05 19:21:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempC11652.html [2010-06-05 19:21:15 | 000,691,696 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys [2010-06-05 18:59:31 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temprf3756.html [2010-06-05 17:03:41 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMR6780.html [2010-06-05 13:45:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempTn4664.html [2010-06-05 12:08:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempfH5656.html [2010-06-05 10:16:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemppT2660.html [2010-06-05 07:53:50 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempoO3080.html [2010-06-04 20:18:15 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempia6808.html [2010-06-04 18:19:57 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXR6332.html [2010-06-04 17:17:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempdD4356.html [2010-06-04 14:36:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXO3652.html [2010-06-04 11:08:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempqmF876.html [2010-06-04 10:13:35 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempDn4600.html [2010-06-04 10:10:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempDm4056.html [2010-06-04 08:56:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempjbz468.html [2010-06-03 21:01:16 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempqh4220.html [2010-06-03 19:38:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temphh3824.html [2010-06-03 16:37:35 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempWZ3032.html [2010-06-03 16:03:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempvLz460.html [2010-06-03 12:20:52 | 000,005,632 | ---- | C] () -- C:\Users\Michal\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-06-02 21:38:23 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEq2980.html [2010-06-02 20:01:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXm4076.html [2010-06-02 19:14:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempFU6108.html [2010-06-02 18:43:48 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyh4256.html [2010-06-02 17:51:27 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempSH2904.html [2010-06-02 17:51:27 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempiX2904.html [2010-06-02 16:47:27 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemptL1904.html [2010-06-02 14:45:01 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempcv3916.html [2010-06-01 21:02:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVD1416.html [2010-06-01 19:15:04 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXR2844.html [2010-06-01 16:05:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemplS3676.html [2010-05-31 16:17:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempFA5888.html [2010-05-31 13:42:07 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQv2464.html [2010-05-30 11:53:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempbA3888.html [2010-05-30 11:53:10 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemprP3888.html [2010-05-30 11:41:32 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemptD1548.html [2010-05-30 10:15:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempjH1360.html [2010-05-30 09:24:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempcN3788.html [2010-05-29 21:13:31 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempzS5464.html [2010-05-29 21:13:31 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempsb5464.html [2010-05-29 19:50:36 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempzA2376.html [2010-05-29 17:19:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempiC3056.html [2010-05-28 18:21:03 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempvb3168.html [2010-05-28 15:42:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPt6080.html [2010-05-28 13:10:41 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempzI5340.html [2010-05-28 12:19:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempto5112.html [2010-05-28 11:05:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temppa2988.html [2010-05-28 10:28:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempDk1964.html [2010-05-28 09:36:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempExB236.html [2010-05-28 09:10:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEb3320.html [2010-05-27 16:53:31 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempGU5588.html [2010-05-27 15:50:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempsu2500.html [2010-05-26 20:47:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempNn5712.html [2010-05-26 19:08:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempbM1352.html [2010-05-26 14:36:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempgb1092.html [2010-05-25 21:13:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempdT4156.html [2010-05-25 17:39:23 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyi5456.html [2010-05-25 16:27:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempoQ3068.html [2010-05-25 13:56:23 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempwc3496.html [2010-05-24 19:38:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVF2784.html [2010-05-24 11:53:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYh4564.html [2010-05-24 11:49:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempxA4808.html [2010-05-24 11:41:59 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempAp2740.html [2010-05-24 10:15:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempuF3416.html [2010-05-24 09:19:04 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVv2612.html [2010-05-23 18:21:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempWa1232.html [2010-05-23 11:20:39 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempvz1368.html [2010-05-22 12:41:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempet3036.html [2010-05-22 12:25:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempej3456.html [2010-05-22 12:25:33 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempbc3456.html [2010-05-22 11:42:19 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempGR1260.html [2010-05-22 11:42:19 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempeO1260.html [2010-05-22 10:08:13 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempto5788.html [2010-05-22 10:08:13 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemprX5788.html [2010-05-21 18:54:28 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempbh4352.html [2010-05-21 16:42:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempOO2052.html [2010-05-20 17:59:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempqF4744.html [2010-05-19 16:09:23 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempOW2672.html [2010-05-19 15:11:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempmg5676.html [2010-05-18 17:50:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXS5136.html [2010-05-18 14:50:05 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temphfm656.html [2010-05-17 18:38:17 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010-05-17 16:00:02 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempmn3084.html [2010-05-17 14:48:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempuF3664.html [2010-05-17 12:40:59 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempZr3928.html [2010-05-16 17:05:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempnT2116.html [2010-05-16 09:57:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempcq3460.html [2010-05-15 15:35:15 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVjq472.html [2010-05-15 14:31:14 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempgB2492.html [2010-05-15 12:26:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempbG3464.html [2010-05-15 12:26:34 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPR3464.html [2010-05-15 12:07:10 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2010-05-15 11:40:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVR3748.html [2010-05-15 11:40:10 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempIv3748.html [2010-05-15 11:23:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempnP2484.html [2010-05-15 11:23:24 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVj2484.html [2010-05-15 11:02:15 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempeM3668.html [2010-05-15 11:02:15 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMS3668.html [2010-05-15 10:17:13 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempzC1400.html [2010-05-15 09:27:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempjG3996.html [2010-05-14 22:36:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempgz3336.html [2010-05-14 21:19:22 | 000,073,728 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll [2010-05-14 21:10:55 | 000,001,356 | ---- | C] () -- C:\Users\Michal\AppData\Local\d3d9caps.dat [2009-08-03 00:21:54 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll [2009-08-03 00:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll [2009-08-03 00:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll [2009-05-16 05:22:50 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll [2006-11-02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006-11-02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2005-08-02 23:24:01 | 000,053,299 | ---- | C] () -- C:\Windows\System32\pthreadVC.dll [color=#E56717]========== LOP Check ==========[/color] [2010-09-11 11:52:40 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\Ashampoo [2010-07-18 22:11:35 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\BugTrap Console Test105 [2010-05-22 12:22:38 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\CheckPoint [2010-06-05 19:25:33 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\DAEMON Tools Lite [2010-05-14 23:46:05 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\Gadu-Gadu 10 [2010-07-02 10:07:13 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\gtk-2.0 [2010-07-08 19:54:42 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\ipla [2010-05-16 09:55:33 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\LolClient [2010-05-15 10:29:26 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\OpenFM [2010-06-06 09:05:17 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\Remere's Map Editor [2010-08-30 12:33:11 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\Sierra [2010-08-25 18:44:20 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\Teeworlds [2010-05-30 12:48:49 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\Tibia [2010-09-12 18:48:50 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\uTorrent [2010-09-19 20:17:11 | 000,032,546 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%\*.* >[/color] [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat [2009-04-11 08:36:36 | 000,333,257 | RHS- | M] () -- C:\bootmgr [2010-05-14 22:00:09 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK [2006-09-18 23:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys [2010-09-19 20:18:15 | 2145,902,592 | -HS- | M] () -- C:\hiberfil.sys [2010-09-19 20:18:14 | 2459,713,536 | -HS- | M] () -- C:\pagefile.sys [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2008-01-18 23:42:26 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys [2008-01-18 23:42:26 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys [2008-01-18 23:42:26 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys [2008-01-18 23:42:26 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys [2006-11-02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\drivers\AGP440.sys [2006-11-02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009-04-11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\drivers\atapi.sys [2009-04-11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys [2009-04-11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys [2008-01-18 23:41:32 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys [2008-01-18 23:41:32 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys [2006-11-02 11:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys [2010-05-14 23:25:29 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys [2010-05-14 23:25:29 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys [2010-05-14 23:25:29 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2008-01-18 21:49:12 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=67E506B75BD5326A3EC7B70BD014DFB6 -- C:\Windows\System32\drivers\beep.sys [2008-01-18 21:49:12 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=67E506B75BD5326A3EC7B70BD014DFB6 -- C:\Windows\winsxs\x86_microsoft-windows-beepsys_31bf3856ad364e35_6.0.6001.18000_none_c420a153079d485b\beep.sys [2006-11-02 10:51:03 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=AC3DD1708B22761EBD7CBE14DCC3B5D7 -- C:\Windows\winsxs\x86_microsoft-windows-beepsys_31bf3856ad364e35_6.0.6000.16386_none_c1e9df570ab23787\beep.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2008-01-18 21:49:52 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=1EC25CEA0DE6AC4718BF89F9E1778B57 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_a29e71c6\cdrom.sys [2008-01-18 21:49:52 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=1EC25CEA0DE6AC4718BF89F9E1778B57 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.0.6001.18000_none_5fa95be2a3c76a4a\cdrom.sys [2009-04-11 06:39:17 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=6B4BFFB9BECD728097024276430DB314 -- C:\Windows\System32\drivers\cdrom.sys [2009-04-11 06:39:17 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=6B4BFFB9BECD728097024276430DB314 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_c949a5b6\cdrom.sys [2009-04-11 06:39:17 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=6B4BFFB9BECD728097024276430DB314 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.0.6002.18005_none_6194d4eea0e93596\cdrom.sys [2006-11-02 10:51:44 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=8D1866E61AF096AE8B582454F5E4D303 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_e487f727\cdrom.sys [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2009-04-11 08:32:49 | 000,527,848 | ---- | M] (Microsoft Corporation) MD5=1357274D1883F68300AEADD15D7BBB42 -- C:\Windows\System32\drivers\ndis.sys [2009-04-11 08:32:49 | 000,527,848 | ---- | M] (Microsoft Corporation) MD5=1357274D1883F68300AEADD15D7BBB42 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.0.6002.18005_none_a9b2a4d31930d864\ndis.sys [2006-11-02 11:51:42 | 000,500,840 | ---- | M] (Microsoft Corporation) MD5=227C11E1E7CF6EF8AFB2A238D209760C -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.0.6000.16386_none_a59069cb1f23fc44\ndis.sys [2008-01-18 23:43:32 | 000,529,464 | ---- | M] (Microsoft Corporation) MD5=9BDC71790FA08F0A0B5F10462B1BD0B1 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.0.6001.18000_none_a7c72bc71c0f0d18\ndis.sys [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2009-04-11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe [2009-04-11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe [2006-11-02 11:45:57 | 000,308,224 | ---- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6000.16386_none_6d8c3f1ad8066b21\winlogon.exe [2008-01-18 23:33:38 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 255 bytes -> C:\ProgramData\TEMP:6BE50C2B @Alternate Data Stream - 225 bytes -> C:\ProgramData\TEMP:4EE74317 < End of report > SRV - [2010-07-30 10:11:36 | 001,935,656 | ---- | M] (Emsi Software GmbH) [Auto | Running] -- C:\Program Files\Emsisoft Anti-Malware\a2service.exe -- (a2AntiMalware) SRV - [2010-07-21 12:06:05 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2010-05-26 13:05:04 | 002,437,176 | ---- | M] (Check Point Software Technologies LTD) [Auto | Running] -- C:\Windows\System32\ZoneLabs\vsmon.exe -- (vsmon) SRV - [2010-05-03 19:01:00 | 003,658,096 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\System32\GameMon.des -- (npggsvc) SRV - [2010-04-01 13:33:19 | 000,267,432 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2010-02-24 10:28:09 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2009-09-25 03:27:04 | 000,793,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache) SRV - [2009-05-16 05:23:56 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility) SRV - [2008-01-18 23:38:26 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2005-08-02 23:18:49 | 000,086,016 | ---- | M] (CACE Technologies) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vsdatant.win7.sys -- (vsdatant7) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive) DRV - [2010-08-15 10:42:15 | 000,041,816 | ---- | M] (Emsi Software GmbH) [File_System | System | Running] -- C:\Program Files\Emsisoft Anti-Malware\a2dix86.sys -- (a2injectiondriver) DRV - [2010-07-19 19:29:56 | 000,071,008 | ---- | M] (Emsi Software GmbH) [File_System | On_Demand | Running] -- C:\Program Files\Emsisoft Anti-Malware\a2accx86.sys -- (a2acc) DRV - [2010-06-05 19:21:15 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd) DRV - [2010-05-15 16:30:46 | 000,457,304 | ---- | M] (Check Point Software Technologies LTD) [Kernel | System | Running] -- C:\Windows\System32\drivers\vsdatant.sys -- (Vsdatant) DRV - [2010-05-05 09:40:32 | 000,011,776 | ---- | M] (Emsi Software GmbH) [Kernel | System | Running] -- C:\Program Files\Emsisoft Anti-Malware\a2util32.sys -- (a2util) DRV - [2010-04-12 10:44:34 | 000,059,388 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu) DRV - [2010-03-26 12:24:58 | 003,048,096 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2010-03-01 10:05:24 | 000,124,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2010-02-16 14:24:01 | 000,060,936 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2009-09-02 05:09:24 | 000,176,128 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169) DRV - [2009-05-16 06:01:22 | 004,933,632 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) DRV - [2009-05-11 10:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009-04-24 07:43:36 | 000,095,544 | ---- | M] (ATI Research Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV - [2006-11-02 11:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300) DRV - [2006-11-02 11:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx) DRV - [2006-11-02 11:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor) DRV - [2006-11-02 11:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci) DRV - [2006-11-02 11:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci) DRV - [2006-11-02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV) DRV - [2006-11-02 11:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320) DRV - [2006-11-02 11:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2) DRV - [2006-11-02 11:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid) DRV - [2006-11-02 11:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx) DRV - [2006-11-02 11:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata) DRV - [2006-11-02 11:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m) DRV - [2006-11-02 11:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid) DRV - [2006-11-02 11:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960) DRV - [2006-11-02 11:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp) DRV - [2006-11-02 11:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4) DRV - [2006-11-02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor) DRV - [2006-11-02 11:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx) DRV - [2006-11-02 11:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas) DRV - [2006-11-02 11:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI) DRV - [2006-11-02 11:50:10 | 000,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2) DRV - [2006-11-02 11:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs) DRV - [2006-11-02 11:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc) DRV - [2006-11-02 11:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid) DRV - [2006-11-02 11:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi) DRV - [2006-11-02 11:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS) DRV - [2006-11-02 11:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx) DRV - [2006-11-02 11:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC) DRV - [2006-11-02 11:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3) DRV - [2006-11-02 11:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x) DRV - [2006-11-02 11:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi) DRV - [2006-11-02 11:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas) DRV - [2006-11-02 11:49:30 | 000,017,512 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide) DRV - [2006-11-02 11:49:28 | 000,016,488 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide) DRV - [2006-11-02 11:49:20 | 000,014,952 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide) DRV - [2006-11-02 10:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM) DRV - [2006-11-02 10:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer) DRV - [2006-11-02 10:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp) DRV - [2006-11-02 10:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo) DRV - [2006-11-02 10:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm) DRV - [2006-11-02 10:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm) DRV - [2006-11-02 09:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi) DRV - [2006-11-02 09:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R) DRV - [2005-08-02 23:10:13 | 000,032,512 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\npf.sys -- (NPF) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2383811976-2136801530-783135697-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKU\S-1-5-21-2383811976-2136801530-783135697-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 2 IE - HKU\S-1-5-21-2383811976-2136801530-783135697-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - HKLM\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\TrustChecker FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-05-15 15:37:28 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-08-24 09:55:50 | 000,000,000 | ---D | M] [2010-05-15 15:37:32 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\mozilla\Extensions [2010-09-18 14:54:38 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\mozilla\Firefox\Profiles\cj88mru7.default\extensions [2010-06-02 18:36:41 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Michal\AppData\Roaming\mozilla\Firefox\Profiles\cj88mru7.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-09-18 14:54:38 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2010-05-17 18:37:19 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2010-05-22 10:47:55 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010-09-07 14:59:31 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010-07-17 05:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll [2010-05-19 16:38:12 | 000,063,488 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll [2010-04-01 19:33:11 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2010-04-01 19:33:11 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2010-04-01 19:33:11 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2010-04-01 19:33:11 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2010-04-01 19:33:11 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010-04-01 19:33:11 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2006-09-18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found. O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [EPSON Stylus DX3800 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKLM..\Run: [ZoneAlarm Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD) O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.172.224.160 89.228.7.226 O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Michal\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\Michal\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{fca3d9ed-70c6-11df-b081-001d7d77753b}\Shell - "" = AutoRun O33 - MountPoints2\{fca3d9ed-70c6-11df-b081-001d7d77753b}\Shell\AutoRun\command - "" = J:\autorun.exe -- File not found O33 - MountPoints2\K\Shell - "" = AutoRun O33 - MountPoints2\K\Shell\AutoRun\command - "" = K:\setup.exe -- File not found O33 - MountPoints2\K\Shell\dinstall\command - "" = K:\DirectX9\DXSETUP.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2010-09-11 11:50:54 | 000,000,000 | ---D | C] -- C:\Program Files\Ashampoo [2010-09-07 14:59:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2010-09-01 12:56:20 | 000,000,000 | ---D | C] -- C:\Windows\Sun [2010-08-30 16:36:58 | 000,000,000 | ---D | C] -- C:\Users\Michal\Desktop\pacze [2010-08-30 12:33:11 | 000,000,000 | ---D | C] -- C:\Users\Michal\AppData\Roaming\Sierra [2010-08-30 12:33:11 | 000,000,000 | ---D | C] -- C:\Users\Michal\Documents\Empire Earth II [2010-08-30 12:26:55 | 000,000,000 | ---D | C] -- C:\Users\Michal\AppData\Roaming\InstallShield [2010-08-30 12:02:58 | 000,000,000 | ---D | C] -- C:\Users\Michal\Documents\JoWooD [2010-08-30 11:33:09 | 000,418,480 | ---- | C] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll [2010-08-30 11:33:09 | 000,115,432 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll [2010-08-30 11:33:09 | 000,000,000 | ---D | C] -- C:\Program Files\OpenAL [2010-08-26 15:37:13 | 000,000,000 | ---D | C] -- C:\Users\Michal\AppData\Roaming\Avira [2010-08-25 18:42:34 | 000,000,000 | ---D | C] -- C:\Users\Michal\AppData\Roaming\Teeworlds [2010-08-14 23:28:54 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2010-08-14 14:44:55 | 000,000,000 | ---D | C] -- C:\Users\Michal\Desktop\Particles [2010-08-14 14:40:01 | 000,000,000 | ---D | C] -- C:\Users\Michal\Desktop\champions [2010-08-10 17:14:03 | 000,000,000 | ---D | C] -- C:\Users\Michal\AppData\Local\PokerStars [2010-08-10 17:13:51 | 000,000,000 | ---D | C] -- C:\Program Files\PokerStars [2010-08-10 11:31:37 | 000,000,000 | ---D | C] -- C:\Program Files\Ventrilo [2010-08-09 17:38:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment [2010-07-30 11:59:52 | 000,000,000 | ---D | C] -- C:\Users\Michal\Desktop\09. Necropolis (2009) [2010-07-23 23:05:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Blizzard Entertainment [2010-07-23 17:18:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard [2010-07-23 17:10:11 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Blizzard Entertainment [2010-07-23 15:44:07 | 000,000,000 | ---D | C] -- C:\Users\Michal\AppData\Local\SpeedUpMyPC [2010-07-23 15:43:56 | 000,000,000 | ---D | C] -- C:\Users\Michal\AppData\Local\Przyspiesz_Komputer [2010-07-23 15:43:32 | 000,000,000 | ---D | C] -- C:\Program Files\Przyspiesz Komputer [2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2010-09-19 20:33:50 | 001,572,864 | -HS- | M] () -- C:\Users\Michal\NTUSER.DAT [2010-09-19 20:22:57 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempyC2292.html [2010-09-19 20:22:57 | 000,002,089 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempkg2292.html [2010-09-19 20:18:23 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-09-19 20:18:22 | 000,004,048 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2010-09-19 20:18:22 | 000,004,048 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2010-09-19 20:18:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-09-19 20:18:15 | 2145,902,592 | -HS- | M] () -- C:\hiberfil.sys [2010-09-19 20:16:57 | 000,524,288 | -HS- | M] () -- C:\Users\Michal\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms [2010-09-19 20:16:57 | 000,065,536 | -HS- | M] () -- C:\Users\Michal\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf [2010-09-19 20:16:32 | 003,430,682 | -H-- | M] () -- C:\Users\Michal\AppData\Local\IconCache.db [2010-09-19 19:44:01 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2383811976-2136801530-783135697-1000UA.job [2010-09-19 15:51:28 | 000,167,277 | ---- | M] () -- C:\Users\Michal\Desktop\Mich to nup i naf to nup.docx [2010-09-18 23:25:16 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempfm5488.html [2010-09-18 22:21:30 | 000,223,300 | ---- | M] () -- C:\Users\Michal\Desktop\lol!.jpg [2010-09-18 19:29:21 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempgw4340.html [2010-09-18 18:26:09 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempeF5076.html [2010-09-18 15:08:05 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempgA3508.html [2010-09-18 14:52:56 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempiF3764.html [2010-09-18 14:52:56 | 000,002,089 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempNB3764.html [2010-09-18 10:45:45 | 000,002,047 | ---- | M] () -- C:\Users\Michal\Desktop\Google Chrome.lnk [2010-09-17 22:36:28 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempjT2512.html [2010-09-17 22:36:28 | 000,002,089 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempOG2512.html [2010-09-17 21:24:57 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempWO3496.html [2010-09-17 19:33:20 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempXK1124.html [2010-09-17 14:29:23 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempYB1384.html [2010-09-17 14:29:23 | 000,002,089 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempPx1384.html [2010-09-16 18:33:11 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempHz3648.html [2010-09-16 17:36:42 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempVR3536.html [2010-09-14 16:38:29 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempukC268.html [2010-09-14 16:21:35 | 001,477,664 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2010-09-14 16:21:35 | 000,665,166 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2010-09-14 16:21:35 | 000,589,884 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2010-09-14 16:21:35 | 000,127,958 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2010-09-14 16:21:35 | 000,101,896 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2010-09-13 10:46:56 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempda1440.html [2010-09-13 09:40:34 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempxo2436.html [2010-09-12 15:30:05 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempUQ1092.html [2010-09-12 15:27:26 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempYB1420.html [2010-09-11 17:00:20 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempml4304.html [2010-09-11 16:15:55 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempMg3160.html [2010-09-11 15:01:00 | 000,005,632 | ---- | M] () -- C:\Users\Michal\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-09-11 12:08:32 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Temprr3212.html [2010-09-11 11:52:20 | 000,000,986 | ---- | M] () -- C:\Users\Public\Desktop\Ashampoo Burning Studio 10.lnk [2010-09-11 10:38:07 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TemppY3240.html [2010-09-11 10:03:25 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempMg3152.html [2010-09-11 08:44:00 | 000,001,010 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2383811976-2136801530-783135697-1000Core.job [2010-09-10 22:14:27 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempwx3364.html [2010-09-10 21:30:01 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempYV2592.html [2010-09-10 14:26:21 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempth2680.html [2010-09-10 13:53:28 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempybo900.html [2010-09-09 20:20:17 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempHJ5980.html [2010-09-09 19:56:51 | 000,016,215 | ---- | M] () -- C:\Users\Michal\Documents\Windows_XP_Professional_SP3_VLK_[PL]_[IE8 WMP11 SATA]_[Wrzesien2009-NiKKA][Torrenty.org].torrent [2010-09-09 18:13:48 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempqi3204.html [2010-09-08 16:23:54 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempGLW900.html [2010-09-07 19:27:21 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempBb5428.html [2010-09-07 17:36:42 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempJZ5436.html [2010-09-06 16:12:51 | 000,000,574 | ---- | M] () -- C:\Users\Public\Desktop\Gimnazjum klasa 1 - Puls życia.lnk [2010-09-06 10:07:23 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempEQ3864.html [2010-09-04 16:33:46 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempgx6012.html [2010-09-04 13:56:01 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempVp4228.html [2010-09-04 12:18:37 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempVa2816.html [2010-09-04 10:24:11 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Templb2400.html [2010-09-04 10:18:36 | 001,199,275 | ---- | M] () -- C:\Users\Michal\Documents\DSCF3053.jpg [2010-09-03 21:20:12 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempPM6056.html [2010-09-03 20:27:57 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempvw2564.html [2010-09-03 15:44:39 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempoJ2428.html [2010-09-02 16:29:51 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempYf2888.html [2010-09-02 15:46:17 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempba1108.html [2010-09-02 14:15:50 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempMo3012.html [2010-09-01 20:23:48 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempyr2476.html [2010-09-01 19:41:40 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempvQ4032.html [2010-09-01 15:24:30 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempCa3420.html [2010-09-01 10:05:51 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempyFU580.html [2010-08-30 16:02:47 | 000,000,671 | ---- | M] () -- C:\Users\Public\Desktop\World of Warcraft.lnk [2010-08-30 12:32:00 | 000,000,510 | ---- | M] () -- C:\Users\Public\Desktop\Uruchom Empire Earth II.lnk [2010-08-30 11:58:50 | 000,000,747 | ---- | M] () -- C:\Users\Public\Desktop\Sąsiedzi z Piekła Rodem 2 - Na Wakacjach.lnk [2010-08-30 11:58:50 | 000,000,747 | ---- | M] () -- C:\Users\Public\Desktop\Sąsiedzi z Piekła Rodem 1 - Słodka Zemsta.lnk [2010-08-30 11:33:09 | 000,418,480 | ---- | M] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll [2010-08-30 11:33:09 | 000,115,432 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll [2010-08-30 11:06:15 | 000,000,578 | ---- | M] () -- C:\Users\Public\Desktop\Conflict Denied Ops.lnk [2010-08-30 10:27:04 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempkB4316.html [2010-08-29 12:45:26 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempuv3572.html [2010-08-28 09:05:31 | 000,001,356 | ---- | M] () -- C:\Users\Michal\AppData\Local\d3d9caps.dat [2010-08-27 20:51:46 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempXE5032.html [2010-08-27 09:59:59 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempBp3272.html [2010-08-26 20:48:14 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempMe5624.html [2010-08-26 17:07:20 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempvg4672.html [2010-08-26 15:03:36 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempQW6104.html [2010-08-25 18:44:36 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempwt5224.html [2010-08-25 13:46:59 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempgp5000.html [2010-08-24 19:07:02 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempEL2820.html [2010-08-24 18:22:01 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempJl4584.html [2010-08-24 15:47:01 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempmr5432.html [2010-08-24 12:46:36 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempTas840.html [2010-08-24 09:55:51 | 000,001,887 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk [2010-08-23 20:37:17 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TemplP3616.html [2010-08-23 13:09:55 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempsC1712.html [2010-08-23 10:45:40 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempLg3424.html [2010-08-23 08:15:31 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempiv4044.html [2010-08-22 16:42:36 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempnD1372.html [2010-08-22 16:23:12 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempwd3500.html [2010-08-21 20:19:42 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempYl2464.html [2010-08-21 14:37:21 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TemprM3676.html [2010-08-21 11:37:06 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempSR2304.html [2010-08-21 11:26:23 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempyx3728.html [2010-08-21 10:31:16 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TemprG3676.html [2010-08-20 21:18:35 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempdv5004.html [2010-08-20 20:17:18 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempYp5872.html [2010-08-20 19:17:19 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempiD3308.html [2010-08-20 17:26:58 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempsm2096.html [2010-08-20 16:45:46 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempDj6088.html [2010-08-20 15:52:38 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempis3832.html [2010-08-20 14:47:16 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempyv4344.html [2010-08-20 14:26:07 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempiO2580.html [2010-08-20 13:09:23 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempmo3696.html [2010-08-19 16:57:29 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempXC5308.html [2010-08-19 14:38:35 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempuI3016.html [2010-08-19 12:40:19 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempBQ2344.html [2010-08-19 11:29:53 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempda2060.html [2010-08-19 09:46:27 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempJN2612.html [2010-08-18 15:53:55 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempMV3420.html [2010-08-18 14:25:46 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempYY3664.html [2010-08-18 13:27:10 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempQZ1156.html [2010-08-18 10:59:33 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Temptc3716.html [2010-08-18 09:55:26 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TemplQ2564.html [2010-08-18 09:28:45 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempim2508.html [2010-08-16 22:50:15 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempiv4848.html [2010-08-16 16:04:17 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempZI5824.html [2010-08-16 08:38:41 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempyp1988.html [2010-08-15 22:44:52 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempsa5352.html [2010-08-15 21:36:08 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempvT6120.html [2010-08-15 21:35:31 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempvN1008.html [2010-08-15 18:21:00 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempDD5660.html [2010-08-14 23:28:50 | 152,562,207 | ---- | M] () -- C:\Windows\MEMORY.DMP [2010-08-12 12:02:44 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempkmG828.html [2010-08-12 11:47:13 | 000,385,416 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2010-08-11 22:37:27 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempIw5796.html [2010-08-11 18:37:26 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempnp4912.html [2010-08-11 16:20:22 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempPQ1512.html [2010-08-11 14:36:28 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempbk5156.html [2010-08-11 12:32:28 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempuF1468.html [2010-08-11 11:03:51 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempfA3304.html [2010-08-10 17:14:02 | 000,000,858 | ---- | M] () -- C:\Users\Public\Desktop\PokerStars.lnk [2010-08-10 14:06:08 | 000,221,395 | ---- | M] () -- C:\Users\Michal\Desktop\asdas.jpg [2010-08-10 13:25:49 | 000,218,350 | ---- | M] () -- C:\Users\Michal\Desktop\lul.jpg [2010-08-10 11:31:41 | 000,000,262 | ---- | M] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini [2010-08-10 11:31:39 | 000,000,752 | ---- | M] () -- C:\Users\Public\Desktop\Ventrilo.lnk [2010-08-10 11:22:15 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempeL3308.html [2010-08-10 10:59:33 | 000,138,592 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2010-08-10 10:59:13 | 000,219,128 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr [2010-08-10 09:10:05 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempwn3704.html [2010-08-09 19:58:14 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Temprq6000.html [2010-08-09 17:30:25 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempVP2432.html [2010-08-09 16:33:21 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempuj3296.html [2010-08-09 12:35:54 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempGi3212.html [2010-08-09 12:35:54 | 000,002,089 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempeW3212.html [2010-08-08 16:08:30 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempqW2996.html [2010-08-08 16:01:28 | 000,103,303 | ---- | M] () -- C:\Users\Michal\Desktop\masteries.jpg [2010-08-08 13:18:31 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempCw2684.html [2010-08-08 09:56:48 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempWp1872.html [2010-08-08 09:37:03 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempVhJ928.html [2010-08-08 09:37:03 | 000,002,089 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempENz928.html [2010-08-08 09:33:53 | 000,632,259 | ---- | M] () -- C:\Users\Michal\Documents\150 up xd.jpg [2010-08-07 21:59:33 | 000,000,511 | ---- | M] () -- C:\Users\Public\Desktop\Heroes of Might and Magic III - Złota Edycja.lnk [2010-07-29 10:49:31 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempUT3288.html [2010-07-29 10:49:31 | 000,002,089 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempdD3288.html [2010-07-28 10:11:18 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempgH2240.html [2010-07-24 20:28:10 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempEN4540.html [2010-07-24 15:23:38 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempEe5176.html [2010-07-24 14:21:33 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Temped4160.html [2010-07-24 12:28:16 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempaL5676.html [2010-07-24 11:50:02 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TemptE4204.html [2010-07-24 07:45:40 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempu36792.html [2010-07-23 23:05:28 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempvQ3144.html [2010-07-23 21:20:06 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempbZ3124.html [2010-07-23 17:27:19 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempoGf900.html [2010-07-23 16:18:12 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempHC3204.html [2010-07-23 14:32:22 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempdg2532.html [2010-07-23 14:01:44 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempwR6092.html [2010-07-23 13:26:13 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempsq3288.html [2010-07-23 10:34:32 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\Tempcz5552.html [2010-07-23 09:59:18 | 000,392,254 | ---- | M] () -- C:\Users\Michal\Documents\20100722_003.jpg [2010-07-23 09:40:23 | 000,555,492 | ---- | M] () -- C:\Users\Michal\Documents\20100723_002.jpg [2010-07-22 21:19:16 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempmB4920.html [2010-07-22 20:53:47 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempKz4960.html [2010-07-22 15:11:27 | 000,002,432 | ---- | M] () -- C:\Users\Michal\AppData\Local\TempJr2464.html [2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-09-19 20:22:57 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempyC2292.html [2010-09-19 20:22:57 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempkg2292.html [2010-09-19 15:04:15 | 000,167,277 | ---- | C] () -- C:\Users\Michal\Desktop\Mich to nup i naf to nup.docx [2010-09-18 23:03:11 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempfm5488.html [2010-09-18 22:21:29 | 000,223,300 | ---- | C] () -- C:\Users\Michal\Desktop\lol!.jpg [2010-09-18 19:17:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempgw4340.html [2010-09-18 17:28:50 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempeF5076.html [2010-09-18 14:55:02 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempgA3508.html [2010-09-18 14:51:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempiF3764.html [2010-09-18 14:51:33 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempNB3764.html [2010-09-17 22:31:01 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempjT2512.html [2010-09-17 22:31:01 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempOG2512.html [2010-09-17 20:12:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempWO3496.html [2010-09-17 19:32:53 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXK1124.html [2010-09-17 13:59:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYB1384.html [2010-09-17 13:59:22 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPx1384.html [2010-09-16 17:56:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempHz3648.html [2010-09-16 17:22:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVR3536.html [2010-09-14 15:43:13 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempukC268.html [2010-09-13 10:25:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempda1440.html [2010-09-13 09:05:38 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempxo2436.html [2010-09-12 15:28:35 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempUQ1092.html [2010-09-12 15:24:19 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYB1420.html [2010-09-11 16:57:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempml4304.html [2010-09-11 16:02:41 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMg3160.html [2010-09-11 11:52:20 | 000,000,986 | ---- | C] () -- C:\Users\Public\Desktop\Ashampoo Burning Studio 10.lnk [2010-09-11 11:50:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temprr3212.html [2010-09-11 10:24:41 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemppY3240.html [2010-09-11 08:45:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMg3152.html [2010-09-10 22:02:16 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempwx3364.html [2010-09-10 21:09:51 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYV2592.html [2010-09-10 14:04:03 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempth2680.html [2010-09-10 13:51:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempybo900.html [2010-09-09 19:56:48 | 000,016,215 | ---- | C] () -- C:\Users\Michal\Documents\Windows_XP_Professional_SP3_VLK_[PL]_[IE8 WMP11 SATA]_[Wrzesien2009-NiKKA][Torrenty.org].torrent [2010-09-09 19:50:50 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempHJ5980.html [2010-09-09 17:56:15 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempqi3204.html [2010-09-08 16:22:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempGLW900.html [2010-09-07 19:20:53 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBb5428.html [2010-09-07 17:10:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempJZ5436.html [2010-09-06 16:12:51 | 000,000,574 | ---- | C] () -- C:\Users\Public\Desktop\Gimnazjum klasa 1 - Puls życia.lnk [2010-09-06 09:43:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEQ3864.html [2010-09-04 15:14:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempgx6012.html [2010-09-04 13:07:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVp4228.html [2010-09-04 11:59:55 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVa2816.html [2010-09-04 10:17:57 | 001,199,275 | ---- | C] () -- C:\Users\Michal\Documents\DSCF3053.jpg [2010-09-04 09:59:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Templb2400.html [2010-09-03 21:08:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPM6056.html [2010-09-03 20:02:35 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempvw2564.html [2010-09-03 15:20:38 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempoJ2428.html [2010-09-02 16:24:04 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYf2888.html [2010-09-02 15:38:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempba1108.html [2010-09-02 14:03:02 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMo3012.html [2010-09-01 20:18:35 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyr2476.html [2010-09-01 19:20:27 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempvQ4032.html [2010-09-01 15:13:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempCa3420.html [2010-09-01 09:16:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempyFU580.html [2010-08-30 12:32:00 | 000,000,510 | ---- | C] () -- C:\Users\Public\Desktop\Uruchom Empire Earth II.lnk [2010-08-30 11:58:50 | 000,000,747 | ---- | C] () -- C:\Users\Public\Desktop\Sąsiedzi z Piekła Rodem 2 - Na Wakacjach.lnk [2010-08-30 11:58:50 | 000,000,747 | ---- | C] () -- C:\Users\Public\Desktop\Sąsiedzi z Piekła Rodem 1 - Słodka Zemsta.lnk [2010-08-30 11:06:15 | 000,000,578 | ---- | C] () -- C:\Users\Public\Desktop\Conflict Denied Ops.lnk [2010-08-30 10:24:32 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempkB4316.html [2010-08-29 12:32:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempuv3572.html [2010-08-27 20:51:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXE5032.html [2010-08-27 09:23:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBp3272.html [2010-08-26 20:39:30 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMe5624.html [2010-08-26 15:42:21 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempvg4672.html [2010-08-26 14:54:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQW6104.html [2010-08-25 18:08:14 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempwt5224.html [2010-08-25 13:27:03 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempgp5000.html [2010-08-24 19:06:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEL2820.html [2010-08-24 17:34:31 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempJl4584.html [2010-08-24 15:14:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempmr5432.html [2010-08-24 12:34:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempTas840.html [2010-08-23 20:30:13 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemplP3616.html [2010-08-23 12:29:51 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempsC1712.html [2010-08-23 09:06:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempLg3424.html [2010-08-23 08:14:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempiv4044.html [2010-08-22 16:37:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempnD1372.html [2010-08-22 16:11:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempwd3500.html [2010-08-21 20:00:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYl2464.html [2010-08-21 14:19:58 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemprM3676.html [2010-08-21 11:27:57 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempSR2304.html [2010-08-21 11:22:13 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyx3728.html [2010-08-21 10:25:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemprG3676.html [2010-08-20 21:18:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempdv5004.html [2010-08-20 20:00:14 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYp5872.html [2010-08-20 19:15:11 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempiD3308.html [2010-08-20 17:21:31 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempsm2096.html [2010-08-20 16:38:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempDj6088.html [2010-08-20 15:28:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempis3832.html [2010-08-20 14:39:59 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyv4344.html [2010-08-20 14:18:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempiO2580.html [2010-08-20 13:05:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempmo3696.html [2010-08-19 15:51:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXC5308.html [2010-08-19 14:22:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempuI3016.html [2010-08-19 12:35:31 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBQ2344.html [2010-08-19 11:15:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempda2060.html [2010-08-19 09:00:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempJN2612.html [2010-08-18 15:51:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMV3420.html [2010-08-18 13:56:16 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYY3664.html [2010-08-18 13:23:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQZ1156.html [2010-08-18 10:52:28 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temptc3716.html [2010-08-18 09:55:13 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemplQ2564.html [2010-08-18 09:05:59 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempim2508.html [2010-08-16 22:40:27 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempiv4848.html [2010-08-16 15:53:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempZI5824.html [2010-08-16 08:35:21 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyp1988.html [2010-08-15 22:26:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempsa5352.html [2010-08-15 21:35:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempvT6120.html [2010-08-15 21:33:49 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempvN1008.html [2010-08-15 18:19:50 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempDD5660.html [2010-08-14 23:28:50 | 152,562,207 | ---- | C] () -- C:\Windows\MEMORY.DMP [2010-08-12 11:52:49 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempkmG828.html [2010-08-11 22:09:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempIw5796.html [2010-08-11 18:30:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempnp4912.html [2010-08-11 16:08:32 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPQ1512.html [2010-08-11 14:28:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempbk5156.html [2010-08-11 11:36:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempuF1468.html [2010-08-11 10:53:01 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempfA3304.html [2010-08-10 17:14:02 | 000,000,858 | ---- | C] () -- C:\Users\Public\Desktop\PokerStars.lnk [2010-08-10 14:06:08 | 000,221,395 | ---- | C] () -- C:\Users\Michal\Desktop\asdas.jpg [2010-08-10 13:25:49 | 000,218,350 | ---- | C] () -- C:\Users\Michal\Desktop\lul.jpg [2010-08-10 11:31:39 | 000,000,752 | ---- | C] () -- C:\Users\Public\Desktop\Ventrilo.lnk [2010-08-10 11:31:35 | 000,000,262 | ---- | C] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini [2010-08-10 11:02:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempeL3308.html [2010-08-10 09:03:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempwn3704.html [2010-08-09 19:35:16 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temprq6000.html [2010-08-09 17:19:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVP2432.html [2010-08-09 16:09:27 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempuj3296.html [2010-08-09 12:11:44 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempGi3212.html [2010-08-09 12:11:44 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempeW3212.html [2010-08-08 16:01:28 | 000,103,303 | ---- | C] () -- C:\Users\Michal\Desktop\masteries.jpg [2010-08-08 15:00:30 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempqW2996.html [2010-08-08 13:14:59 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempCw2684.html [2010-08-08 09:37:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempWp1872.html [2010-08-08 09:33:32 | 000,632,259 | ---- | C] () -- C:\Users\Michal\Documents\150 up xd.jpg [2010-08-08 09:27:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVhJ928.html [2010-08-08 09:27:06 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempENz928.html [2010-08-07 21:59:33 | 000,000,511 | ---- | C] () -- C:\Users\Public\Desktop\Heroes of Might and Magic III - Złota Edycja.lnk [2010-07-29 10:40:57 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempUT3288.html [2010-07-29 10:40:57 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempdD3288.html [2010-07-28 09:57:27 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempgH2240.html [2010-07-24 20:20:32 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEN4540.html [2010-07-24 14:53:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEe5176.html [2010-07-24 14:13:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temped4160.html [2010-07-24 12:18:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempaL5676.html [2010-07-24 11:31:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemptE4204.html [2010-07-24 07:39:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempu36792.html [2010-07-23 23:05:00 | 000,000,671 | ---- | C] () -- C:\Users\Public\Desktop\World of Warcraft.lnk [2010-07-23 23:01:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempvQ3144.html [2010-07-23 21:09:16 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempbZ3124.html [2010-07-23 17:09:41 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempoGf900.html [2010-07-23 15:42:19 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempHC3204.html [2010-07-23 14:24:07 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempdg2532.html [2010-07-23 14:01:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempwR6092.html [2010-07-23 12:53:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempsq3288.html [2010-07-23 09:57:24 | 000,392,254 | ---- | C] () -- C:\Users\Michal\Documents\20100722_003.jpg [2010-07-23 09:39:29 | 000,555,492 | ---- | C] () -- C:\Users\Michal\Documents\20100723_002.jpg [2010-07-23 09:33:35 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempcz5552.html [2010-07-22 21:13:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempmB4920.html [2010-07-22 20:21:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempKz4960.html [2010-07-22 15:06:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempJr2464.html [2010-07-21 20:30:28 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempti3608.html [2010-07-21 16:20:21 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempGLC552.html [2010-07-21 09:47:23 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempAp3832.html [2010-07-20 15:25:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempyM3832.html [2010-07-20 10:58:35 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempwb1400.html [2010-07-19 18:43:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempkb2540.html [2010-07-19 17:30:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempyV4052.html [2010-07-19 17:30:47 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBD4052.html [2010-07-19 13:05:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempkP3808.html [2010-07-18 20:53:44 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQQ5228.html [2010-07-18 20:11:15 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBL3844.html [2010-07-18 19:24:13 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXh5388.html [2010-07-17 11:32:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyw3488.html [2010-07-16 17:37:27 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQY4420.html [2010-07-16 16:56:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempke4796.html [2010-07-15 11:29:15 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempZs5148.html [2010-07-15 10:08:11 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYw3424.html [2010-07-14 21:20:35 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempho1956.html [2010-07-14 21:20:35 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temptc1956.html [2010-07-14 20:13:53 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXk3280.html [2010-07-14 19:17:53 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempmN3860.html [2010-07-13 21:56:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemphP1228.html [2010-07-13 18:35:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempzdy168.html [2010-07-13 16:39:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempWA4008.html [2010-07-13 14:20:03 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempqR1776.html [2010-07-13 13:55:55 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPa1864.html [2010-07-13 09:34:30 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempRI2348.html [2010-07-12 21:36:21 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEH3400.html [2010-07-12 20:36:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempDk1320.html [2010-07-12 20:36:00 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempdy1320.html [2010-07-10 19:13:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQW4372.html [2010-07-10 17:04:57 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempvA4232.html [2010-07-10 16:46:18 | 000,138,592 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2010-07-10 16:46:18 | 000,022,328 | ---- | C] () -- C:\Users\Michal\AppData\Roaming\PnkBstrK.sys [2010-07-10 16:45:31 | 000,000,269 | ---- | C] () -- C:\Windows\game.ini [2010-07-10 12:01:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQY6036.html [2010-07-10 10:45:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempaf3180.html [2010-07-09 21:04:40 | 000,041,872 | ---- | C] () -- C:\Windows\System32\xfcodec.dll [2010-07-08 21:08:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemphU4980.html [2010-07-08 18:49:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPe4652.html [2010-07-08 17:17:43 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempKW4892.html [2010-07-08 16:37:01 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempCy2124.html [2010-07-08 14:48:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQq4488.html [2010-07-08 13:10:51 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temppt4072.html [2010-07-08 12:33:05 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempfC5508.html [2010-07-08 12:33:05 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPk5508.html [2010-07-08 12:01:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBj4076.html [2010-07-08 11:03:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYJ1720.html [2010-07-08 09:21:37 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempwl4692.html [2010-07-07 20:46:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempxN4956.html [2010-07-07 20:46:29 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempbP4956.html [2010-07-07 18:07:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYI1876.html [2010-07-07 15:20:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempLi4972.html [2010-07-07 12:51:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBq4892.html [2010-07-07 12:30:02 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMI5388.html [2010-07-07 11:10:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempDe5144.html [2010-07-07 10:57:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempot3608.html [2010-07-07 09:04:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemprZ2216.html [2010-07-06 16:38:23 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempdr3832.html [2010-07-06 16:03:51 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempsV2780.html [2010-07-06 16:02:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempJB1612.html [2010-07-06 16:02:09 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempgC1612.html [2010-07-04 14:02:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemptI3452.html [2010-07-04 12:39:01 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempnu5400.html [2010-07-04 09:57:44 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempxZ3000.html [2010-07-03 22:46:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempye5680.html [2010-07-03 16:12:15 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempmq5512.html [2010-07-03 09:07:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQk3404.html [2010-07-03 07:42:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempnT3768.html [2010-07-02 19:55:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempFp4088.html [2010-07-02 17:54:49 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEsX304.html [2010-07-02 14:07:41 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBC3924.html [2010-07-02 11:17:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempxk2244.html [2010-07-02 10:52:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temphv3464.html [2010-07-02 09:52:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempiV2076.html [2010-07-01 17:05:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPC1168.html [2010-07-01 17:05:18 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempwE1168.html [2010-06-30 11:19:39 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYy4896.html [2010-06-30 10:25:27 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempCi2648.html [2010-06-30 09:32:39 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPj1100.html [2010-06-29 22:02:50 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempUH5036.html [2010-06-29 14:50:58 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempAb5012.html [2010-06-29 13:29:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyv5672.html [2010-06-28 21:39:43 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempcg4844.html [2010-06-28 18:57:11 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempez4068.html [2010-06-28 16:23:30 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempthD540.html [2010-06-27 21:17:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempGa4924.html [2010-06-27 17:35:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempKM5440.html [2010-06-27 16:30:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPz4032.html [2010-06-27 09:35:37 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempbO3132.html [2010-06-26 14:23:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempqG6120.html [2010-06-26 12:48:48 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempeH2844.html [2010-06-26 11:15:49 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempoK3284.html [2010-06-26 10:56:30 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempNLM468.html [2010-06-26 10:41:51 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYiA216.html [2010-06-25 21:44:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempqI1512.html [2010-06-25 20:17:36 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempSr1776.html [2010-06-25 18:58:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempZS4528.html [2010-06-25 17:56:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempRn6012.html [2010-06-25 15:36:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempqw3296.html [2010-06-25 12:32:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempNB4200.html [2010-06-25 11:48:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempkT4512.html [2010-06-25 11:01:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempLj5160.html [2010-06-25 09:33:01 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempFx1396.html [2010-06-24 21:54:55 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempWV4352.html [2010-06-24 21:54:55 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempsp4352.html [2010-06-24 18:56:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempaG4344.html [2010-06-24 17:40:42 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempjU2112.html [2010-06-24 13:52:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temphe3272.html [2010-06-24 10:15:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemptI3292.html [2010-06-24 08:27:51 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYY3336.html [2010-06-23 21:00:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempvH2092.html [2010-06-23 17:32:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempnW4936.html [2010-06-23 15:51:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempqF3504.html [2010-06-23 11:12:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempbe5596.html [2010-06-22 22:24:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMV5016.html [2010-06-22 21:38:45 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempIM3264.html [2010-06-22 17:16:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempNV4976.html [2010-06-22 16:20:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempJy4992.html [2010-06-22 14:48:42 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempxx6036.html [2010-06-22 13:53:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempql1436.html [2010-06-22 13:05:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempZS4532.html [2010-06-22 10:48:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempJN3864.html [2010-06-21 20:43:30 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempTt2232.html [2010-06-21 19:44:23 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempSw2712.html [2010-06-21 14:45:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempBV5660.html [2010-06-21 13:29:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempmG3944.html [2010-06-21 12:01:58 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempgE2284.html [2010-06-20 19:25:43 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempdF2668.html [2010-06-20 15:31:38 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempaXd636.html [2010-06-20 15:31:38 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempdhz636.html [2010-06-20 10:48:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempfv3696.html [2010-06-20 10:27:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempIV3336.html [2010-06-20 10:27:00 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempff3336.html [2010-06-19 23:40:31 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempsJ3868.html [2010-06-19 20:21:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempZu4456.html [2010-06-19 15:55:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempbh2680.html [2010-06-19 15:48:38 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXM2948.html [2010-06-19 14:27:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemptZ4976.html [2010-06-19 13:56:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempCW1204.html [2010-06-19 08:46:45 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempxR1240.html [2010-06-18 17:14:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempGs3768.html [2010-06-18 15:13:13 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempLP2404.html [2010-06-18 14:06:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyc3420.html [2010-06-18 10:49:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEW4420.html [2010-06-17 20:31:36 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempcA3816.html [2010-06-17 15:44:04 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempRAY880.html [2010-06-17 10:34:19 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempbt2916.html [2010-06-17 07:27:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempdi2332.html [2010-06-16 20:56:50 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemptM5720.html [2010-06-16 16:38:21 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempTh4408.html [2010-06-16 11:40:50 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempAA3808.html [2010-06-16 10:11:04 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempAG1508.html [2010-06-16 08:42:11 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempNB3916.html [2010-06-16 08:00:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemplN3876.html [2010-06-15 21:06:19 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempqX3484.html [2010-06-15 20:07:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temphz4996.html [2010-06-15 18:02:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempbT5936.html [2010-06-15 14:42:23 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempJP3348.html [2010-06-15 14:17:01 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempeo4408.html [2010-06-15 13:46:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempaU4784.html [2010-06-14 19:13:44 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempmJ1540.html [2010-06-14 19:09:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempez2900.html [2010-06-14 12:48:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQn3448.html [2010-06-13 15:43:37 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXU5876.html [2010-06-13 11:32:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempgZd660.html [2010-06-13 10:48:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempgC3392.html [2010-06-13 09:57:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempIK3756.html [2010-06-13 09:27:51 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPw3884.html [2010-06-12 19:59:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQc5324.html [2010-06-12 19:33:03 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempWn3376.html [2010-06-12 15:19:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempjh5784.html [2010-06-12 12:42:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempTO4204.html [2010-06-12 09:32:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temppl2908.html [2010-06-12 09:16:17 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempHV2184.html [2010-06-12 09:16:17 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempaV2184.html [2010-06-11 21:34:36 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempAV2224.html [2010-06-11 20:31:32 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempKt5052.html [2010-06-11 18:00:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempdJ3408.html [2010-06-11 14:47:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempxLj156.html [2010-06-11 14:10:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemptQ1276.html [2010-06-10 15:43:59 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVt3688.html [2010-06-09 19:25:41 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempzJ5156.html [2010-06-09 14:47:14 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempvFk124.html [2010-06-08 17:52:38 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemphL3204.html [2010-06-08 17:13:37 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempzIA728.html [2010-06-08 14:35:51 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempnI2264.html [2010-06-08 13:52:43 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQg3580.html [2010-06-07 19:50:07 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempnV2580.html [2010-06-07 16:24:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXq2904.html [2010-06-07 15:34:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempsm2560.html [2010-06-07 15:11:21 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMN2328.html [2010-06-07 13:55:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemprS2472.html [2010-06-07 12:58:39 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPKH992.html [2010-06-06 08:59:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemplV3724.html [2010-06-05 20:22:15 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempva1388.html [2010-06-05 19:21:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempC11652.html [2010-06-05 19:21:15 | 000,691,696 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys [2010-06-05 18:59:31 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temprf3756.html [2010-06-05 17:03:41 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMR6780.html [2010-06-05 13:45:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempTn4664.html [2010-06-05 12:08:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempfH5656.html [2010-06-05 10:16:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemppT2660.html [2010-06-05 07:53:50 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempoO3080.html [2010-06-04 20:18:15 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempia6808.html [2010-06-04 18:19:57 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXR6332.html [2010-06-04 17:17:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempdD4356.html [2010-06-04 14:36:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXO3652.html [2010-06-04 11:08:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempqmF876.html [2010-06-04 10:13:35 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempDn4600.html [2010-06-04 10:10:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempDm4056.html [2010-06-04 08:56:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempjbz468.html [2010-06-03 21:01:16 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempqh4220.html [2010-06-03 19:38:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temphh3824.html [2010-06-03 16:37:35 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempWZ3032.html [2010-06-03 16:03:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempvLz460.html [2010-06-03 12:20:52 | 000,005,632 | ---- | C] () -- C:\Users\Michal\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-06-02 21:38:23 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEq2980.html [2010-06-02 20:01:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXm4076.html [2010-06-02 19:14:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempFU6108.html [2010-06-02 18:43:48 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyh4256.html [2010-06-02 17:51:27 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempSH2904.html [2010-06-02 17:51:27 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempiX2904.html [2010-06-02 16:47:27 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemptL1904.html [2010-06-02 14:45:01 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempcv3916.html [2010-06-01 21:02:56 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVD1416.html [2010-06-01 19:15:04 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXR2844.html [2010-06-01 16:05:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemplS3676.html [2010-05-31 16:17:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempFA5888.html [2010-05-31 13:42:07 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempQv2464.html [2010-05-30 11:53:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempbA3888.html [2010-05-30 11:53:10 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemprP3888.html [2010-05-30 11:41:32 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemptD1548.html [2010-05-30 10:15:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempjH1360.html [2010-05-30 09:24:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempcN3788.html [2010-05-29 21:13:31 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempzS5464.html [2010-05-29 21:13:31 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempsb5464.html [2010-05-29 19:50:36 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempzA2376.html [2010-05-29 17:19:25 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempiC3056.html [2010-05-28 18:21:03 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempvb3168.html [2010-05-28 15:42:46 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPt6080.html [2010-05-28 13:10:41 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempzI5340.html [2010-05-28 12:19:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempto5112.html [2010-05-28 11:05:22 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temppa2988.html [2010-05-28 10:28:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempDk1964.html [2010-05-28 09:36:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempExB236.html [2010-05-28 09:10:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempEb3320.html [2010-05-27 16:53:31 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempGU5588.html [2010-05-27 15:50:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempsu2500.html [2010-05-26 20:47:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempNn5712.html [2010-05-26 19:08:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempbM1352.html [2010-05-26 14:36:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempgb1092.html [2010-05-25 21:13:09 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempdT4156.html [2010-05-25 17:39:23 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempyi5456.html [2010-05-25 16:27:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempoQ3068.html [2010-05-25 13:56:23 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempwc3496.html [2010-05-24 19:38:20 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVF2784.html [2010-05-24 11:53:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempYh4564.html [2010-05-24 11:49:26 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempxA4808.html [2010-05-24 11:41:59 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempAp2740.html [2010-05-24 10:15:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempuF3416.html [2010-05-24 09:19:04 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVv2612.html [2010-05-23 18:21:52 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempWa1232.html [2010-05-23 11:20:39 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempvz1368.html [2010-05-22 12:41:08 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempet3036.html [2010-05-22 12:25:33 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempej3456.html [2010-05-22 12:25:33 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempbc3456.html [2010-05-22 11:42:19 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempGR1260.html [2010-05-22 11:42:19 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempeO1260.html [2010-05-22 10:08:13 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempto5788.html [2010-05-22 10:08:13 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TemprX5788.html [2010-05-21 18:54:28 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempbh4352.html [2010-05-21 16:42:06 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempOO2052.html [2010-05-20 17:59:54 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempqF4744.html [2010-05-19 16:09:23 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempOW2672.html [2010-05-19 15:11:00 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempmg5676.html [2010-05-18 17:50:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempXS5136.html [2010-05-18 14:50:05 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Temphfm656.html [2010-05-17 18:38:17 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010-05-17 16:00:02 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempmn3084.html [2010-05-17 14:48:47 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempuF3664.html [2010-05-17 12:40:59 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempZr3928.html [2010-05-16 17:05:40 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempnT2116.html [2010-05-16 09:57:12 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempcq3460.html [2010-05-15 15:35:15 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVjq472.html [2010-05-15 14:31:14 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempgB2492.html [2010-05-15 12:26:34 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempbG3464.html [2010-05-15 12:26:34 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempPR3464.html [2010-05-15 12:07:10 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2010-05-15 11:40:10 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVR3748.html [2010-05-15 11:40:10 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempIv3748.html [2010-05-15 11:23:24 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempnP2484.html [2010-05-15 11:23:24 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempVj2484.html [2010-05-15 11:02:15 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempeM3668.html [2010-05-15 11:02:15 | 000,002,089 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempMS3668.html [2010-05-15 10:17:13 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempzC1400.html [2010-05-15 09:27:18 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\TempjG3996.html [2010-05-14 22:36:29 | 000,002,432 | ---- | C] () -- C:\Users\Michal\AppData\Local\Tempgz3336.html [2010-05-14 21:19:22 | 000,073,728 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll [2010-05-14 21:10:55 | 000,001,356 | ---- | C] () -- C:\Users\Michal\AppData\Local\d3d9caps.dat [2009-08-03 00:21:54 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll [2009-08-03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll [2009-08-03 00:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll [2009-08-03 00:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll [2009-05-16 05:22:50 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll [2006-11-02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006-11-02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2005-08-02 23:24:01 | 000,053,299 | ---- | C] () -- C:\Windows\System32\pthreadVC.dll [color=#E56717]========== LOP Check ==========[/color] [2010-09-11 11:52:40 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\Ashampoo [2010-07-18 22:11:35 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\BugTrap Console Test105 [2010-05-22 12:22:38 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\CheckPoint [2010-06-05 19:25:33 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\DAEMON Tools Lite [2010-05-14 23:46:05 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\Gadu-Gadu 10 [2010-07-02 10:07:13 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\gtk-2.0 [2010-07-08 19:54:42 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\ipla [2010-05-16 09:55:33 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\LolClient [2010-05-15 10:29:26 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\OpenFM [2010-06-06 09:05:17 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\Remere's Map Editor [2010-08-30 12:33:11 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\Sierra [2010-08-25 18:44:20 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\Teeworlds [2010-05-30 12:48:49 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\Tibia [2010-09-12 18:48:50 | 000,000,000 | ---D | M] -- C:\Users\Michal\AppData\Roaming\uTorrent [2010-09-19 20:17:11 | 000,032,546 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%\*.* >[/color] [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat [2009-04-11 08:36:36 | 000,333,257 | RHS- | M] () -- C:\bootmgr [2010-05-14 22:00:09 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK [2006-09-18 23:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys [2010-09-19 20:18:15 | 2145,902,592 | -HS- | M] () -- C:\hiberfil.sys [2010-09-19 20:18:14 | 2459,713,536 | -HS- | M] () -- C:\pagefile.sys [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2008-01-18 23:42:26 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys [2008-01-18 23:42:26 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys [2008-01-18 23:42:26 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys [2008-01-18 23:42:26 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys [2006-11-02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\drivers\AGP440.sys [2006-11-02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009-04-11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\drivers\atapi.sys [2009-04-11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys [2009-04-11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys [2008-01-18 23:41:32 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys [2008-01-18 23:41:32 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys [2006-11-02 11:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys [2010-05-14 23:25:29 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys [2010-05-14 23:25:29 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys [2010-05-14 23:25:29 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2008-01-18 21:49:12 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=67E506B75BD5326A3EC7B70BD014DFB6 -- C:\Windows\System32\drivers\beep.sys [2008-01-18 21:49:12 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=67E506B75BD5326A3EC7B70BD014DFB6 -- C:\Windows\winsxs\x86_microsoft-windows-beepsys_31bf3856ad364e35_6.0.6001.18000_none_c420a153079d485b\beep.sys [2006-11-02 10:51:03 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=AC3DD1708B22761EBD7CBE14DCC3B5D7 -- C:\Windows\winsxs\x86_microsoft-windows-beepsys_31bf3856ad364e35_6.0.6000.16386_none_c1e9df570ab23787\beep.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2008-01-18 21:49:52 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=1EC25CEA0DE6AC4718BF89F9E1778B57 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_a29e71c6\cdrom.sys [2008-01-18 21:49:52 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=1EC25CEA0DE6AC4718BF89F9E1778B57 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.0.6001.18000_none_5fa95be2a3c76a4a\cdrom.sys [2009-04-11 06:39:17 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=6B4BFFB9BECD728097024276430DB314 -- C:\Windows\System32\drivers\cdrom.sys [2009-04-11 06:39:17 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=6B4BFFB9BECD728097024276430DB314 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_c949a5b6\cdrom.sys [2009-04-11 06:39:17 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=6B4BFFB9BECD728097024276430DB314 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.0.6002.18005_none_6194d4eea0e93596\cdrom.sys [2006-11-02 10:51:44 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=8D1866E61AF096AE8B582454F5E4D303 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_e487f727\cdrom.sys [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2009-04-11 08:32:49 | 000,527,848 | ---- | M] (Microsoft Corporation) MD5=1357274D1883F68300AEADD15D7BBB42 -- C:\Windows\System32\drivers\ndis.sys [2009-04-11 08:32:49 | 000,527,848 | ---- | M] (Microsoft Corporation) MD5=1357274D1883F68300AEADD15D7BBB42 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.0.6002.18005_none_a9b2a4d31930d864\ndis.sys [2006-11-02 11:51:42 | 000,500,840 | ---- | M] (Microsoft Corporation) MD5=227C11E1E7CF6EF8AFB2A238D209760C -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.0.6000.16386_none_a59069cb1f23fc44\ndis.sys [2008-01-18 23:43:32 | 000,529,464 | ---- | M] (Microsoft Corporation) MD5=9BDC71790FA08F0A0B5F10462B1BD0B1 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.0.6001.18000_none_a7c72bc71c0f0d18\ndis.sys [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2009-04-11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe [2009-04-11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe [2006-11-02 11:45:57 | 000,308,224 | ---- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6000.16386_none_6d8c3f1ad8066b21\winlogon.exe [2008-01-18 23:33:38 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 255 bytes -> C:\ProgramData\TEMP:6BE50C2B @Alternate Data Stream - 225 bytes -> C:\ProgramData\TEMP:4EE74317 < End of report > [/log] Extras.Txt [log]OTL Extras logfile created on: 2010-09-19 20:24:55 - Run 4 OTL by OldTimer - Version 3.2.14.0 Folder = C:\Users\Michal\Downloads Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18943) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 54,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 72,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 68,82 Gb Total Space | 9,30 Gb Free Space | 13,51% Space Free | Partition Type: NTFS Drive D: | 164,06 Gb Total Space | 51,30 Gb Free Space | 31,27% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: MICHAL-PC Current User Name: Michal Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: On File Age = 60 Days Output = Standard [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-2383811976-2136801530-783135697-1000\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = Reg Error: Unknown registry data type -- File not found "VistaSp2" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{04D3AB16-9A7B-496D-96AC-A2A2A82991E2}" = lport=6950 | protocol=17 | dir=in | name=league of legends launcher | "{0BFF4532-80F8-47F2-8B45-AC16A1489B18}" = lport=6927 | protocol=6 | dir=in | name=league of legends launcher | "{1A0ED718-BD5B-4AD6-869A-E1AE20F9EC02}" = lport=8380 | protocol=17 | dir=in | name=league of legends launcher | "{202752E2-D525-49D4-B9D9-FB3A63A66F66}" = lport=6900 | protocol=6 | dir=in | name=league of legends launcher | "{24987701-290F-40F2-9287-105EA911E0CA}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe | "{40CA32E6-ABCD-4E5B-B3C3-67EF930AE2F5}" = lport=6950 | protocol=6 | dir=in | name=league of legends launcher | "{423A0C36-C96F-42F0-8868-B9F179AC0E1A}" = lport=8379 | protocol=6 | dir=in | name=league of legends launcher | "{5DACA942-9E84-4EB4-AF5A-79C078FD1161}" = lport=6942 | protocol=17 | dir=in | name=league of legends launcher | "{735598CD-A1E5-48C7-A1F2-A6D7F82BBE4A}" = lport=6971 | protocol=6 | dir=in | name=league of legends launcher | "{76BFCF34-3570-41B0-9198-7AEA263B925A}" = lport=6942 | protocol=6 | dir=in | name=league of legends launcher | "{777C2D10-52BD-4B50-8B41-28D9D9FAD451}" = lport=8394 | protocol=17 | dir=in | name=league of legends launcher | "{834158A6-3884-4F93-A4B5-81E2C614585A}" = lport=6927 | protocol=17 | dir=in | name=league of legends launcher | "{90E336A0-0F50-4854-A231-B50245783DC7}" = lport=8394 | protocol=6 | dir=in | name=league of legends launcher | "{9B8DA392-1C7D-4215-AAEB-D94A44669ADC}" = lport=6933 | protocol=17 | dir=in | name=league of legends launcher | "{9CA07EC4-73AE-4F44-9FA7-A5BE1117C8B8}" = lport=8379 | protocol=17 | dir=in | name=league of legends launcher | "{A0D6499A-5DF3-46E4-969F-5644230E14FB}" = lport=6969 | protocol=17 | dir=in | name=league of legends launcher | "{A25C385D-985B-4CDC-B23B-25C47014D3EF}" = lport=6900 | protocol=17 | dir=in | name=league of legends launcher | "{A2F07931-43BA-4C34-A173-4704171E7871}" = lport=6933 | protocol=6 | dir=in | name=league of legends launcher | "{A6A7A6AB-FB91-4248-8AC9-9DDC6520BCF8}" = lport=8380 | protocol=6 | dir=in | name=league of legends launcher | "{BBB8BEF3-A489-4285-AD91-EBBF5B0F0C9D}" = lport=3724 | protocol=6 | dir=in | name=blizzard downloader: 3724 | "{D445827A-FDA0-4693-BAF7-FD963E52A31C}" = lport=6971 | protocol=17 | dir=in | name=league of legends launcher | "{D6170CAF-26B8-4AC6-8710-982E5CF50E7A}" = lport=6969 | protocol=6 | dir=in | name=league of legends launcher | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{03DC436A-9C88-460E-B1E2-8EEF511510CB}" = protocol=6 | dir=in | app=c:\windows\system32\zonelabs\vsmon.exe | "{0748945E-92CD-4876-9EEC-10B2B4E22F99}" = protocol=6 | dir=in | app=d:\league of legends eu\air\lolclient.exe | "{0FA49D4D-8F6A-4C03-A1EF-F934DCD8EE96}" = protocol=17 | dir=in | app=c:\program files\ventrilo\ventrilo.exe | "{10BEFECA-9B68-408C-9F87-D8854CBB6BBB}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe | "{1141D3DA-4969-466B-BB00-6D2BDCA48D5D}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\alien swarm\swarm.exe | "{11454A2A-2AF7-4FC9-BB5B-4CBA175A606F}" = protocol=17 | dir=in | app=d:\lol\game\league of legends.exe | "{15E887B8-6936-48EB-A0FC-C6F6A6693D02}" = protocol=6 | dir=in | app=d:\lol\game\league of legends.exe | "{21AA1E8C-C880-4870-8E4A-B7E9D5FBAAD1}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe | "{2E50B807-7FD7-4C5D-AD3F-9721206EDDDC}" = protocol=17 | dir=in | app=d:\league of legends eu\air\lolclient.exe | "{35F9BF20-C825-4A04-BCFA-32C4D2D3236D}" = protocol=6 | dir=in | app=c:\users\michal\appdata\local\temp\blizzard installer bootstrap - 001a9c10\installer.exe | "{3A83234B-A90B-4CC2-87FD-7BFDD1D5D54A}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | "{44DB423C-279D-415F-93F6-E4F29A605160}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe | "{52354BC5-5079-4F69-908A-2CB2C94C9066}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe | "{53475A96-9384-4699-BD07-47601A1D6990}" = protocol=17 | dir=in | app=c:\windows\system32\zonelabs\vsmon.exe | "{5613EB5C-51D9-42B8-96E0-1D9308027C5F}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\alien swarm\srcds.exe | "{599A61A4-F2CA-4CFB-AC8D-77B43E00DE68}" = protocol=6 | dir=in | app=d:\lol\air\lolclient.exe | "{66F7C7B1-30F6-4158-9320-1807A50294B0}" = protocol=17 | dir=in | app=d:\age of empires iii\age3x.exe | "{71D2D98D-5F61-4DCD-97FB-51822465361D}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe | "{76E6A223-694D-45C5-A200-2FA91BD9D562}" = protocol=17 | dir=in | app=d:\lol\air\lolclient.exe | "{81CA2789-0849-4EFA-AAF0-09379C587656}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | "{834D1E86-4322-4C0F-A1B9-E30EE3ED2C87}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe | "{8996E325-9800-4B55-BF3B-F66B7D7F7133}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | "{8D5D968E-4710-4461-862C-B7DB6E8810D4}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | "{927A0807-EECC-4FCC-980D-14DA7F521C30}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | "{9666536A-3D15-4572-8490-F422057CE6CD}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{9A881486-258A-4B74-9872-302C8A157A90}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\alien swarm\swarm.exe | "{9C81E803-6B3A-4413-9941-4F0ADF087E72}" = protocol=17 | dir=in | app=c:\users\michal\appdata\local\temp\blizzard installer bootstrap - 001a9c10\installer.exe | "{9C927C92-88F2-47D2-8E1F-24E18E24B014}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe | "{AB8362CA-5A3D-4BDC-99B2-7976F6246A6C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{AE1F1B64-A26E-47E3-93CB-60D53F801620}" = protocol=6 | dir=in | app=d:\age of empires iii\age3x.exe | "{BAD08CBA-DB93-4637-8E36-D14B5500E696}" = protocol=6 | dir=in | app=d:\cod mw\iw3mp.exe | "{BE753CF2-36C3-4EB8-9C00-CE36D0E2EFEC}" = protocol=17 | dir=in | app=d:\cod mw\iw3mp.exe | "{C157A8A4-871A-4352-8DB7-8B43FEAD8CF5}" = protocol=6 | dir=in | app=c:\program files\ventrilo\ventrilo.exe | "{C8689653-E0EB-463A-8B18-7EAC792CFE3B}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe | "{DF445C8E-3767-4023-AFB5-1C7C9A399C26}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe | "{DFC97AA3-B8A3-45B1-A944-2683E7894970}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\alien swarm\srcds.exe | "{E4619600-1954-423C-B09F-7B9FE55B4C24}" = protocol=17 | dir=in | app=d:\league of legends eu\game\league of legends.exe | "{F2CFAD65-7DB4-4876-AB56-89785DFC06B5}" = protocol=6 | dir=in | app=d:\league of legends eu\game\league of legends.exe | "{F92FB524-3B4E-4913-8386-048B104103A8}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | "{F99169A7-169B-42C7-A7C9-2E7720E59117}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "TCP Query User{17DF4257-15A9-4CCC-ADA7-A4B7254845E8}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | "TCP Query User{74CB044D-BBB4-40ED-BEB6-CD1981D9C546}D:\world of warcraft\wow-3.2.0.10192-to-3.3.0.10958-engb-downloader.exe" = protocol=6 | dir=in | app=d:\world of warcraft\wow-3.2.0.10192-to-3.3.0.10958-engb-downloader.exe | "TCP Query User{84B9FCC7-EF46-4420-9A48-BDD39E6B0EA9}D:\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=d:\gadu-gadu 10\gg.exe | "TCP Query User{9FFB130E-76CF-4114-8966-7B3DDD92F26D}C:\program files\xfire\xfire.exe" = protocol=6 | dir=in | app=c:\program files\xfire\xfire.exe | "TCP Query User{DA303CDC-9E90-4420-8E4C-3C0FA4EA8B12}D:\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=d:\world of warcraft\launcher.exe | "TCP Query User{F455962C-91DB-4CAE-82FB-69C8B06DD5CA}D:\warcraft iii\war3.exe" = protocol=6 | dir=in | app=d:\warcraft iii\war3.exe | "TCP Query User{FA80FC64-D1C6-48D7-98D7-BAFDAC52FDC6}C:\users\michal\desktop\do usuniecia\low war by piorunek. udst. przez areal\loozikots\loozikots\loozikots.exe" = protocol=6 | dir=in | app=c:\users\michal\desktop\do usuniecia\low war by piorunek. udst. przez areal\loozikots\loozikots\loozikots.exe | "UDP Query User{117EEB81-523C-45B1-8E6A-0C7AE068A81B}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | "UDP Query User{142A2772-C381-44BB-ADA2-184EDE754F10}C:\users\michal\desktop\do usuniecia\low war by piorunek. udst. przez areal\loozikots\loozikots\loozikots.exe" = protocol=17 | dir=in | app=c:\users\michal\desktop\do usuniecia\low war by piorunek. udst. przez areal\loozikots\loozikots\loozikots.exe | "UDP Query User{71F009A9-3702-4CC1-9B85-837461C2A253}D:\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=d:\world of warcraft\launcher.exe | "UDP Query User{90DF1ED1-97B9-4F8B-A7DD-0D859018D354}D:\warcraft iii\war3.exe" = protocol=17 | dir=in | app=d:\warcraft iii\war3.exe | "UDP Query User{ADF7CDE5-7834-42AC-AA9E-6A1F3FAA6852}D:\world of warcraft\wow-3.2.0.10192-to-3.3.0.10958-engb-downloader.exe" = protocol=17 | dir=in | app=d:\world of warcraft\wow-3.2.0.10192-to-3.3.0.10958-engb-downloader.exe | "UDP Query User{C1BD984C-2148-4D1E-AF41-A095AEFF5063}D:\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=d:\gadu-gadu 10\gg.exe | "UDP Query User{D07704C9-52CC-46B9-B134-01ED3A2DE9CE}C:\program files\xfire\xfire.exe" = protocol=17 | dir=in | app=c:\program files\xfire\xfire.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{01339AE5-04D4-43F8-008E-13AD788DC4F7}" = SimCity 4 "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{14F62C36-8B2B-E36F-0A97-8C1D77D9A1E9}" = Catalyst Control Center Graphics Light "{1C08A24C-B168-407E-A826-68FAF5F20710}" = Age of Empires III - The WarChiefs "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{21B46459-07FF-78CE-8105-CE25A0EA0904}" = CCC Help Finnish "{240333EF-BF74-F15F-C29F-3F98D2986FA8}" = CCC Help Spanish "{25405473-BE48-0710-569C-3032E2F94930}" = CCC Help Turkish "{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 21 "{399FD6A2-2F49-9C5F-62FE-5D3384B7EBA4}" = CCC Help Korean "{3AC1563D-00FB-99D6-2521-1821E2065C6E}" = CCC Help Thai "{4264266B-F749-AAD8-B5DF-614CAB51D179}" = ccc-core-static "{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4E02E9E3-F0C8-0DED-A2BA-139213554230}" = Catalyst Control Center Core Implementation "{518AA3D6-5B7D-A795-6368-9BE490CA95E9}" = CCC Help Hungarian "{55335D80-E1DF-2F9C-640F-44C1C1977EA5}" = CCC Help Russian "{5ABF0366-64EE-3426-1471-38701AC57820}" = CCC Help Czech "{626731A9-D679-8C85-AF98-D3318E82CA91}" = CCC Help Japanese "{630A00D6-85BF-F895-205C-1300E521D493}" = ccc-utility "{6AAF923E-077E-4543-BA1C-42A75BB03677}" = Sąsiedzi z Piekła Rodem 1 i 2 "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{76A40BFF-4998-4562-8593-117EC74807EC}" = Etherlords II "{76AA1261-AB5F-491F-F040-A59F512E0DD2}" = CCC Help Dutch "{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo Client "{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1" = Need For Speed™ World "{7B44E2CC-C4DB-3E07-ADD5-9D23C0C7A0D3}" = CCC Help Polish "{7BBAEC14-DB03-E6C9-B739-8ECBFBFD3E07}" = CCC Help Swedish "{81841A8B-5677-50B7-EF9D-28F75F85A159}" = Catalyst Control Center Graphics Full Existing "{82F23CC2-37B5-8E55-5705-C08AD57DD7DA}" = CCC Help Greek "{83729FE3-6785-476A-91F1-312D427B4522}" = League of Legends "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8565F322-4389-4696-82D4-A47048B2F7E3}_is1" = Conflict Denied Ops wersja 1.0 "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows Vista and Later "{89B16D09-3C64-AD20-2AF7-FCB4088C69C4}" = Catalyst Control Center InstallProxy "{8B743AA0-53B2-11D2-808A-00600895FB43}" = Heroes of Might and Magic III - Złota Edycja "{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007 "{90120000-0015-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007 "{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007 "{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007 "{90120000-0019-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007 "{90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007 "{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007 "{90120000-001F-0415-0000-0000000FF1CE}_ENTERPRISE_{E9EA2604-8AC9-47D2-8F4B-6BF60787A357}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007 "{90120000-0044-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}_ENTERPRISE_{D45F91DE-F0FC-4D5F-9A0C-FDE5B251AAC6}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007 "{90120000-00A1-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007 "{90120000-00BA-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{9067EE66-E412-48D1-FB63-60DB9B4BC510}" = CCC Help Chinese Traditional "{919363FE-2701-BFBB-5E78-20BC8B739B95}" = CCC Help French "{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch "{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster "{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars "{988588CE-4059-CC92-8509-C4A1F682F0F7}" = CCC Help Danish "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9A87A327-A07A-4C91-BB03-1F220434CD40}" = O+ "{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk "{A45F3795-1527-47FA-BE1A-2DD242B439E5}_is1" = Need for Speed - Shift "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{A56F087B-547C-C8FD-7885-513934D086B5}" = HydraVision "{A854B16A-152F-4A7D-C541-8E2DAFE3933F}" = CCC Help English "{A8B0DAB9-C8BF-4316-9F99-1A57CF3495F7}" = CCC Help Portuguese "{AC03EB07-8C01-7128-487B-A853C656F2FE}" = CCC Help Chinese Standard "{AC76BA86-7AD7-1045-7B44-A93000000001}" = Adobe Reader 9.3.4 - Polish "{B0B9863F-FEE6-489A-3B43-7A56FC3F43BD}" = Catalyst Control Center Graphics Previews Vista "{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR "{B8FC3A3D-B433-8235-C5DE-E94F51EF3A41}" = CCC Help Norwegian "{BD74ABDF-0BAC-1653-DBD1-8014D2C8683A}" = Catalyst Control Center Localization All "{BFE351D8-49F9-9EC9-3CC0-26A241A4156F}" = Catalyst Control Center HydraVision Full "{C0C4B69C-D09A-EE09-A8B1-772D8113A4C0}" = Catalyst Control Center Graphics Previews Common "{C3367470-9944-FD20-0DC4-BA705ED1EF59}" = ATI Catalyst Install Manager "{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX "{C7BEF25F-260C-492A-96FB-5E9BD3360D22}" = Remere's Map Editor "{CD26604A-5F8A-953B-C070-25480C546756}" = Catalyst Control Center Graphics Full New "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 "{D3B1C799-CB73-42DE-BA0F-2344793A095C}" = Catalyst Control Center - Branding "{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas "{D867D5F2-C2D1-406F-B9E4-D4D2BFB7AA0D}" = Ghost Recon Advanced Warfighter "{DD51B0FE-180D-C805-12EE-53713D15C8AE}" = ATI AVIVO Codecs "{DF315348-721C-40B8-BAE2-58C6C7D935A2}" = Empire Earth II "{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime "{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM) "{EC94BCD5-E64E-30EA-8CF0-C0604064C2E4}" = CCC Help Italian "{EDB32FFB-FC1C-414B-BF8E-4645217E9AF2}" = League of Legends "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F1CBC6F7-D82D-4DC5-B81C-9A14F418593A}_is1" = WC3Banlist "{F2EB9938-0155-6DDC-FD82-DB8090B209DA}" = CCC Help German "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Ashampoo Burning Studio 10_is1" = Ashampoo Burning Studio 10.0.4 "Ashampoo Burning Studio 2010_is1" = Ashampoo Burning Studio 2010 "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "BDESetup.exe_is1" = Borland Database Engine Ver. 5.2.0.2 "CCleaner" = CCleaner "Emsisoft Anti-Malware_is1" = Emsisoft Anti-Malware 5.0 "ENTERPRISE" = Microsoft Office Enterprise 2007 "EPSON Printer and Utilities" = EPSON Printer Software "Gadu-Gadu 10" = Gadu-Gadu 10 "Gimnazjum klasa 1 - Puls życia" = Gimnazjum klasa 1 - Puls życia "Gimnazjum klasa 2 - Planeta Nowa" = Gimnazjum klasa 2 - Planeta Nowa "Gimnazjum klasa 2 - Puls życia" = Gimnazjum klasa 2 - Puls życia "Guild Wars" = Guild Wars "InstallShield_{1C08A24C-B168-407E-A826-68FAF5F20710}" = Age of Empires III - The WarChiefs "InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch "InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM) "ipla" = ipla 2.1.4 "League of Legends_is1" = League of Legends "Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3) "OpenAL" = OpenAL "PokerStars" = PokerStars "PowerISO" = PowerISO "Steam App 630" = Alien Swarm "TmNationsForever_is1" = TmNationsForever "uTorrent" = µTorrent "Warcraft III" = Warcraft III "Winamp" = Winamp "WinGimp-2.0_is1" = GIMP 2.6.9 "WinPcapInst" = WinPcap 3.1 "WinRAR archiver" = Archiwizator WinRAR "World of Warcraft" = World of Warcraft "Xfire" = Xfire (remove only) "ZoneAlarm" = ZoneAlarm [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-2383811976-2136801530-783135697-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Google Chrome" = Google Chrome "Warcraft III" = Warcraft III: wszystkie elementy "Winamp Detect" = Detektor Winampa [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2010-08-30 05:08:02 | Computer Name = Michal-PC | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd ConflictDeniedOps.exe, wersja 1.0.0.1, sygnatura czasowa 0x478e365d, moduł powodujący błąd OpenAL32.dll, wersja 6.0.6002.18005, sygnatura czasowa 0x49e03821, kod wyjątku 0xc0000135, przesunięcie błędu 0x00009eed, identyfikator procesu 0xd74, godzina rozpoczęcia aplikacji 0x01cb4822d6ff968a. Error - 2010-08-30 05:08:09 | Computer Name = Michal-PC | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd ConflictDeniedOps.exe, wersja 1.0.0.1, sygnatura czasowa 0x478e365d, moduł powodujący błąd OpenAL32.dll, wersja 6.0.6002.18005, sygnatura czasowa 0x49e03821, kod wyjątku 0xc0000135, przesunięcie błędu 0x00009eed, identyfikator procesu 0x16e8, godzina rozpoczęcia aplikacji 0x01cb4822dcb13aca. Error - 2010-08-30 05:32:19 | Computer Name = Michal-PC | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd ConflictDeniedOps.exe, wersja 1.0.0.1, sygnatura czasowa 0x478e365d, moduł powodujący błąd OpenAL32.dll, wersja 6.0.6002.18005, sygnatura czasowa 0x49e03821, kod wyjątku 0xc0000135, przesunięcie błędu 0x00009eed, identyfikator procesu 0x13f8, godzina rozpoczęcia aplikacji 0x01cb48263cb781ba. Error - 2010-08-30 05:32:20 | Computer Name = Michal-PC | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd ConflictDeniedOps.exe, wersja 1.0.0.1, sygnatura czasowa 0x478e365d, moduł powodujący błąd OpenAL32.dll, wersja 6.0.6002.18005, sygnatura czasowa 0x49e03821, kod wyjątku 0xc0000135, przesunięcie błędu 0x00009eed, identyfikator procesu 0x158c, godzina rozpoczęcia aplikacji 0x01cb48263dc25a3a. Error - 2010-08-30 05:53:26 | Computer Name = Michal-PC | Source = VSS | ID = 8194 Description = Error - 2010-08-30 06:28:17 | Computer Name = Michal-PC | Source = VSS | ID = 8194 Description = Error - 2010-08-30 07:45:41 | Computer Name = Michal-PC | Source = Application Hang | ID = 1002 Description = Program Etherlords2.exe w wersji 1.0.0.0 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania raportami i rozwiązaniami problemów. Identyfikator procesu: e88 Godzina rozpoczęcia: 01cb48347e34dada Godzina zakończenia: 10 Error - 2010-08-30 09:03:28 | Computer Name = Michal-PC | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd gta_sa.exe, wersja 0.0.0.0, sygnatura czasowa 0x427101ca, moduł powodujący błąd gta_sa.exe, wersja 0.0.0.0, sygnatura czasowa 0x427101ca, kod wyjątku 0xc0000005, przesunięcie błędu 0x000dd5a3, identyfikator procesu 0x1164, godzina rozpoczęcia aplikacji 0x01cb4843b06efcba. Error - 2010-08-30 09:04:02 | Computer Name = Michal-PC | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd gta_sa.exe, wersja 0.0.0.0, sygnatura czasowa 0x427101ca, moduł powodujący błąd gta_sa.exe, wersja 0.0.0.0, sygnatura czasowa 0x427101ca, kod wyjątku 0xc0000005, przesunięcie błędu 0x000dd5a3, identyfikator procesu 0xdbc, godzina rozpoczęcia aplikacji 0x01cb4843c5b5cb8a. Error - 2010-09-16 11:29:16 | Computer Name = Michal-PC | Source = VSS | ID = 8194 Description = [ System Events ] Error - 2010-05-15 04:57:16 | Computer Name = Michal-PC | Source = HTTP | ID = 15016 Description = Error - 2010-05-15 04:59:55 | Computer Name = Michal-PC | Source = Microsoft-Windows-Eventlog | ID = 30 Description = Error - 2010-05-15 05:21:20 | Computer Name = Michal-PC | Source = HTTP | ID = 15016 Description = Error - 2010-05-15 05:31:08 | Computer Name = Michal-PC | Source = DCOM | ID = 10010 Description = Error - 2010-05-15 05:38:43 | Computer Name = Michal-PC | Source = HTTP | ID = 15016 Description = < End of report > [/log]Bring up my post.
Tomek01 komentarz 21 września 2010 komentarz 21 września 2010 Nie widzę nic co mogło spowodować taką akcję. Wykonaj pełny skan [url=http://www.instalki.pl/programy/download_c/14/155.html][color=#0000CD][b]DrWebCureIt[/b][/color][/url] oraz [url=http://www.instalki.pl/programy/download_c/13/96.html][color=#0000CD][b]Malwarebytes Anti-Malware[/b][/color][/url] i wyniki podaj na forum.
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.