Adrianox360 utworzono 7 stycznia 2011 utworzono 7 stycznia 2011 (edytowane) Tak jak w temacie ma problem. Włączam komputer, wpisuje hasło i jest pulpit. Wychądzą błędy typu program skype przestał działać lub, że jakiś inny program potrzebuje przynajmniej systemu windows 2000. Mrugnie raz ekran a czasami nie i odłącza się internet. To znaczy, że pisze ze jest moja sieć ale nagle wszystko się wyłącza, nie można się połączyć. Gdy robię reset, odpala się pc od nowa wszystko ładnie śmiga. Internet jest, programy wszystkie działają, żadnych errorów. Proszę o rady co może być przyczyną tego zachowania. Komputer ma 2 miesiące. Myślałem, że to ram ale memtest przez godzine nie znalazł ani jednego błędu. Oto konfiguracja: Amd x4 955 lekko podkręcony do 3.6 ghz Kingston Hyperx 4 giga 1600, w biosie ustawione mam na 1333, teraz już na auto gigabyte gtx 460 Scythe mungen 2 Seasonic M12II-520 SS-520GM Bronze 520W Asus M4A88TD-V EVO/USB3 AMD880G Cooler Master CM 690 wersja 1
MC Jay komentarz 7 stycznia 2011 komentarz 7 stycznia 2011 pewnie masz syf na kompie Mbam, i logi otla i tego drugiego
Adrianox360 komentarz 8 stycznia 2011 Autor komentarz 8 stycznia 2011 (edytowane) Mbam, i logi otla i tego drugiego - co to znaczy??? Syf? Codziennie defragmentuję dysk twardy jednym z najlepszych programów O&O Degraf. Co 2 dni robię pełny skan w poszukiwaniu wirusów, codziennie czyszczę kompa cc cleanerem. Mam zainstalowanych kilka gier, programów i ściągniętych filmów więc syfu nie ma.więc??
Niusiek33 komentarz 8 stycznia 2011 komentarz 8 stycznia 2011 Reinstal Windowsa lub wina zasilacza. Na taki sprzęt potrzebny mocny zasilacz...
Tomek01 komentarz 8 stycznia 2011 komentarz 8 stycznia 2011 Wstaw logi. Info w moim podpisie poniżej:
Adrianox360 komentarz 9 stycznia 2011 Autor komentarz 9 stycznia 2011 (edytowane) zasilacz mam super Seasonic M12II-520 SS-520GM Bronze 520W a zaraz dam logi [log]OTL logfile created on: 2011-01-09 17:47:37 - Run 1 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Adrian\Downloads 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 65,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 82,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 48,83 Gb Total Space | 21,39 Gb Free Space | 43,81% Space Free | Partition Type: NTFS Drive D: | 208,01 Gb Total Space | 113,91 Gb Free Space | 54,76% Space Free | Partition Type: NTFS Drive E: | 208,91 Gb Total Space | 122,29 Gb Free Space | 58,54% Space Free | Partition Type: NTFS Computer Name: ADRIAN-KOMPUTER | User Name: Adrian | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: Off | File Age = 60 Days [color=#E56717]========== Processes (All) ==========[/color] PRC - [2011-01-09 17:45:02 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Adrian\Downloads\OTL.exe PRC - [2010-12-09 00:28:23 | 000,991,800 | ---- | M] (Google Inc.) -- C:\Users\Adrian\AppData\Local\Google\Chrome\Application\chrome.exe PRC - [2010-11-02 20:03:54 | 001,432,064 | ---- | M] () -- D:\PROGRAMY\ALLPlayer\ALLUpdate.exe PRC - [2010-10-16 11:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2010-10-07 09:04:26 | 012,661,344 | ---- | M] (GG Network S.A.) -- D:\PROGRAMY\Gadu-Gadu 10\gg.exe PRC - [2010-09-07 17:12:02 | 002,838,912 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2010-09-07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2010-08-16 13:50:42 | 000,073,728 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe PRC - [2010-05-18 15:13:58 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe PRC - [2010-03-16 02:58:36 | 000,718,208 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE PRC - [2010-01-22 12:29:40 | 000,106,496 | ---- | M] (NEC Electronics Corporation) -- C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe PRC - [2009-11-04 15:43:18 | 001,617,920 | ---- | M] (Edimax Technology Co., Ltd) -- C:\Program Files (x86)\Edimax\Common\RaUI.exe PRC - [2009-10-06 11:57:44 | 000,185,632 | ---- | M] (Ralink Technology, Corp.) -- C:\Program Files (x86)\Edimax\Common\RaRegistry.exe [color=#E56717]========== Modules (All) ==========[/color] MOD - [2011-01-09 17:45:02 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Adrian\Downloads\OTL.exe MOD - [2010-08-21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll MOD - [2010-07-27 15:03:24 | 012,867,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll MOD - [2010-06-29 06:02:02 | 001,413,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll MOD - [2010-04-07 08:10:36 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll MOD - [2010-03-24 07:37:04 | 001,289,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll MOD - [2009-12-11 08:39:06 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll MOD - [2009-12-11 08:36:33 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll MOD - [2009-07-14 02:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll MOD - [2009-07-14 02:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll MOD - [2009-07-14 02:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll MOD - [2009-07-14 02:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll MOD - [2009-07-14 02:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll MOD - [2009-07-14 02:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll MOD - [2009-07-14 02:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll MOD - [2009-07-14 02:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll MOD - [2009-07-14 02:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll MOD - [2009-07-14 02:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll MOD - [2009-07-14 02:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll MOD - [2009-07-14 02:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll MOD - [2009-07-14 02:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll MOD - [2009-07-14 02:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll MOD - [2009-07-14 02:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll MOD - [2009-07-14 02:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll MOD - [2009-07-14 02:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll MOD - [2009-07-14 02:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll MOD - [2009-07-14 02:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll MOD - [2009-07-14 02:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll MOD - [2009-07-14 02:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll MOD - [2009-07-14 02:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll MOD - [2009-07-14 02:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll MOD - [2009-07-14 02:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2009-07-14 02:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll MOD - [2009-07-14 02:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll MOD - [2009-07-14 02:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll MOD - [2009-07-14 02:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll MOD - [2009-07-14 02:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll MOD - [2009-07-14 02:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll MOD - [2009-07-14 02:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009-07-14 02:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv MOD - [2009-07-14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll MOD - [2009-07-14 02:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll MOD - [2009-07-14 02:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll MOD - [2009-07-14 02:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll MOD - [2009-07-14 02:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll MOD - [2009-07-14 02:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll MOD - [2009-07-14 02:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll MOD - [2009-07-14 02:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - File not found [Auto | Stopped] -- C:\Windows\SysNative\srvany.exe -- (KMService) SRV:[b]64bit:[/b] - [2010-09-07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner) SRV:[b]64bit:[/b] - [2010-09-07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner) SRV:[b]64bit:[/b] - [2010-09-07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2010-11-09 23:20:03 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\srvany.exe -- (KMService) SRV - [2010-10-16 11:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2010-09-30 12:30:10 | 003,140,424 | ---- | M] (O&O Software GmbH) [Auto | Running] -- D:\GRY\OO Software\Defrag\oodag.exe -- (OODefragAgent) SRV - [2010-05-18 15:13:58 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-10-06 11:57:44 | 000,212,256 | ---- | M] (Ralink Technology, Corp.) [Auto | Running] -- C:\Program Files (x86)\Edimax\Common\RaRegistry64.exe -- (RalinkRegistryWriter64) SRV - [2009-10-06 11:57:44 | 000,185,632 | ---- | M] (Ralink Technology, Corp.) [Auto | Running] -- C:\Program Files (x86)\Edimax\Common\RaRegistry.exe -- (RalinkRegistryWriter) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010-11-18 18:29:06 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt) DRV:[b]64bit:[/b] - [2010-11-18 18:29:06 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt) DRV:[b]64bit:[/b] - [2010-11-08 16:45:13 | 000,828,912 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010-09-07 21:08:55 | 000,155,752 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:[b]64bit:[/b] - [2010-09-07 16:47:33 | 000,061,008 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2010-07-09 13:19:04 | 000,021,480 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz134_x64.sys -- (cpuz134) DRV:[b]64bit:[/b] - [2010-04-27 16:57:20 | 000,016,200 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmVirHid.sys -- (WmVirHid) DRV:[b]64bit:[/b] - [2010-04-27 16:57:14 | 000,036,936 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmHidLo.sys -- (WmHidLo) DRV:[b]64bit:[/b] - [2010-04-27 16:57:12 | 000,026,440 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmBEnum.sys -- (WmBEnum) DRV:[b]64bit:[/b] - [2010-04-27 14:03:12 | 000,077,512 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmXlCore.sys -- (WmXlCore) DRV:[b]64bit:[/b] - [2010-04-27 14:02:42 | 000,043,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmFilter.sys -- (WmFilter) DRV:[b]64bit:[/b] - [2010-03-04 14:43:00 | 000,346,144 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2010-01-22 12:22:22 | 000,180,224 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc) DRV:[b]64bit:[/b] - [2010-01-22 12:22:18 | 000,077,824 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub) DRV:[b]64bit:[/b] - [2009-10-16 03:15:00 | 000,439,808 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr6164.sys -- (rt61x64) DRV:[b]64bit:[/b] - [2009-08-23 23:55:32 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO) DRV:[b]64bit:[/b] - [2009-07-16 04:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-4152750467-2395009681-3878379516-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found. O3 - HKU\S-1-5-21-4152750467-2395009681-3878379516-1000\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O4:[b]64bit:[/b] - HKLM..\Run: [OODefragTray] D:\GRY\OO Software\Defrag\oodtray.exe (O&O Software GmbH) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-4152750467-2395009681-3878379516-1000..\Run: [ALLUpdate] D:\PROGRAMY\ALLPlayer\ALLUpdate.exe () O4 - HKU\S-1-5-21-4152750467-2395009681-3878379516-1000..\Run: [DAEMON Tools Lite] D:\PROGRAMY\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O13 - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{f838e424-e90e-11df-8fca-485b39c9a241}\Shell - "" = AutoRun O33 - MountPoints2\{f838e424-e90e-11df-8fca-485b39c9a241}\Shell\AutoRun\command - "" = G:\autorun.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (OODBS) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Base - Driver Group SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group SafeBootMin:[b]64bit:[/b] File system - Driver Group SafeBootMin:[b]64bit:[/b] Filter - Driver Group SafeBootMin:[b]64bit:[/b] HelpSvc - Service SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group SafeBootMin:[b]64bit:[/b] sacsvr - Service SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] vmms - Service SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Base - Driver Group SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group SafeBootNet:[b]64bit:[/b] File system - Driver Group SafeBootNet:[b]64bit:[/b] Filter - Driver Group SafeBootNet:[b]64bit:[/b] HelpSvc - Service SafeBootNet:[b]64bit:[/b] Messenger - Service SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group SafeBootNet:[b]64bit:[/b] Network - Driver Group SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group SafeBootNet:[b]64bit:[/b] rdsessmgr - Service SafeBootNet:[b]64bit:[/b] sacsvr - Service SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] TDI - Driver Group SafeBootNet:[b]64bit:[/b] vmms - Service SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2011-01-07 23:01:02 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Rovio [2011-01-07 16:52:58 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\HD Tune Pro [2011-01-07 16:52:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune Pro [2011-01-06 19:17:16 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Desktop\gra [2011-01-04 19:27:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SpeedFan [2011-01-02 15:10:11 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Settlers7 [2010-12-30 15:51:42 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Carambis [2010-12-28 14:14:12 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Logitech [2010-12-28 14:11:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech [2010-12-28 14:11:22 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech [2010-12-26 19:25:10 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Trials 2 [2010-12-26 19:25:10 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Redlynx [2010-12-26 19:16:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RedLynx [2010-12-25 21:38:23 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\GameRanger [2010-12-25 12:06:34 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Microsoft Games [2010-12-23 21:04:19 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IVMP [2010-12-23 17:26:15 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\oodag [2010-12-23 17:11:03 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\O&O [2010-12-23 17:10:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O&O Software [2010-12-23 15:23:50 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Ashampoo [2010-12-23 15:10:24 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\ashampoo [2010-12-23 15:10:24 | 000,000,000 | ---D | C] -- C:\ProgramData\ashampoo [2010-12-23 15:10:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo [2010-12-21 19:36:03 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Codemasters [2010-12-19 14:27:42 | 002,578,576 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll [2010-12-19 14:27:41 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll [2010-12-19 14:27:41 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll [2010-12-19 14:27:41 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll [2010-12-19 14:27:41 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll [2010-12-19 14:27:40 | 000,220,496 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFNHK64.dll [2010-12-19 14:27:40 | 000,081,232 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFCOM64.dll [2010-12-19 14:27:40 | 000,078,160 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFAPO64.dll [2010-12-19 14:27:40 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll [2010-12-19 14:27:36 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll [2010-12-19 14:27:36 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll [2010-12-19 14:27:36 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll [2010-12-19 14:27:36 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll [2010-12-19 14:27:36 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll [2010-12-19 14:27:36 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll [2010-12-19 14:27:33 | 001,718,616 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64A.dll [2010-12-19 14:27:33 | 000,421,720 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64A.dll [2010-12-19 14:27:33 | 000,127,832 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64A.dll [2010-12-19 14:27:33 | 000,108,888 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64A.dll [2010-12-19 14:27:33 | 000,074,584 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64A.dll [2010-12-19 14:27:32 | 000,334,680 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll [2010-12-19 14:27:31 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll [2010-12-19 14:27:31 | 001,868,944 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll [2010-12-19 14:27:31 | 000,341,336 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll [2010-12-19 14:27:31 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll [2010-12-19 14:27:24 | 001,937,312 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll [2010-12-19 14:27:24 | 001,327,208 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll [2010-12-19 14:27:24 | 001,179,752 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll [2010-12-19 14:27:24 | 000,491,112 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll [2010-12-19 14:27:24 | 000,475,752 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll [2010-12-19 14:27:24 | 000,317,032 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll [2010-12-19 14:27:24 | 000,269,928 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll [2010-12-19 14:27:24 | 000,126,056 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll [2010-12-19 14:27:23 | 001,111,656 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll [2010-12-19 14:27:23 | 000,504,936 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll [2010-12-19 14:27:23 | 000,266,856 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll [2010-12-19 14:27:23 | 000,125,544 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll [2010-12-19 14:27:23 | 000,125,032 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll [2010-12-19 09:25:17 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\EurekaLog [2010-12-18 12:30:39 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\SKIDROW [2010-12-18 12:29:57 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Hothead Games [2010-12-12 20:42:15 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Desktop\all [2010-12-11 16:01:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Ripple Sound [2010-12-11 16:01:38 | 001,380,352 | ---- | C] (Blue Ripple Sound Limited) -- C:\Windows\SysWow64\rapture3d_oal.dll [2010-12-11 16:01:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BRS [2010-12-10 19:21:08 | 000,000,000 | ---D | C] -- C:\ProgramData\LightScribe [2010-12-10 19:21:07 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Nero [2010-12-10 19:05:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero [2010-12-10 19:04:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero [2010-12-10 19:04:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero [2010-12-10 19:00:49 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling [2010-12-10 19:00:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\LightScribe [2010-12-10 18:10:41 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Canneverbe Limited [2010-12-10 18:10:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Canneverbe Limited [2010-12-05 18:28:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\KONAMI [2010-12-05 15:48:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PESEdit.com 2011 Patch [2010-12-04 20:58:58 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\NFS SHIFT [2010-12-04 20:22:43 | 000,000,000 | ---D | C] -- C:\Windows\B83FC356B7C0441F8A4DD71E088E7974.TMP [2010-12-04 20:22:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard [2010-12-04 20:21:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts [2010-12-04 16:29:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Logitech [2010-12-03 17:23:46 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Wings of Prey [2010-12-03 16:56:37 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\WOP [2010-12-03 16:56:37 | 000,000,000 | ---D | C] -- C:\ProgramData\WOP [2010-11-29 17:16:33 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Moje Gry [2010-11-29 16:46:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts [2010-11-27 18:04:43 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Savegames [2010-11-24 14:46:39 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\.minecraft [2010-11-24 14:29:45 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\bin [2010-11-24 14:29:42 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\resourceses [2010-11-23 16:47:38 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Anti-Malware [2010-11-22 13:22:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NapiProjekt [2010-11-21 19:48:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shark007 Codecs [2010-11-21 19:48:29 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Win7codecs [2010-11-21 19:48:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Win7codecs [2010-11-21 19:48:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Win7codecs [2010-11-20 21:29:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2010-11-20 18:07:14 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Anno 1404 [2010-11-20 17:59:57 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Ubisoft [2010-11-20 17:57:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Tages [2010-11-19 21:04:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts [2010-11-19 21:04:16 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Core [2010-11-19 18:10:29 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\The Creative Assembly [2010-11-18 16:38:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies [2010-11-18 16:38:47 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\AGEIA [2010-11-18 15:50:11 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\prace szkolne [2010-11-17 17:34:05 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Adobe [2010-11-17 15:26:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace [2010-11-14 22:19:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2010-11-14 22:19:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2010-11-14 22:19:07 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Adobe [2010-11-14 20:18:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft [2010-11-11 23:23:48 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Electronic Arts [2010-11-11 22:54:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft WSE [2010-11-11 16:54:01 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\BitTorrent [2010-11-10 23:51:12 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner [2010-02-03 23:00:00 | 000,139,264 | ---- | C] ( ) -- C:\Windows\sipr3260.dll [6 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2011-01-09 17:48:43 | 002,359,296 | -HS- | M] () -- C:\Users\Adrian\ntuser.dat [2011-01-09 17:41:55 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-01-09 17:41:55 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-01-09 17:35:42 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temppk4812.html [2011-01-09 17:35:42 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzT4812.html [2011-01-09 17:34:50 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2011-01-09 17:34:48 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-01-09 17:34:47 | 3220,574,208 | -HS- | M] () -- C:\hiberfil.sys [2011-01-09 17:34:47 | 000,104,632 | ---- | M] () -- C:\Windows\SysNative\oodbs.lor [2011-01-09 17:33:55 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempqZ5028.html [2011-01-09 17:33:55 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempdI5028.html [2011-01-09 17:33:54 | 002,826,925 | -H-- | M] () -- C:\Users\Adrian\AppData\Local\IconCache.db [2011-01-09 12:04:00 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4152750467-2395009681-3878379516-1000UA.job [2011-01-09 11:55:05 | 000,003,288 | ---- | M] () -- C:\bootsqm.dat [2011-01-09 11:09:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempdI5092.html [2011-01-09 11:09:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempdq5092.html [2011-01-08 20:37:10 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temphg4620.html [2011-01-08 19:08:38 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempQY4648.html [2011-01-08 19:08:38 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOV4648.html [2011-01-08 19:08:38 | 000,001,010 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4152750467-2395009681-3878379516-1000Core.job [2011-01-08 16:30:19 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIH5116.html [2011-01-08 16:30:19 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempjN5116.html [2011-01-08 11:27:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempua4232.html [2011-01-08 11:27:35 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempAn4232.html [2011-01-07 23:05:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempca4468.html [2011-01-07 23:05:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXN4468.html [2011-01-07 22:33:22 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXa4912.html [2011-01-07 22:33:22 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxg4912.html [2011-01-07 21:57:01 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphN4564.html [2011-01-07 20:33:45 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMM4848.html [2011-01-07 20:33:45 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOf4848.html [2011-01-07 17:35:09 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyO4660.html [2011-01-07 17:35:09 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoP4660.html [2011-01-06 20:08:20 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempnT4444.html [2011-01-06 20:08:20 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOs4444.html [2011-01-06 15:28:38 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempro1364.html [2011-01-06 15:28:38 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPF1364.html [2011-01-05 23:24:55 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temprl1360.html [2011-01-05 23:24:55 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeI1360.html [2011-01-05 22:27:44 | 002,733,974 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2011-01-05 22:27:44 | 001,385,158 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011-01-05 22:27:44 | 000,841,718 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2011-01-05 22:27:44 | 000,774,712 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011-01-05 22:27:44 | 000,006,272 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011-01-05 22:15:10 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbq3284.html [2011-01-05 17:48:41 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHX4372.html [2011-01-05 17:48:41 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempuL4372.html [2011-01-04 22:28:42 | 003,569,664 | ---- | M] () -- C:\Users\Adrian\Desktop\WSTĘP.doc [2011-01-04 22:28:42 | 003,569,664 | ---- | M] () -- C:\Users\Adrian\Desktop\WSTĘP - Kopia.doc [2011-01-04 19:49:15 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXp3320.html [2011-01-04 19:49:15 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempmy3320.html [2011-01-04 18:11:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJh4164.html [2011-01-04 18:11:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFQ4164.html [2011-01-04 17:50:33 | 000,000,042 | ---- | M] () -- C:\Windows\oodjobd.INI [2011-01-04 16:31:04 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempww4396.html [2011-01-04 16:31:04 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTk4396.html [2011-01-03 18:35:58 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeS1848.html [2011-01-03 18:35:58 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempWz1848.html [2011-01-02 16:12:39 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHm3520.html [2011-01-02 16:12:39 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvb3520.html [2011-01-02 15:31:13 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzR4392.html [2011-01-02 15:31:13 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPq4392.html [2011-01-02 12:25:47 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempkc4524.html [2011-01-02 12:25:47 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempCX4524.html [2011-01-01 21:41:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempUs4704.html [2011-01-01 21:41:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFe4704.html [2011-01-01 18:53:47 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temprz4020.html [2011-01-01 18:53:47 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXf4020.html [2011-01-01 18:44:12 | 000,022,382 | ---- | M] () -- C:\Users\Adrian\Documents\cwicze.rtf [2010-12-31 19:10:15 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKn2268.html [2010-12-31 19:10:15 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemprC2268.html [2010-12-31 18:24:47 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempme1084.html [2010-12-31 16:38:56 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temprc4784.html [2010-12-31 16:38:56 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempuF4784.html [2010-12-31 15:05:25 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempUkl964.html [2010-12-31 15:05:25 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemplzC964.html [2010-12-31 11:37:57 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temphr4380.html [2010-12-31 11:37:57 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempcM4380.html [2010-12-30 23:06:28 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temptpu672.html [2010-12-30 23:06:28 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJfb672.html [2010-12-30 19:33:12 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJN4592.html [2010-12-30 19:09:31 | 003,746,964 | ---- | M] () -- C:\Users\Adrian\Documents\08. Dueling Guitars.mp3 [2010-12-30 19:05:51 | 002,277,742 | ---- | M] () -- C:\Users\Adrian\Documents\06. Ritual Dance.mp3 [2010-12-30 19:05:50 | 002,324,066 | ---- | M] () -- C:\Users\Adrian\Documents\05. Bari Improv.mp3 [2010-12-30 18:11:33 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvv4860.html [2010-12-30 18:11:33 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSM4860.html [2010-12-30 15:52:58 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRn1100.html [2010-12-30 15:52:58 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYx1100.html [2010-12-30 15:51:41 | 000,004,924 | ---- | M] () -- C:\ProgramData\mtbjfghn.xbe [2010-12-30 14:57:50 | 000,016,844 | ---- | M] () -- C:\Users\Adrian\Documents\Rozgrzewka w kolejności.docx [2010-12-30 10:12:34 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempvF3788.html [2010-12-29 15:55:31 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempZc1076.html [2010-12-29 14:56:53 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVQ4784.html [2010-12-29 14:56:53 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Templb4784.html [2010-12-29 10:23:43 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxp2744.html [2010-12-28 21:44:05 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRb4588.html [2010-12-28 21:44:05 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempGX4588.html [2010-12-28 21:02:06 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempps1996.html [2010-12-28 21:02:06 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOw1996.html [2010-12-28 17:14:42 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempuY4244.html [2010-12-28 17:14:42 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempva4244.html [2010-12-28 15:28:36 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTg3448.html [2010-12-28 11:54:14 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempad4464.html [2010-12-28 11:54:14 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRl4464.html [2010-12-27 20:57:36 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKY5044.html [2010-12-27 20:57:36 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempkZ5044.html [2010-12-27 19:22:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempiu5040.html [2010-12-27 19:22:35 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTI5040.html [2010-12-27 15:34:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphO1280.html [2010-12-27 15:34:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphI1280.html [2010-12-27 14:01:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempjS4256.html [2010-12-27 14:01:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempNR4256.html [2010-12-26 21:18:08 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempBa5088.html [2010-12-26 21:18:08 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJt5088.html [2010-12-26 16:59:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEZ4704.html [2010-12-26 16:59:23 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDX4704.html [2010-12-25 22:43:37 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempmq4420.html [2010-12-25 22:43:37 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempqj4420.html [2010-12-25 19:30:34 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIe4456.html [2010-12-25 19:30:34 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKy4456.html [2010-12-25 17:17:57 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempvN4412.html [2010-12-25 17:17:57 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempWj4412.html [2010-12-25 12:02:01 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMJ1140.html [2010-12-25 12:02:01 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLI1140.html [2010-12-24 21:56:13 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKZ4816.html [2010-12-24 21:56:13 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempcb4816.html [2010-12-24 17:31:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLPV372.html [2010-12-24 17:31:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temphnv372.html [2010-12-24 13:18:13 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempxI3564.html [2010-12-24 12:01:44 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temppb4484.html [2010-12-23 22:47:04 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRV2896.html [2010-12-23 22:47:04 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxp2896.html [2010-12-23 22:17:16 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFRA688.html [2010-12-23 18:27:55 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempus1540.html [2010-12-23 18:27:55 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempem1540.html [2010-12-23 17:33:51 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempNN3864.html [2010-12-23 17:33:51 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temptr3864.html [2010-12-23 17:26:21 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempAA4432.html [2010-12-23 17:26:21 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempuQ4432.html [2010-12-23 16:41:12 | 000,524,288 | -HS- | M] () -- C:\Users\Adrian\ntuser.dat{90a5f8cf-0eaa-11e0-b550-485b39c9a241}.TMContainer00000000000000000002.regtrans-ms [2010-12-23 16:41:12 | 000,524,288 | -HS- | M] () -- C:\Users\Adrian\ntuser.dat{90a5f8cf-0eaa-11e0-b550-485b39c9a241}.TMContainer00000000000000000001.regtrans-ms [2010-12-23 16:41:12 | 000,065,536 | -HS- | M] () -- C:\Users\Adrian\ntuser.dat{90a5f8cf-0eaa-11e0-b550-485b39c9a241}.TM.blf [2010-12-23 16:41:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempkP4596.html [2010-12-23 16:41:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempev4596.html [2010-12-23 15:42:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempQe5020.html [2010-12-23 15:42:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempjj5020.html [2010-12-22 22:39:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempWc4028.html [2010-12-22 22:39:23 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOz4028.html [2010-12-22 17:41:59 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemplN4500.html [2010-12-22 17:41:59 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXo4500.html [2010-12-22 15:46:09 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVw5648.html [2010-12-22 15:46:09 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempII5648.html [2010-12-22 14:12:34 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbl1224.html [2010-12-22 10:05:48 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYQ2608.html [2010-12-21 20:28:57 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoM4572.html [2010-12-21 20:28:57 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxk4572.html [2010-12-21 17:36:51 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempbF4884.html [2010-12-21 17:36:51 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempkn4884.html [2010-12-20 17:56:08 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempdG2332.html [2010-12-20 17:56:08 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempZj2332.html [2010-12-20 15:23:19 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDu3968.html [2010-12-20 15:23:19 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemprY3968.html [2010-12-19 20:23:40 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempdZ4932.html [2010-12-19 20:23:40 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemplA4932.html [2010-12-19 18:41:06 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJo1548.html [2010-12-19 18:41:06 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempZS1548.html [2010-12-19 16:16:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempgi4668.html [2010-12-19 16:16:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempcz4668.html [2010-12-19 14:59:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempNL5068.html [2010-12-19 14:59:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempby5068.html [2010-12-19 12:37:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempsL1500.html [2010-12-19 12:37:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempmT1500.html [2010-12-18 23:55:16 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoD3940.html [2010-12-18 23:55:16 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempyk3940.html [2010-12-18 16:06:38 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLo4364.html [2010-12-18 16:06:38 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempbG4364.html [2010-12-18 14:36:38 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempqsn628.html [2010-12-18 14:36:38 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempboX628.html [2010-12-18 12:46:18 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temprx4900.html [2010-12-17 23:16:13 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temptt1176.html [2010-12-17 23:16:13 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRm1176.html [2010-12-17 22:45:09 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFb1524.html [2010-12-17 22:22:24 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMO2540.html [2010-12-17 22:22:10 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempcs2760.html [2010-12-17 22:09:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempNX4532.html [2010-12-17 22:09:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzV4532.html [2010-12-17 17:54:11 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSj4584.html [2010-12-16 21:03:40 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzK5072.html [2010-12-16 21:03:40 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempcZ5072.html [2010-12-16 19:08:49 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvg4640.html [2010-12-16 19:08:49 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempai4640.html [2010-12-16 17:32:41 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempcL2188.html [2010-12-16 17:32:41 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempuO2188.html [2010-12-16 16:29:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempkc2768.html [2010-12-16 16:29:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemptR2768.html [2010-12-16 15:59:04 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKW3720.html [2010-12-16 15:59:04 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSa3720.html [2010-12-15 16:02:47 | 000,415,656 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010-12-15 15:28:44 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempjp3224.html [2010-12-15 15:28:44 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJf3224.html [2010-12-15 14:58:04 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMx4912.html [2010-12-15 14:58:04 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVO4912.html [2010-12-14 20:26:22 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempkc4320.html [2010-12-14 20:26:22 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempjm4320.html [2010-12-14 19:54:51 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempiZ1584.html [2010-12-14 17:02:49 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempimf868.html [2010-12-14 17:02:49 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempxkH868.html [2010-12-14 15:38:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphZ1972.html [2010-12-13 19:59:51 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphD4588.html [2010-12-13 19:59:51 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temprv4588.html [2010-12-13 17:20:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempqX1148.html [2010-12-13 17:20:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempCU1148.html [2010-12-13 16:54:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempth4512.html [2010-12-13 14:51:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempko2232.html [2010-12-13 14:51:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDY2232.html [2010-12-12 21:30:33 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempgb1628.html [2010-12-12 21:30:33 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempqt1628.html [2010-12-12 20:52:53 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSDw832.html [2010-12-12 18:32:22 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVn4564.html [2010-12-12 18:32:22 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempiV4564.html [2010-12-12 17:45:19 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDk4780.html [2010-12-12 15:15:01 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTn1908.html [2010-12-12 15:15:01 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRo1908.html [2010-12-11 22:01:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeZ1192.html [2010-12-11 22:01:23 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempjq1192.html [2010-12-11 19:47:06 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbx5948.html [2010-12-11 18:41:50 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempxK4356.html [2010-12-11 16:01:35 | 000,466,520 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll [2010-12-11 16:01:34 | 000,445,016 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll [2010-12-10 22:39:50 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempqW1300.html [2010-12-10 22:39:50 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempjj1300.html [2010-12-10 19:27:38 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempsO1000.html [2010-12-10 19:27:38 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxg1000.html [2010-12-10 18:22:14 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzU3964.html [2010-12-10 18:22:14 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempdd3964.html [2010-12-09 20:56:44 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempru4652.html [2010-12-09 20:56:44 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyS4652.html [2010-12-09 16:25:48 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHn4692.html [2010-12-09 16:25:48 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempco4692.html [2010-12-09 15:16:18 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempQI3540.html [2010-12-09 15:16:18 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempfk3540.html [2010-12-08 20:54:11 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempsM4988.html [2010-12-08 20:54:11 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempmF4988.html [2010-12-08 19:01:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempiE2720.html [2010-12-08 19:01:35 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIi2720.html [2010-12-08 14:36:36 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTm3192.html [2010-12-08 14:36:36 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temply3192.html [2010-12-07 21:52:56 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempnM4024.html [2010-12-07 21:52:56 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKW4024.html [2010-12-07 21:24:09 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvc5016.html [2010-12-07 21:24:09 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempiv5016.html [2010-12-07 21:15:12 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEx3972.html [2010-12-07 21:15:12 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSz3972.html [2010-12-07 21:10:43 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeK3756.html [2010-12-07 21:10:43 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempnv3756.html [2010-12-07 15:50:25 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEg3920.html [2010-12-07 15:50:25 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPw3920.html [2010-12-06 20:00:22 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temppu4772.html [2010-12-06 20:00:22 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSS4772.html [2010-12-06 16:22:37 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVE4556.html [2010-12-06 16:22:37 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJL4556.html [2010-12-05 20:26:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempsN4168.html [2010-12-05 19:43:39 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSZ1836.html [2010-12-05 19:43:39 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempkH1836.html [2010-12-05 16:28:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTI2384.html [2010-12-05 16:28:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSF2384.html [2010-12-05 14:50:40 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMB4104.html [2010-12-04 22:44:15 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXP3188.html [2010-12-04 22:44:15 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTx3188.html [2010-12-04 14:51:16 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempBs2108.html [2010-12-04 12:26:01 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxg4464.html [2010-12-04 12:26:01 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemptJ4464.html [2010-12-03 23:34:07 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKq4632.html [2010-12-03 23:34:07 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempmf4632.html [2010-12-03 22:16:42 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEI3516.html [2010-12-03 22:16:42 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempmk3516.html [2010-12-03 19:03:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempBG4736.html [2010-12-03 19:03:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Templn4736.html [2010-12-02 22:45:25 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempfc4284.html [2010-12-02 22:45:25 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphT4284.html [2010-12-02 22:04:10 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempWW3720.html [2010-12-02 18:48:36 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyU2148.html [2010-12-02 18:48:36 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempbG2148.html [2010-12-02 15:26:56 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempfZ4272.html [2010-12-01 16:37:17 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzO4492.html [2010-12-01 16:37:17 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKj4492.html [2010-11-30 21:29:59 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempzr4380.html [2010-11-30 21:29:59 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMS4380.html [2010-11-29 22:09:27 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeV4152.html [2010-11-29 22:09:27 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLE4152.html [2010-11-29 18:47:42 | 002,578,576 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll [2010-11-29 18:47:12 | 001,868,944 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll [2010-11-29 18:23:34 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSk4664.html [2010-11-29 18:23:34 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYu4664.html [2010-11-29 16:46:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYw4996.html [2010-11-29 16:46:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temppt4996.html [2010-11-29 15:31:48 | 000,007,751 | ---- | M] () -- C:\Users\Adrian\Documents\Osoby na historie spr(1).doc [2010-11-29 15:27:34 | 000,002,889 | ---- | M] () -- C:\Users\Adrian\Documents\sciąga opisowe(1).rtf [2010-11-29 15:27:33 | 000,011,497 | ---- | M] () -- C:\Users\Adrian\Documents\pojęcia na spr nr 2(1).rtf [2010-11-29 15:24:55 | 000,066,166 | ---- | M] () -- C:\Users\Adrian\Documents\sciąga opisowe.rtf [2010-11-29 15:23:03 | 000,028,140 | ---- | M] () -- C:\Users\Adrian\Documents\Osoby na historie spr.doc [2010-11-28 21:30:06 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMx4744.html [2010-11-28 21:30:06 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempGy4744.html [2010-11-28 20:32:55 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempfQ3128.html [2010-11-27 20:42:47 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoC4984.html [2010-11-27 20:42:47 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHx4984.html [2010-11-27 19:44:52 | 000,011,505 | ---- | M] () -- C:\Users\Adrian\Documents\pojęcia na spr nr 2.rtf [2010-11-27 18:46:44 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRA3716.html [2010-11-27 18:46:44 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVD3716.html [2010-11-27 17:06:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemprS3988.html [2010-11-27 17:06:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHJ3988.html [2010-11-27 16:17:34 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempNf5056.html [2010-11-27 16:17:34 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemptF5056.html [2010-11-27 14:22:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRi4176.html [2010-11-27 14:22:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempsi4176.html [2010-11-27 12:41:36 | 000,006,254 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010-11-27 12:39:37 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvu3320.html [2010-11-27 12:39:37 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempGF3320.html [2010-11-26 23:07:24 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOt4800.html [2010-11-26 23:07:24 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPr4800.html [2010-11-26 16:10:42 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempqr5104.html [2010-11-26 16:10:42 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIz5104.html [2010-11-25 21:43:41 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temppv2932.html [2010-11-25 21:43:41 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKv2932.html [2010-11-25 18:18:54 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFc1876.html [2010-11-25 18:18:54 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempyf1876.html [2010-11-24 20:24:50 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempml4116.html [2010-11-24 20:24:50 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempoi4116.html [2010-11-24 18:27:18 | 000,018,386 | ---- | M] () -- C:\Users\Adrian\Documents\Wojna blyskawiczna.docx [2010-11-23 20:22:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIz4512.html [2010-11-23 20:22:35 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphU4512.html [2010-11-22 21:36:42 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVA2524.html [2010-11-22 21:36:42 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJZ2524.html [2010-11-22 16:24:19 | 000,026,620 | ---- | M] () -- C:\Users\Adrian\Documents\Przystosowania drapieżników do drapieżnictwa i ofiar do obrony.docx [2010-11-22 13:56:08 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempqHg964.html [2010-11-22 13:56:08 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYqb964.html [2010-11-22 13:33:20 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXt1472.html [2010-11-22 13:33:20 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvv1472.html [2010-11-21 19:42:30 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempzt4456.html [2010-11-21 14:12:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyX4480.html [2010-11-21 14:12:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempwz4480.html [2010-11-21 12:25:16 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempch4452.html [2010-11-21 12:25:16 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempae4452.html [2010-11-20 22:30:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXA2708.html [2010-11-20 22:30:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempmS2708.html [2010-11-20 20:19:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempZl3812.html [2010-11-20 20:19:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbt3812.html [2010-11-20 17:46:18 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeX4328.html [2010-11-20 14:23:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoH2792.html [2010-11-20 14:23:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPO2792.html [2010-11-20 12:59:43 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempGR4576.html [2010-11-20 12:59:43 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxc4576.html [2010-11-20 12:12:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemppO5116.html [2010-11-20 12:12:35 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJH5116.html [2010-11-19 21:41:07 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDj2660.html [2010-11-19 21:41:07 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Templz2660.html [2010-11-19 18:48:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbu4100.html [2010-11-19 18:48:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempqn4100.html [2010-11-19 14:01:22 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHR3156.html [2010-11-19 14:01:22 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempiv3156.html [2010-11-18 21:16:33 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSI2156.html [2010-11-18 21:16:33 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempwl2156.html [2010-11-18 19:32:07 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempvE4988.html [2010-11-18 19:32:07 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemplM4988.html [2010-11-18 18:29:06 | 000,314,016 | ---- | M] () -- C:\Windows\SysNative\drivers\atksgt.sys [2010-11-18 18:29:06 | 000,043,680 | ---- | M] () -- C:\Windows\SysNative\drivers\lirsgt.sys [2010-11-17 16:31:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempcn2088.html [2010-11-17 16:31:23 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEj2088.html [2010-11-17 15:25:15 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempymo120.html [2010-11-17 15:25:15 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempfzh120.html [2010-11-16 22:45:30 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVz1228.html [2010-11-16 22:45:30 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJH1228.html [2010-11-15 18:14:33 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMM3980.html [2010-11-15 18:14:33 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempod3980.html [2010-11-15 16:19:15 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempZQ4164.html [2010-11-15 16:19:15 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempnV4164.html [2010-11-15 16:06:41 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphE3352.html [2010-11-15 16:06:41 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempUt3352.html [2010-11-14 22:23:56 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPC2868.html [2010-11-14 22:23:56 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempph2868.html [2010-11-14 21:34:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemplN4884.html [2010-11-14 21:34:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTH4884.html [2010-11-14 12:47:35 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt [2010-11-13 21:42:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempoh2736.html [2010-11-13 21:42:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemppV2736.html [2010-11-13 19:55:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKu4656.html [2010-11-13 19:55:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempnQ4656.html [2010-11-13 16:24:53 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxp1524.html [2010-11-13 16:24:53 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempnu1524.html [2010-11-12 23:12:48 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJp4224.html [2010-11-12 23:12:48 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzC4224.html [2010-11-12 22:12:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbq4688.html [2010-11-12 22:12:23 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPJ4688.html [2010-11-12 16:49:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempop2680.html [2010-11-12 16:12:51 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYq3224.html [2010-11-12 12:25:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXe2920.html [2010-11-12 12:25:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKN2920.html [2010-11-11 23:36:49 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Templg1556.html [2010-11-11 23:36:49 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMR1556.html [2010-11-11 23:12:29 | 000,262,144 | ---- | M] () -- C:\ProgramData\NTUser.dat [2010-11-11 23:12:28 | 000,524,288 | -HS- | M] () -- C:\ProgramData\NTUser.dat{495500be-eda8-11df-8fa1-485b39c9a241}.TMContainer00000000000000000002.regtrans-ms [2010-11-11 23:12:28 | 000,524,288 | -HS- | M] () -- C:\ProgramData\NTUser.dat{495500be-eda8-11df-8fa1-485b39c9a241}.TMContainer00000000000000000001.regtrans-ms [2010-11-11 23:12:28 | 000,065,536 | -HS- | M] () -- C:\ProgramData\NTUser.dat{495500be-eda8-11df-8fa1-485b39c9a241}.TM.blf [2010-11-11 23:12:27 | 000,524,288 | -HS- | M] () -- C:\ProgramData\NTUser.dat{495500b3-eda8-11df-8fa1-485b39c9a241}.TMContainer00000000000000000002.regtrans-ms [2010-11-11 23:12:27 | 000,524,288 | -HS- | M] () -- C:\ProgramData\NTUser.dat{495500b3-eda8-11df-8fa1-485b39c9a241}.TMContainer00000000000000000001.regtrans-ms [2010-11-11 23:12:27 | 000,065,536 | -HS- | M] () -- C:\ProgramData\NTUser.dat{495500b3-eda8-11df-8fa1-485b39c9a241}.TM.blf [2010-11-11 18:43:49 | 000,108,840 | ---- | M] () -- C:\Users\Adrian\AppData\Local\GDIPFONTCACHEV1.DAT [2010-11-11 18:09:14 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyB4292.html [2010-11-11 13:18:13 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempco4180.html [2010-11-11 13:18:13 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPf4180.html [2010-11-11 11:38:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFX3588.html [2010-11-11 11:38:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDh3588.html [2010-11-11 11:35:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempul2752.html [2010-11-11 11:35:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTF2752.html [2010-11-11 11:35:07 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempbK1748.html [2010-11-11 11:35:07 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempvQ1748.html [2010-11-11 11:34:39 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempQp3272.html [2010-11-11 11:34:39 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyP3272.html [2010-11-11 11:32:32 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLd4884.html [2010-11-11 11:32:32 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempCH4884.html [2010-11-10 23:59:47 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMt4816.html [2010-11-10 23:59:47 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYW4816.html [6 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-01-09 17:35:42 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temppk4812.html [2011-01-09 17:35:42 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempzT4812.html [2011-01-09 17:33:54 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempqZ5028.html [2011-01-09 17:33:54 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempdI5028.html [2011-01-09 11:55:05 | 000,003,288 | ---- | C] () -- C:\bootsqm.dat [2011-01-09 10:48:10 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempdI5092.html [2011-01-09 10:48:10 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempdq5092.html [2011-01-08 20:15:37 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temphg4620.html [2011-01-08 16:36:24 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempQY4648.html [2011-01-08 16:36:24 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempOV4648.html [2011-01-08 15:52:04 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempIH5116.html [2011-01-08 15:52:04 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempjN5116.html [2011-01-08 10:59:53 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempua4232.html [2011-01-08 10:59:53 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempAn4232.html [2011-01-07 22:49:17 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempca4468.html [2011-01-07 22:49:17 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXN4468.html [2011-01-07 22:33:12 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXa4912.html [2011-01-07 22:33:12 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxg4912.html [2011-01-07 20:35:18 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphN4564.html [2011-01-07 20:24:44 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMM4848.html [2011-01-07 20:24:44 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempOf4848.html [2011-01-07 14:14:16 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempyO4660.html [2011-01-07 14:14:16 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempoP4660.html [2011-01-06 17:24:12 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempnT4444.html [2011-01-06 17:24:12 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempOs4444.html [2011-01-06 11:36:41 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempro1364.html [2011-01-06 11:36:41 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempPF1364.html [2011-01-05 22:51:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temprl1360.html [2011-01-05 22:51:32 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempeI1360.html [2011-01-05 22:27:42 | 003,569,664 | ---- | C] () -- C:\Users\Adrian\Desktop\WSTĘP - Kopia.doc [2011-01-05 22:27:16 | 003,569,664 | ---- | C] () -- C:\Users\Adrian\Desktop\WSTĘP.doc [2011-01-05 20:59:15 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempbq3284.html [2011-01-05 14:08:11 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempHX4372.html [2011-01-05 14:08:11 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempuL4372.html [2011-01-04 19:04:17 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXp3320.html [2011-01-04 19:04:17 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempmy3320.html [2011-01-04 17:50:33 | 000,000,042 | ---- | C] () -- C:\Windows\oodjobd.INI [2011-01-04 17:34:12 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJh4164.html [2011-01-04 17:34:12 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempFQ4164.html [2011-01-04 15:45:18 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempww4396.html [2011-01-04 15:45:18 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTk4396.html [2011-01-03 17:36:26 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempeS1848.html [2011-01-03 17:36:26 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempWz1848.html [2011-01-02 16:04:51 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempHm3520.html [2011-01-02 16:04:51 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempvb3520.html [2011-01-02 12:42:37 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempzR4392.html [2011-01-02 12:42:37 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempPq4392.html [2011-01-02 12:25:31 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempkc4524.html [2011-01-02 12:25:31 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempCX4524.html [2011-01-01 21:04:17 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempUs4704.html [2011-01-01 21:04:17 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempFe4704.html [2011-01-01 18:44:11 | 000,022,382 | ---- | C] () -- C:\Users\Adrian\Documents\cwicze.rtf [2011-01-01 13:00:50 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temprz4020.html [2011-01-01 13:00:50 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXf4020.html [2010-12-31 18:47:27 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKn2268.html [2010-12-31 18:47:27 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemprC2268.html [2010-12-31 18:09:59 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempme1084.html [2010-12-31 16:12:12 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temprc4784.html [2010-12-31 16:12:12 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempuF4784.html [2010-12-31 12:58:20 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempUkl964.html [2010-12-31 12:58:20 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemplzC964.html [2010-12-31 10:57:11 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temphr4380.html [2010-12-31 10:57:11 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempcM4380.html [2010-12-30 21:08:19 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temptpu672.html [2010-12-30 21:08:19 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJfb672.html [2010-12-30 19:06:02 | 003,746,964 | ---- | C] () -- C:\Users\Adrian\Documents\08. Dueling Guitars.mp3 [2010-12-30 19:03:07 | 002,277,742 | ---- | C] () -- C:\Users\Adrian\Documents\06. Ritual Dance.mp3 [2010-12-30 19:03:05 | 002,324,066 | ---- | C] () -- C:\Users\Adrian\Documents\05. Bari Improv.mp3 [2010-12-30 18:59:47 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJN4592.html [2010-12-30 16:24:23 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempvv4860.html [2010-12-30 16:24:23 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSM4860.html [2010-12-30 15:51:41 | 000,004,924 | ---- | C] () -- C:\ProgramData\mtbjfghn.xbe [2010-12-30 14:57:49 | 000,016,844 | ---- | C] () -- C:\Users\Adrian\Documents\Rozgrzewka w kolejności.docx [2010-12-30 10:59:36 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRn1100.html [2010-12-30 10:59:36 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempYx1100.html [2010-12-30 10:11:57 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempvF3788.html [2010-12-29 15:55:19 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempZc1076.html [2010-12-29 14:44:10 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVQ4784.html [2010-12-29 14:44:10 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Templb4784.html [2010-12-29 10:23:37 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxp2744.html [2010-12-28 21:30:55 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRb4588.html [2010-12-28 21:30:55 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempGX4588.html [2010-12-28 19:37:14 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempps1996.html [2010-12-28 19:37:14 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempOw1996.html [2010-12-28 16:48:59 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempuY4244.html [2010-12-28 16:48:59 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempva4244.html [2010-12-28 15:28:25 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTg3448.html [2010-12-28 11:15:59 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempad4464.html [2010-12-28 11:15:59 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRl4464.html [2010-12-27 20:56:00 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKY5044.html [2010-12-27 20:56:00 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempkZ5044.html [2010-12-27 15:57:34 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempiu5040.html [2010-12-27 15:57:34 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTI5040.html [2010-12-27 14:43:50 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphO1280.html [2010-12-27 14:43:50 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphI1280.html [2010-12-27 11:45:56 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempjS4256.html [2010-12-27 11:45:56 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempNR4256.html [2010-12-26 18:23:10 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempBa5088.html [2010-12-26 18:23:10 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJt5088.html [2010-12-26 12:15:00 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempEZ4704.html [2010-12-26 12:15:00 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempDX4704.html [2010-12-25 20:45:35 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempmq4420.html [2010-12-25 20:45:35 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempqj4420.html [2010-12-25 18:21:28 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempIe4456.html [2010-12-25 18:21:28 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKy4456.html [2010-12-25 12:24:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempvN4412.html [2010-12-25 12:24:32 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempWj4412.html [2010-12-25 11:24:42 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMJ1140.html [2010-12-25 11:24:42 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLI1140.html [2010-12-24 21:23:33 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKZ4816.html [2010-12-24 21:23:33 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempcb4816.html [2010-12-24 13:31:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLPV372.html [2010-12-24 13:31:32 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temphnv372.html [2010-12-24 12:24:19 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempxI3564.html [2010-12-24 10:17:51 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temppb4484.html [2010-12-23 22:46:57 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRV2896.html [2010-12-23 22:46:57 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxp2896.html [2010-12-23 19:14:57 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempFRA688.html [2010-12-23 17:42:29 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempus1540.html [2010-12-23 17:42:29 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempem1540.html [2010-12-23 17:33:13 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempNN3864.html [2010-12-23 17:33:13 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temptr3864.html [2010-12-23 17:27:56 | 000,104,632 | ---- | C] () -- C:\Windows\SysNative\oodbs.lor [2010-12-23 16:44:34 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempAA4432.html [2010-12-23 16:44:34 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempuQ4432.html [2010-12-23 16:40:03 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempkP4596.html [2010-12-23 16:40:03 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempev4596.html [2010-12-23 16:38:14 | 000,524,288 | -HS- | C] () -- C:\Users\Adrian\ntuser.dat{90a5f8cf-0eaa-11e0-b550-485b39c9a241}.TMContainer00000000000000000002.regtrans-ms [2010-12-23 16:38:14 | 000,524,288 | -HS- | C] () -- C:\Users\Adrian\ntuser.dat{90a5f8cf-0eaa-11e0-b550-485b39c9a241}.TMContainer00000000000000000001.regtrans-ms [2010-12-23 16:38:14 | 000,065,536 | -HS- | C] () -- C:\Users\Adrian\ntuser.dat{90a5f8cf-0eaa-11e0-b550-485b39c9a241}.TM.blf [2010-12-23 14:29:10 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempQe5020.html [2010-12-23 14:29:10 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempjj5020.html [2010-12-22 21:02:05 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempWc4028.html [2010-12-22 21:02:05 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempOz4028.html [2010-12-22 16:50:28 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemplN4500.html [2010-12-22 16:50:28 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXo4500.html [2010-12-22 15:08:24 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVw5648.html [2010-12-22 15:08:24 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempII5648.html [2010-12-22 10:28:24 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempbl1224.html [2010-12-22 10:05:28 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempYQ2608.html [2010-12-21 19:30:40 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempoM4572.html [2010-12-21 19:30:40 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxk4572.html [2010-12-21 14:12:30 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempbF4884.html [2010-12-21 14:12:30 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempkn4884.html [2010-12-20 17:29:47 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempdG2332.html [2010-12-20 17:29:47 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempZj2332.html [2010-12-20 15:06:12 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempDu3968.html [2010-12-20 15:06:12 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemprY3968.html [2010-12-19 20:11:52 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempdZ4932.html [2010-12-19 20:11:52 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemplA4932.html [2010-12-19 18:04:51 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJo1548.html [2010-12-19 18:04:51 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempZS1548.html [2010-12-19 15:22:27 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempgi4668.html [2010-12-19 15:22:27 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempcz4668.html [2010-12-19 13:30:47 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempNL5068.html [2010-12-19 13:30:47 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempby5068.html [2010-12-19 12:36:08 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempsL1500.html [2010-12-19 12:36:08 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempmT1500.html [2010-12-18 23:33:52 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempoD3940.html [2010-12-18 23:33:52 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempyk3940.html [2010-12-18 15:03:26 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLo4364.html [2010-12-18 15:03:26 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempbG4364.html [2010-12-18 14:36:12 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempqsn628.html [2010-12-18 14:36:12 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempboX628.html [2010-12-18 11:24:17 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temprx4900.html [2010-12-17 23:08:57 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temptt1176.html [2010-12-17 23:08:57 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRm1176.html [2010-12-17 22:43:50 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempFb1524.html [2010-12-17 22:22:22 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMO2540.html [2010-12-17 22:11:39 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempcs2760.html [2010-12-17 21:33:03 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempNX4532.html [2010-12-17 21:33:03 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempzV4532.html [2010-12-17 13:20:29 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSj4584.html [2010-12-16 20:35:52 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempzK5072.html [2010-12-16 20:35:52 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempcZ5072.html [2010-12-16 19:02:31 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempvg4640.html [2010-12-16 19:02:31 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempai4640.html [2010-12-16 17:14:57 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempcL2188.html [2010-12-16 17:14:57 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempuO2188.html [2010-12-16 16:24:04 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempkc2768.html [2010-12-16 16:24:04 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemptR2768.html [2010-12-16 15:45:25 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKW3720.html [2010-12-16 15:45:25 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSa3720.html [2010-12-15 15:11:18 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempjp3224.html [2010-12-15 15:11:18 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJf3224.html [2010-12-15 14:52:18 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMx4912.html [2010-12-15 14:52:18 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVO4912.html [2010-12-14 20:24:26 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempkc4320.html [2010-12-14 20:24:26 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempjm4320.html [2010-12-14 18:25:57 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempiZ1584.html [2010-12-14 16:36:05 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempimf868.html [2010-12-14 16:36:05 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempxkH868.html [2010-12-14 14:33:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphZ1972.html [2010-12-13 19:26:13 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphD4588.html [2010-12-13 19:26:13 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temprv4588.html [2010-12-13 17:19:44 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempqX1148.html [2010-12-13 17:19:44 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempCU1148.html [2010-12-13 16:07:48 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempth4512.html [2010-12-13 14:29:47 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempko2232.html [2010-12-13 14:29:47 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempDY2232.html [2010-12-12 21:22:45 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempgb1628.html [2010-12-12 21:22:45 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempqt1628.html [2010-12-12 20:18:44 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSDw832.html [2010-12-12 18:27:23 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVn4564.html [2010-12-12 18:27:23 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempiV4564.html [2010-12-12 16:44:51 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempDk4780.html [2010-12-12 12:11:17 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTn1908.html [2010-12-12 12:11:17 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRo1908.html [2010-12-11 21:31:33 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempeZ1192.html [2010-12-11 21:31:33 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempjq1192.html [2010-12-11 19:46:44 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempbx5948.html [2010-12-11 12:56:45 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempxK4356.html [2010-12-10 19:36:47 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempqW1300.html [2010-12-10 19:36:47 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempjj1300.html [2010-12-10 18:33:05 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempsO1000.html [2010-12-10 18:33:05 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxg1000.html [2010-12-10 14:07:00 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempzU3964.html [2010-12-10 14:07:00 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempdd3964.html [2010-12-09 17:46:20 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempru4652.html [2010-12-09 17:46:20 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempyS4652.html [2010-12-09 15:19:23 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempHn4692.html [2010-12-09 15:19:23 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempco4692.html [2010-12-09 15:15:57 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempQI3540.html [2010-12-09 15:15:57 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempfk3540.html [2010-12-08 20:10:07 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempsM4988.html [2010-12-08 20:10:07 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempmF4988.html [2010-12-08 15:46:02 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempiE2720.html [2010-12-08 15:46:02 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempIi2720.html [2010-12-08 14:24:57 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTm3192.html [2010-12-08 14:24:57 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temply3192.html [2010-12-07 21:49:39 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempnM4024.html [2010-12-07 21:49:39 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKW4024.html [2010-12-07 21:23:03 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempvc5016.html [2010-12-07 21:23:03 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempiv5016.html [2010-12-07 21:14:03 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempEx3972.html [2010-12-07 21:14:03 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSz3972.html [2010-12-07 21:08:36 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempeK3756.html [2010-12-07 21:08:36 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempnv3756.html [2010-12-07 15:13:44 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempEg3920.html [2010-12-07 15:13:44 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempPw3920.html [2010-12-06 19:36:30 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temppu4772.html [2010-12-06 19:36:30 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSS4772.html [2010-12-06 16:12:21 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVE4556.html [2010-12-06 16:12:21 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJL4556.html [2010-12-05 20:05:30 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempsN4168.html [2010-12-05 18:22:09 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSZ1836.html [2010-12-05 18:22:09 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempkH1836.html [2010-12-05 15:19:51 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTI2384.html [2010-12-05 15:19:51 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSF2384.html [2010-12-05 12:36:35 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMB4104.html [2010-12-04 15:47:26 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXP3188.html [2010-12-04 15:47:26 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTx3188.html [2010-12-04 13:20:03 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempBs2108.html [2010-12-04 11:46:46 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxg4464.html [2010-12-04 11:46:46 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemptJ4464.html [2010-12-03 22:45:16 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKq4632.html [2010-12-03 22:45:16 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempmf4632.html [2010-12-03 20:35:11 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempEI3516.html [2010-12-03 20:35:11 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempmk3516.html [2010-12-03 15:55:28 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempBG4736.html [2010-12-03 15:55:28 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Templn4736.html [2010-12-02 22:09:44 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempfc4284.html [2010-12-02 22:09:44 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphT4284.html [2010-12-02 19:32:46 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempWW3720.html [2010-12-02 15:44:27 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempyU2148.html [2010-12-02 15:44:27 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempbG2148.html [2010-12-02 14:31:51 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempfZ4272.html [2010-12-01 15:54:52 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempzO4492.html [2010-12-01 15:54:52 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKj4492.html [2010-11-30 19:34:23 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempzr4380.html [2010-11-30 19:34:23 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMS4380.html [2010-11-29 21:52:05 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempeV4152.html [2010-11-29 21:52:05 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLE4152.html [2010-11-29 16:51:45 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSk4664.html [2010-11-29 16:51:45 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempYu4664.html [2010-11-29 15:27:49 | 000,007,751 | ---- | C] () -- C:\Users\Adrian\Documents\Osoby na historie spr(1).doc [2010-11-29 15:27:21 | 000,002,889 | ---- | C] () -- C:\Users\Adrian\Documents\sciąga opisowe(1).rtf [2010-11-29 15:27:19 | 000,011,497 | ---- | C] () -- C:\Users\Adrian\Documents\pojęcia na spr nr 2(1).rtf [2010-11-29 15:16:49 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempYw4996.html [2010-11-29 15:16:49 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temppt4996.html [2010-11-28 21:06:37 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMx4744.html [2010-11-28 21:06:37 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempGy4744.html [2010-11-28 19:31:46 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempfQ3128.html [2010-11-27 19:26:37 | 000,066,166 | ---- | C] () -- C:\Users\Adrian\Documents\sciąga opisowe.rtf [2010-11-27 19:26:36 | 000,011,505 | ---- | C] () -- C:\Users\Adrian\Documents\pojęcia na spr nr 2.rtf [2010-11-27 19:26:34 | 000,028,140 | ---- | C] () -- C:\Users\Adrian\Documents\Osoby na historie spr.doc [2010-11-27 19:25:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempoC4984.html [2010-11-27 19:25:32 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempHx4984.html [2010-11-27 18:04:13 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRA3716.html [2010-11-27 18:04:13 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVD3716.html [2010-11-27 17:05:40 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemprS3988.html [2010-11-27 17:05:40 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempHJ3988.html [2010-11-27 15:30:43 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempNf5056.html [2010-11-27 15:30:43 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemptF5056.html [2010-11-27 12:52:41 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRi4176.html [2010-11-27 12:52:41 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempsi4176.html [2010-11-27 12:12:25 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempvu3320.html [2010-11-27 12:12:25 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempGF3320.html [2010-11-26 22:37:09 | 000,006,254 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010-11-26 16:53:02 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempOt4800.html [2010-11-26 16:53:02 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempPr4800.html [2010-11-26 14:08:52 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempqr5104.html [2010-11-26 14:08:52 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempIz5104.html [2010-11-25 20:43:37 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temppv2932.html [2010-11-25 20:43:37 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKv2932.html [2010-11-25 16:15:56 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempFc1876.html [2010-11-25 16:15:56 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempyf1876.html [2010-11-24 18:27:11 | 000,018,386 | ---- | C] () -- C:\Users\Adrian\Documents\Wojna blyskawiczna.docx [2010-11-24 14:48:34 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempml4116.html [2010-11-24 14:48:34 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempoi4116.html [2010-11-24 14:31:00 | 000,034,304 | -HS- | C] () -- C:\Users\Adrian\AppData\Roaming\Thumbs.db [2010-11-24 14:29:45 | 000,290,566 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\minecrafthax.jar [2010-11-24 14:29:45 | 000,051,765 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\Minecraft.jar [2010-11-24 14:29:45 | 000,042,555 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\ItemslistV110.png [2010-11-24 14:29:45 | 000,026,486 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\Items_slot_number.JPG [2010-11-24 14:29:42 | 000,232,504 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\Minecraft.exe [2010-11-23 18:17:09 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempIz4512.html [2010-11-23 18:17:09 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphU4512.html [2010-11-22 16:24:19 | 000,026,620 | ---- | C] () -- C:\Users\Adrian\Documents\Przystosowania drapieżników do drapieżnictwa i ofiar do obrony.docx [2010-11-22 15:37:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVA2524.html [2010-11-22 15:37:32 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJZ2524.html [2010-11-22 13:35:18 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempqHg964.html [2010-11-22 13:35:18 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempYqb964.html [2010-11-22 13:13:11 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXt1472.html [2010-11-22 13:13:11 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempvv1472.html [2010-11-21 17:10:37 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempzt4456.html [2010-11-21 12:27:54 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempyX4480.html [2010-11-21 12:27:54 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempwz4480.html [2010-11-21 12:24:52 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempch4452.html [2010-11-21 12:24:52 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempae4452.html [2010-11-20 20:43:25 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXA2708.html [2010-11-20 20:43:25 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempmS2708.html [2010-11-20 18:32:35 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempZl3812.html [2010-11-20 18:32:35 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempbt3812.html [2010-11-20 16:39:17 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempeX4328.html [2010-11-20 13:19:38 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempoH2792.html [2010-11-20 13:19:38 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempPO2792.html [2010-11-20 12:30:49 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempGR4576.html [2010-11-20 12:30:49 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxc4576.html [2010-11-20 11:58:19 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemppO5116.html [2010-11-20 11:58:19 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJH5116.html [2010-11-19 19:44:58 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempDj2660.html [2010-11-19 19:44:58 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Templz2660.html [2010-11-19 14:28:25 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempbu4100.html [2010-11-19 14:28:25 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempqn4100.html [2010-11-19 14:01:19 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempHR3156.html [2010-11-19 14:01:19 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempiv3156.html [2010-11-18 20:16:31 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSI2156.html [2010-11-18 20:16:31 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempwl2156.html [2010-11-18 18:29:06 | 000,314,016 | ---- | C] () -- C:\Windows\SysNative\drivers\atksgt.sys [2010-11-18 18:29:06 | 000,043,680 | ---- | C] () -- C:\Windows\SysNative\drivers\lirsgt.sys [2010-11-18 15:18:31 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempvE4988.html [2010-11-18 15:18:31 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemplM4988.html [2010-11-17 16:23:14 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempcn2088.html [2010-11-17 16:23:14 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempEj2088.html [2010-11-17 14:34:25 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempymo120.html [2010-11-17 14:34:25 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempfzh120.html [2010-11-16 15:07:37 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVz1228.html [2010-11-16 15:07:37 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJH1228.html [2010-11-15 17:53:41 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMM3980.html [2010-11-15 17:53:41 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempod3980.html [2010-11-15 16:06:44 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempZQ4164.html [2010-11-15 16:06:44 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempnV4164.html [2010-11-15 16:06:40 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphE3352.html [2010-11-15 16:06:40 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempUt3352.html [2010-11-14 22:23:37 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempPC2868.html [2010-11-14 22:23:37 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempph2868.html [2010-11-14 19:03:23 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemplN4884.html [2010-11-14 19:03:23 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTH4884.html [2010-11-13 20:40:21 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempoh2736.html [2010-11-13 20:40:21 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemppV2736.html [2010-11-13 19:08:13 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKu4656.html [2010-11-13 19:08:13 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempnQ4656.html [2010-11-13 11:30:43 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxp1524.html [2010-11-13 11:30:43 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempnu1524.html [2010-11-12 22:27:19 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJp4224.html [2010-11-12 22:27:19 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempzC4224.html [2010-11-12 18:14:36 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempbq4688.html [2010-11-12 18:14:36 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempPJ4688.html [2010-11-12 16:49:16 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempop2680.html [2010-11-12 15:55:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempYq3224.html [2010-11-12 10:38:31 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXe2920.html [2010-11-12 10:38:31 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKN2920.html [2010-11-11 23:12:27 | 000,524,288 | -HS- | C] () -- C:\ProgramData\NTUser.dat{495500be-eda8-11df-8fa1-485b39c9a241}.TMContainer00000000000000000002.regtrans-ms [2010-11-11 23:12:27 | 000,524,288 | -HS- | C] () -- C:\ProgramData\NTUser.dat{495500be-eda8-11df-8fa1-485b39c9a241}.TMContainer00000000000000000001.regtrans-ms [2010-11-11 23:12:27 | 000,065,536 | -HS- | C] () -- C:\ProgramData\NTUser.dat{495500be-eda8-11df-8fa1-485b39c9a241}.TM.blf [2010-11-11 23:12:26 | 000,524,288 | -HS- | C] () -- C:\ProgramData\NTUser.dat{495500b3-eda8-11df-8fa1-485b39c9a241}.TMContainer00000000000000000002.regtrans-ms [2010-11-11 23:12:25 | 000,524,288 | -HS- | C] () -- C:\ProgramData\NTUser.dat{495500b3-eda8-11df-8fa1-485b39c9a241}.TMContainer00000000000000000001.regtrans-ms [2010-11-11 23:12:25 | 000,065,536 | -HS- | C] () -- C:\ProgramData\NTUser.dat{495500b3-eda8-11df-8fa1-485b39c9a241}.TM.blf [2010-11-11 23:12:24 | 000,262,144 | ---- | C] () -- C:\ProgramData\NTUser.dat [2010-11-11 23:12:24 | 000,005,120 | -HS- | C] () -- C:\ProgramData\NTUser.dat.LOG1 [2010-11-11 23:12:24 | 000,000,000 | -HS- | C] () -- C:\ProgramData\NTUser.dat.LOG2 [2010-11-11 18:27:01 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Templg1556.html [2010-11-11 18:27:01 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMR1556.html [2010-11-11 16:36:55 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempyB4292.html [2010-11-11 11:57:34 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempco4180.html [2010-11-11 11:57:34 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempPf4180.html [2010-11-11 11:37:59 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempFX3588.html [2010-11-11 11:37:59 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempDh3588.html [2010-11-11 11:35:46 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempul2752.html [2010-11-11 11:35:46 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTF2752.html [2010-11-11 11:35:05 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempbK1748.html [2010-11-11 11:35:05 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempvQ1748.html [2010-11-11 11:34:38 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempQp3272.html [2010-11-11 11:34:38 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempyP3272.html [2010-11-11 11:32:31 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLd4884.html [2010-11-11 11:32:31 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempCH4884.html [2010-11-10 21:00:36 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMt4816.html [2010-11-10 21:00:36 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempYW4816.html [2010-11-10 17:04:15 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempEV4472.html [2010-11-10 14:54:36 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempCB4144.html [2010-11-10 14:45:31 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempnt4376.html [2010-11-10 14:37:55 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphD2408.html [2010-11-10 14:37:55 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempjY2408.html [2010-11-09 20:39:50 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempgD4948.html [2010-11-09 20:39:50 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempAB4948.html [2010-11-09 18:12:39 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKk3092.html [2010-11-09 18:12:39 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempwc3092.html [2010-11-09 16:11:44 | 000,000,356 | ---- | C] () -- C:\ProgramData\hpzinstall.log [2010-11-09 16:06:10 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempIQ4976.html [2010-11-09 15:09:10 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempEq3124.html [2010-11-09 15:09:10 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempUP3124.html [2010-11-08 19:17:10 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLG5008.html [2010-11-08 19:17:10 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempDY5008.html [2010-11-08 15:34:09 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempiX2032.html [2010-11-08 15:34:09 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLM2032.html [2010-11-08 14:36:47 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempCZ4104.html [2010-11-08 14:36:47 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempgB4104.html [2010-11-08 14:30:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKM3064.html [2010-11-08 14:30:32 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxu3064.html [2010-11-08 14:26:07 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempdr4912.html [2010-11-08 14:26:07 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempsi4912.html [2010-11-07 13:08:16 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempCV3336.html [2010-11-07 13:08:16 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLT3336.html [2010-11-07 12:58:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempbd4412.html [2010-11-07 12:58:32 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempIe4412.html [2010-11-07 12:37:53 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempHc3460.html [2010-11-07 12:37:53 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempIV3460.html [2010-11-07 12:29:16 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKL4076.html [2010-11-07 12:29:16 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemplQ4076.html [2010-11-07 12:19:42 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempaU1980.html [2010-11-07 12:19:42 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempoY1980.html [2010-11-07 12:09:29 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLK4564.html [2010-11-07 12:09:29 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempCP4564.html [2010-11-06 20:44:11 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempDP3824.html [2010-11-06 20:44:11 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTs3824.html [2010-11-06 17:41:35 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempdf3932.html [2010-11-06 17:41:35 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempCW3932.html [2010-11-06 17:36:01 | 000,790,528 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2010-11-06 17:36:01 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll [2010-11-06 16:39:40 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempgk1316.html [2010-11-06 16:39:40 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTi1316.html [2010-11-06 15:33:26 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010-11-06 14:56:25 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVT3504.html [2010-11-06 14:56:25 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempkU3504.html [2010-11-06 14:39:19 | 000,024,576 | R--- | C] () -- C:\Windows\SysWow64\AsIO.dll [2010-11-06 14:39:19 | 000,013,440 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys [2010-11-06 13:24:48 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempdM2876.html [2010-11-06 13:24:48 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMV2876.html [2010-11-06 12:24:01 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempef3112.html [2010-11-06 12:24:01 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempQO3112.html [2010-11-06 11:43:29 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemptZ3124.html [2010-11-06 11:43:29 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempyT3124.html [2010-11-06 11:35:43 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempQg1440.html [2010-11-06 11:35:43 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempyy1440.html [2010-11-06 11:24:29 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempGn2852.html [2010-11-06 11:24:29 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempYs2852.html [2010-11-06 11:19:49 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMN3328.html [2010-11-06 11:19:49 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempHp3328.html [2010-11-06 11:14:29 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempqU3364.html [2010-11-06 11:14:29 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempvo3364.html [2010-11-06 11:10:38 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempaq3064.html [2010-11-06 11:10:38 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKG3064.html [2010-11-06 11:01:13 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMk3304.html [2010-11-06 11:01:13 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempnY3304.html [2010-11-06 09:49:36 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempuE4788.html [2010-11-06 09:49:36 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempxQ4788.html [2010-11-05 21:18:23 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempWq1116.html [2010-11-05 21:18:23 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRW1116.html [2010-11-05 20:59:45 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempNK3700.html [2010-11-05 20:59:45 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempcd3700.html [2010-11-05 20:50:02 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempkK2344.html [2010-11-05 20:50:02 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLm2344.html [2010-11-05 20:41:43 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempoT3860.html [2010-11-05 20:41:43 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempvv3860.html [2010-11-05 20:35:25 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempzT3980.html [2010-11-05 20:35:25 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempUq3980.html [2010-11-05 20:24:18 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempFLc360.html [2010-11-05 20:24:18 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempgRu360.html [2010-11-05 20:11:27 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxv2560.html [2010-11-05 20:11:27 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempja2560.html [2010-11-05 20:01:49 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempEC3196.html [2010-11-05 20:01:49 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temput3196.html [2010-11-05 19:32:20 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempFL3140.html [2010-11-05 19:32:20 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTR3140.html [2010-11-05 18:35:02 | 000,108,840 | ---- | C] () -- C:\Users\Adrian\AppData\Local\GDIPFONTCACHEV1.DAT [2010-11-05 18:24:17 | 002,826,925 | -H-- | C] () -- C:\Users\Adrian\AppData\Local\IconCache.db [2010-11-05 18:04:18 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2010-11-05 18:04:11 | 000,033,662 | ---- | C] () -- C:\Windows\Ascd_tmp.ini [2010-10-30 12:57:02 | 000,095,232 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2010-10-14 01:36:44 | 000,179,263 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2010-06-23 11:35:52 | 000,134,144 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2010-03-15 04:31:48 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2009-07-14 05:54:24 | 000,000,174 | -HS- | C] () -- C:\Program Files\desktop.ini [2009-07-14 05:54:24 | 000,000,174 | -HS- | C] () -- C:\Program Files (x86)\desktop.ini [2009-07-14 03:35:42 | 000,001,405 | ---- | C] () -- C:\Windows\msdfmap.ini [2009-07-14 03:34:57 | 000,000,439 | ---- | C] () -- C:\Windows\win.ini [2009-07-14 03:34:57 | 000,000,219 | ---- | C] () -- C:\Windows\system.ini [2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-07-06 03:48:34 | 000,013,368 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsUpIO.sys [2009-04-02 13:30:14 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS [2007-07-23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll [2007-07-23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll [2007-07-23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll [2007-02-05 19:05:26 | 000,000,038 | ---- | C] () -- C:\Windows\AviSplitter.INI [color=#E56717]========== LOP Check ==========[/color] [2010-11-26 14:12:43 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\.minecraft [2010-12-23 15:24:11 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Ashampoo [2010-11-24 14:51:19 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\bin [2010-11-17 17:36:12 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\BitTorrent [2010-12-10 18:10:41 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Canneverbe Limited [2010-12-30 15:51:42 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Carambis [2010-11-06 10:54:39 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\DAEMON Tools Lite [2010-11-08 19:16:36 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\DAEMON Tools Pro [2010-11-11 23:12:28 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\DeviceVm [2010-12-19 12:04:47 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\EurekaLog [2010-11-05 19:58:43 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Gadu-Gadu 10 [2010-12-25 21:38:27 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\GameRanger [2011-01-07 16:52:58 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\HD Tune Pro [2010-12-18 12:29:57 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Hothead Games [2010-11-06 15:21:30 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Leadertech [2010-11-24 14:30:59 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\resourceses [2011-01-07 23:01:02 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Rovio [2010-12-05 18:30:09 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\The Creative Assembly [2010-11-20 17:59:57 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Ubisoft [2011-01-07 23:00:37 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\uTorrent [2010-11-21 19:48:29 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Win7codecs [2010-12-25 11:08:09 | 000,032,594 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%\*.* >[/color] [2009-07-14 02:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr [2010-11-05 17:55:22 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2011-01-09 11:55:05 | 000,003,288 | ---- | M] () -- C:\bootsqm.dat [2010-11-05 18:35:12 | 000,203,316 | RHS- | M] () -- C:\grldr [2011-01-09 17:34:47 | 3220,574,208 | -HS- | M] () -- C:\hiberfil.sys [2011-01-09 17:34:47 | 4294,103,040 | -HS- | M] () -- C:\pagefile.sys [2009-10-06 11:57:48 | 000,000,096 | ---- | M] () -- C:\Program1 [2010-11-05 18:35:27 | 000,000,003 | RHS- | M] () -- C:\win7ldr [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2009-07-14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys [2009-07-14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009-07-14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys [2009-07-14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2009-07-14 01:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2009-07-14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysWow64\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys [2009-07-14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2009-07-14 02:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2009-07-14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe [2009-10-28 08:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe [2009-10-28 07:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe < End of report >[/log] i to drugie log extras [log]OTL Extras logfile created on: 2011-01-09 17:47:37 - Run 1 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Adrian\Downloads 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 65,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 82,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 48,83 Gb Total Space | 21,39 Gb Free Space | 43,81% Space Free | Partition Type: NTFS Drive D: | 208,01 Gb Total Space | 113,91 Gb Free Space | 54,76% Space Free | Partition Type: NTFS Drive E: | 208,91 Gb Total Space | 122,29 Gb Free Space | 58,54% Space Free | Partition Type: NTFS Computer Name: ADRIAN-KOMPUTER | User Name: Adrian | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: Off | File Age = 60 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation) [HKEY_USERS\S-1-5-21-4152750467-2395009681-3878379516-1000\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- C:\Users\Adrian\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{62140B07-129A-2BD0-81D2-2A1A7408ADC8}" = ATI Catalyst Install Manager "{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64) "{7353BAE6-5E49-46C4-A9B5-8A269A313789}" = Crysis WARHEAD(R) "{8027B1DD-D875-4315-8FE9-B2CFDD1BB8F1}" = O&O Defrag Professional "{819CA3BC-2FF8-4811-B42F-421F7BFD3559}" = HP Deskjet F2400 All-in-One Driver 14.0 Rel. 6 "{8753DF4D-64B0-474E-9A97-0AB5585D9A53}" = Logitech Gaming Software 5.04 "{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended "{8E5DA9A6-7A9F-3A6F-BC5C-D6CBCA6A29C7}" = Microsoft .NET Framework 4 Extended PLK Language Pack "{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010 "{90140000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2010 "{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant "{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Sterownik 3D Vision 260.99 "{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 260.99 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 260.99 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.10.0514 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Sterownik dźwięku HD 1.1.9.0 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{BE930E38-7BB3-45B6-85B2-5251F374F844}" = 64 Bit HP CIO Components Installer "{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "CCleaner" = CCleaner "CPUID CPU-Z_is1" = CPUID CPU-Z 1.56 "Crysis WARHEAD(R)" = Crysis WARHEAD(R) "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0297078F-D4C8-4774-B7A3-6BBF2C164C76}_is1" = Dirt 2 Spolszczenie by O22y "{06A1D88C-E102-4527-AF70-29FFD7AF215A}" = Scan "{09CF6AF5-9206-4FD7-9B08-BA6819FB47E3}" = Anno 1404 "{153C7D89-9CF4-4719-A551-C5BF45236DB5}" = redist "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1FDA5A37-B22D-43FF-B582-B8964050DC13}" = Microsoft Games for Windows - LIVE Redistributable "{292F0F52-B62D-4E71-921B-89A682402201}" = Toolbox "{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed "{368BA326-73AD-4351-84ED-3C0A7A52CC53}" = Nero Rescue Agent "{38468127-9E6F-4FC9-B5F7-42D4AD437D96}" = Unigine Heaven Benchmark v2.1 "{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}" = ANNO 1404 "{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}" = FIFA 11 "{434D0831-3E0C-4D03-A5D4-5E1000008400}" = F1 2010 "{43E39830-1826-415D-8BAE-86845787B54B}" = Nero Vision "{4c4b12ee-bf69-477e-9a59-0a49c77c9623}" = Nero 9 Trial "{4F0C7CCF-5666-474B-B02E-AC514A95EC93}" = NVIDIA GAME System Software 2.8.1 "{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module "{5454083B-1308-4485-BF17-1110000B8301}" = Grand Theft Auto IV "{5454083B-1308-4485-BF17-1110000B8302}" = Grand Theft Auto IV "{5454083B-1308-4485-BF17-1110000D8301}" = Grand Theft Auto IV "{5454083B-1308-4485-BF17-1110000D8302}" = Grand Theft Auto IV "{5546F4E9-B0F4-4F54-B949-2AB006C9284F}" = DJ_AIO_06_F2400_SW_Min "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{579BA58C-F33D-4970-9953-B94B43768AC3}" = Grand Theft Auto IV "{587178E7-B1DF-494E-9838-FA4DD36E873C}" = ASUSUpdate "{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress "{62AC81F6-BDD3-4110-9D36-3E9EAAB40999}" = Nero CoverDesigner "{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module "{705B639E-FAAF-40D7-AD58-C445321C7C3F}" = LightScribe System Software "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{7353BAE6-5E49-46C4-A9B5-8A269A313789}" = Crysis WARHEAD(R) "{76A232AF-B7D6-41A4-B795-6B355E6D32B1}" = Tom Clancy's H.A.W.X. 2 "{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart "{7829DB6F-A066-4E40-8912-CB07887C20BB}" = Nero BurnRights "{7F3AD00A-1819-4B15-BB7D-08B3586336D7}" = 3DMark06 "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed "{86A4C6D9-29EE-4719-AFA1-BA3341862B83}" = Microsoft Games for Windows - LIVE "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7 "{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher "{8C0CAA7A-3272-4991-A808-2C7559DE3409}" = Win7codecs "{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010 "{90140000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010 "{90140000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2010 "{90140000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2010 "{90140000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2010 "{90140000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2010 "{90140000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2010 "{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010 "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 "{90140000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010 "{90140000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010 "{90140000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2010 "{90140000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010 "{90140000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2010 "{90140000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2010 "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9C916142-C18C-429D-BFED-40094A7E0BEB}" = The Settlers 7 - Droga do królestwa "{A209525B-3377-43F4-B886-32F6B6E7356F}" = Nero WaveEditor "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress "{AC76BA86-7AD7-1045-7B44-A94000000001}" = Adobe Reader 9.4.1 - Polish "{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF}" = DolbyFiles "{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center "{B78120A0-CF84-4366-A393-4D0A59BC546C}" = Menu Templates - Starter Kit "{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX "{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}" = Need for Speed™ SHIFT "{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter "{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo "{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3 "{D025A639-B9C9-417D-8531-208859000AF8}" = NeroBurningROM "{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.4 Game "{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver "{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime "{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0 "{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer "{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F1861F30-3419-44DB-B2A1-C274825698B3}" = Nero Disc Copy Gadget "{FAB1F336-1B7C-4057-A7BC-2922CD82A781}" = Edimax RT6x Wireless LAN Card "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.5 "Afterburner" = MSI Afterburner 2.0.0 "ALLPlayer_is1" = ALLPlayer V4.X "Ashampoo Burning Studio 10_is1" = Ashampoo Burning Studio 10.0.4 "avast5" = avast! Free Antivirus "Crysis WARHEAD(R)" = Crysis WARHEAD(R) "'DIRT 2'_is1" = 'DIRT 2' "EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50 "Fraps" = Fraps (remove only) "Gadu-Gadu 10" = Gadu-Gadu 10 "GFWL_{434D0831-3E0C-4D03-A5D4-5E1000008400}" = F1 2010 "HD Tune Pro_is1" = HD Tune Pro 4.50 "InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver "NapiProjekt_is1" = NapiProjekt 1.0.6.9 "Need For Speed SHIFT_is1" = Need For Speed SHIFT "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver "Office14.PROPLUS" = Microsoft Office Professional Plus 2010 "OpenAL" = OpenAL "Trials 2 Second Edition_is1" = Trials 2 Second Edition v1.08 "uTorrent" = µTorrent [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-4152750467-2395009681-3878379516-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "GameRanger" = GameRanger "Google Chrome" = Google Chrome [color=#E56717]========== Last 10 Event Log Errors ==========[/color] Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt! < End of report >[/log] i teraz z tego drugiego programu: [log]Logfile of random's system information tool 1.08 (written by random/random) Run by Adrian at 2011-01-09 18:01:12 Microsoft Windows 7 Ultimate System drive C: has 22 GB (44%) free of 50 GB Total RAM: 4095 MB (59% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:01:13, on 2011-01-09 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16700) Boot mode: Normal Running processes: C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE C:\Program Files (x86)\Edimax\Common\RaUI.exe C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe C:\Program Files\Alwil Software\Avast5\AvastUI.exe D:\PROGRAMY\Gadu-Gadu 10\gg.exe C:\Users\Adrian\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Adrian\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Adrian\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Adrian\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Adrian\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Adrian\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Adrian\Downloads\RSIT.exe C:\Program Files (x86)\trend micro\Adrian.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file) O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\PROGRAMY\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [Google Update] "C:\Users\Adrian\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [ALLUpdate] "D:\PROGRAMY\ALLPlayer\ALLUpdate.exe" "sleep" O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\PROGRAMY\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE" O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'USŁUGA SIECIOWA') O4 - Global Startup: Wireless Utility.lnk = C:\Program Files (x86)\Edimax\Common\RaUI.exe O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000 O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: O&O Defrag (OODefragAgent) - O&O Software GmbH - D:\GRY\OO Software\Defrag\oodag.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Program Files (x86)\Edimax\Common\RaRegistry.exe O23 - Service: Ralink Registry Writer 64 (RalinkRegistryWriter64) - Ralink Technology, Corp. - C:\Program Files (x86)\Edimax\Common\RaRegistry64.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 8787 bytes ======Scheduled tasks folder====== C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4152750467-2395009681-3878379516-1000Core.job C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4152750467-2395009681-3878379516-1000UA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "NUSB3MON"=C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-01-22 106496] "avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912] "BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520] "Adobe Reader Speed Launcher"=D:\PROGRAMY\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Google Update"=C:\Users\Adrian\AppData\Local\Google\Update\GoogleUpdate.exe [2010-11-05 136176] "Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2010-10-11 14940040] "ALLUpdate"=D:\PROGRAMY\ALLPlayer\ALLUpdate.exe [2010-11-02 1432064] "DAEMON Tools Lite"=D:\PROGRAMY\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696] "OfficeSyncProcess"=C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [2010-03-16 718208] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Wireless Utility.lnk - C:\Program Files (x86)\Edimax\Common\RaUI.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 2 months====== 2011-01-09 17:52:56 ----D---- C:\rsit 2011-01-09 17:52:56 ----D---- C:\Program Files (x86)\trend micro 2011-01-07 23:01:02 ----D---- C:\Users\Adrian\AppData\Roaming\Rovio 2011-01-07 16:52:58 ----D---- C:\Users\Adrian\AppData\Roaming\HD Tune Pro 2011-01-04 19:27:32 ----D---- C:\Program Files (x86)\SpeedFan 2011-01-04 17:50:33 ----A---- C:\Windows\oodjobd.INI 2010-12-30 15:51:42 ----D---- C:\Users\Adrian\AppData\Roaming\Carambis 2010-12-25 21:38:23 ----D---- C:\Users\Adrian\AppData\Roaming\GameRanger 2010-12-23 15:23:50 ----D---- C:\Users\Adrian\AppData\Roaming\Ashampoo 2010-12-23 15:10:24 ----D---- C:\ProgramData\ashampoo 2010-12-22 13:41:51 ----RA---- C:\Windows\SysWOW64\tmp5304.tmp 2010-12-22 12:50:01 ----RA---- C:\Windows\SysWOW64\tmp52F3.tmp 2010-12-21 17:31:00 ----RA---- C:\Windows\SysWOW64\tmp1114.tmp 2010-12-21 16:58:17 ----RA---- C:\Windows\SysWOW64\tmp1104.tmp 2010-12-19 14:27:40 ----A---- C:\Windows\SysWOW64\SFCOM.dll 2010-12-19 14:27:19 ----A---- C:\Windows\RtlExUpd.dll 2010-12-19 09:25:17 ----D---- C:\Users\Adrian\AppData\Roaming\EurekaLog 2010-12-18 12:29:57 ----D---- C:\Users\Adrian\AppData\Roaming\Hothead Games 2010-12-15 14:55:58 ----A---- C:\Windows\SysWOW64\tzres.dll 2010-12-15 14:55:24 ----A---- C:\Windows\SysWOW64\taskschd.dll 2010-12-15 14:55:24 ----A---- C:\Windows\SysWOW64\taskeng.exe 2010-12-15 14:55:23 ----A---- C:\Windows\SysWOW64\taskcomp.dll 2010-12-15 14:55:23 ----A---- C:\Windows\SysWOW64\schtasks.exe 2010-12-15 14:55:18 ----A---- C:\Windows\SysWOW64\atmfd.dll 2010-12-15 14:55:17 ----A---- C:\Windows\SysWOW64\atmlib.dll 2010-12-15 14:55:11 ----A---- C:\Windows\SysWOW64\webio.dll 2010-12-15 14:54:48 ----A---- C:\Windows\SysWOW64\iertutil.dll 2010-12-15 14:54:47 ----A---- C:\Windows\SysWOW64\mstime.dll 2010-12-15 14:54:45 ----A---- C:\Windows\SysWOW64\mshtml.dll 2010-12-15 14:54:44 ----A---- C:\Windows\SysWOW64\ieframe.dll 2010-12-15 14:54:43 ----A---- C:\Windows\SysWOW64\wininet.dll 2010-12-15 14:54:42 ----A---- C:\Windows\SysWOW64\urlmon.dll 2010-12-15 14:54:41 ----A---- C:\Windows\SysWOW64\msfeeds.dll 2010-12-15 14:54:41 ----A---- C:\Windows\SysWOW64\iedkcs32.dll 2010-12-15 14:54:40 ----A---- C:\Windows\SysWOW64\mshtmled.dll 2010-12-15 14:54:40 ----A---- C:\Windows\SysWOW64\msfeedsbs.dll 2010-12-15 14:54:40 ----A---- C:\Windows\SysWOW64\ieui.dll 2010-12-15 14:54:40 ----A---- C:\Windows\SysWOW64\iepeers.dll 2010-12-15 14:54:39 ----A---- C:\Windows\SysWOW64\msfeedssync.exe 2010-12-15 14:54:39 ----A---- C:\Windows\SysWOW64\licmgr10.dll 2010-12-15 14:54:39 ----A---- C:\Windows\SysWOW64\jsproxy.dll 2010-12-11 16:01:38 ----A---- C:\Windows\SysWOW64\rapture3d_oal.dll 2010-12-11 16:01:38 ----A---- C:\Windows\SysWOW64\mkl_blueripple.dll 2010-12-11 16:01:36 ----D---- C:\Program Files (x86)\BRS 2010-12-10 19:21:08 ----D---- C:\ProgramData\LightScribe 2010-12-10 19:21:07 ----D---- C:\Users\Adrian\AppData\Roaming\Nero 2010-12-10 19:04:47 ----D---- C:\ProgramData\Nero 2010-12-10 19:04:45 ----D---- C:\Program Files (x86)\Common Files\Nero 2010-12-10 19:00:49 ----D---- C:\Program Files (x86)\Common Files\LightScribe 2010-12-10 18:10:41 ----D---- C:\Users\Adrian\AppData\Roaming\Canneverbe Limited 2010-12-10 18:10:41 ----D---- C:\ProgramData\Canneverbe Limited 2010-12-05 18:28:13 ----D---- C:\Program Files (x86)\KONAMI 2010-12-04 20:22:43 ----D---- C:\Windows\B83FC356B7C0441F8A4DD71E088E7974.TMP 2010-12-04 20:22:21 ----D---- C:\Program Files (x86)\Common Files\Wise Installation Wizard 2010-12-03 16:56:37 ----D---- C:\ProgramData\WOP 2010-11-29 16:58:21 ----A---- C:\Windows\SysWOW64\d3dx10_39.dll 2010-11-29 16:58:21 ----A---- C:\Windows\SysWOW64\D3DCompiler_39.dll 2010-11-29 16:58:19 ----A---- C:\Windows\SysWOW64\D3DX9_39.dll 2010-11-29 16:46:29 ----D---- C:\Program Files (x86)\Electronic Arts 2010-11-26 22:37:09 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI 2010-11-24 14:46:39 ----D---- C:\Users\Adrian\AppData\Roaming\.minecraft 2010-11-24 14:29:45 ----D---- C:\Users\Adrian\AppData\Roaming\bin 2010-11-24 14:29:42 ----D---- C:\Users\Adrian\AppData\Roaming\resourceses 2010-11-24 14:29:42 ----A---- C:\Users\Adrian\AppData\Roaming\Minecraft.exe 2010-11-21 19:48:29 ----D---- C:\Users\Adrian\AppData\Roaming\Win7codecs 2010-11-21 19:48:25 ----D---- C:\Program Files (x86)\Win7codecs 2010-11-21 19:48:00 ----D---- C:\ProgramData\Win7codecs 2010-11-20 21:29:39 ----D---- C:\ProgramData\Sun 2010-11-20 21:29:24 ----A---- C:\Windows\SysWOW64\deployJava1.dll 2010-11-20 17:59:57 ----D---- C:\Users\Adrian\AppData\Roaming\Ubisoft 2010-11-20 17:57:44 ----D---- C:\ProgramData\Tages 2010-11-19 21:04:16 ----D---- C:\ProgramData\Electronic Arts 2010-11-19 21:04:16 ----D---- C:\ProgramData\EA Core 2010-11-19 18:10:29 ----D---- C:\Users\Adrian\AppData\Roaming\The Creative Assembly 2010-11-18 16:38:47 ----D---- C:\Windows\SysWOW64\AGEIA 2010-11-18 16:38:47 ----D---- C:\Program Files (x86)\AGEIA Technologies 2010-11-17 17:34:05 ----D---- C:\Windows\SysWOW64\Adobe 2010-11-14 22:19:57 ----D---- C:\ProgramData\Adobe 2010-11-14 22:19:55 ----D---- C:\Program Files (x86)\Common Files\Adobe 2010-11-14 20:18:38 ----D---- C:\Program Files (x86)\Ubisoft 2010-11-11 22:54:14 ----D---- C:\Program Files (x86)\Microsoft WSE 2010-11-11 16:54:01 ----D---- C:\Users\Adrian\AppData\Roaming\BitTorrent 2010-11-10 17:18:51 ----D---- C:\Program Files (x86)\MSXML 4.0 ======List of files/folders modified in the last 2 months====== 2011-01-09 18:01:13 ----D---- C:\Windows\Temp 2011-01-09 17:55:26 ----D---- C:\Windows\Prefetch 2011-01-09 17:52:56 ----RD---- C:\Program Files (x86) 2011-01-09 17:35:19 ----D---- C:\Users\Adrian\AppData\Roaming\Skype 2011-01-09 17:34:51 ----D---- C:\ProgramData\NVIDIA 2011-01-09 17:33:09 ----D---- C:\Users\Adrian\AppData\Roaming\skypePM 2011-01-09 12:09:30 ----SD---- C:\Users\Adrian\AppData\Roaming\Microsoft 2011-01-09 10:30:57 ----SHD---- C:\System Volume Information 2011-01-08 10:32:49 ----D---- C:\Windows 2011-01-07 23:00:37 ----D---- C:\Users\Adrian\AppData\Roaming\uTorrent 2011-01-05 22:27:44 ----D---- C:\Windows\System32 2011-01-02 15:02:52 ----SHD---- C:\Windows\Installer 2011-01-02 15:02:52 ----HD---- C:\Config.Msi 2011-01-02 15:02:33 ----RSD---- C:\Windows\assembly 2011-01-02 14:59:20 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2010-12-31 10:56:50 ----D---- C:\Windows\debug 2010-12-30 15:51:41 ----HD---- C:\ProgramData 2010-12-28 15:46:37 ----D---- C:\Windows\LiveKernelReports 2010-12-28 14:11:22 ----RD---- C:\Program Files 2010-12-28 13:39:13 ----D---- C:\Windows\inf 2010-12-26 19:17:05 ----D---- C:\Windows\SysWOW64 2010-12-24 16:50:57 ----D---- C:\Windows\SysWOW64\directx 2010-12-24 16:49:14 ----D---- C:\Windows\winsxs 2010-12-23 16:49:53 ----RD---- C:\Program Files (x86)\Skype 2010-12-23 16:44:17 ----D---- C:\Program Files (x86)\Common Files 2010-12-23 16:39:42 ----D---- C:\Windows\Minidump 2010-12-23 16:36:28 ----D---- C:\Windows\Tasks 2010-12-23 16:36:26 ----D---- C:\Windows\registration 2010-12-21 19:36:03 ----D---- C:\ProgramData\Codemasters 2010-12-21 17:31:00 ----D---- C:\Program Files (x86)\OpenAL 2010-12-19 14:29:24 ----HD---- C:\Program Files (x86)\Temp 2010-12-19 14:28:25 ----D---- C:\Windows\SysWOW64\RTCOM 2010-12-19 14:27:22 ----D---- C:\Program Files (x86)\Realtek 2010-12-15 16:02:16 ----D---- C:\Windows\SysWOW64\pl-PL 2010-12-15 16:02:15 ----D---- C:\Program Files (x86)\Windows Mail 2010-12-15 16:02:13 ----D---- C:\Windows\SysWOW64\migration 2010-12-15 16:02:13 ----D---- C:\Program Files (x86)\Internet Explorer 2010-12-15 15:32:19 ----D---- C:\ProgramData\Microsoft Help 2010-12-11 16:01:34 ----A---- C:\Windows\SysWOW64\wrap_oal.dll 2010-12-11 16:01:34 ----A---- C:\Windows\SysWOW64\OpenAL32.dll 2010-12-11 15:49:37 ----SD---- C:\ProgramData\Microsoft 2010-12-04 06:49:03 ----D---- C:\Windows\Logs 2010-11-28 20:57:17 ----D---- C:\Windows\Microsoft.NET 2010-11-26 22:33:25 ----D---- C:\Windows\SysWOW64\en-US 2010-11-26 22:33:21 ----D---- C:\Program Files (x86)\Microsoft.NET 2010-11-17 15:26:41 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE 2010-11-17 15:26:32 ----D---- C:\Program Files (x86)\Common Files\microsoft shared 2010-11-14 22:20:23 ----D---- C:\Users\Adrian\AppData\Roaming\Adobe 2010-11-14 20:18:31 ----D---- C:\Windows\SoftwareDistribution 2010-11-11 23:12:28 ----D---- C:\Users\Adrian\AppData\Roaming\DeviceVm 2010-11-10 14:49:57 ----D---- C:\Windows\Downloaded Program Files ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [] R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [] R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [] R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2009-08-04 13440] R1 AsUpIO;AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [2009-07-06 13368] R1 aswRdr;aswRdr; C:\Windows\SysWOW64\drivers\aswRdr.sys [] R1 aswSP;aswSP; C:\Windows\SysWOW64\drivers\aswSP.sys [] R1 aswTdi;avast! Network Shield Support; C:\Windows\SysWOW64\drivers\aswTdi.sys [] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [] R2 aswFsBlk;aswFsBlk; C:\Windows\SysWOW64\drivers\aswFsBlk.sys [] R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [] R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [] R2 cpuz134;cpuz134; \??\C:\Windows\system32\drivers\cpuz134_x64.sys [] R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [] R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [] R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [] R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [] R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [] R3 rt61x64;RT61 Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr6164.sys [] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [] R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [] R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [] R3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [] R3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [] R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [] S3 ajoxfds2;ajoxfds2; C:\Windows\SysWOW64\drivers\ajoxfds2.sys [] S3 ALSysIO;ALSysIO; \??\C:\Users\Adrian\AppData\Local\Temp\ALSysIO64.sys [] S3 cpuz130;cpuz130; \??\C:\Users\Adrian\AppData\Local\Temp\cpuz130\cpuz_x64.sys [] S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [] S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [] S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [] S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [] S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [] S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [] S3 usbscan;Sterownik skanera USB; C:\Windows\system32\DRIVERS\usbscan.sys [] S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [] S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [] S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384] R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-08-16 73728] R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2010-05-18 935208] R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992] R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [] R2 OODefragAgent;O&O Defrag; D:\GRY\OO Software\Defrag\oodag.exe [2010-09-30 3140424] R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992] R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files (x86)\Edimax\Common\RaRegistry.exe [2009-10-06 185632] R2 RalinkRegistryWriter64;Ralink Registry Writer 64; C:\Program Files (x86)\Edimax\Common\RaRegistry64.exe [2009-10-06 212256] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-16 369256] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568] R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384] R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] S2 KMService;KMService; C:\Windows\system32\srvany.exe [2010-11-09 8192] S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992] S3 aspnet_state;„Usługa stanu ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376] S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240] -----------------EOF-----------------[log] i info [log]info.txt logfile of random's system information tool 1.08 2011-01-09 17:53:00 ======Uninstall list====== -->MsiExec /X{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF} µTorrent-->"D:\PROGRAMY\uTorrent\uTorrent.exe" /UNINSTALL 3DMark06-->"C:\Program Files (x86)\InstallShield Installation Information\{7F3AD00A-1819-4B15-BB7D-08B3586336D7}\setup.exe" -runfromtemp -l0x0009 -removeonly Adobe Flash Player 10 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe -maintain activex Adobe Flash Player 10 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\uninstall_plugin.exe Adobe Reader 9.4.1 - Polish-->MsiExec.exe /I{AC76BA86-7AD7-1045-7B44-A94000000001} Adobe Shockwave Player 11.5-->"C:\Windows\system32\Adobe\Shockwave 11\uninstaller.exe" Advertising Center-->MsiExec.exe /X{B2EC4A38-B545-4A00-8214-13FE0E915E6D} Aktualizacja dla programu Microsoft Outlook Social Connector (KB2289116)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001A-0415-0000-0000000FF1CE}" "{4629870E-FBDA-4F3B-BA03-D8C43B5A414E}" "1045" "0" ALLPlayer V4.X-->"D:\PROGRAMY\ALLPlayer\unins000.exe" ANNO 1404-->"C:\Program Files (x86)\InstallShield Installation Information\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}\setup.exe" -runfromtemp -l0x0009 -removeonly Ashampoo Burning Studio 10.0.4-->"D:\PROGRAMY\Ashampoo Burning Studio 10\unins000.exe" ASUSUpdate-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{587178E7-B1DF-494E-9838-FA4DD36E873C}\setup.exe" -l0x9 avast! Free Antivirus-->C:\Program Files\Alwil Software\Avast5\aswRunDll.exe "C:\Program Files\Alwil Software\Avast5\Setup\setiface.dll" RunSetup Cisco EAP-FAST Module-->MsiExec.exe /I{64BF0187-F3D2-498B-99EA-163AF9AE6EC9} Cisco LEAP Module-->MsiExec.exe /I{51C7AD07-C3F6-4635-8E8A-231306D810FE} Cisco PEAP Module-->MsiExec.exe /I{ED5776D5-59B4-46B7-AF81-5F2D94D7C640} Definition update for Microsoft Office 2010 (KB982726)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{E14AE329-F210-4EDD-B775-290821C66C1F}" "1045" "0" Dirt 2 Spolszczenie by O22y-->"D:\GRY\Codemasters\Dirt 2\unins001.exe" 'DIRT 2'-->"D:\GRY\Codemasters\Dirt 2\unins000.exe" DolbyFiles-->MsiExec.exe /X{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF} Edimax RT6x Wireless LAN Card-->C:\Program Files (x86)\InstallShield Installation Information\{FAB1F336-1B7C-4057-A7BC-2922CD82A781}\setup.exe -runfromtemp -l0x0009 -removeonly EVEREST Ultimate Edition v5.50-->"D:\PROGRAMY\EVEREST Ultimate Edition\unins000.exe" F1 2010-->MsiExec.exe /I{434D0831-3E0C-4D03-A5D4-5E1000008400} F1 2010-->MsiExec.exe /X{434D0831-3E0C-4D03-A5D4-5E1000008400} FIFA 11-->MsiExec.exe /X{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C} Fraps (remove only)-->"D:\PROGRAMY\fraps\uninstall.exe" Futuremark SystemInfo-->"C:\Program Files (x86)\InstallShield Installation Information\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}\setup.exe" -runfromtemp -l0x0009 -removeonly Gadu-Gadu 10-->D:\PROGRAMY\Gadu-Gadu 10\Uninstall.exe Grand Theft Auto IV-->"C:\Program Files (x86)\InstallShield Installation Information\{579BA58C-F33D-4970-9953-B94B43768AC3}\setup.exe" -runfromtemp -l0x0009 -removeonly Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000B8301} Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000B8302} Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000D8301} Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000D8302} HD Tune Pro 4.50-->"D:\PROGRAMY\HD Tune Pro\unins000.exe" LightScribe System Software-->MsiExec.exe /X{705B639E-FAAF-40D7-AD58-C445321C7C3F} Menu Templates - Starter Kit-->MsiExec.exe /X{B78120A0-CF84-4366-A393-4D0A59BC546C} Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{1FDA5A37-B22D-43FF-B582-B8964050DC13} Microsoft Games for Windows - LIVE-->MsiExec.exe /X{86A4C6D9-29EE-4719-AFA1-BA3341862B83} Microsoft Office Access MUI (Polish) 2010-->MsiExec.exe /X{90140000-0015-0415-0000-0000000FF1CE} Microsoft Office Excel MUI (Polish) 2010-->MsiExec.exe /X{90140000-0016-0415-0000-0000000FF1CE} Microsoft Office Groove MUI (Polish) 2010-->MsiExec.exe /X{90140000-00BA-0415-0000-0000000FF1CE} Microsoft Office InfoPath MUI (Polish) 2010-->MsiExec.exe /X{90140000-0044-0415-0000-0000000FF1CE} Microsoft Office OneNote MUI (Polish) 2010-->MsiExec.exe /X{90140000-00A1-0415-0000-0000000FF1CE} Microsoft Office Outlook MUI (Polish) 2010-->MsiExec.exe /X{90140000-001A-0415-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (Polish) 2010-->MsiExec.exe /X{90140000-0018-0415-0000-0000000FF1CE} Microsoft Office Professional Plus 2010-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL Microsoft Office Professional Plus 2010-->MsiExec.exe /X{90140000-0011-0000-0000-0000000FF1CE} Microsoft Office Proof (English) 2010-->MsiExec.exe /X{90140000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (German) 2010-->MsiExec.exe /X{90140000-001F-0407-0000-0000000FF1CE} Microsoft Office Proof (Polish) 2010-->MsiExec.exe /X{90140000-001F-0415-0000-0000000FF1CE} Microsoft Office Proofing (Polish) 2010-->MsiExec.exe /X{90140000-002C-0415-0000-0000000FF1CE} Microsoft Office Publisher MUI (Polish) 2010-->MsiExec.exe /X{90140000-0019-0415-0000-0000000FF1CE} Microsoft Office Shared MUI (Polish) 2010-->MsiExec.exe /X{90140000-006E-0415-0000-0000000FF1CE} Microsoft Office Word MUI (Polish) 2010-->MsiExec.exe /X{90140000-001B-0415-0000-0000000FF1CE} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7} Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989} Microsoft WSE 3.0 Runtime-->MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13} MSI Afterburner 2.0.0-->"D:\PROGRAMY\MSI Afterburner\uninstall.exe" MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC} NapiProjekt 1.0.6.9-->"D:\PROGRAMY\NAPI-PROJEKT\unins000.exe" NEC Electronics USB 3.0 Host Controller Driver-->"C:\Program Files (x86)\InstallShield Installation Information\{D7BF9739-8A68-4335-BBEE-37752AD9E86B}\setup.exe" -runfromtemp -l0x0415 -removeonly NEC Electronics USB 3.0 Host Controller Driver-->MsiExec.exe /I{D7BF9739-8A68-4335-BBEE-37752AD9E86B} Need For Speed SHIFT-->"D:\GRY\Electronic Arts\Need For Speed SHIFT\Uninstall\unins000.exe" Need for Speed™ SHIFT-->hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,78,00,65,00,20,00,2f,00,58,00,7b,00,42,00,42,00,46,00,30,00,41,00,36,00,37,00,42,00,2d,00,35,00,44,00,42,00,41,00,2d,00,34,00,35,00,32,00,46,00,2d,00,39,00,44,00,32,00,45,00,2d,00,36,00,46,00,31,00,36,00,38,00,42,00,43,00,32,00,32,00,36,00,45,00,34,00,7d,00,00,00 Nero 9 Trial-->C:\Program Files (x86)\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER="8M01-289K-2H95-W8H0-PZ2A-MKL8-9CH2-Z5PW" Nero BurnRights-->MsiExec.exe /X{7829DB6F-A066-4E40-8912-CB07887C20BB} Nero ControlCenter-->MsiExec.exe /X{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A} Nero CoverDesigner-->MsiExec.exe /X{62AC81F6-BDD3-4110-9D36-3E9EAAB40999} Nero Disc Copy Gadget-->MsiExec.exe /X{F1861F30-3419-44DB-B2A1-C274825698B3} Nero DiscSpeed-->MsiExec.exe /X{869200DB-287A-4DC0-B02B-2B6787FBCD4C} Nero DriveSpeed-->MsiExec.exe /X{33CF58F5-48D8-4575-83D6-96F574E4D83A} Nero Installer-->MsiExec.exe /X{E8A80433-302B-4FF1-815D-FCC8EAC482FF} Nero Rescue Agent-->MsiExec.exe /X{368BA326-73AD-4351-84ED-3C0A7A52CC53} Nero StartSmart-->MsiExec.exe /X{7748AC8C-18E3-43BB-959B-088FAEA16FB2} Nero Vision-->MsiExec.exe /X{43E39830-1826-415D-8BAE-86845787B54B} Nero WaveEditor-->MsiExec.exe /X{A209525B-3377-43F4-B886-32F6B6E7356F} NeroBurningROM-->MsiExec.exe /X{D025A639-B9C9-417D-8531-208859000AF8} NeroExpress-->MsiExec.exe /X{595A3116-40BB-4E0F-A2E8-D7951DA56270} neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B} NVIDIA GAME System Software 2.8.1-->MsiExec.exe /I{4F0C7CCF-5666-474B-B02E-AC514A95EC93} NVIDIA PhysX-->MsiExec.exe /X{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF} NVIDIA Stereoscopic 3D Driver-->"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInst.exe" /uninstall /ask OpenAL-->"C:\Program Files (x86)\OpenAL\OalinstGridRelease.exe" /U Rapture3D 2.4.4 Game-->"C:\Program Files (x86)\BRS\unins000.exe" Realtek Ethernet Controller Driver For Windows 7-->C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\Setup.exe -runfromtemp -removeonly Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -removeonly redist-->MsiExec.exe /I{153C7D89-9CF4-4719-A551-C5BF45236DB5} Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {FD8D7C9A-E56A-3E7B-BA6D-FE68F13296E3} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Extended (KB2416472)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {3162617C-537F-3BB6-8D0C-C6021F442391} /parameterfolder Extended Security Update for Microsoft Office 2010 (KB2289078)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{1D1A4F08-2F17-475B-BA72-476CE5992FEE}" "1045" "0" Security Update for Microsoft Office 2010 (KB2289161)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{F134C2C6-30B3-4169-A325-58482B4CE6FC}" "1045" "0" Security Update for Microsoft Publisher 2010 (KB2409055)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{C3C277D5-36E3-4B1A-926A-175B2BC019CF}" "1045" "0" Security Update for Microsoft Word 2010 (KB2345000)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{A6D422EE-1196-45EE-B9AE-6B5B64975E8B}" "1045" "0" Skype™ 5.0-->MsiExec.exe /X{E633D396-5188-4E9D-8F6B-BFB8BF3467E8} The Settlers 7 - Droga do królestwa-->"C:\Program Files (x86)\InstallShield Installation Information\{9C916142-C18C-429D-BFED-40094A7E0BEB}\setup.exe" -runfromtemp -l0x0015 -removeonly The Sims™ 3-->"C:\Program Files (x86)\InstallShield Installation Information\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}\setup.exe" -runfromtemp -l0x0015 -removeonly Tom Clancy's H.A.W.X. 2-->"C:\Program Files (x86)\InstallShield Installation Information\{76A232AF-B7D6-41A4-B795-6B355E6D32B1}\setup.exe" -runfromtemp -l0x0015 -removeonly Trials 2 Second Edition v1.08-->"D:\GRY\RedLynx\Trials 2 Second Edition\unins000.exe" Ubisoft Game Launcher-->"C:\Program Files (x86)\InstallShield Installation Information\{888F1505-C2B3-4FDE-835D-36353EBD4754}\setup.exe" -runfromtemp -l0x0409 -removeonly Unigine Heaven Benchmark v2.1-->MsiExec.exe /I{38468127-9E6F-4FC9-B5F7-42D4AD437D96} Update for Microsoft Office 2010 (KB2202188)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{86B7A074-265D-420C-9E1E-7A920EF0ECA7}" "1045" "0" Update for Microsoft Office 2010 (KB2413186)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{556146F7-74AE-4E0A-B64F-5B8B93469F61}" "1045" "0" Update for Microsoft Office 2010 (KB2413186)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{B5516874-E926-4BFD-B412-D0E70112F244}" "1045" "0" Update for Microsoft Office 2010 (KB2413186)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{D6CE7280-6EE3-419A-8F47-DB111C040B1B}" "1045" "0" Update for Microsoft OneNote 2010 (KB2433299)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{6C845127-B949-4D76-A732-BCB396AD9AA5}" "1045" "0" Update for Microsoft Outlook Social Connector (KB2289116)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{75F91382-920C-4AE1-B9E6-FFFCEDA797E8}" "1045" "0" ======System event log====== Computer Name: Adrian-Komputer Event Code: 7036 Message: Usługa Przeglądarka komputera weszła w stan uruchomienia. Record Number: 6828 Source Name: Service Control Manager Time Written: 20101108133502.284854-000 Event Type: Informacje User: Computer Name: Adrian-Komputer Event Code: 20003 Message: Usługa zarządzania sterownikami zakończyła proces dodawania usługi tunnel dla wystąpienia urządzenia o identyfikatorze ROOT\*ISATAP\0002 z następującym stanem: 0. Record Number: 6827 Source Name: Microsoft-Windows-UserPnp Time Written: 20101108133501.816853-000 Event Type: Informacje User: ZARZĄDZANIE NT\SYSTEM Computer Name: Adrian-Komputer Event Code: 20003 Message: Usługa zarządzania sterownikami zakończyła proces dodawania usługi tunnel dla wystąpienia urządzenia o identyfikatorze ROOT\*ISATAP\0001 z następującym stanem: 0. Record Number: 6826 Source Name: Microsoft-Windows-UserPnp Time Written: 20101108133500.194450-000 Event Type: Informacje User: ZARZĄDZANIE NT\SYSTEM Computer Name: Adrian-Komputer Event Code: 7036 Message: Usługa avast! Mail Scanner weszła w stan uruchomienia. Record Number: 6825 Source Name: Service Control Manager Time Written: 20101108133458.494047-000 Event Type: Informacje User: Computer Name: Adrian-Komputer Event Code: 7036 Message: Usługa Usługa modułu wyliczającego urządzenia przenośne weszła w stan uruchomienia. Record Number: 6824 Source Name: Service Control Manager Time Written: 20101108133456.559644-000 Event Type: Informacje User: =====Application event log===== Computer Name: 37L4247E29-32 Event Code: 1001 Message: Pakiet błędów , typ 0 Nazwa zdarzenia: PnPRequestAdditionalSoftware Odpowiedź: Niedostępny Identyfikator pliku Cab: 0 Sygnatura problemu: P1: x64 P2: USB\VID_1BCF&PID_08D8&REV_2611&MI_00 P3: 6.1.0.0 P4: 0415 P5: input.inf P6: * P7: P8: P9: P10: Dołączone pliki: Te pliki mogą być dostępne tutaj: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_92c92feef5d98d4c3ad6c23b23d11c4293befb_cab_05f10d77 Symbol analizy: Ponowne sprawdzanie rozwiązania: 0 Identyfikator raportu: bd5d95d1-e8fd-11df-a51e-ac895d9375ee Stan raportu: 6 Record Number: 5 Source Name: Windows Error Reporting Time Written: 20101105165715.000000-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 5617 Message: Windows Management Instrumentation Service subsystems initialized successfully Record Number: 4 Source Name: Microsoft-Windows-WMI Time Written: 20101105165712.000000-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 5615 Message: Windows Management Instrumentation Service started sucessfully Record Number: 3 Source Name: Microsoft-Windows-WMI Time Written: 20101105165708.000000-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 1531 Message: Usługa profilów użytkowników została uruchomiona pomyślnie. Record Number: 2 Source Name: Microsoft-Windows-User Profiles Service Time Written: 20101105165704.488497-000 Event Type: Informacje User: ZARZĄDZANIE NT\SYSTEM Computer Name: 37L4247E29-32 Event Code: 4625 Message: System podrzędny EventSystem pomija zduplikowane wpisy dziennika zdarzeń przez okres 86400 sekund. Limit czasu pomijania można kontrolować za pomocą wartości REG_DWORD o nazwie SuppressDuplicateDuration w następującym kluczu rejestru: HKLM\Software\Microsoft\EventSystem\EventLog. Record Number: 1 Source Name: Microsoft-Windows-EventSystem Time Written: 20101105165704.000000-000 Event Type: Informacje User: =====Security event log===== Computer Name: 37L4247E29-32 Event Code: 4735 Message: Zmieniono grupę lokalną z włączonymi zabezpieczeniami. Podmiot: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: 37L4247E29-32$ Domena konta: WORKGROUP Identyfikator logowania: 0x3e7 Grupa: Identyfikator zabezpieczeń: S-1-5-32-551 Nazwa grupy: Operatorzy kopii zapasowych Domena grupy: Builtin Zmienione atrybuty: Nazwa konta SAM: - Historia identyfikatora SID: - Informacje dodatkowe: Uprawnienia: - Record Number: 5 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165644.894863-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4731 Message: Utworzono grupę lokalną z włączonymi zabezpieczeniami. Podmiot: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: 37L4247E29-32$ Domena konta: WORKGROUP Identyfikator logowania: 0x3e7 Nowa grupa: Identyfikator zabezpieczeń: S-1-5-32-551 Nazwa grupy: Operatorzy kopii zapasowych Domena grupy: Builtin Atrybuty: Nazwa konta SAM: Operatorzy kopii zapasowych Historia identyfikatora SID: - Informacje dodatkowe: Uprawnienia: - Record Number: 4 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165644.863663-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4902 Message: Utworzono tabelę zasad inspekcji użytkownika. Liczba elementów: 0 Identyfikator zasad: 0x32c18 Record Number: 3 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165644.364462-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4624 Message: Użytkownik pomyślnie zalogował się na koncie. Podmiot: Identyfikator zabezpieczeń: S-1-0-0 Nazwa konta: - Domena konta: - Identyfikator logowania: 0x0 Typ logowania: 0 Nowe logowanie: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: SYSTEM Domena konta: ZARZĄDZANIE NT Identyfikator logowania: 0x3e7 Identyfikator GUID logowania: {00000000-0000-0000-0000-000000000000} Informacje o procesie: Identyfikator procesu: 0x4 Nazwa procesu: Informacje o sieci: Nazwa stacji roboczej: - Adres źródłowy sieci: - Port źródłowy: - Szczegółowe informacje o uwierzytelnianiu: Proces logowania: - Pakiet uwierzytelniania: - Usługi przejściowe: - Nazwa pakietu (tylko NTLM): - Długość klucza: 0 To zdarzenie jest generowane w momencie utworzenia sesji logowania. Jest ono generowane na komputerze, do którego został uzyskany dostęp. Pola podmiotu wskazują konto w systemie lokalnym, które zażądało logowania. Najczęściej jest to usługa, na przykład usługa Serwer, lub proces lokalny taki jak Winlogon.exe lub Services.exe. Pole typu logowania wskazuje rodzaj zaistniałego logowania. Najczęstsze typy to 2 (interakcyjne) i 3 (sieciowe). Pola nowego logowania wskazują konto, dla którego zostało utworzone nowe logowanie, czyli konto, które zostało zalogowane. Pola sieci wskazują lokalizację, z której pochodziło zdalne żądanie logowania. Nazwa stacji roboczej nie zawsze jest dostępna i w niektórych przypadkach może być pusta. Pola informacji o uwierzytelnianiu zawierają szczegółowe informacje o tym konkretnym żądaniu logowania. - Identyfikator GUID logowania to unikatowy identyfikator, za pomocą którego można skorelować to zdarzenie ze zdarzeniem centrum dystrybucji kluczy. - Usługi przejściowe wskazują, które usługi pośrednie uczestniczyły w tym żądaniu logowania. - Nazwa pakietu wskazuje, który protokół podrzędny spośród protokołów NTLM został użyty. - Długość klucza wskazuje długość wygenerowanego klucza sesji. Jeśli nie zażądano klucza sesji, jest to wartość 0. Record Number: 2 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165641.540857-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4608 Message: Trwa uruchamianie systemu Windows. To zdarzenie jest rejestrowane w momencie uruchamiania programu LSASS.EXE i inicjowania podsystemu inspekcji. Record Number: 1 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165641.431657-000 Event Type: Sukcesy inspekcji User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "Path"=%CommonProgramFiles%\Microsoft Shared\Windows Live;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\ "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC "PROCESSOR_ARCHITECTURE"=AMD64 "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "USERNAME"=SYSTEM "windir"=%SystemRoot% "PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\ "NUMBER_OF_PROCESSORS"=4 "PROCESSOR_LEVEL"=16 "PROCESSOR_IDENTIFIER"=AMD64 Family 16 Model 4 Stepping 3, AuthenticAMD "PROCESSOR_REVISION"=0403 -----------------EOF-----------------[/log] i info [log]info.txt logfile of random's system information tool 1.08 2011-01-09 17:53:00 ======Uninstall list====== -->MsiExec /X{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF} µTorrent-->"D:\PROGRAMY\uTorrent\uTorrent.exe" /UNINSTALL 3DMark06-->"C:\Program Files (x86)\InstallShield Installation Information\{7F3AD00A-1819-4B15-BB7D-08B3586336D7}\setup.exe" -runfromtemp -l0x0009 -removeonly Adobe Flash Player 10 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe -maintain activex Adobe Flash Player 10 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\uninstall_plugin.exe Adobe Reader 9.4.1 - Polish-->MsiExec.exe /I{AC76BA86-7AD7-1045-7B44-A94000000001} Adobe Shockwave Player 11.5-->"C:\Windows\system32\Adobe\Shockwave 11\uninstaller.exe" Advertising Center-->MsiExec.exe /X{B2EC4A38-B545-4A00-8214-13FE0E915E6D} Aktualizacja dla programu Microsoft Outlook Social Connector (KB2289116)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001A-0415-0000-0000000FF1CE}" "{4629870E-FBDA-4F3B-BA03-D8C43B5A414E}" "1045" "0" ALLPlayer V4.X-->"D:\PROGRAMY\ALLPlayer\unins000.exe" ANNO 1404-->"C:\Program Files (x86)\InstallShield Installation Information\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}\setup.exe" -runfromtemp -l0x0009 -removeonly Ashampoo Burning Studio 10.0.4-->"D:\PROGRAMY\Ashampoo Burning Studio 10\unins000.exe" ASUSUpdate-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{587178E7-B1DF-494E-9838-FA4DD36E873C}\setup.exe" -l0x9 avast! Free Antivirus-->C:\Program Files\Alwil Software\Avast5\aswRunDll.exe "C:\Program Files\Alwil Software\Avast5\Setup\setiface.dll" RunSetup Cisco EAP-FAST Module-->MsiExec.exe /I{64BF0187-F3D2-498B-99EA-163AF9AE6EC9} Cisco LEAP Module-->MsiExec.exe /I{51C7AD07-C3F6-4635-8E8A-231306D810FE} Cisco PEAP Module-->MsiExec.exe /I{ED5776D5-59B4-46B7-AF81-5F2D94D7C640} Definition update for Microsoft Office 2010 (KB982726)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{E14AE329-F210-4EDD-B775-290821C66C1F}" "1045" "0" Dirt 2 Spolszczenie by O22y-->"D:\GRY\Codemasters\Dirt 2\unins001.exe" 'DIRT 2'-->"D:\GRY\Codemasters\Dirt 2\unins000.exe" DolbyFiles-->MsiExec.exe /X{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF} Edimax RT6x Wireless LAN Card-->C:\Program Files (x86)\InstallShield Installation Information\{FAB1F336-1B7C-4057-A7BC-2922CD82A781}\setup.exe -runfromtemp -l0x0009 -removeonly EVEREST Ultimate Edition v5.50-->"D:\PROGRAMY\EVEREST Ultimate Edition\unins000.exe" F1 2010-->MsiExec.exe /I{434D0831-3E0C-4D03-A5D4-5E1000008400} F1 2010-->MsiExec.exe /X{434D0831-3E0C-4D03-A5D4-5E1000008400} FIFA 11-->MsiExec.exe /X{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C} Fraps (remove only)-->"D:\PROGRAMY\fraps\uninstall.exe" Futuremark SystemInfo-->"C:\Program Files (x86)\InstallShield Installation Information\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}\setup.exe" -runfromtemp -l0x0009 -removeonly Gadu-Gadu 10-->D:\PROGRAMY\Gadu-Gadu 10\Uninstall.exe Grand Theft Auto IV-->"C:\Program Files (x86)\InstallShield Installation Information\{579BA58C-F33D-4970-9953-B94B43768AC3}\setup.exe" -runfromtemp -l0x0009 -removeonly Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000B8301} Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000B8302} Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000D8301} Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000D8302} HD Tune Pro 4.50-->"D:\PROGRAMY\HD Tune Pro\unins000.exe" LightScribe System Software-->MsiExec.exe /X{705B639E-FAAF-40D7-AD58-C445321C7C3F} Menu Templates - Starter Kit-->MsiExec.exe /X{B78120A0-CF84-4366-A393-4D0A59BC546C} Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{1FDA5A37-B22D-43FF-B582-B8964050DC13} Microsoft Games for Windows - LIVE-->MsiExec.exe /X{86A4C6D9-29EE-4719-AFA1-BA3341862B83} Microsoft Office Access MUI (Polish) 2010-->MsiExec.exe /X{90140000-0015-0415-0000-0000000FF1CE} Microsoft Office Excel MUI (Polish) 2010-->MsiExec.exe /X{90140000-0016-0415-0000-0000000FF1CE} Microsoft Office Groove MUI (Polish) 2010-->MsiExec.exe /X{90140000-00BA-0415-0000-0000000FF1CE} Microsoft Office InfoPath MUI (Polish) 2010-->MsiExec.exe /X{90140000-0044-0415-0000-0000000FF1CE} Microsoft Office OneNote MUI (Polish) 2010-->MsiExec.exe /X{90140000-00A1-0415-0000-0000000FF1CE} Microsoft Office Outlook MUI (Polish) 2010-->MsiExec.exe /X{90140000-001A-0415-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (Polish) 2010-->MsiExec.exe /X{90140000-0018-0415-0000-0000000FF1CE} Microsoft Office Professional Plus 2010-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL Microsoft Office Professional Plus 2010-->MsiExec.exe /X{90140000-0011-0000-0000-0000000FF1CE} Microsoft Office Proof (English) 2010-->MsiExec.exe /X{90140000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (German) 2010-->MsiExec.exe /X{90140000-001F-0407-0000-0000000FF1CE} Microsoft Office Proof (Polish) 2010-->MsiExec.exe /X{90140000-001F-0415-0000-0000000FF1CE} Microsoft Office Proofing (Polish) 2010-->MsiExec.exe /X{90140000-002C-0415-0000-0000000FF1CE} Microsoft Office Publisher MUI (Polish) 2010-->MsiExec.exe /X{90140000-0019-0415-0000-0000000FF1CE} Microsoft Office Shared MUI (Polish) 2010-->MsiExec.exe /X{90140000-006E-0415-0000-0000000FF1CE} Microsoft Office Word MUI (Polish) 2010-->MsiExec.exe /X{90140000-001B-0415-0000-0000000FF1CE} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7} Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989} Microsoft WSE 3.0 Runtime-->MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13} MSI Afterburner 2.0.0-->"D:\PROGRAMY\MSI Afterburner\uninstall.exe" MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC} NapiProjekt 1.0.6.9-->"D:\PROGRAMY\NAPI-PROJEKT\unins000.exe" NEC Electronics USB 3.0 Host Controller Driver-->"C:\Program Files (x86)\InstallShield Installation Information\{D7BF9739-8A68-4335-BBEE-37752AD9E86B}\setup.exe" -runfromtemp -l0x0415 -removeonly NEC Electronics USB 3.0 Host Controller Driver-->MsiExec.exe /I{D7BF9739-8A68-4335-BBEE-37752AD9E86B} Need For Speed SHIFT-->"D:\GRY\Electronic Arts\Need For Speed SHIFT\Uninstall\unins000.exe" Need for Speed™ SHIFT-->hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,78,00,65,00,20,00,2f,00,58,00,7b,00,42,00,42,00,46,00,30,00,41,00,36,00,37,00,42,00,2d,00,35,00,44,00,42,00,41,00,2d,00,34,00,35,00,32,00,46,00,2d,00,39,00,44,00,32,00,45,00,2d,00,36,00,46,00,31,00,36,00,38,00,42,00,43,00,32,00,32,00,36,00,45,00,34,00,7d,00,00,00 Nero 9 Trial-->C:\Program Files (x86)\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER="8M01-289K-2H95-W8H0-PZ2A-MKL8-9CH2-Z5PW" Nero BurnRights-->MsiExec.exe /X{7829DB6F-A066-4E40-8912-CB07887C20BB} Nero ControlCenter-->MsiExec.exe /X{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A} Nero CoverDesigner-->MsiExec.exe /X{62AC81F6-BDD3-4110-9D36-3E9EAAB40999} Nero Disc Copy Gadget-->MsiExec.exe /X{F1861F30-3419-44DB-B2A1-C274825698B3} Nero DiscSpeed-->MsiExec.exe /X{869200DB-287A-4DC0-B02B-2B6787FBCD4C} Nero DriveSpeed-->MsiExec.exe /X{33CF58F5-48D8-4575-83D6-96F574E4D83A} Nero Installer-->MsiExec.exe /X{E8A80433-302B-4FF1-815D-FCC8EAC482FF} Nero Rescue Agent-->MsiExec.exe /X{368BA326-73AD-4351-84ED-3C0A7A52CC53} Nero StartSmart-->MsiExec.exe /X{7748AC8C-18E3-43BB-959B-088FAEA16FB2} Nero Vision-->MsiExec.exe /X{43E39830-1826-415D-8BAE-86845787B54B} Nero WaveEditor-->MsiExec.exe /X{A209525B-3377-43F4-B886-32F6B6E7356F} NeroBurningROM-->MsiExec.exe /X{D025A639-B9C9-417D-8531-208859000AF8} NeroExpress-->MsiExec.exe /X{595A3116-40BB-4E0F-A2E8-D7951DA56270} neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B} NVIDIA GAME System Software 2.8.1-->MsiExec.exe /I{4F0C7CCF-5666-474B-B02E-AC514A95EC93} NVIDIA PhysX-->MsiExec.exe /X{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF} NVIDIA Stereoscopic 3D Driver-->"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInst.exe" /uninstall /ask OpenAL-->"C:\Program Files (x86)\OpenAL\OalinstGridRelease.exe" /U Rapture3D 2.4.4 Game-->"C:\Program Files (x86)\BRS\unins000.exe" Realtek Ethernet Controller Driver For Windows 7-->C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\Setup.exe -runfromtemp -removeonly Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -removeonly redist-->MsiExec.exe /I{153C7D89-9CF4-4719-A551-C5BF45236DB5} Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {FD8D7C9A-E56A-3E7B-BA6D-FE68F13296E3} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Extended (KB2416472)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {3162617C-537F-3BB6-8D0C-C6021F442391} /parameterfolder Extended Security Update for Microsoft Office 2010 (KB2289078)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{1D1A4F08-2F17-475B-BA72-476CE5992FEE}" "1045" "0" Security Update for Microsoft Office 2010 (KB2289161)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{F134C2C6-30B3-4169-A325-58482B4CE6FC}" "1045" "0" Security Update for Microsoft Publisher 2010 (KB2409055)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{C3C277D5-36E3-4B1A-926A-175B2BC019CF}" "1045" "0" Security Update for Microsoft Word 2010 (KB2345000)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{A6D422EE-1196-45EE-B9AE-6B5B64975E8B}" "1045" "0" Skype™ 5.0-->MsiExec.exe /X{E633D396-5188-4E9D-8F6B-BFB8BF3467E8} The Settlers 7 - Droga do królestwa-->"C:\Program Files (x86)\InstallShield Installation Information\{9C916142-C18C-429D-BFED-40094A7E0BEB}\setup.exe" -runfromtemp -l0x0015 -removeonly The Sims™ 3-->"C:\Program Files (x86)\InstallShield Installation Information\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}\setup.exe" -runfromtemp -l0x0015 -removeonly Tom Clancy's H.A.W.X. 2-->"C:\Program Files (x86)\InstallShield Installation Information\{76A232AF-B7D6-41A4-B795-6B355E6D32B1}\setup.exe" -runfromtemp -l0x0015 -removeonly Trials 2 Second Edition v1.08-->"D:\GRY\RedLynx\Trials 2 Second Edition\unins000.exe" Ubisoft Game Launcher-->"C:\Program Files (x86)\InstallShield Installation Information\{888F1505-C2B3-4FDE-835D-36353EBD4754}\setup.exe" -runfromtemp -l0x0409 -removeonly Unigine Heaven Benchmark v2.1-->MsiExec.exe /I{38468127-9E6F-4FC9-B5F7-42D4AD437D96} Update for Microsoft Office 2010 (KB2202188)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{86B7A074-265D-420C-9E1E-7A920EF0ECA7}" "1045" "0" Update for Microsoft Office 2010 (KB2413186)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{556146F7-74AE-4E0A-B64F-5B8B93469F61}" "1045" "0" Update for Microsoft Office 2010 (KB2413186)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{B5516874-E926-4BFD-B412-D0E70112F244}" "1045" "0" Update for Microsoft Office 2010 (KB2413186)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{D6CE7280-6EE3-419A-8F47-DB111C040B1B}" "1045" "0" Update for Microsoft OneNote 2010 (KB2433299)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{6C845127-B949-4D76-A732-BCB396AD9AA5}" "1045" "0" Update for Microsoft Outlook Social Connector (KB2289116)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{75F91382-920C-4AE1-B9E6-FFFCEDA797E8}" "1045" "0" ======System event log====== Computer Name: Adrian-Komputer Event Code: 7036 Message: Usługa Przeglądarka komputera weszła w stan uruchomienia. Record Number: 6828 Source Name: Service Control Manager Time Written: 20101108133502.284854-000 Event Type: Informacje User: Computer Name: Adrian-Komputer Event Code: 20003 Message: Usługa zarządzania sterownikami zakończyła proces dodawania usługi tunnel dla wystąpienia urządzenia o identyfikatorze ROOT\*ISATAP\0002 z następującym stanem: 0. Record Number: 6827 Source Name: Microsoft-Windows-UserPnp Time Written: 20101108133501.816853-000 Event Type: Informacje User: ZARZĄDZANIE NT\SYSTEM Computer Name: Adrian-Komputer Event Code: 20003 Message: Usługa zarządzania sterownikami zakończyła proces dodawania usługi tunnel dla wystąpienia urządzenia o identyfikatorze ROOT\*ISATAP\0001 z następującym stanem: 0. Record Number: 6826 Source Name: Microsoft-Windows-UserPnp Time Written: 20101108133500.194450-000 Event Type: Informacje User: ZARZĄDZANIE NT\SYSTEM Computer Name: Adrian-Komputer Event Code: 7036 Message: Usługa avast! Mail Scanner weszła w stan uruchomienia. Record Number: 6825 Source Name: Service Control Manager Time Written: 20101108133458.494047-000 Event Type: Informacje User: Computer Name: Adrian-Komputer Event Code: 7036 Message: Usługa Usługa modułu wyliczającego urządzenia przenośne weszła w stan uruchomienia. Record Number: 6824 Source Name: Service Control Manager Time Written: 20101108133456.559644-000 Event Type: Informacje User: =====Application event log===== Computer Name: 37L4247E29-32 Event Code: 1001 Message: Pakiet błędów , typ 0 Nazwa zdarzenia: PnPRequestAdditionalSoftware Odpowiedź: Niedostępny Identyfikator pliku Cab: 0 Sygnatura problemu: P1: x64 P2: USB\VID_1BCF&PID_08D8&REV_2611&MI_00 P3: 6.1.0.0 P4: 0415 P5: input.inf P6: * P7: P8: P9: P10: Dołączone pliki: Te pliki mogą być dostępne tutaj: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_92c92feef5d98d4c3ad6c23b23d11c4293befb_cab_05f10d77 Symbol analizy: Ponowne sprawdzanie rozwiązania: 0 Identyfikator raportu: bd5d95d1-e8fd-11df-a51e-ac895d9375ee Stan raportu: 6 Record Number: 5 Source Name: Windows Error Reporting Time Written: 20101105165715.000000-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 5617 Message: Windows Management Instrumentation Service subsystems initialized successfully Record Number: 4 Source Name: Microsoft-Windows-WMI Time Written: 20101105165712.000000-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 5615 Message: Windows Management Instrumentation Service started sucessfully Record Number: 3 Source Name: Microsoft-Windows-WMI Time Written: 20101105165708.000000-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 1531 Message: Usługa profilów użytkowników została uruchomiona pomyślnie. Record Number: 2 Source Name: Microsoft-Windows-User Profiles Service Time Written: 20101105165704.488497-000 Event Type: Informacje User: ZARZĄDZANIE NT\SYSTEM Computer Name: 37L4247E29-32 Event Code: 4625 Message: System podrzędny EventSystem pomija zduplikowane wpisy dziennika zdarzeń przez okres 86400 sekund. Limit czasu pomijania można kontrolować za pomocą wartości REG_DWORD o nazwie SuppressDuplicateDuration w następującym kluczu rejestru: HKLM\Software\Microsoft\EventSystem\EventLog. Record Number: 1 Source Name: Microsoft-Windows-EventSystem Time Written: 20101105165704.000000-000 Event Type: Informacje User: =====Security event log===== Computer Name: 37L4247E29-32 Event Code: 4735 Message: Zmieniono grupę lokalną z włączonymi zabezpieczeniami. Podmiot: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: 37L4247E29-32$ Domena konta: WORKGROUP Identyfikator logowania: 0x3e7 Grupa: Identyfikator zabezpieczeń: S-1-5-32-551 Nazwa grupy: Operatorzy kopii zapasowych Domena grupy: Builtin Zmienione atrybuty: Nazwa konta SAM: - Historia identyfikatora SID: - Informacje dodatkowe: Uprawnienia: - Record Number: 5 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165644.894863-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4731 Message: Utworzono grupę lokalną z włączonymi zabezpieczeniami. Podmiot: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: 37L4247E29-32$ Domena konta: WORKGROUP Identyfikator logowania: 0x3e7 Nowa grupa: Identyfikator zabezpieczeń: S-1-5-32-551 Nazwa grupy: Operatorzy kopii zapasowych Domena grupy: Builtin Atrybuty: Nazwa konta SAM: Operatorzy kopii zapasowych Historia identyfikatora SID: - Informacje dodatkowe: Uprawnienia: - Record Number: 4 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165644.863663-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4902 Message: Utworzono tabelę zasad inspekcji użytkownika. Liczba elementów: 0 Identyfikator zasad: 0x32c18 Record Number: 3 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165644.364462-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4624 Message: Użytkownik pomyślnie zalogował się na koncie. Podmiot: Identyfikator zabezpieczeń: S-1-0-0 Nazwa konta: - Domena konta: - Identyfikator logowania: 0x0 Typ logowania: 0 Nowe logowanie: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: SYSTEM Domena konta: ZARZĄDZANIE NT Identyfikator logowania: 0x3e7 Identyfikator GUID logowania: {00000000-0000-0000-0000-000000000000} Informacje o procesie: Identyfikator procesu: 0x4 Nazwa procesu: Informacje o sieci: Nazwa stacji roboczej: - Adres źródłowy sieci: - Port źródłowy: - Szczegółowe informacje o uwierzytelnianiu: Proces logowania: - Pakiet uwierzytelniania: - Usługi przejściowe: - Nazwa pakietu (tylko NTLM): - Długość klucza: 0 To zdarzenie jest generowane w momencie utworzenia sesji logowania. Jest ono generowane na komputerze, do którego został uzyskany dostęp. Pola podmiotu wskazują konto w systemie lokalnym, które zażądało logowania. Najczęściej jest to usługa, na przykład usługa Serwer, lub proces lokalny taki jak Winlogon.exe lub Services.exe. Pole typu logowania wskazuje rodzaj zaistniałego logowania. Najczęstsze typy to 2 (interakcyjne) i 3 (sieciowe). Pola nowego logowania wskazują konto, dla którego zostało utworzone nowe logowanie, czyli konto, które zostało zalogowane. Pola sieci wskazują lokalizację, z której pochodziło zdalne żądanie logowania. Nazwa stacji roboczej nie zawsze jest dostępna i w niektórych przypadkach może być pusta. Pola informacji o uwierzytelnianiu zawierają szczegółowe informacje o tym konkretnym żądaniu logowania. - Identyfikator GUID logowania to unikatowy identyfikator, za pomocą którego można skorelować to zdarzenie ze zdarzeniem centrum dystrybucji kluczy. - Usługi przejściowe wskazują, które usługi pośrednie uczestniczyły w tym żądaniu logowania. - Nazwa pakietu wskazuje, który protokół podrzędny spośród protokołów NTLM został użyty. - Długość klucza wskazuje długość wygenerowanego klucza sesji. Jeśli nie zażądano klucza sesji, jest to wartość 0. Record Number: 2 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165641.540857-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4608 Message: Trwa uruchamianie systemu Windows. To zdarzenie jest rejestrowane w momencie uruchamiania programu LSASS.EXE i inicjowania podsystemu inspekcji. Record Number: 1 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165641.431657-000 Event Type: Sukcesy inspekcji User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "Path"=%CommonProgramFiles%\Microsoft Shared\Windows Live;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\ "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC "PROCESSOR_ARCHITECTURE"=AMD64 "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "USERNAME"=SYSTEM "windir"=%SystemRoot% "PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\ "NUMBER_OF_PROCESSORS"=4 "PROCESSOR_LEVEL"=16 "PROCESSOR_IDENTIFIER"=AMD64 Family 16 Model 4 Stepping 3, AuthenticAMD "PROCESSOR_REVISION"=0403 -----------------EOF-----------------[/log] i [log]info.txt logfile of random's system information tool 1.08 2011-01-09 17:53:00 ======Uninstall list====== -->MsiExec /X{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF} µTorrent-->"D:\PROGRAMY\uTorrent\uTorrent.exe" /UNINSTALL 3DMark06-->"C:\Program Files (x86)\InstallShield Installation Information\{7F3AD00A-1819-4B15-BB7D-08B3586336D7}\setup.exe" -runfromtemp -l0x0009 -removeonly Adobe Flash Player 10 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe -maintain activex Adobe Flash Player 10 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\uninstall_plugin.exe Adobe Reader 9.4.1 - Polish-->MsiExec.exe /I{AC76BA86-7AD7-1045-7B44-A94000000001} Adobe Shockwave Player 11.5-->"C:\Windows\system32\Adobe\Shockwave 11\uninstaller.exe" Advertising Center-->MsiExec.exe /X{B2EC4A38-B545-4A00-8214-13FE0E915E6D} Aktualizacja dla programu Microsoft Outlook Social Connector (KB2289116)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001A-0415-0000-0000000FF1CE}" "{4629870E-FBDA-4F3B-BA03-D8C43B5A414E}" "1045" "0" ALLPlayer V4.X-->"D:\PROGRAMY\ALLPlayer\unins000.exe" ANNO 1404-->"C:\Program Files (x86)\InstallShield Installation Information\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}\setup.exe" -runfromtemp -l0x0009 -removeonly Ashampoo Burning Studio 10.0.4-->"D:\PROGRAMY\Ashampoo Burning Studio 10\unins000.exe" ASUSUpdate-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{587178E7-B1DF-494E-9838-FA4DD36E873C}\setup.exe" -l0x9 avast! Free Antivirus-->C:\Program Files\Alwil Software\Avast5\aswRunDll.exe "C:\Program Files\Alwil Software\Avast5\Setup\setiface.dll" RunSetup Cisco EAP-FAST Module-->MsiExec.exe /I{64BF0187-F3D2-498B-99EA-163AF9AE6EC9} Cisco LEAP Module-->MsiExec.exe /I{51C7AD07-C3F6-4635-8E8A-231306D810FE} Cisco PEAP Module-->MsiExec.exe /I{ED5776D5-59B4-46B7-AF81-5F2D94D7C640} Definition update for Microsoft Office 2010 (KB982726)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{E14AE329-F210-4EDD-B775-290821C66C1F}" "1045" "0" Dirt 2 Spolszczenie by O22y-->"D:\GRY\Codemasters\Dirt 2\unins001.exe" 'DIRT 2'-->"D:\GRY\Codemasters\Dirt 2\unins000.exe" DolbyFiles-->MsiExec.exe /X{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF} Edimax RT6x Wireless LAN Card-->C:\Program Files (x86)\InstallShield Installation Information\{FAB1F336-1B7C-4057-A7BC-2922CD82A781}\setup.exe -runfromtemp -l0x0009 -removeonly EVEREST Ultimate Edition v5.50-->"D:\PROGRAMY\EVEREST Ultimate Edition\unins000.exe" F1 2010-->MsiExec.exe /I{434D0831-3E0C-4D03-A5D4-5E1000008400} F1 2010-->MsiExec.exe /X{434D0831-3E0C-4D03-A5D4-5E1000008400} FIFA 11-->MsiExec.exe /X{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C} Fraps (remove only)-->"D:\PROGRAMY\fraps\uninstall.exe" Futuremark SystemInfo-->"C:\Program Files (x86)\InstallShield Installation Information\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}\setup.exe" -runfromtemp -l0x0009 -removeonly Gadu-Gadu 10-->D:\PROGRAMY\Gadu-Gadu 10\Uninstall.exe Grand Theft Auto IV-->"C:\Program Files (x86)\InstallShield Installation Information\{579BA58C-F33D-4970-9953-B94B43768AC3}\setup.exe" -runfromtemp -l0x0009 -removeonly Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000B8301} Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000B8302} Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000D8301} Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000D8302} HD Tune Pro 4.50-->"D:\PROGRAMY\HD Tune Pro\unins000.exe" LightScribe System Software-->MsiExec.exe /X{705B639E-FAAF-40D7-AD58-C445321C7C3F} Menu Templates - Starter Kit-->MsiExec.exe /X{B78120A0-CF84-4366-A393-4D0A59BC546C} Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{1FDA5A37-B22D-43FF-B582-B8964050DC13} Microsoft Games for Windows - LIVE-->MsiExec.exe /X{86A4C6D9-29EE-4719-AFA1-BA3341862B83} Microsoft Office Access MUI (Polish) 2010-->MsiExec.exe /X{90140000-0015-0415-0000-0000000FF1CE} Microsoft Office Excel MUI (Polish) 2010-->MsiExec.exe /X{90140000-0016-0415-0000-0000000FF1CE} Microsoft Office Groove MUI (Polish) 2010-->MsiExec.exe /X{90140000-00BA-0415-0000-0000000FF1CE} Microsoft Office InfoPath MUI (Polish) 2010-->MsiExec.exe /X{90140000-0044-0415-0000-0000000FF1CE} Microsoft Office OneNote MUI (Polish) 2010-->MsiExec.exe /X{90140000-00A1-0415-0000-0000000FF1CE} Microsoft Office Outlook MUI (Polish) 2010-->MsiExec.exe /X{90140000-001A-0415-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (Polish) 2010-->MsiExec.exe /X{90140000-0018-0415-0000-0000000FF1CE} Microsoft Office Professional Plus 2010-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL Microsoft Office Professional Plus 2010-->MsiExec.exe /X{90140000-0011-0000-0000-0000000FF1CE} Microsoft Office Proof (English) 2010-->MsiExec.exe /X{90140000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (German) 2010-->MsiExec.exe /X{90140000-001F-0407-0000-0000000FF1CE} Microsoft Office Proof (Polish) 2010-->MsiExec.exe /X{90140000-001F-0415-0000-0000000FF1CE} Microsoft Office Proofing (Polish) 2010-->MsiExec.exe /X{90140000-002C-0415-0000-0000000FF1CE} Microsoft Office Publisher MUI (Polish) 2010-->MsiExec.exe /X{90140000-0019-0415-0000-0000000FF1CE} Microsoft Office Shared MUI (Polish) 2010-->MsiExec.exe /X{90140000-006E-0415-0000-0000000FF1CE} Microsoft Office Word MUI (Polish) 2010-->MsiExec.exe /X{90140000-001B-0415-0000-0000000FF1CE} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7} Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989} Microsoft WSE 3.0 Runtime-->MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13} MSI Afterburner 2.0.0-->"D:\PROGRAMY\MSI Afterburner\uninstall.exe" MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC} NapiProjekt 1.0.6.9-->"D:\PROGRAMY\NAPI-PROJEKT\unins000.exe" NEC Electronics USB 3.0 Host Controller Driver-->"C:\Program Files (x86)\InstallShield Installation Information\{D7BF9739-8A68-4335-BBEE-37752AD9E86B}\setup.exe" -runfromtemp -l0x0415 -removeonly NEC Electronics USB 3.0 Host Controller Driver-->MsiExec.exe /I{D7BF9739-8A68-4335-BBEE-37752AD9E86B} Need For Speed SHIFT-->"D:\GRY\Electronic Arts\Need For Speed SHIFT\Uninstall\unins000.exe" Need for Speed™ SHIFT-->hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,78,00,65,00,20,00,2f,00,58,00,7b,00,42,00,42,00,46,00,30,00,41,00,36,00,37,00,42,00,2d,00,35,00,44,00,42,00,41,00,2d,00,34,00,35,00,32,00,46,00,2d,00,39,00,44,00,32,00,45,00,2d,00,36,00,46,00,31,00,36,00,38,00,42,00,43,00,32,00,32,00,36,00,45,00,34,00,7d,00,00,00 Nero 9 Trial-->C:\Program Files (x86)\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER="8M01-289K-2H95-W8H0-PZ2A-MKL8-9CH2-Z5PW" Nero BurnRights-->MsiExec.exe /X{7829DB6F-A066-4E40-8912-CB07887C20BB} Nero ControlCenter-->MsiExec.exe /X{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A} Nero CoverDesigner-->MsiExec.exe /X{62AC81F6-BDD3-4110-9D36-3E9EAAB40999} Nero Disc Copy Gadget-->MsiExec.exe /X{F1861F30-3419-44DB-B2A1-C274825698B3} Nero DiscSpeed-->MsiExec.exe /X{869200DB-287A-4DC0-B02B-2B6787FBCD4C} Nero DriveSpeed-->MsiExec.exe /X{33CF58F5-48D8-4575-83D6-96F574E4D83A} Nero Installer-->MsiExec.exe /X{E8A80433-302B-4FF1-815D-FCC8EAC482FF} Nero Rescue Agent-->MsiExec.exe /X{368BA326-73AD-4351-84ED-3C0A7A52CC53} Nero StartSmart-->MsiExec.exe /X{7748AC8C-18E3-43BB-959B-088FAEA16FB2} Nero Vision-->MsiExec.exe /X{43E39830-1826-415D-8BAE-86845787B54B} Nero WaveEditor-->MsiExec.exe /X{A209525B-3377-43F4-B886-32F6B6E7356F} NeroBurningROM-->MsiExec.exe /X{D025A639-B9C9-417D-8531-208859000AF8} NeroExpress-->MsiExec.exe /X{595A3116-40BB-4E0F-A2E8-D7951DA56270} neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B} NVIDIA GAME System Software 2.8.1-->MsiExec.exe /I{4F0C7CCF-5666-474B-B02E-AC514A95EC93} NVIDIA PhysX-->MsiExec.exe /X{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF} NVIDIA Stereoscopic 3D Driver-->"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInst.exe" /uninstall /ask OpenAL-->"C:\Program Files (x86)\OpenAL\OalinstGridRelease.exe" /U Rapture3D 2.4.4 Game-->"C:\Program Files (x86)\BRS\unins000.exe" Realtek Ethernet Controller Driver For Windows 7-->C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\Setup.exe -runfromtemp -removeonly Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -removeonly redist-->MsiExec.exe /I{153C7D89-9CF4-4719-A551-C5BF45236DB5} Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {FD8D7C9A-E56A-3E7B-BA6D-FE68F13296E3} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Extended (KB2416472)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {3162617C-537F-3BB6-8D0C-C6021F442391} /parameterfolder Extended Security Update for Microsoft Office 2010 (KB2289078)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{1D1A4F08-2F17-475B-BA72-476CE5992FEE}" "1045" "0" Security Update for Microsoft Office 2010 (KB2289161)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{F134C2C6-30B3-4169-A325-58482B4CE6FC}" "1045" "0" Security Update for Microsoft Publisher 2010 (KB2409055)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{C3C277D5-36E3-4B1A-926A-175B2BC019CF}" "1045" "0" Security Update for Microsoft Word 2010 (KB2345000)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{A6D422EE-1196-45EE-B9AE-6B5B64975E8B}" "1045" "0" Skype™ 5.0-->MsiExec.exe /X{E633D396-5188-4E9D-8F6B-BFB8BF3467E8} The Settlers 7 - Droga do królestwa-->"C:\Program Files (x86)\InstallShield Installation Information\{9C916142-C18C-429D-BFED-40094A7E0BEB}\setup.exe" -runfromtemp -l0x0015 -removeonly The Sims™ 3-->"C:\Program Files (x86)\InstallShield Installation Information\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}\setup.exe" -runfromtemp -l0x0015 -removeonly Tom Clancy's H.A.W.X. 2-->"C:\Program Files (x86)\InstallShield Installation Information\{76A232AF-B7D6-41A4-B795-6B355E6D32B1}\setup.exe" -runfromtemp -l0x0015 -removeonly Trials 2 Second Edition v1.08-->"D:\GRY\RedLynx\Trials 2 Second Edition\unins000.exe" Ubisoft Game Launcher-->"C:\Program Files (x86)\InstallShield Installation Information\{888F1505-C2B3-4FDE-835D-36353EBD4754}\setup.exe" -runfromtemp -l0x0409 -removeonly Unigine Heaven Benchmark v2.1-->MsiExec.exe /I{38468127-9E6F-4FC9-B5F7-42D4AD437D96} Update for Microsoft Office 2010 (KB2202188)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{86B7A074-265D-420C-9E1E-7A920EF0ECA7}" "1045" "0" Update for Microsoft Office 2010 (KB2413186)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{556146F7-74AE-4E0A-B64F-5B8B93469F61}" "1045" "0" Update for Microsoft Office 2010 (KB2413186)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{B5516874-E926-4BFD-B412-D0E70112F244}" "1045" "0" Update for Microsoft Office 2010 (KB2413186)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{D6CE7280-6EE3-419A-8F47-DB111C040B1B}" "1045" "0" Update for Microsoft OneNote 2010 (KB2433299)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{6C845127-B949-4D76-A732-BCB396AD9AA5}" "1045" "0" Update for Microsoft Outlook Social Connector (KB2289116)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{75F91382-920C-4AE1-B9E6-FFFCEDA797E8}" "1045" "0" ======System event log====== Computer Name: Adrian-Komputer Event Code: 7036 Message: Usługa Przeglądarka komputera weszła w stan uruchomienia. Record Number: 6828 Source Name: Service Control Manager Time Written: 20101108133502.284854-000 Event Type: Informacje User: Computer Name: Adrian-Komputer Event Code: 20003 Message: Usługa zarządzania sterownikami zakończyła proces dodawania usługi tunnel dla wystąpienia urządzenia o identyfikatorze ROOT\*ISATAP\0002 z następującym stanem: 0. Record Number: 6827 Source Name: Microsoft-Windows-UserPnp Time Written: 20101108133501.816853-000 Event Type: Informacje User: ZARZĄDZANIE NT\SYSTEM Computer Name: Adrian-Komputer Event Code: 20003 Message: Usługa zarządzania sterownikami zakończyła proces dodawania usługi tunnel dla wystąpienia urządzenia o identyfikatorze ROOT\*ISATAP\0001 z następującym stanem: 0. Record Number: 6826 Source Name: Microsoft-Windows-UserPnp Time Written: 20101108133500.194450-000 Event Type: Informacje User: ZARZĄDZANIE NT\SYSTEM Computer Name: Adrian-Komputer Event Code: 7036 Message: Usługa avast! Mail Scanner weszła w stan uruchomienia. Record Number: 6825 Source Name: Service Control Manager Time Written: 20101108133458.494047-000 Event Type: Informacje User: Computer Name: Adrian-Komputer Event Code: 7036 Message: Usługa Usługa modułu wyliczającego urządzenia przenośne weszła w stan uruchomienia. Record Number: 6824 Source Name: Service Control Manager Time Written: 20101108133456.559644-000 Event Type: Informacje User: =====Application event log===== Computer Name: 37L4247E29-32 Event Code: 1001 Message: Pakiet błędów , typ 0 Nazwa zdarzenia: PnPRequestAdditionalSoftware Odpowiedź: Niedostępny Identyfikator pliku Cab: 0 Sygnatura problemu: P1: x64 P2: USB\VID_1BCF&PID_08D8&REV_2611&MI_00 P3: 6.1.0.0 P4: 0415 P5: input.inf P6: * P7: P8: P9: P10: Dołączone pliki: Te pliki mogą być dostępne tutaj: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_92c92feef5d98d4c3ad6c23b23d11c4293befb_cab_05f10d77 Symbol analizy: Ponowne sprawdzanie rozwiązania: 0 Identyfikator raportu: bd5d95d1-e8fd-11df-a51e-ac895d9375ee Stan raportu: 6 Record Number: 5 Source Name: Windows Error Reporting Time Written: 20101105165715.000000-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 5617 Message: Windows Management Instrumentation Service subsystems initialized successfully Record Number: 4 Source Name: Microsoft-Windows-WMI Time Written: 20101105165712.000000-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 5615 Message: Windows Management Instrumentation Service started sucessfully Record Number: 3 Source Name: Microsoft-Windows-WMI Time Written: 20101105165708.000000-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 1531 Message: Usługa profilów użytkowników została uruchomiona pomyślnie. Record Number: 2 Source Name: Microsoft-Windows-User Profiles Service Time Written: 20101105165704.488497-000 Event Type: Informacje User: ZARZĄDZANIE NT\SYSTEM Computer Name: 37L4247E29-32 Event Code: 4625 Message: System podrzędny EventSystem pomija zduplikowane wpisy dziennika zdarzeń przez okres 86400 sekund. Limit czasu pomijania można kontrolować za pomocą wartości REG_DWORD o nazwie SuppressDuplicateDuration w następującym kluczu rejestru: HKLM\Software\Microsoft\EventSystem\EventLog. Record Number: 1 Source Name: Microsoft-Windows-EventSystem Time Written: 20101105165704.000000-000 Event Type: Informacje User: =====Security event log===== Computer Name: 37L4247E29-32 Event Code: 4735 Message: Zmieniono grupę lokalną z włączonymi zabezpieczeniami. Podmiot: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: 37L4247E29-32$ Domena konta: WORKGROUP Identyfikator logowania: 0x3e7 Grupa: Identyfikator zabezpieczeń: S-1-5-32-551 Nazwa grupy: Operatorzy kopii zapasowych Domena grupy: Builtin Zmienione atrybuty: Nazwa konta SAM: - Historia identyfikatora SID: - Informacje dodatkowe: Uprawnienia: - Record Number: 5 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165644.894863-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4731 Message: Utworzono grupę lokalną z włączonymi zabezpieczeniami. Podmiot: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: 37L4247E29-32$ Domena konta: WORKGROUP Identyfikator logowania: 0x3e7 Nowa grupa: Identyfikator zabezpieczeń: S-1-5-32-551 Nazwa grupy: Operatorzy kopii zapasowych Domena grupy: Builtin Atrybuty: Nazwa konta SAM: Operatorzy kopii zapasowych Historia identyfikatora SID: - Informacje dodatkowe: Uprawnienia: - Record Number: 4 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165644.863663-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4902 Message: Utworzono tabelę zasad inspekcji użytkownika. Liczba elementów: 0 Identyfikator zasad: 0x32c18 Record Number: 3 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165644.364462-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4624 Message: Użytkownik pomyślnie zalogował się na koncie. Podmiot: Identyfikator zabezpieczeń: S-1-0-0 Nazwa konta: - Domena konta: - Identyfikator logowania: 0x0 Typ logowania: 0 Nowe logowanie: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: SYSTEM Domena konta: ZARZĄDZANIE NT Identyfikator logowania: 0x3e7 Identyfikator GUID logowania: {00000000-0000-0000-0000-000000000000} Informacje o procesie: Identyfikator procesu: 0x4 Nazwa procesu: Informacje o sieci: Nazwa stacji roboczej: - Adres źródłowy sieci: - Port źródłowy: - Szczegółowe informacje o uwierzytelnianiu: Proces logowania: - Pakiet uwierzytelniania: - Usługi przejściowe: - Nazwa pakietu (tylko NTLM): - Długość klucza: 0 To zdarzenie jest generowane w momencie utworzenia sesji logowania. Jest ono generowane na komputerze, do którego został uzyskany dostęp. Pola podmiotu wskazują konto w systemie lokalnym, które zażądało logowania. Najczęściej jest to usługa, na przykład usługa Serwer, lub proces lokalny taki jak Winlogon.exe lub Services.exe. Pole typu logowania wskazuje rodzaj zaistniałego logowania. Najczęstsze typy to 2 (interakcyjne) i 3 (sieciowe). Pola nowego logowania wskazują konto, dla którego zostało utworzone nowe logowanie, czyli konto, które zostało zalogowane. Pola sieci wskazują lokalizację, z której pochodziło zdalne żądanie logowania. Nazwa stacji roboczej nie zawsze jest dostępna i w niektórych przypadkach może być pusta. Pola informacji o uwierzytelnianiu zawierają szczegółowe informacje o tym konkretnym żądaniu logowania. - Identyfikator GUID logowania to unikatowy identyfikator, za pomocą którego można skorelować to zdarzenie ze zdarzeniem centrum dystrybucji kluczy. - Usługi przejściowe wskazują, które usługi pośrednie uczestniczyły w tym żądaniu logowania. - Nazwa pakietu wskazuje, który protokół podrzędny spośród protokołów NTLM został użyty. - Długość klucza wskazuje długość wygenerowanego klucza sesji. Jeśli nie zażądano klucza sesji, jest to wartość 0. Record Number: 2 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165641.540857-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4608 Message: Trwa uruchamianie systemu Windows. To zdarzenie jest rejestrowane w momencie uruchamiania programu LSASS.EXE i inicjowania podsystemu inspekcji. Record Number: 1 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165641.431657-000 Event Type: Sukcesy inspekcji User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "Path"=%CommonProgramFiles%\Microsoft Shared\Windows Live;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\ "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC "PROCESSOR_ARCHITECTURE"=AMD64 "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "USERNAME"=SYSTEM "windir"=%SystemRoot% "PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\ "NUMBER_OF_PROCESSORS"=4 "PROCESSOR_LEVEL"=16 "PROCESSOR_IDENTIFIER"=AMD64 Family 16 Model 4 Stepping 3, AuthenticAMD "PROCESSOR_REVISION"=0403 -----------------EOF----------------- info.txt logfile of random's system information tool 1.08 2011-01-09 17:53:00 ======Uninstall list====== -->MsiExec /X{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF} µTorrent-->"D:\PROGRAMY\uTorrent\uTorrent.exe" /UNINSTALL 3DMark06-->"C:\Program Files (x86)\InstallShield Installation Information\{7F3AD00A-1819-4B15-BB7D-08B3586336D7}\setup.exe" -runfromtemp -l0x0009 -removeonly Adobe Flash Player 10 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe -maintain activex Adobe Flash Player 10 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\uninstall_plugin.exe Adobe Reader 9.4.1 - Polish-->MsiExec.exe /I{AC76BA86-7AD7-1045-7B44-A94000000001} Adobe Shockwave Player 11.5-->"C:\Windows\system32\Adobe\Shockwave 11\uninstaller.exe" Advertising Center-->MsiExec.exe /X{B2EC4A38-B545-4A00-8214-13FE0E915E6D} Aktualizacja dla programu Microsoft Outlook Social Connector (KB2289116)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-001A-0415-0000-0000000FF1CE}" "{4629870E-FBDA-4F3B-BA03-D8C43B5A414E}" "1045" "0" ALLPlayer V4.X-->"D:\PROGRAMY\ALLPlayer\unins000.exe" ANNO 1404-->"C:\Program Files (x86)\InstallShield Installation Information\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}\setup.exe" -runfromtemp -l0x0009 -removeonly Ashampoo Burning Studio 10.0.4-->"D:\PROGRAMY\Ashampoo Burning Studio 10\unins000.exe" ASUSUpdate-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{587178E7-B1DF-494E-9838-FA4DD36E873C}\setup.exe" -l0x9 avast! Free Antivirus-->C:\Program Files\Alwil Software\Avast5\aswRunDll.exe "C:\Program Files\Alwil Software\Avast5\Setup\setiface.dll" RunSetup Cisco EAP-FAST Module-->MsiExec.exe /I{64BF0187-F3D2-498B-99EA-163AF9AE6EC9} Cisco LEAP Module-->MsiExec.exe /I{51C7AD07-C3F6-4635-8E8A-231306D810FE} Cisco PEAP Module-->MsiExec.exe /I{ED5776D5-59B4-46B7-AF81-5F2D94D7C640} Definition update for Microsoft Office 2010 (KB982726)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{E14AE329-F210-4EDD-B775-290821C66C1F}" "1045" "0" Dirt 2 Spolszczenie by O22y-->"D:\GRY\Codemasters\Dirt 2\unins001.exe" 'DIRT 2'-->"D:\GRY\Codemasters\Dirt 2\unins000.exe" DolbyFiles-->MsiExec.exe /X{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF} Edimax RT6x Wireless LAN Card-->C:\Program Files (x86)\InstallShield Installation Information\{FAB1F336-1B7C-4057-A7BC-2922CD82A781}\setup.exe -runfromtemp -l0x0009 -removeonly EVEREST Ultimate Edition v5.50-->"D:\PROGRAMY\EVEREST Ultimate Edition\unins000.exe" F1 2010-->MsiExec.exe /I{434D0831-3E0C-4D03-A5D4-5E1000008400} F1 2010-->MsiExec.exe /X{434D0831-3E0C-4D03-A5D4-5E1000008400} FIFA 11-->MsiExec.exe /X{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C} Fraps (remove only)-->"D:\PROGRAMY\fraps\uninstall.exe" Futuremark SystemInfo-->"C:\Program Files (x86)\InstallShield Installation Information\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}\setup.exe" -runfromtemp -l0x0009 -removeonly Gadu-Gadu 10-->D:\PROGRAMY\Gadu-Gadu 10\Uninstall.exe Grand Theft Auto IV-->"C:\Program Files (x86)\InstallShield Installation Information\{579BA58C-F33D-4970-9953-B94B43768AC3}\setup.exe" -runfromtemp -l0x0009 -removeonly Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000B8301} Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000B8302} Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000D8301} Grand Theft Auto IV-->MsiExec.exe /I{5454083B-1308-4485-BF17-1110000D8302} HD Tune Pro 4.50-->"D:\PROGRAMY\HD Tune Pro\unins000.exe" LightScribe System Software-->MsiExec.exe /X{705B639E-FAAF-40D7-AD58-C445321C7C3F} Menu Templates - Starter Kit-->MsiExec.exe /X{B78120A0-CF84-4366-A393-4D0A59BC546C} Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{1FDA5A37-B22D-43FF-B582-B8964050DC13} Microsoft Games for Windows - LIVE-->MsiExec.exe /X{86A4C6D9-29EE-4719-AFA1-BA3341862B83} Microsoft Office Access MUI (Polish) 2010-->MsiExec.exe /X{90140000-0015-0415-0000-0000000FF1CE} Microsoft Office Excel MUI (Polish) 2010-->MsiExec.exe /X{90140000-0016-0415-0000-0000000FF1CE} Microsoft Office Groove MUI (Polish) 2010-->MsiExec.exe /X{90140000-00BA-0415-0000-0000000FF1CE} Microsoft Office InfoPath MUI (Polish) 2010-->MsiExec.exe /X{90140000-0044-0415-0000-0000000FF1CE} Microsoft Office OneNote MUI (Polish) 2010-->MsiExec.exe /X{90140000-00A1-0415-0000-0000000FF1CE} Microsoft Office Outlook MUI (Polish) 2010-->MsiExec.exe /X{90140000-001A-0415-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (Polish) 2010-->MsiExec.exe /X{90140000-0018-0415-0000-0000000FF1CE} Microsoft Office Professional Plus 2010-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL Microsoft Office Professional Plus 2010-->MsiExec.exe /X{90140000-0011-0000-0000-0000000FF1CE} Microsoft Office Proof (English) 2010-->MsiExec.exe /X{90140000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (German) 2010-->MsiExec.exe /X{90140000-001F-0407-0000-0000000FF1CE} Microsoft Office Proof (Polish) 2010-->MsiExec.exe /X{90140000-001F-0415-0000-0000000FF1CE} Microsoft Office Proofing (Polish) 2010-->MsiExec.exe /X{90140000-002C-0415-0000-0000000FF1CE} Microsoft Office Publisher MUI (Polish) 2010-->MsiExec.exe /X{90140000-0019-0415-0000-0000000FF1CE} Microsoft Office Shared MUI (Polish) 2010-->MsiExec.exe /X{90140000-006E-0415-0000-0000000FF1CE} Microsoft Office Word MUI (Polish) 2010-->MsiExec.exe /X{90140000-001B-0415-0000-0000000FF1CE} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7} Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989} Microsoft WSE 3.0 Runtime-->MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13} MSI Afterburner 2.0.0-->"D:\PROGRAMY\MSI Afterburner\uninstall.exe" MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC} NapiProjekt 1.0.6.9-->"D:\PROGRAMY\NAPI-PROJEKT\unins000.exe" NEC Electronics USB 3.0 Host Controller Driver-->"C:\Program Files (x86)\InstallShield Installation Information\{D7BF9739-8A68-4335-BBEE-37752AD9E86B}\setup.exe" -runfromtemp -l0x0415 -removeonly NEC Electronics USB 3.0 Host Controller Driver-->MsiExec.exe /I{D7BF9739-8A68-4335-BBEE-37752AD9E86B} Need For Speed SHIFT-->"D:\GRY\Electronic Arts\Need For Speed SHIFT\Uninstall\unins000.exe" Need for Speed™ SHIFT-->hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,78,00,65,00,20,00,2f,00,58,00,7b,00,42,00,42,00,46,00,30,00,41,00,36,00,37,00,42,00,2d,00,35,00,44,00,42,00,41,00,2d,00,34,00,35,00,32,00,46,00,2d,00,39,00,44,00,32,00,45,00,2d,00,36,00,46,00,31,00,36,00,38,00,42,00,43,00,32,00,32,00,36,00,45,00,34,00,7d,00,00,00 Nero 9 Trial-->C:\Program Files (x86)\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER="8M01-289K-2H95-W8H0-PZ2A-MKL8-9CH2-Z5PW" Nero BurnRights-->MsiExec.exe /X{7829DB6F-A066-4E40-8912-CB07887C20BB} Nero ControlCenter-->MsiExec.exe /X{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A} Nero CoverDesigner-->MsiExec.exe /X{62AC81F6-BDD3-4110-9D36-3E9EAAB40999} Nero Disc Copy Gadget-->MsiExec.exe /X{F1861F30-3419-44DB-B2A1-C274825698B3} Nero DiscSpeed-->MsiExec.exe /X{869200DB-287A-4DC0-B02B-2B6787FBCD4C} Nero DriveSpeed-->MsiExec.exe /X{33CF58F5-48D8-4575-83D6-96F574E4D83A} Nero Installer-->MsiExec.exe /X{E8A80433-302B-4FF1-815D-FCC8EAC482FF} Nero Rescue Agent-->MsiExec.exe /X{368BA326-73AD-4351-84ED-3C0A7A52CC53} Nero StartSmart-->MsiExec.exe /X{7748AC8C-18E3-43BB-959B-088FAEA16FB2} Nero Vision-->MsiExec.exe /X{43E39830-1826-415D-8BAE-86845787B54B} Nero WaveEditor-->MsiExec.exe /X{A209525B-3377-43F4-B886-32F6B6E7356F} NeroBurningROM-->MsiExec.exe /X{D025A639-B9C9-417D-8531-208859000AF8} NeroExpress-->MsiExec.exe /X{595A3116-40BB-4E0F-A2E8-D7951DA56270} neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B} NVIDIA GAME System Software 2.8.1-->MsiExec.exe /I{4F0C7CCF-5666-474B-B02E-AC514A95EC93} NVIDIA PhysX-->MsiExec.exe /X{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF} NVIDIA Stereoscopic 3D Driver-->"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInst.exe" /uninstall /ask OpenAL-->"C:\Program Files (x86)\OpenAL\OalinstGridRelease.exe" /U Rapture3D 2.4.4 Game-->"C:\Program Files (x86)\BRS\unins000.exe" Realtek Ethernet Controller Driver For Windows 7-->C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\Setup.exe -runfromtemp -removeonly Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -removeonly redist-->MsiExec.exe /I{153C7D89-9CF4-4719-A551-C5BF45236DB5} Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {FD8D7C9A-E56A-3E7B-BA6D-FE68F13296E3} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Extended (KB2416472)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {3162617C-537F-3BB6-8D0C-C6021F442391} /parameterfolder Extended Security Update for Microsoft Office 2010 (KB2289078)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{1D1A4F08-2F17-475B-BA72-476CE5992FEE}" "1045" "0" Security Update for Microsoft Office 2010 (KB2289161)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{F134C2C6-30B3-4169-A325-58482B4CE6FC}" "1045" "0" Security Update for Microsoft Publisher 2010 (KB2409055)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{C3C277D5-36E3-4B1A-926A-175B2BC019CF}" "1045" "0" Security Update for Microsoft Word 2010 (KB2345000)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{A6D422EE-1196-45EE-B9AE-6B5B64975E8B}" "1045" "0" Skype™ 5.0-->MsiExec.exe /X{E633D396-5188-4E9D-8F6B-BFB8BF3467E8} The Settlers 7 - Droga do królestwa-->"C:\Program Files (x86)\InstallShield Installation Information\{9C916142-C18C-429D-BFED-40094A7E0BEB}\setup.exe" -runfromtemp -l0x0015 -removeonly The Sims™ 3-->"C:\Program Files (x86)\InstallShield Installation Information\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}\setup.exe" -runfromtemp -l0x0015 -removeonly Tom Clancy's H.A.W.X. 2-->"C:\Program Files (x86)\InstallShield Installation Information\{76A232AF-B7D6-41A4-B795-6B355E6D32B1}\setup.exe" -runfromtemp -l0x0015 -removeonly Trials 2 Second Edition v1.08-->"D:\GRY\RedLynx\Trials 2 Second Edition\unins000.exe" Ubisoft Game Launcher-->"C:\Program Files (x86)\InstallShield Installation Information\{888F1505-C2B3-4FDE-835D-36353EBD4754}\setup.exe" -runfromtemp -l0x0409 -removeonly Unigine Heaven Benchmark v2.1-->MsiExec.exe /I{38468127-9E6F-4FC9-B5F7-42D4AD437D96} Update for Microsoft Office 2010 (KB2202188)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{86B7A074-265D-420C-9E1E-7A920EF0ECA7}" "1045" "0" Update for Microsoft Office 2010 (KB2413186)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{556146F7-74AE-4E0A-B64F-5B8B93469F61}" "1045" "0" Update for Microsoft Office 2010 (KB2413186)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{B5516874-E926-4BFD-B412-D0E70112F244}" "1045" "0" Update for Microsoft Office 2010 (KB2413186)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{D6CE7280-6EE3-419A-8F47-DB111C040B1B}" "1045" "0" Update for Microsoft OneNote 2010 (KB2433299)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{6C845127-B949-4D76-A732-BCB396AD9AA5}" "1045" "0" Update for Microsoft Outlook Social Connector (KB2289116)-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Oarpmany.exe" /removereleaseinpatch "{90140000-0011-0000-0000-0000000FF1CE}" "{75F91382-920C-4AE1-B9E6-FFFCEDA797E8}" "1045" "0" ======System event log====== Computer Name: Adrian-Komputer Event Code: 7036 Message: Usługa Przeglądarka komputera weszła w stan uruchomienia. Record Number: 6828 Source Name: Service Control Manager Time Written: 20101108133502.284854-000 Event Type: Informacje User: Computer Name: Adrian-Komputer Event Code: 20003 Message: Usługa zarządzania sterownikami zakończyła proces dodawania usługi tunnel dla wystąpienia urządzenia o identyfikatorze ROOT\*ISATAP\0002 z następującym stanem: 0. Record Number: 6827 Source Name: Microsoft-Windows-UserPnp Time Written: 20101108133501.816853-000 Event Type: Informacje User: ZARZĄDZANIE NT\SYSTEM Computer Name: Adrian-Komputer Event Code: 20003 Message: Usługa zarządzania sterownikami zakończyła proces dodawania usługi tunnel dla wystąpienia urządzenia o identyfikatorze ROOT\*ISATAP\0001 z następującym stanem: 0. Record Number: 6826 Source Name: Microsoft-Windows-UserPnp Time Written: 20101108133500.194450-000 Event Type: Informacje User: ZARZĄDZANIE NT\SYSTEM Computer Name: Adrian-Komputer Event Code: 7036 Message: Usługa avast! Mail Scanner weszła w stan uruchomienia. Record Number: 6825 Source Name: Service Control Manager Time Written: 20101108133458.494047-000 Event Type: Informacje User: Computer Name: Adrian-Komputer Event Code: 7036 Message: Usługa Usługa modułu wyliczającego urządzenia przenośne weszła w stan uruchomienia. Record Number: 6824 Source Name: Service Control Manager Time Written: 20101108133456.559644-000 Event Type: Informacje User: =====Application event log===== Computer Name: 37L4247E29-32 Event Code: 1001 Message: Pakiet błędów , typ 0 Nazwa zdarzenia: PnPRequestAdditionalSoftware Odpowiedź: Niedostępny Identyfikator pliku Cab: 0 Sygnatura problemu: P1: x64 P2: USB\VID_1BCF&PID_08D8&REV_2611&MI_00 P3: 6.1.0.0 P4: 0415 P5: input.inf P6: * P7: P8: P9: P10: Dołączone pliki: Te pliki mogą być dostępne tutaj: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_92c92feef5d98d4c3ad6c23b23d11c4293befb_cab_05f10d77 Symbol analizy: Ponowne sprawdzanie rozwiązania: 0 Identyfikator raportu: bd5d95d1-e8fd-11df-a51e-ac895d9375ee Stan raportu: 6 Record Number: 5 Source Name: Windows Error Reporting Time Written: 20101105165715.000000-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 5617 Message: Windows Management Instrumentation Service subsystems initialized successfully Record Number: 4 Source Name: Microsoft-Windows-WMI Time Written: 20101105165712.000000-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 5615 Message: Windows Management Instrumentation Service started sucessfully Record Number: 3 Source Name: Microsoft-Windows-WMI Time Written: 20101105165708.000000-000 Event Type: Informacje User: Computer Name: 37L4247E29-32 Event Code: 1531 Message: Usługa profilów użytkowników została uruchomiona pomyślnie. Record Number: 2 Source Name: Microsoft-Windows-User Profiles Service Time Written: 20101105165704.488497-000 Event Type: Informacje User: ZARZĄDZANIE NT\SYSTEM Computer Name: 37L4247E29-32 Event Code: 4625 Message: System podrzędny EventSystem pomija zduplikowane wpisy dziennika zdarzeń przez okres 86400 sekund. Limit czasu pomijania można kontrolować za pomocą wartości REG_DWORD o nazwie SuppressDuplicateDuration w następującym kluczu rejestru: HKLM\Software\Microsoft\EventSystem\EventLog. Record Number: 1 Source Name: Microsoft-Windows-EventSystem Time Written: 20101105165704.000000-000 Event Type: Informacje User: =====Security event log===== Computer Name: 37L4247E29-32 Event Code: 4735 Message: Zmieniono grupę lokalną z włączonymi zabezpieczeniami. Podmiot: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: 37L4247E29-32$ Domena konta: WORKGROUP Identyfikator logowania: 0x3e7 Grupa: Identyfikator zabezpieczeń: S-1-5-32-551 Nazwa grupy: Operatorzy kopii zapasowych Domena grupy: Builtin Zmienione atrybuty: Nazwa konta SAM: - Historia identyfikatora SID: - Informacje dodatkowe: Uprawnienia: - Record Number: 5 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165644.894863-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4731 Message: Utworzono grupę lokalną z włączonymi zabezpieczeniami. Podmiot: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: 37L4247E29-32$ Domena konta: WORKGROUP Identyfikator logowania: 0x3e7 Nowa grupa: Identyfikator zabezpieczeń: S-1-5-32-551 Nazwa grupy: Operatorzy kopii zapasowych Domena grupy: Builtin Atrybuty: Nazwa konta SAM: Operatorzy kopii zapasowych Historia identyfikatora SID: - Informacje dodatkowe: Uprawnienia: - Record Number: 4 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165644.863663-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4902 Message: Utworzono tabelę zasad inspekcji użytkownika. Liczba elementów: 0 Identyfikator zasad: 0x32c18 Record Number: 3 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165644.364462-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4624 Message: Użytkownik pomyślnie zalogował się na koncie. Podmiot: Identyfikator zabezpieczeń: S-1-0-0 Nazwa konta: - Domena konta: - Identyfikator logowania: 0x0 Typ logowania: 0 Nowe logowanie: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: SYSTEM Domena konta: ZARZĄDZANIE NT Identyfikator logowania: 0x3e7 Identyfikator GUID logowania: {00000000-0000-0000-0000-000000000000} Informacje o procesie: Identyfikator procesu: 0x4 Nazwa procesu: Informacje o sieci: Nazwa stacji roboczej: - Adres źródłowy sieci: - Port źródłowy: - Szczegółowe informacje o uwierzytelnianiu: Proces logowania: - Pakiet uwierzytelniania: - Usługi przejściowe: - Nazwa pakietu (tylko NTLM): - Długość klucza: 0 To zdarzenie jest generowane w momencie utworzenia sesji logowania. Jest ono generowane na komputerze, do którego został uzyskany dostęp. Pola podmiotu wskazują konto w systemie lokalnym, które zażądało logowania. Najczęściej jest to usługa, na przykład usługa Serwer, lub proces lokalny taki jak Winlogon.exe lub Services.exe. Pole typu logowania wskazuje rodzaj zaistniałego logowania. Najczęstsze typy to 2 (interakcyjne) i 3 (sieciowe). Pola nowego logowania wskazują konto, dla którego zostało utworzone nowe logowanie, czyli konto, które zostało zalogowane. Pola sieci wskazują lokalizację, z której pochodziło zdalne żądanie logowania. Nazwa stacji roboczej nie zawsze jest dostępna i w niektórych przypadkach może być pusta. Pola informacji o uwierzytelnianiu zawierają szczegółowe informacje o tym konkretnym żądaniu logowania. - Identyfikator GUID logowania to unikatowy identyfikator, za pomocą którego można skorelować to zdarzenie ze zdarzeniem centrum dystrybucji kluczy. - Usługi przejściowe wskazują, które usługi pośrednie uczestniczyły w tym żądaniu logowania. - Nazwa pakietu wskazuje, który protokół podrzędny spośród protokołów NTLM został użyty. - Długość klucza wskazuje długość wygenerowanego klucza sesji. Jeśli nie zażądano klucza sesji, jest to wartość 0. Record Number: 2 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165641.540857-000 Event Type: Sukcesy inspekcji User: Computer Name: 37L4247E29-32 Event Code: 4608 Message: Trwa uruchamianie systemu Windows. To zdarzenie jest rejestrowane w momencie uruchamiania programu LSASS.EXE i inicjowania podsystemu inspekcji. Record Number: 1 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20101105165641.431657-000 Event Type: Sukcesy inspekcji User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "Path"=%CommonProgramFiles%\Microsoft Shared\Windows Live;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\ "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC "PROCESSOR_ARCHITECTURE"=AMD64 "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "USERNAME"=SYSTEM "windir"=%SystemRoot% "PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\ "NUMBER_OF_PROCESSORS"=4 "PROCESSOR_LEVEL"=16 "PROCESSOR_IDENTIFIER"=AMD64 Family 16 Model 4 Stepping 3, AuthenticAMD "PROCESSOR_REVISION"=0403 -----------------EOF----------------- [/log]
monkey89 komentarz 9 stycznia 2011 komentarz 9 stycznia 2011 Ja tam nic poszczególnego nie widzę, niech ktoś dla pewności te logi sprawdzi.
Tomek01 komentarz 9 stycznia 2011 komentarz 9 stycznia 2011 W OTL, w oknie Custom scan/fixes wklej: [code]:Processes Explorer.exe :Files C:\Users\Adrian\AppData\Roaming\EurekaLog C:\Users\Adrian\AppData\Local\Temp*.html C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4152750467-2395009681-3878379516-1000UA.job C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4152750467-2395009681-3878379516-1000Core.job C:\Windows\oodjobd.INI C:\ProgramData\mtbjfghn.xbe C:\Windows\SysWOW64\tmp5304.tmp C:\Windows\SysWOW64\tmp52F3.tmp C:\Windows\SysWOW64\tmp1114.tmp C:\Windows\SysWOW64\tmp1104.tmp :Commands [emptytemp] [start explorer] [Reboot] [/code] Klikasz run fix, komputer uruchamia się ponownie. Wrzuć log z usuwania oraz nowy log OTL.
Adrianox360 komentarz 10 stycznia 2011 Autor komentarz 10 stycznia 2011 (edytowane) Program mam po polsku więc możesz tłumaczyć też po polsku jak Ci to pasuje. Zaraz dodam te dwa logi ale napiszę jeszcze, że komp mi się nie uruchomił ponownie. Nie wiem czemu, sam dam, zaraz go uruchomię ponownie. PS. Custom scan/fixes to po prostu skanuj? PS2. Własnie włączyłem komputer i od razu google chrome przestał działać, czy uruchomić ponownie i tak w kółko. Włączam ponownie pc i śmiga jak ta lala... mam nadzieję, że dojdziemy czego to wina. Ok, oto dwa logi ze skanu: OTL: [log]OTL logfile created on: 2011-01-10 08:13:08 - Run 2 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Adrian\Downloads 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 70,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 84,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 48,83 Gb Total Space | 21,36 Gb Free Space | 43,73% Space Free | Partition Type: NTFS Drive D: | 208,01 Gb Total Space | 113,91 Gb Free Space | 54,76% Space Free | Partition Type: NTFS Drive E: | 208,91 Gb Total Space | 122,29 Gb Free Space | 58,54% Space Free | Partition Type: NTFS Computer Name: ADRIAN-KOMPUTER | User Name: Adrian | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 60 Days [color=#E56717]========== Processes (All) ==========[/color] PRC - [2011-01-09 17:45:02 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Adrian\Downloads\OTL.exe PRC - [2010-12-09 00:28:23 | 000,991,800 | ---- | M] (Google Inc.) -- C:\Users\Adrian\AppData\Local\Google\Chrome\Application\chrome.exe PRC - [2010-11-02 20:03:54 | 001,432,064 | ---- | M] () -- D:\PROGRAMY\ALLPlayer\ALLUpdate.exe PRC - [2010-10-16 11:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2010-09-07 17:12:02 | 002,838,912 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2010-09-07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2010-08-16 13:50:42 | 000,073,728 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe PRC - [2010-05-18 15:13:58 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe PRC - [2010-03-16 02:58:36 | 000,718,208 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE PRC - [2010-01-22 12:29:40 | 000,106,496 | ---- | M] (NEC Electronics Corporation) -- C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe PRC - [2009-11-04 15:43:18 | 001,617,920 | ---- | M] (Edimax Technology Co., Ltd) -- C:\Program Files (x86)\Edimax\Common\RaUI.exe PRC - [2009-10-06 11:57:44 | 000,185,632 | ---- | M] (Ralink Technology, Corp.) -- C:\Program Files (x86)\Edimax\Common\RaRegistry.exe [color=#E56717]========== Modules (All) ==========[/color] MOD - [2011-01-09 17:45:02 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Adrian\Downloads\OTL.exe MOD - [2010-08-21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll MOD - [2010-07-27 15:03:24 | 012,867,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll MOD - [2010-06-29 06:02:02 | 001,413,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll MOD - [2010-04-07 08:10:36 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll MOD - [2010-03-24 07:37:04 | 001,289,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll MOD - [2009-12-11 08:39:06 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll MOD - [2009-12-11 08:36:33 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll MOD - [2009-07-14 02:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll MOD - [2009-07-14 02:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll MOD - [2009-07-14 02:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll MOD - [2009-07-14 02:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll MOD - [2009-07-14 02:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll MOD - [2009-07-14 02:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll MOD - [2009-07-14 02:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll MOD - [2009-07-14 02:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll MOD - [2009-07-14 02:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll MOD - [2009-07-14 02:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll MOD - [2009-07-14 02:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll MOD - [2009-07-14 02:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll MOD - [2009-07-14 02:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll MOD - [2009-07-14 02:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll MOD - [2009-07-14 02:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll MOD - [2009-07-14 02:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll MOD - [2009-07-14 02:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll MOD - [2009-07-14 02:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll MOD - [2009-07-14 02:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll MOD - [2009-07-14 02:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll MOD - [2009-07-14 02:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll MOD - [2009-07-14 02:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll MOD - [2009-07-14 02:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll MOD - [2009-07-14 02:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2009-07-14 02:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll MOD - [2009-07-14 02:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll MOD - [2009-07-14 02:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll MOD - [2009-07-14 02:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll MOD - [2009-07-14 02:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll MOD - [2009-07-14 02:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll MOD - [2009-07-14 02:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009-07-14 02:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv MOD - [2009-07-14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll MOD - [2009-07-14 02:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll MOD - [2009-07-14 02:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll MOD - [2009-07-14 02:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll MOD - [2009-07-14 02:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll MOD - [2009-07-14 02:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll MOD - [2009-07-14 02:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll MOD - [2009-07-14 02:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - File not found [Auto | Stopped] -- C:\Windows\SysNative\srvany.exe -- (KMService) SRV:[b]64bit:[/b] - [2010-09-07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner) SRV:[b]64bit:[/b] - [2010-09-07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner) SRV:[b]64bit:[/b] - [2010-09-07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2010-11-09 23:20:03 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\srvany.exe -- (KMService) SRV - [2010-10-16 11:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2010-09-30 12:30:10 | 003,140,424 | ---- | M] (O&O Software GmbH) [Auto | Running] -- D:\GRY\OO Software\Defrag\oodag.exe -- (OODefragAgent) SRV - [2010-05-18 15:13:58 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-10-06 11:57:44 | 000,212,256 | ---- | M] (Ralink Technology, Corp.) [Auto | Running] -- C:\Program Files (x86)\Edimax\Common\RaRegistry64.exe -- (RalinkRegistryWriter64) SRV - [2009-10-06 11:57:44 | 000,185,632 | ---- | M] (Ralink Technology, Corp.) [Auto | Running] -- C:\Program Files (x86)\Edimax\Common\RaRegistry.exe -- (RalinkRegistryWriter) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010-11-18 18:29:06 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt) DRV:[b]64bit:[/b] - [2010-11-18 18:29:06 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt) DRV:[b]64bit:[/b] - [2010-11-08 16:45:13 | 000,828,912 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010-09-07 21:08:55 | 000,155,752 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:[b]64bit:[/b] - [2010-09-07 16:47:33 | 000,061,008 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2010-07-09 13:19:04 | 000,021,480 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz134_x64.sys -- (cpuz134) DRV:[b]64bit:[/b] - [2010-04-27 16:57:20 | 000,016,200 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmVirHid.sys -- (WmVirHid) DRV:[b]64bit:[/b] - [2010-04-27 16:57:14 | 000,036,936 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmHidLo.sys -- (WmHidLo) DRV:[b]64bit:[/b] - [2010-04-27 16:57:12 | 000,026,440 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmBEnum.sys -- (WmBEnum) DRV:[b]64bit:[/b] - [2010-04-27 14:03:12 | 000,077,512 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmXlCore.sys -- (WmXlCore) DRV:[b]64bit:[/b] - [2010-04-27 14:02:42 | 000,043,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmFilter.sys -- (WmFilter) DRV:[b]64bit:[/b] - [2010-03-04 14:43:00 | 000,346,144 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2010-01-22 12:22:22 | 000,180,224 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc) DRV:[b]64bit:[/b] - [2010-01-22 12:22:18 | 000,077,824 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub) DRV:[b]64bit:[/b] - [2009-10-16 03:15:00 | 000,439,808 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr6164.sys -- (rt61x64) DRV:[b]64bit:[/b] - [2009-08-23 23:55:32 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO) DRV:[b]64bit:[/b] - [2009-07-16 04:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O4:[b]64bit:[/b] - HKLM..\Run: [OODefragTray] D:\GRY\OO Software\Defrag\oodtray.exe (O&O Software GmbH) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation) O4 - HKCU..\Run: [ALLUpdate] D:\PROGRAMY\ALLPlayer\ALLUpdate.exe () O4 - HKCU..\Run: [DAEMON Tools Lite] D:\PROGRAMY\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O13 - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{f838e424-e90e-11df-8fca-485b39c9a241}\Shell - "" = AutoRun O33 - MountPoints2\{f838e424-e90e-11df-8fca-485b39c9a241}\Shell\AutoRun\command - "" = G:\autorun.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (OODBS) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2011-01-09 17:52:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\trend micro [2011-01-09 17:52:56 | 000,000,000 | ---D | C] -- C:\rsit [2011-01-07 23:01:02 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Rovio [2011-01-07 16:52:58 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\HD Tune Pro [2011-01-07 16:52:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune Pro [2011-01-06 19:17:16 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Desktop\gra [2011-01-04 19:27:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SpeedFan [2011-01-02 15:10:11 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Settlers7 [2010-12-30 15:51:42 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Carambis [2010-12-28 14:14:12 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Logitech [2010-12-28 14:11:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech [2010-12-28 14:11:22 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech [2010-12-26 19:25:10 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Trials 2 [2010-12-26 19:25:10 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Redlynx [2010-12-26 19:16:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RedLynx [2010-12-25 21:38:23 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\GameRanger [2010-12-25 12:06:34 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Microsoft Games [2010-12-23 21:04:19 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IVMP [2010-12-23 17:26:15 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\oodag [2010-12-23 17:11:03 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\O&O [2010-12-23 17:10:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O&O Software [2010-12-23 15:23:50 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Ashampoo [2010-12-23 15:10:24 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\ashampoo [2010-12-23 15:10:24 | 000,000,000 | ---D | C] -- C:\ProgramData\ashampoo [2010-12-23 15:10:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo [2010-12-21 19:36:03 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Codemasters [2010-12-19 14:27:42 | 002,578,576 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll [2010-12-19 14:27:41 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll [2010-12-19 14:27:41 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll [2010-12-19 14:27:41 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll [2010-12-19 14:27:41 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll [2010-12-19 14:27:40 | 000,220,496 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFNHK64.dll [2010-12-19 14:27:40 | 000,121,744 | ---- | C] (Sony Corporation) -- C:\Windows\SysNative\SFSS_APO.dll [2010-12-19 14:27:40 | 000,081,232 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFCOM64.dll [2010-12-19 14:27:40 | 000,078,160 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFAPO64.dll [2010-12-19 14:27:40 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll [2010-12-19 14:27:39 | 002,189,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll [2010-12-19 14:27:39 | 001,146,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl [2010-12-19 14:27:39 | 000,332,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll [2010-12-19 14:27:37 | 002,815,592 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll [2010-12-19 14:27:37 | 000,626,792 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll [2010-12-19 14:27:37 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll [2010-12-19 14:27:36 | 001,247,848 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll [2010-12-19 14:27:36 | 000,553,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat [2010-12-19 14:27:36 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll [2010-12-19 14:27:36 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll [2010-12-19 14:27:36 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll [2010-12-19 14:27:36 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll [2010-12-19 14:27:36 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll [2010-12-19 14:27:36 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll [2010-12-19 14:27:35 | 000,083,048 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll [2010-12-19 14:27:33 | 001,718,616 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64A.dll [2010-12-19 14:27:33 | 000,421,720 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64A.dll [2010-12-19 14:27:33 | 000,127,832 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64A.dll [2010-12-19 14:27:33 | 000,108,888 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64A.dll [2010-12-19 14:27:33 | 000,074,584 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64A.dll [2010-12-19 14:27:32 | 000,334,680 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll [2010-12-19 14:27:31 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll [2010-12-19 14:27:31 | 001,868,944 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll [2010-12-19 14:27:31 | 000,341,336 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll [2010-12-19 14:27:31 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll [2010-12-19 14:27:24 | 001,937,312 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll [2010-12-19 14:27:24 | 001,327,208 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll [2010-12-19 14:27:24 | 001,179,752 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll [2010-12-19 14:27:24 | 000,491,112 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll [2010-12-19 14:27:24 | 000,475,752 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll [2010-12-19 14:27:24 | 000,317,032 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll [2010-12-19 14:27:24 | 000,269,928 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll [2010-12-19 14:27:24 | 000,126,056 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll [2010-12-19 14:27:23 | 001,111,656 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll [2010-12-19 14:27:23 | 000,504,936 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll [2010-12-19 14:27:23 | 000,266,856 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll [2010-12-19 14:27:23 | 000,125,544 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll [2010-12-19 14:27:23 | 000,125,032 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll [2010-12-19 14:27:22 | 000,200,800 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll [2010-12-19 14:27:22 | 000,108,960 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll [2010-12-19 14:27:19 | 001,251,944 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2010-12-19 09:25:17 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\EurekaLog [2010-12-18 12:30:39 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\SKIDROW [2010-12-18 12:29:57 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Hothead Games [2010-12-15 14:55:18 | 000,367,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2010-12-15 14:55:18 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2010-12-15 14:55:17 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2010-12-15 14:55:17 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2010-12-12 20:42:15 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Desktop\all [2010-12-11 16:01:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Ripple Sound [2010-12-11 16:01:38 | 017,686,528 | ---- | C] (Intel Corporation / Blue Ripple Sound Limited) -- C:\Windows\SysWow64\mkl_blueripple.dll [2010-12-11 16:01:38 | 001,380,352 | ---- | C] (Blue Ripple Sound Limited) -- C:\Windows\SysWow64\rapture3d_oal.dll [2010-12-11 16:01:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BRS [2010-12-10 19:21:08 | 000,000,000 | ---D | C] -- C:\ProgramData\LightScribe [2010-12-10 19:21:07 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Nero [2010-12-10 19:05:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero [2010-12-10 19:04:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero [2010-12-10 19:04:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero [2010-12-10 19:00:49 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling [2010-12-10 19:00:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\LightScribe [2010-12-10 18:10:41 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Canneverbe Limited [2010-12-10 18:10:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Canneverbe Limited [2010-12-05 18:28:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\KONAMI [2010-12-05 15:48:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PESEdit.com 2011 Patch [2010-12-04 20:58:58 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\NFS SHIFT [2010-12-04 20:22:43 | 000,000,000 | ---D | C] -- C:\Windows\B83FC356B7C0441F8A4DD71E088E7974.TMP [2010-12-04 20:22:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard [2010-12-04 20:21:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts [2010-12-04 16:29:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Logitech [2010-12-03 17:23:46 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Wings of Prey [2010-12-03 16:56:37 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\WOP [2010-12-03 16:56:37 | 000,000,000 | ---D | C] -- C:\ProgramData\WOP [2010-11-29 17:16:33 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Moje Gry [2010-11-29 16:46:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts [2010-11-27 18:04:43 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Savegames [2010-11-24 14:46:39 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\.minecraft [2010-11-24 14:29:45 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\bin [2010-11-24 14:29:42 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\resourceses [2010-11-23 16:47:38 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Anti-Malware [2010-11-22 13:22:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NapiProjekt [2010-11-21 19:48:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shark007 Codecs [2010-11-21 19:48:29 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Win7codecs [2010-11-21 19:48:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Win7codecs [2010-11-21 19:48:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Win7codecs [2010-11-20 21:29:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2010-11-20 21:29:24 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2010-11-20 18:07:14 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Anno 1404 [2010-11-20 17:59:57 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Ubisoft [2010-11-20 17:57:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Tages [2010-11-19 21:04:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts [2010-11-19 21:04:16 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Core [2010-11-19 18:10:29 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\The Creative Assembly [2010-11-18 16:38:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies [2010-11-18 16:38:47 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\AGEIA [2010-11-18 15:50:11 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\prace szkolne [2010-11-17 17:34:05 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Adobe [2010-11-17 15:26:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace [2010-11-14 22:19:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2010-11-14 22:19:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2010-11-14 22:19:07 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Adobe [2010-11-14 20:18:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft [2010-11-11 23:23:48 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Electronic Arts [2010-11-11 22:54:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft WSE [2010-11-11 16:54:01 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\BitTorrent [2010-02-03 23:00:00 | 000,139,264 | ---- | C] ( ) -- C:\Windows\sipr3260.dll [6 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2011-01-10 08:10:09 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-01-10 08:10:09 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-01-10 08:04:00 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4152750467-2395009681-3878379516-1000UA.job [2011-01-10 08:03:00 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-01-10 08:02:59 | 3220,574,208 | -HS- | M] () -- C:\hiberfil.sys [2011-01-10 08:02:59 | 000,107,184 | ---- | M] () -- C:\Windows\SysNative\oodbs.lor [2011-01-09 18:20:28 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temppk4812.html [2011-01-09 18:20:28 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzT4812.html [2011-01-09 17:33:55 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempqZ5028.html [2011-01-09 17:33:55 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempdI5028.html [2011-01-09 11:55:05 | 000,003,288 | ---- | M] () -- C:\bootsqm.dat [2011-01-09 11:09:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempdI5092.html [2011-01-09 11:09:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempdq5092.html [2011-01-08 20:37:10 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temphg4620.html [2011-01-08 19:08:38 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempQY4648.html [2011-01-08 19:08:38 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOV4648.html [2011-01-08 19:08:38 | 000,001,010 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4152750467-2395009681-3878379516-1000Core.job [2011-01-08 16:30:19 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIH5116.html [2011-01-08 16:30:19 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempjN5116.html [2011-01-08 11:27:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempua4232.html [2011-01-08 11:27:35 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempAn4232.html [2011-01-07 23:05:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempca4468.html [2011-01-07 23:05:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXN4468.html [2011-01-07 22:33:22 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXa4912.html [2011-01-07 22:33:22 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxg4912.html [2011-01-07 21:57:01 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphN4564.html [2011-01-07 20:33:45 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMM4848.html [2011-01-07 20:33:45 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOf4848.html [2011-01-07 17:35:09 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyO4660.html [2011-01-07 17:35:09 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoP4660.html [2011-01-06 20:08:20 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempnT4444.html [2011-01-06 20:08:20 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOs4444.html [2011-01-06 15:28:38 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempro1364.html [2011-01-06 15:28:38 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPF1364.html [2011-01-05 23:24:55 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temprl1360.html [2011-01-05 23:24:55 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeI1360.html [2011-01-05 22:27:44 | 002,733,974 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2011-01-05 22:27:44 | 001,385,158 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011-01-05 22:27:44 | 000,841,718 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2011-01-05 22:27:44 | 000,774,712 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011-01-05 22:27:44 | 000,006,272 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011-01-05 22:15:10 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbq3284.html [2011-01-05 17:48:41 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHX4372.html [2011-01-05 17:48:41 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempuL4372.html [2011-01-04 22:28:42 | 003,569,664 | ---- | M] () -- C:\Users\Adrian\Desktop\WSTĘP.doc [2011-01-04 22:28:42 | 003,569,664 | ---- | M] () -- C:\Users\Adrian\Desktop\WSTĘP - Kopia.doc [2011-01-04 19:49:15 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXp3320.html [2011-01-04 19:49:15 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempmy3320.html [2011-01-04 18:11:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJh4164.html [2011-01-04 18:11:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFQ4164.html [2011-01-04 17:50:33 | 000,000,042 | ---- | M] () -- C:\Windows\oodjobd.INI [2011-01-04 16:31:04 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempww4396.html [2011-01-04 16:31:04 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTk4396.html [2011-01-03 18:35:58 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeS1848.html [2011-01-03 18:35:58 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempWz1848.html [2011-01-02 16:12:39 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHm3520.html [2011-01-02 16:12:39 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvb3520.html [2011-01-02 15:31:13 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzR4392.html [2011-01-02 15:31:13 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPq4392.html [2011-01-02 12:25:47 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempkc4524.html [2011-01-02 12:25:47 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempCX4524.html [2011-01-01 21:41:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempUs4704.html [2011-01-01 21:41:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFe4704.html [2011-01-01 18:53:47 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temprz4020.html [2011-01-01 18:53:47 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXf4020.html [2011-01-01 18:44:12 | 000,022,382 | ---- | M] () -- C:\Users\Adrian\Documents\cwicze.rtf [2010-12-31 19:10:15 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKn2268.html [2010-12-31 19:10:15 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemprC2268.html [2010-12-31 18:24:47 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempme1084.html [2010-12-31 16:38:56 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temprc4784.html [2010-12-31 16:38:56 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempuF4784.html [2010-12-31 15:05:25 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempUkl964.html [2010-12-31 15:05:25 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemplzC964.html [2010-12-31 11:37:57 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temphr4380.html [2010-12-31 11:37:57 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempcM4380.html [2010-12-30 23:06:28 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temptpu672.html [2010-12-30 23:06:28 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJfb672.html [2010-12-30 19:33:12 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJN4592.html [2010-12-30 19:09:31 | 003,746,964 | ---- | M] () -- C:\Users\Adrian\Documents\08. Dueling Guitars.mp3 [2010-12-30 19:05:51 | 002,277,742 | ---- | M] () -- C:\Users\Adrian\Documents\06. Ritual Dance.mp3 [2010-12-30 19:05:50 | 002,324,066 | ---- | M] () -- C:\Users\Adrian\Documents\05. Bari Improv.mp3 [2010-12-30 18:11:33 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvv4860.html [2010-12-30 18:11:33 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSM4860.html [2010-12-30 15:52:58 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRn1100.html [2010-12-30 15:52:58 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYx1100.html [2010-12-30 15:51:41 | 000,004,924 | ---- | M] () -- C:\ProgramData\mtbjfghn.xbe [2010-12-30 14:57:50 | 000,016,844 | ---- | M] () -- C:\Users\Adrian\Documents\Rozgrzewka w kolejności.docx [2010-12-30 10:12:34 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempvF3788.html [2010-12-29 15:55:31 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempZc1076.html [2010-12-29 14:56:53 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVQ4784.html [2010-12-29 14:56:53 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Templb4784.html [2010-12-29 10:23:43 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxp2744.html [2010-12-28 21:44:05 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRb4588.html [2010-12-28 21:44:05 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempGX4588.html [2010-12-28 21:02:06 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempps1996.html [2010-12-28 21:02:06 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOw1996.html [2010-12-28 17:14:42 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempuY4244.html [2010-12-28 17:14:42 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempva4244.html [2010-12-28 15:28:36 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTg3448.html [2010-12-28 11:54:14 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempad4464.html [2010-12-28 11:54:14 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRl4464.html [2010-12-27 20:57:36 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKY5044.html [2010-12-27 20:57:36 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempkZ5044.html [2010-12-27 19:22:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempiu5040.html [2010-12-27 19:22:35 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTI5040.html [2010-12-27 15:34:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphO1280.html [2010-12-27 15:34:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphI1280.html [2010-12-27 14:01:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempjS4256.html [2010-12-27 14:01:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempNR4256.html [2010-12-26 21:18:08 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempBa5088.html [2010-12-26 21:18:08 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJt5088.html [2010-12-26 16:59:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEZ4704.html [2010-12-26 16:59:23 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDX4704.html [2010-12-25 22:43:37 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempmq4420.html [2010-12-25 22:43:37 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempqj4420.html [2010-12-25 19:30:34 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIe4456.html [2010-12-25 19:30:34 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKy4456.html [2010-12-25 17:17:57 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempvN4412.html [2010-12-25 17:17:57 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempWj4412.html [2010-12-25 12:02:01 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMJ1140.html [2010-12-25 12:02:01 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLI1140.html [2010-12-24 21:56:13 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKZ4816.html [2010-12-24 21:56:13 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempcb4816.html [2010-12-24 17:31:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLPV372.html [2010-12-24 17:31:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temphnv372.html [2010-12-24 13:18:13 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempxI3564.html [2010-12-24 12:01:44 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temppb4484.html [2010-12-23 22:47:04 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRV2896.html [2010-12-23 22:47:04 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxp2896.html [2010-12-23 22:17:16 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFRA688.html [2010-12-23 18:27:55 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempus1540.html [2010-12-23 18:27:55 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempem1540.html [2010-12-23 17:33:51 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempNN3864.html [2010-12-23 17:33:51 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temptr3864.html [2010-12-23 17:26:21 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempAA4432.html [2010-12-23 17:26:21 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempuQ4432.html [2010-12-23 16:41:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempkP4596.html [2010-12-23 16:41:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempev4596.html [2010-12-23 15:42:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempQe5020.html [2010-12-23 15:42:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempjj5020.html [2010-12-22 22:39:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempWc4028.html [2010-12-22 22:39:23 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOz4028.html [2010-12-22 17:41:59 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemplN4500.html [2010-12-22 17:41:59 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXo4500.html [2010-12-22 15:46:09 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVw5648.html [2010-12-22 15:46:09 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempII5648.html [2010-12-22 14:12:34 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbl1224.html [2010-12-22 10:05:48 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYQ2608.html [2010-12-21 20:28:57 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoM4572.html [2010-12-21 20:28:57 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxk4572.html [2010-12-21 17:36:51 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempbF4884.html [2010-12-21 17:36:51 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempkn4884.html [2010-12-20 17:56:08 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempdG2332.html [2010-12-20 17:56:08 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempZj2332.html [2010-12-20 15:23:19 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDu3968.html [2010-12-20 15:23:19 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemprY3968.html [2010-12-19 20:23:40 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempdZ4932.html [2010-12-19 20:23:40 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemplA4932.html [2010-12-19 18:41:06 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJo1548.html [2010-12-19 18:41:06 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempZS1548.html [2010-12-19 16:16:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempgi4668.html [2010-12-19 16:16:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempcz4668.html [2010-12-19 14:59:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempNL5068.html [2010-12-19 14:59:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempby5068.html [2010-12-19 12:37:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempsL1500.html [2010-12-19 12:37:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempmT1500.html [2010-12-18 23:55:16 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoD3940.html [2010-12-18 23:55:16 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempyk3940.html [2010-12-18 16:06:38 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLo4364.html [2010-12-18 16:06:38 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempbG4364.html [2010-12-18 14:36:38 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempqsn628.html [2010-12-18 14:36:38 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempboX628.html [2010-12-18 12:46:18 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temprx4900.html [2010-12-17 23:16:13 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temptt1176.html [2010-12-17 23:16:13 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRm1176.html [2010-12-17 22:45:09 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFb1524.html [2010-12-17 22:22:24 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMO2540.html [2010-12-17 22:22:10 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempcs2760.html [2010-12-17 22:09:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempNX4532.html [2010-12-17 22:09:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzV4532.html [2010-12-17 17:54:11 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSj4584.html [2010-12-16 21:03:40 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzK5072.html [2010-12-16 21:03:40 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempcZ5072.html [2010-12-16 19:08:49 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvg4640.html [2010-12-16 19:08:49 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempai4640.html [2010-12-16 17:32:41 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempcL2188.html [2010-12-16 17:32:41 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempuO2188.html [2010-12-16 16:29:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempkc2768.html [2010-12-16 16:29:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemptR2768.html [2010-12-16 15:59:04 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKW3720.html [2010-12-16 15:59:04 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSa3720.html [2010-12-15 16:02:47 | 000,415,656 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010-12-15 15:28:44 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempjp3224.html [2010-12-15 15:28:44 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJf3224.html [2010-12-15 14:58:04 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMx4912.html [2010-12-15 14:58:04 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVO4912.html [2010-12-14 20:26:22 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempkc4320.html [2010-12-14 20:26:22 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempjm4320.html [2010-12-14 19:54:51 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempiZ1584.html [2010-12-14 17:02:49 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempimf868.html [2010-12-14 17:02:49 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempxkH868.html [2010-12-14 15:38:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphZ1972.html [2010-12-13 19:59:51 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphD4588.html [2010-12-13 19:59:51 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temprv4588.html [2010-12-13 17:20:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempqX1148.html [2010-12-13 17:20:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempCU1148.html [2010-12-13 16:54:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempth4512.html [2010-12-13 14:51:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempko2232.html [2010-12-13 14:51:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDY2232.html [2010-12-12 21:30:33 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempgb1628.html [2010-12-12 21:30:33 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempqt1628.html [2010-12-12 20:52:53 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSDw832.html [2010-12-12 18:32:22 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVn4564.html [2010-12-12 18:32:22 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempiV4564.html [2010-12-12 17:45:19 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDk4780.html [2010-12-12 15:15:01 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTn1908.html [2010-12-12 15:15:01 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRo1908.html [2010-12-11 22:01:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeZ1192.html [2010-12-11 22:01:23 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempjq1192.html [2010-12-11 19:47:06 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbx5948.html [2010-12-11 18:41:50 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempxK4356.html [2010-12-11 16:01:35 | 000,466,520 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll [2010-12-11 16:01:34 | 000,445,016 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll [2010-12-11 16:01:34 | 000,122,968 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll [2010-12-11 16:01:34 | 000,109,144 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll [2010-12-10 22:39:50 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempqW1300.html [2010-12-10 22:39:50 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempjj1300.html [2010-12-10 19:27:38 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempsO1000.html [2010-12-10 19:27:38 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxg1000.html [2010-12-10 18:22:14 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzU3964.html [2010-12-10 18:22:14 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempdd3964.html [2010-12-09 20:56:44 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempru4652.html [2010-12-09 20:56:44 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyS4652.html [2010-12-09 16:25:48 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHn4692.html [2010-12-09 16:25:48 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempco4692.html [2010-12-09 15:16:18 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempQI3540.html [2010-12-09 15:16:18 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempfk3540.html [2010-12-08 20:54:11 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempsM4988.html [2010-12-08 20:54:11 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempmF4988.html [2010-12-08 19:01:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempiE2720.html [2010-12-08 19:01:35 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIi2720.html [2010-12-08 14:36:36 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTm3192.html [2010-12-08 14:36:36 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temply3192.html [2010-12-07 21:52:56 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempnM4024.html [2010-12-07 21:52:56 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKW4024.html [2010-12-07 21:24:09 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvc5016.html [2010-12-07 21:24:09 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempiv5016.html [2010-12-07 21:15:12 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEx3972.html [2010-12-07 21:15:12 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSz3972.html [2010-12-07 21:10:43 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeK3756.html [2010-12-07 21:10:43 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempnv3756.html [2010-12-07 15:50:25 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEg3920.html [2010-12-07 15:50:25 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPw3920.html [2010-12-06 20:00:22 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temppu4772.html [2010-12-06 20:00:22 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSS4772.html [2010-12-06 16:22:37 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVE4556.html [2010-12-06 16:22:37 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJL4556.html [2010-12-05 20:26:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempsN4168.html [2010-12-05 19:43:39 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSZ1836.html [2010-12-05 19:43:39 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempkH1836.html [2010-12-05 16:28:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTI2384.html [2010-12-05 16:28:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSF2384.html [2010-12-05 14:50:40 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMB4104.html [2010-12-04 22:44:15 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXP3188.html [2010-12-04 22:44:15 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTx3188.html [2010-12-04 14:51:16 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempBs2108.html [2010-12-04 12:26:01 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxg4464.html [2010-12-04 12:26:01 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemptJ4464.html [2010-12-03 23:34:07 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKq4632.html [2010-12-03 23:34:07 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempmf4632.html [2010-12-03 22:16:42 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEI3516.html [2010-12-03 22:16:42 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempmk3516.html [2010-12-03 19:03:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempBG4736.html [2010-12-03 19:03:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Templn4736.html [2010-12-02 22:45:25 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempfc4284.html [2010-12-02 22:45:25 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphT4284.html [2010-12-02 22:04:10 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempWW3720.html [2010-12-02 18:48:36 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyU2148.html [2010-12-02 18:48:36 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempbG2148.html [2010-12-02 15:26:56 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempfZ4272.html [2010-12-01 16:37:17 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzO4492.html [2010-12-01 16:37:17 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKj4492.html [2010-11-30 21:29:59 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempzr4380.html [2010-11-30 21:29:59 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMS4380.html [2010-11-30 17:24:20 | 000,553,984 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat [2010-11-29 22:09:27 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeV4152.html [2010-11-29 22:09:27 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLE4152.html [2010-11-29 18:47:42 | 002,578,576 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll [2010-11-29 18:47:12 | 001,868,944 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll [2010-11-29 18:23:34 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSk4664.html [2010-11-29 18:23:34 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYu4664.html [2010-11-29 16:46:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYw4996.html [2010-11-29 16:46:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temppt4996.html [2010-11-29 15:31:48 | 000,007,751 | ---- | M] () -- C:\Users\Adrian\Documents\Osoby na historie spr(1).doc [2010-11-29 15:27:34 | 000,002,889 | ---- | M] () -- C:\Users\Adrian\Documents\sciąga opisowe(1).rtf [2010-11-29 15:27:33 | 000,011,497 | ---- | M] () -- C:\Users\Adrian\Documents\pojęcia na spr nr 2(1).rtf [2010-11-29 15:24:55 | 000,066,166 | ---- | M] () -- C:\Users\Adrian\Documents\sciąga opisowe.rtf [2010-11-29 15:23:03 | 000,028,140 | ---- | M] () -- C:\Users\Adrian\Documents\Osoby na historie spr.doc [2010-11-28 21:30:06 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMx4744.html [2010-11-28 21:30:06 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempGy4744.html [2010-11-28 20:32:55 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempfQ3128.html [2010-11-27 20:42:47 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoC4984.html [2010-11-27 20:42:47 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHx4984.html [2010-11-27 19:44:52 | 000,011,505 | ---- | M] () -- C:\Users\Adrian\Documents\pojęcia na spr nr 2.rtf [2010-11-27 18:46:44 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRA3716.html [2010-11-27 18:46:44 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVD3716.html [2010-11-27 17:06:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemprS3988.html [2010-11-27 17:06:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHJ3988.html [2010-11-27 16:17:34 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempNf5056.html [2010-11-27 16:17:34 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemptF5056.html [2010-11-27 14:22:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRi4176.html [2010-11-27 14:22:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempsi4176.html [2010-11-27 12:41:36 | 000,006,254 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010-11-27 12:39:37 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvu3320.html [2010-11-27 12:39:37 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempGF3320.html [2010-11-26 23:07:24 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOt4800.html [2010-11-26 23:07:24 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPr4800.html [2010-11-26 16:10:42 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempqr5104.html [2010-11-26 16:10:42 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIz5104.html [2010-11-25 21:43:41 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temppv2932.html [2010-11-25 21:43:41 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKv2932.html [2010-11-25 18:18:54 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFc1876.html [2010-11-25 18:18:54 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempyf1876.html [2010-11-24 20:24:50 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempml4116.html [2010-11-24 20:24:50 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempoi4116.html [2010-11-24 18:27:18 | 000,018,386 | ---- | M] () -- C:\Users\Adrian\Documents\Wojna blyskawiczna.docx [2010-11-24 14:24:40 | 002,815,592 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll [2010-11-24 14:24:40 | 002,189,416 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll [2010-11-23 20:22:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIz4512.html [2010-11-23 20:22:35 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphU4512.html [2010-11-23 18:45:42 | 001,247,848 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll [2010-11-22 21:36:42 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVA2524.html [2010-11-22 21:36:42 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJZ2524.html [2010-11-22 16:24:19 | 000,026,620 | ---- | M] () -- C:\Users\Adrian\Documents\Przystosowania drapieżników do drapieżnictwa i ofiar do obrony.docx [2010-11-22 13:56:08 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempqHg964.html [2010-11-22 13:56:08 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYqb964.html [2010-11-22 13:33:20 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXt1472.html [2010-11-22 13:33:20 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvv1472.html [2010-11-22 11:39:10 | 000,626,792 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll [2010-11-21 19:42:30 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempzt4456.html [2010-11-21 14:12:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyX4480.html [2010-11-21 14:12:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempwz4480.html [2010-11-21 12:25:16 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempch4452.html [2010-11-21 12:25:16 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempae4452.html [2010-11-20 22:30:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXA2708.html [2010-11-20 22:30:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempmS2708.html [2010-11-20 21:29:14 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2010-11-20 20:19:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempZl3812.html [2010-11-20 20:19:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbt3812.html [2010-11-20 17:46:18 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeX4328.html [2010-11-20 14:23:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoH2792.html [2010-11-20 14:23:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPO2792.html [2010-11-20 12:59:43 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempGR4576.html [2010-11-20 12:59:43 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxc4576.html [2010-11-20 12:12:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemppO5116.html [2010-11-20 12:12:35 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJH5116.html [2010-11-19 21:41:07 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDj2660.html [2010-11-19 21:41:07 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Templz2660.html [2010-11-19 18:48:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbu4100.html [2010-11-19 18:48:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempqn4100.html [2010-11-19 14:01:22 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHR3156.html [2010-11-19 14:01:22 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempiv3156.html [2010-11-18 21:16:33 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSI2156.html [2010-11-18 21:16:33 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempwl2156.html [2010-11-18 19:32:07 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempvE4988.html [2010-11-18 19:32:07 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemplM4988.html [2010-11-18 18:29:06 | 000,314,016 | ---- | M] () -- C:\Windows\SysNative\drivers\atksgt.sys [2010-11-18 18:29:06 | 000,043,680 | ---- | M] () -- C:\Windows\SysNative\drivers\lirsgt.sys [2010-11-18 11:49:58 | 000,121,744 | ---- | M] (Sony Corporation) -- C:\Windows\SysNative\SFSS_APO.dll [2010-11-17 16:31:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempcn2088.html [2010-11-17 16:31:23 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEj2088.html [2010-11-17 15:25:15 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempymo120.html [2010-11-17 15:25:15 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempfzh120.html [2010-11-16 22:45:30 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVz1228.html [2010-11-16 22:45:30 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJH1228.html [2010-11-15 18:14:33 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMM3980.html [2010-11-15 18:14:33 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempod3980.html [2010-11-15 16:19:15 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempZQ4164.html [2010-11-15 16:19:15 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempnV4164.html [2010-11-15 16:06:41 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphE3352.html [2010-11-15 16:06:41 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempUt3352.html [2010-11-14 22:23:56 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPC2868.html [2010-11-14 22:23:56 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempph2868.html [2010-11-14 21:34:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemplN4884.html [2010-11-14 21:34:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTH4884.html [2010-11-14 12:47:35 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt [2010-11-13 21:42:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempoh2736.html [2010-11-13 21:42:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemppV2736.html [2010-11-13 19:55:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKu4656.html [2010-11-13 19:55:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempnQ4656.html [2010-11-13 16:24:53 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxp1524.html [2010-11-13 16:24:53 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempnu1524.html [2010-11-12 23:12:48 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJp4224.html [2010-11-12 23:12:48 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzC4224.html [2010-11-12 22:12:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbq4688.html [2010-11-12 22:12:23 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPJ4688.html [2010-11-12 16:49:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempop2680.html [2010-11-12 16:12:51 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYq3224.html [2010-11-12 12:25:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXe2920.html [2010-11-12 12:25:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKN2920.html [2010-11-11 23:36:49 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Templg1556.html [2010-11-11 23:36:49 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMR1556.html [2010-11-11 18:09:14 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyB4292.html [2010-11-11 13:27:00 | 000,083,048 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll [2010-11-11 13:18:13 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempco4180.html [2010-11-11 13:18:13 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPf4180.html [2010-11-11 11:38:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFX3588.html [2010-11-11 11:38:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDh3588.html [2010-11-11 11:35:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempul2752.html [2010-11-11 11:35:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTF2752.html [2010-11-11 11:35:07 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempbK1748.html [2010-11-11 11:35:07 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempvQ1748.html [2010-11-11 11:34:39 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempQp3272.html [2010-11-11 11:34:39 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyP3272.html [2010-11-11 11:32:32 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLd4884.html [2010-11-11 11:32:32 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempCH4884.html [6 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-01-09 17:35:42 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temppk4812.html [2011-01-09 17:35:42 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempzT4812.html [2011-01-09 17:33:54 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempqZ5028.html [2011-01-09 17:33:54 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempdI5028.html [2011-01-09 11:55:05 | 000,003,288 | ---- | C] () -- C:\bootsqm.dat [2011-01-09 10:48:10 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempdI5092.html [2011-01-09 10:48:10 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempdq5092.html [2011-01-08 20:15:37 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temphg4620.html [2011-01-08 16:36:24 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempQY4648.html [2011-01-08 16:36:24 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempOV4648.html [2011-01-08 15:52:04 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempIH5116.html [2011-01-08 15:52:04 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempjN5116.html [2011-01-08 10:59:53 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempua4232.html [2011-01-08 10:59:53 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempAn4232.html [2011-01-07 22:49:17 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempca4468.html [2011-01-07 22:49:17 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXN4468.html [2011-01-07 22:33:12 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXa4912.html [2011-01-07 22:33:12 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxg4912.html [2011-01-07 20:35:18 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphN4564.html [2011-01-07 20:24:44 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMM4848.html [2011-01-07 20:24:44 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempOf4848.html [2011-01-07 14:14:16 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempyO4660.html [2011-01-07 14:14:16 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempoP4660.html [2011-01-06 17:24:12 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempnT4444.html [2011-01-06 17:24:12 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempOs4444.html [2011-01-06 11:36:41 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempro1364.html [2011-01-06 11:36:41 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempPF1364.html [2011-01-05 22:51:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temprl1360.html [2011-01-05 22:51:32 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempeI1360.html [2011-01-05 22:27:42 | 003,569,664 | ---- | C] () -- C:\Users\Adrian\Desktop\WSTĘP - Kopia.doc [2011-01-05 22:27:16 | 003,569,664 | ---- | C] () -- C:\Users\Adrian\Desktop\WSTĘP.doc [2011-01-05 20:59:15 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempbq3284.html [2011-01-05 14:08:11 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempHX4372.html [2011-01-05 14:08:11 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempuL4372.html [2011-01-04 19:04:17 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXp3320.html [2011-01-04 19:04:17 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempmy3320.html [2011-01-04 17:50:33 | 000,000,042 | ---- | C] () -- C:\Windows\oodjobd.INI [2011-01-04 17:34:12 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJh4164.html [2011-01-04 17:34:12 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempFQ4164.html [2011-01-04 15:45:18 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempww4396.html [2011-01-04 15:45:18 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTk4396.html [2011-01-03 17:36:26 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempeS1848.html [2011-01-03 17:36:26 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempWz1848.html [2011-01-02 16:04:51 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempHm3520.html [2011-01-02 16:04:51 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempvb3520.html [2011-01-02 12:42:37 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempzR4392.html [2011-01-02 12:42:37 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempPq4392.html [2011-01-02 12:25:31 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempkc4524.html [2011-01-02 12:25:31 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempCX4524.html [2011-01-01 21:04:17 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempUs4704.html [2011-01-01 21:04:17 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempFe4704.html [2011-01-01 18:44:11 | 000,022,382 | ---- | C] () -- C:\Users\Adrian\Documents\cwicze.rtf [2011-01-01 13:00:50 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temprz4020.html [2011-01-01 13:00:50 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXf4020.html [2010-12-31 18:47:27 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKn2268.html [2010-12-31 18:47:27 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemprC2268.html [2010-12-31 18:09:59 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempme1084.html [2010-12-31 16:12:12 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temprc4784.html [2010-12-31 16:12:12 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempuF4784.html [2010-12-31 12:58:20 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempUkl964.html [2010-12-31 12:58:20 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemplzC964.html [2010-12-31 10:57:11 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temphr4380.html [2010-12-31 10:57:11 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempcM4380.html [2010-12-30 21:08:19 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temptpu672.html [2010-12-30 21:08:19 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJfb672.html [2010-12-30 19:06:02 | 003,746,964 | ---- | C] () -- C:\Users\Adrian\Documents\08. Dueling Guitars.mp3 [2010-12-30 19:03:07 | 002,277,742 | ---- | C] () -- C:\Users\Adrian\Documents\06. Ritual Dance.mp3 [2010-12-30 19:03:05 | 002,324,066 | ---- | C] () -- C:\Users\Adrian\Documents\05. Bari Improv.mp3 [2010-12-30 18:59:47 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJN4592.html [2010-12-30 16:24:23 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempvv4860.html [2010-12-30 16:24:23 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSM4860.html [2010-12-30 15:51:41 | 000,004,924 | ---- | C] () -- C:\ProgramData\mtbjfghn.xbe [2010-12-30 14:57:49 | 000,016,844 | ---- | C] () -- C:\Users\Adrian\Documents\Rozgrzewka w kolejności.docx [2010-12-30 10:59:36 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRn1100.html [2010-12-30 10:59:36 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempYx1100.html [2010-12-30 10:11:57 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempvF3788.html [2010-12-29 15:55:19 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempZc1076.html [2010-12-29 14:44:10 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVQ4784.html [2010-12-29 14:44:10 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Templb4784.html [2010-12-29 10:23:37 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxp2744.html [2010-12-28 21:30:55 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRb4588.html [2010-12-28 21:30:55 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempGX4588.html [2010-12-28 19:37:14 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempps1996.html [2010-12-28 19:37:14 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempOw1996.html [2010-12-28 16:48:59 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempuY4244.html [2010-12-28 16:48:59 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempva4244.html [2010-12-28 15:28:25 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTg3448.html [2010-12-28 11:15:59 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempad4464.html [2010-12-28 11:15:59 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRl4464.html [2010-12-27 20:56:00 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKY5044.html [2010-12-27 20:56:00 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempkZ5044.html [2010-12-27 15:57:34 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempiu5040.html [2010-12-27 15:57:34 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTI5040.html [2010-12-27 14:43:50 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphO1280.html [2010-12-27 14:43:50 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphI1280.html [2010-12-27 11:45:56 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempjS4256.html [2010-12-27 11:45:56 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempNR4256.html [2010-12-26 18:23:10 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempBa5088.html [2010-12-26 18:23:10 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJt5088.html [2010-12-26 12:15:00 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempEZ4704.html [2010-12-26 12:15:00 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempDX4704.html [2010-12-25 20:45:35 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempmq4420.html [2010-12-25 20:45:35 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempqj4420.html [2010-12-25 18:21:28 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempIe4456.html [2010-12-25 18:21:28 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKy4456.html [2010-12-25 12:24:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempvN4412.html [2010-12-25 12:24:32 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempWj4412.html [2010-12-25 11:24:42 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMJ1140.html [2010-12-25 11:24:42 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLI1140.html [2010-12-24 21:23:33 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKZ4816.html [2010-12-24 21:23:33 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempcb4816.html [2010-12-24 13:31:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLPV372.html [2010-12-24 13:31:32 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temphnv372.html [2010-12-24 12:24:19 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempxI3564.html [2010-12-24 10:17:51 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temppb4484.html [2010-12-23 22:46:57 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRV2896.html [2010-12-23 22:46:57 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxp2896.html [2010-12-23 19:14:57 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempFRA688.html [2010-12-23 17:42:29 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempus1540.html [2010-12-23 17:42:29 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempem1540.html [2010-12-23 17:33:13 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempNN3864.html [2010-12-23 17:33:13 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temptr3864.html [2010-12-23 17:27:56 | 000,107,184 | ---- | C] () -- C:\Windows\SysNative\oodbs.lor [2010-12-23 16:44:34 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempAA4432.html [2010-12-23 16:44:34 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempuQ4432.html [2010-12-23 16:40:03 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempkP4596.html [2010-12-23 16:40:03 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempev4596.html [2010-12-23 14:29:10 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempQe5020.html [2010-12-23 14:29:10 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempjj5020.html [2010-12-22 21:02:05 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempWc4028.html [2010-12-22 21:02:05 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempOz4028.html [2010-12-22 16:50:28 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemplN4500.html [2010-12-22 16:50:28 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXo4500.html [2010-12-22 15:08:24 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVw5648.html [2010-12-22 15:08:24 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempII5648.html [2010-12-22 10:28:24 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempbl1224.html [2010-12-22 10:05:28 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempYQ2608.html [2010-12-21 19:30:40 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempoM4572.html [2010-12-21 19:30:40 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxk4572.html [2010-12-21 14:12:30 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempbF4884.html [2010-12-21 14:12:30 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempkn4884.html [2010-12-20 17:29:47 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempdG2332.html [2010-12-20 17:29:47 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempZj2332.html [2010-12-20 15:06:12 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempDu3968.html [2010-12-20 15:06:12 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemprY3968.html [2010-12-19 20:11:52 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempdZ4932.html [2010-12-19 20:11:52 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemplA4932.html [2010-12-19 18:04:51 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJo1548.html [2010-12-19 18:04:51 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempZS1548.html [2010-12-19 15:22:27 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempgi4668.html [2010-12-19 15:22:27 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempcz4668.html [2010-12-19 13:30:47 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempNL5068.html [2010-12-19 13:30:47 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempby5068.html [2010-12-19 12:36:08 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempsL1500.html [2010-12-19 12:36:08 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempmT1500.html [2010-12-18 23:33:52 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempoD3940.html [2010-12-18 23:33:52 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempyk3940.html [2010-12-18 15:03:26 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLo4364.html [2010-12-18 15:03:26 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempbG4364.html [2010-12-18 14:36:12 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempqsn628.html [2010-12-18 14:36:12 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempboX628.html [2010-12-18 11:24:17 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temprx4900.html [2010-12-17 23:08:57 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temptt1176.html [2010-12-17 23:08:57 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRm1176.html [2010-12-17 22:43:50 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempFb1524.html [2010-12-17 22:22:22 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMO2540.html [2010-12-17 22:11:39 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempcs2760.html [2010-12-17 21:33:03 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempNX4532.html [2010-12-17 21:33:03 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempzV4532.html [2010-12-17 13:20:29 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSj4584.html [2010-12-16 20:35:52 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempzK5072.html [2010-12-16 20:35:52 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempcZ5072.html [2010-12-16 19:02:31 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempvg4640.html [2010-12-16 19:02:31 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempai4640.html [2010-12-16 17:14:57 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempcL2188.html [2010-12-16 17:14:57 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempuO2188.html [2010-12-16 16:24:04 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempkc2768.html [2010-12-16 16:24:04 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemptR2768.html [2010-12-16 15:45:25 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKW3720.html [2010-12-16 15:45:25 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSa3720.html [2010-12-15 15:11:18 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempjp3224.html [2010-12-15 15:11:18 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJf3224.html [2010-12-15 14:52:18 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMx4912.html [2010-12-15 14:52:18 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVO4912.html [2010-12-14 20:24:26 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempkc4320.html [2010-12-14 20:24:26 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempjm4320.html [2010-12-14 18:25:57 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempiZ1584.html [2010-12-14 16:36:05 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempimf868.html [2010-12-14 16:36:05 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempxkH868.html [2010-12-14 14:33:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphZ1972.html [2010-12-13 19:26:13 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphD4588.html [2010-12-13 19:26:13 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temprv4588.html [2010-12-13 17:19:44 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempqX1148.html [2010-12-13 17:19:44 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempCU1148.html [2010-12-13 16:07:48 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempth4512.html [2010-12-13 14:29:47 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempko2232.html [2010-12-13 14:29:47 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempDY2232.html [2010-12-12 21:22:45 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempgb1628.html [2010-12-12 21:22:45 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempqt1628.html [2010-12-12 20:18:44 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSDw832.html [2010-12-12 18:27:23 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVn4564.html [2010-12-12 18:27:23 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempiV4564.html [2010-12-12 16:44:51 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempDk4780.html [2010-12-12 12:11:17 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTn1908.html [2010-12-12 12:11:17 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRo1908.html [2010-12-11 21:31:33 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempeZ1192.html [2010-12-11 21:31:33 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempjq1192.html [2010-12-11 19:46:44 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempbx5948.html [2010-12-11 12:56:45 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempxK4356.html [2010-12-10 19:36:47 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempqW1300.html [2010-12-10 19:36:47 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempjj1300.html [2010-12-10 18:33:05 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempsO1000.html [2010-12-10 18:33:05 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxg1000.html [2010-12-10 14:07:00 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempzU3964.html [2010-12-10 14:07:00 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempdd3964.html [2010-12-09 17:46:20 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempru4652.html [2010-12-09 17:46:20 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempyS4652.html [2010-12-09 15:19:23 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempHn4692.html [2010-12-09 15:19:23 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempco4692.html [2010-12-09 15:15:57 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempQI3540.html [2010-12-09 15:15:57 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempfk3540.html [2010-12-08 20:10:07 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempsM4988.html [2010-12-08 20:10:07 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempmF4988.html [2010-12-08 15:46:02 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempiE2720.html [2010-12-08 15:46:02 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempIi2720.html [2010-12-08 14:24:57 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTm3192.html [2010-12-08 14:24:57 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temply3192.html [2010-12-07 21:49:39 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempnM4024.html [2010-12-07 21:49:39 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKW4024.html [2010-12-07 21:23:03 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempvc5016.html [2010-12-07 21:23:03 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempiv5016.html [2010-12-07 21:14:03 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempEx3972.html [2010-12-07 21:14:03 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSz3972.html [2010-12-07 21:08:36 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempeK3756.html [2010-12-07 21:08:36 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempnv3756.html [2010-12-07 15:13:44 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempEg3920.html [2010-12-07 15:13:44 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempPw3920.html [2010-12-06 19:36:30 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temppu4772.html [2010-12-06 19:36:30 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSS4772.html [2010-12-06 16:12:21 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVE4556.html [2010-12-06 16:12:21 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJL4556.html [2010-12-05 20:05:30 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempsN4168.html [2010-12-05 18:22:09 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSZ1836.html [2010-12-05 18:22:09 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempkH1836.html [2010-12-05 15:19:51 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTI2384.html [2010-12-05 15:19:51 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSF2384.html [2010-12-05 12:36:35 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMB4104.html [2010-12-04 15:47:26 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXP3188.html [2010-12-04 15:47:26 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTx3188.html [2010-12-04 13:20:03 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempBs2108.html [2010-12-04 11:46:46 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxg4464.html [2010-12-04 11:46:46 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemptJ4464.html [2010-12-03 22:45:16 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKq4632.html [2010-12-03 22:45:16 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempmf4632.html [2010-12-03 20:35:11 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempEI3516.html [2010-12-03 20:35:11 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempmk3516.html [2010-12-03 15:55:28 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempBG4736.html [2010-12-03 15:55:28 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Templn4736.html [2010-12-02 22:09:44 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempfc4284.html [2010-12-02 22:09:44 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphT4284.html [2010-12-02 19:32:46 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempWW3720.html [2010-12-02 15:44:27 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempyU2148.html [2010-12-02 15:44:27 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempbG2148.html [2010-12-02 14:31:51 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempfZ4272.html [2010-12-01 15:54:52 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempzO4492.html [2010-12-01 15:54:52 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKj4492.html [2010-11-30 19:34:23 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempzr4380.html [2010-11-30 19:34:23 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMS4380.html [2010-11-29 21:52:05 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempeV4152.html [2010-11-29 21:52:05 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLE4152.html [2010-11-29 16:51:45 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSk4664.html [2010-11-29 16:51:45 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempYu4664.html [2010-11-29 15:27:49 | 000,007,751 | ---- | C] () -- C:\Users\Adrian\Documents\Osoby na historie spr(1).doc [2010-11-29 15:27:21 | 000,002,889 | ---- | C] () -- C:\Users\Adrian\Documents\sciąga opisowe(1).rtf [2010-11-29 15:27:19 | 000,011,497 | ---- | C] () -- C:\Users\Adrian\Documents\pojęcia na spr nr 2(1).rtf [2010-11-29 15:16:49 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempYw4996.html [2010-11-29 15:16:49 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temppt4996.html [2010-11-28 21:06:37 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMx4744.html [2010-11-28 21:06:37 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempGy4744.html [2010-11-28 19:31:46 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempfQ3128.html [2010-11-27 19:26:37 | 000,066,166 | ---- | C] () -- C:\Users\Adrian\Documents\sciąga opisowe.rtf [2010-11-27 19:26:36 | 000,011,505 | ---- | C] () -- C:\Users\Adrian\Documents\pojęcia na spr nr 2.rtf [2010-11-27 19:26:34 | 000,028,140 | ---- | C] () -- C:\Users\Adrian\Documents\Osoby na historie spr.doc [2010-11-27 19:25:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempoC4984.html [2010-11-27 19:25:32 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempHx4984.html [2010-11-27 18:04:13 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRA3716.html [2010-11-27 18:04:13 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVD3716.html [2010-11-27 17:05:40 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemprS3988.html [2010-11-27 17:05:40 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempHJ3988.html [2010-11-27 15:30:43 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempNf5056.html [2010-11-27 15:30:43 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemptF5056.html [2010-11-27 12:52:41 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRi4176.html [2010-11-27 12:52:41 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempsi4176.html [2010-11-27 12:12:25 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempvu3320.html [2010-11-27 12:12:25 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempGF3320.html [2010-11-26 22:37:09 | 000,006,254 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010-11-26 16:53:02 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempOt4800.html [2010-11-26 16:53:02 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempPr4800.html [2010-11-26 14:08:52 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempqr5104.html [2010-11-26 14:08:52 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempIz5104.html [2010-11-25 20:43:37 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temppv2932.html [2010-11-25 20:43:37 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKv2932.html [2010-11-25 16:15:56 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempFc1876.html [2010-11-25 16:15:56 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempyf1876.html [2010-11-24 18:27:11 | 000,018,386 | ---- | C] () -- C:\Users\Adrian\Documents\Wojna blyskawiczna.docx [2010-11-24 14:48:34 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempml4116.html [2010-11-24 14:48:34 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempoi4116.html [2010-11-24 14:29:45 | 000,290,566 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\minecrafthax.jar [2010-11-24 14:29:45 | 000,051,765 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\Minecraft.jar [2010-11-24 14:29:45 | 000,042,555 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\ItemslistV110.png [2010-11-24 14:29:45 | 000,026,486 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\Items_slot_number.JPG [2010-11-24 14:29:42 | 000,232,504 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\Minecraft.exe [2010-11-23 18:17:09 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempIz4512.html [2010-11-23 18:17:09 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphU4512.html [2010-11-22 16:24:19 | 000,026,620 | ---- | C] () -- C:\Users\Adrian\Documents\Przystosowania drapieżników do drapieżnictwa i ofiar do obrony.docx [2010-11-22 15:37:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVA2524.html [2010-11-22 15:37:32 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJZ2524.html [2010-11-22 13:35:18 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempqHg964.html [2010-11-22 13:35:18 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempYqb964.html [2010-11-22 13:13:11 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXt1472.html [2010-11-22 13:13:11 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempvv1472.html [2010-11-21 17:10:37 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempzt4456.html [2010-11-21 12:27:54 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempyX4480.html [2010-11-21 12:27:54 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempwz4480.html [2010-11-21 12:24:52 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempch4452.html [2010-11-21 12:24:52 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempae4452.html [2010-11-20 20:43:25 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXA2708.html [2010-11-20 20:43:25 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempmS2708.html [2010-11-20 18:32:35 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempZl3812.html [2010-11-20 18:32:35 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempbt3812.html [2010-11-20 16:39:17 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempeX4328.html [2010-11-20 13:19:38 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempoH2792.html [2010-11-20 13:19:38 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempPO2792.html [2010-11-20 12:30:49 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempGR4576.html [2010-11-20 12:30:49 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxc4576.html [2010-11-20 11:58:19 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemppO5116.html [2010-11-20 11:58:19 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJH5116.html [2010-11-19 19:44:58 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempDj2660.html [2010-11-19 19:44:58 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Templz2660.html [2010-11-19 14:28:25 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempbu4100.html [2010-11-19 14:28:25 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempqn4100.html [2010-11-19 14:01:19 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempHR3156.html [2010-11-19 14:01:19 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempiv3156.html [2010-11-18 20:16:31 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempSI2156.html [2010-11-18 20:16:31 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempwl2156.html [2010-11-18 18:29:06 | 000,314,016 | ---- | C] () -- C:\Windows\SysNative\drivers\atksgt.sys [2010-11-18 18:29:06 | 000,043,680 | ---- | C] () -- C:\Windows\SysNative\drivers\lirsgt.sys [2010-11-18 15:18:31 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempvE4988.html [2010-11-18 15:18:31 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemplM4988.html [2010-11-17 16:23:14 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempcn2088.html [2010-11-17 16:23:14 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempEj2088.html [2010-11-17 14:34:25 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempymo120.html [2010-11-17 14:34:25 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempfzh120.html [2010-11-16 15:07:37 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVz1228.html [2010-11-16 15:07:37 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJH1228.html [2010-11-15 17:53:41 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMM3980.html [2010-11-15 17:53:41 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempod3980.html [2010-11-15 16:06:44 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempZQ4164.html [2010-11-15 16:06:44 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempnV4164.html [2010-11-15 16:06:40 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphE3352.html [2010-11-15 16:06:40 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempUt3352.html [2010-11-14 22:23:37 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempPC2868.html [2010-11-14 22:23:37 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempph2868.html [2010-11-14 19:03:23 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemplN4884.html [2010-11-14 19:03:23 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTH4884.html [2010-11-13 20:40:21 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempoh2736.html [2010-11-13 20:40:21 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemppV2736.html [2010-11-13 19:08:13 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKu4656.html [2010-11-13 19:08:13 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempnQ4656.html [2010-11-13 11:30:43 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxp1524.html [2010-11-13 11:30:43 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempnu1524.html [2010-11-12 22:27:19 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempJp4224.html [2010-11-12 22:27:19 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempzC4224.html [2010-11-12 18:14:36 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempbq4688.html [2010-11-12 18:14:36 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempPJ4688.html [2010-11-12 16:49:16 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempop2680.html [2010-11-12 15:55:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempYq3224.html [2010-11-12 10:38:31 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempXe2920.html [2010-11-12 10:38:31 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKN2920.html [2010-11-11 18:27:01 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Templg1556.html [2010-11-11 18:27:01 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMR1556.html [2010-11-11 16:36:55 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempyB4292.html [2010-11-11 11:57:34 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempco4180.html [2010-11-11 11:57:34 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempPf4180.html [2010-11-11 11:37:59 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempFX3588.html [2010-11-11 11:37:59 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempDh3588.html [2010-11-11 11:35:46 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempul2752.html [2010-11-11 11:35:46 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTF2752.html [2010-11-11 11:35:05 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempbK1748.html [2010-11-11 11:35:05 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempvQ1748.html [2010-11-11 11:34:38 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempQp3272.html [2010-11-11 11:34:38 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempyP3272.html [2010-11-11 11:32:31 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLd4884.html [2010-11-11 11:32:31 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempCH4884.html [2010-11-10 21:00:36 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMt4816.html [2010-11-10 21:00:36 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempYW4816.html [2010-11-10 17:04:15 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempEV4472.html [2010-11-10 14:54:36 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempCB4144.html [2010-11-10 14:45:31 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempnt4376.html [2010-11-10 14:37:55 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemphD2408.html [2010-11-10 14:37:55 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempjY2408.html [2010-11-09 20:39:50 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempgD4948.html [2010-11-09 20:39:50 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempAB4948.html [2010-11-09 18:12:39 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKk3092.html [2010-11-09 18:12:39 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempwc3092.html [2010-11-09 16:11:44 | 000,000,356 | ---- | C] () -- C:\ProgramData\hpzinstall.log [2010-11-09 16:06:10 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempIQ4976.html [2010-11-09 15:09:10 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempEq3124.html [2010-11-09 15:09:10 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempUP3124.html [2010-11-08 19:17:10 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLG5008.html [2010-11-08 19:17:10 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempDY5008.html [2010-11-08 15:34:09 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempiX2032.html [2010-11-08 15:34:09 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLM2032.html [2010-11-08 14:36:47 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempCZ4104.html [2010-11-08 14:36:47 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempgB4104.html [2010-11-08 14:30:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKM3064.html [2010-11-08 14:30:32 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxu3064.html [2010-11-08 14:26:07 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempdr4912.html [2010-11-08 14:26:07 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempsi4912.html [2010-11-07 13:08:16 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempCV3336.html [2010-11-07 13:08:16 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLT3336.html [2010-11-07 12:58:32 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempbd4412.html [2010-11-07 12:58:32 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempIe4412.html [2010-11-07 12:37:53 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempHc3460.html [2010-11-07 12:37:53 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempIV3460.html [2010-11-07 12:29:16 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKL4076.html [2010-11-07 12:29:16 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemplQ4076.html [2010-11-07 12:19:42 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempaU1980.html [2010-11-07 12:19:42 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempoY1980.html [2010-11-07 12:09:29 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLK4564.html [2010-11-07 12:09:29 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempCP4564.html [2010-11-06 20:44:11 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempDP3824.html [2010-11-06 20:44:11 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTs3824.html [2010-11-06 17:41:35 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempdf3932.html [2010-11-06 17:41:35 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempCW3932.html [2010-11-06 17:36:01 | 000,790,528 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2010-11-06 17:36:01 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll [2010-11-06 16:39:40 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempgk1316.html [2010-11-06 16:39:40 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTi1316.html [2010-11-06 15:33:26 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010-11-06 14:56:25 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempVT3504.html [2010-11-06 14:56:25 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempkU3504.html [2010-11-06 14:39:19 | 000,024,576 | R--- | C] () -- C:\Windows\SysWow64\AsIO.dll [2010-11-06 14:39:19 | 000,013,440 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys [2010-11-06 13:24:48 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempdM2876.html [2010-11-06 13:24:48 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMV2876.html [2010-11-06 12:24:01 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempef3112.html [2010-11-06 12:24:01 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempQO3112.html [2010-11-06 11:43:29 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TemptZ3124.html [2010-11-06 11:43:29 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempyT3124.html [2010-11-06 11:35:43 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempQg1440.html [2010-11-06 11:35:43 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempyy1440.html [2010-11-06 11:24:29 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempGn2852.html [2010-11-06 11:24:29 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempYs2852.html [2010-11-06 11:19:49 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMN3328.html [2010-11-06 11:19:49 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempHp3328.html [2010-11-06 11:14:29 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempqU3364.html [2010-11-06 11:14:29 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempvo3364.html [2010-11-06 11:10:38 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempaq3064.html [2010-11-06 11:10:38 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempKG3064.html [2010-11-06 11:01:13 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempMk3304.html [2010-11-06 11:01:13 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempnY3304.html [2010-11-06 09:49:36 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempuE4788.html [2010-11-06 09:49:36 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempxQ4788.html [2010-11-05 21:18:23 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempWq1116.html [2010-11-05 21:18:23 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempRW1116.html [2010-11-05 20:59:45 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempNK3700.html [2010-11-05 20:59:45 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempcd3700.html [2010-11-05 20:50:02 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempkK2344.html [2010-11-05 20:50:02 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempLm2344.html [2010-11-05 20:41:43 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempoT3860.html [2010-11-05 20:41:43 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempvv3860.html [2010-11-05 20:35:25 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempzT3980.html [2010-11-05 20:35:25 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempUq3980.html [2010-11-05 20:24:18 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempFLc360.html [2010-11-05 20:24:18 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempgRu360.html [2010-11-05 20:11:27 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempxv2560.html [2010-11-05 20:11:27 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Tempja2560.html [2010-11-05 20:01:49 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempEC3196.html [2010-11-05 20:01:49 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Temput3196.html [2010-11-05 19:32:20 | 000,002,432 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempFL3140.html [2010-11-05 19:32:20 | 000,002,089 | ---- | C] () -- C:\Users\Adrian\AppData\Local\TempTR3140.html [2010-11-05 18:04:18 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2010-11-05 18:04:11 | 000,033,662 | ---- | C] () -- C:\Windows\Ascd_tmp.ini [2010-10-30 12:57:02 | 000,095,232 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2010-10-14 01:36:44 | 000,179,263 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2010-06-23 11:35:52 | 000,134,144 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2010-03-15 04:31:48 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-07-06 03:48:34 | 000,013,368 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsUpIO.sys [2009-04-02 13:30:14 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS [2007-07-23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll [2007-07-23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll [2007-07-23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll [2007-02-05 19:05:26 | 000,000,038 | ---- | C] () -- C:\Windows\AviSplitter.INI [color=#E56717]========== LOP Check ==========[/color] [2010-11-26 14:12:43 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\.minecraft [2010-12-23 15:24:11 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Ashampoo [2010-11-24 14:51:19 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\bin [2010-11-17 17:36:12 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\BitTorrent [2010-12-10 18:10:41 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Canneverbe Limited [2010-12-30 15:51:42 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Carambis [2010-11-06 10:54:39 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\DAEMON Tools Lite [2010-11-08 19:16:36 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\DAEMON Tools Pro [2010-11-11 23:12:28 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\DeviceVm [2010-12-19 12:04:47 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\EurekaLog [2010-11-05 19:58:43 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Gadu-Gadu 10 [2010-12-25 21:38:27 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\GameRanger [2011-01-07 16:52:58 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\HD Tune Pro [2010-12-18 12:29:57 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Hothead Games [2010-11-06 15:21:30 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Leadertech [2010-11-24 14:30:59 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\resourceses [2011-01-07 23:01:02 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Rovio [2010-12-05 18:30:09 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\The Creative Assembly [2010-11-20 17:59:57 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Ubisoft [2011-01-07 23:00:37 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\uTorrent [2010-11-21 19:48:29 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Win7codecs [2010-12-25 11:08:09 | 000,032,594 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< :Processes >[/color] [color=#A23BEC]< Explorer.exe >[/color] [color=#A23BEC]< >[/color] [color=#A23BEC]< :Files >[/color] [color=#A23BEC]< C:\Users\Adrian\AppData\Roaming\EurekaLog >[/color] [color=#A23BEC]< C:\Users\Adrian\AppData\Local\Temp*.html >[/color] [2010-12-23 17:26:21 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempAA4432.html [2010-11-09 23:28:07 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempAB4948.html [2010-12-28 11:54:14 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempad4464.html [2010-11-21 12:25:16 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempae4452.html [2010-12-16 19:08:49 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempai4640.html [2011-01-08 11:27:35 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempAn4232.html [2010-11-06 11:12:05 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempaq3064.html [2010-11-07 12:19:42 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempaU1980.html [2010-12-26 21:18:08 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempBa5088.html [2010-11-07 12:58:32 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbd4412.html [2010-12-21 17:36:51 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempbF4884.html [2010-12-02 18:48:36 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempbG2148.html [2010-12-18 16:06:38 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempbG4364.html [2010-12-03 19:03:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempBG4736.html [2010-11-11 11:35:07 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempbK1748.html [2010-12-22 14:12:34 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbl1224.html [2010-12-18 14:36:38 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempboX628.html [2011-01-05 22:15:10 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbq3284.html [2010-11-12 22:12:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbq4688.html [2010-12-04 14:51:16 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempBs2108.html [2010-11-20 20:19:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbt3812.html [2010-11-19 18:48:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbu4100.html [2010-12-11 19:47:06 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempbx5948.html [2010-12-19 14:59:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempby5068.html [2011-01-07 23:05:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempca4468.html [2010-11-10 17:00:55 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempCB4144.html [2010-12-24 21:56:13 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempcb4816.html [2010-11-05 21:08:35 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempcd3700.html [2010-11-21 12:25:16 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempch4452.html [2010-11-11 11:32:32 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempCH4884.html [2010-12-16 17:32:41 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempcL2188.html [2010-12-31 11:37:57 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempcM4380.html [2010-11-17 16:31:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempcn2088.html [2010-11-11 13:18:13 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempco4180.html [2010-12-09 16:25:48 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempco4692.html [2010-11-07 12:15:07 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempCP4564.html [2010-12-17 22:22:10 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempcs2760.html [2010-12-13 17:20:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempCU1148.html [2010-11-07 19:17:06 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempCV3336.html [2010-11-06 19:49:13 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempCW3932.html [2011-01-02 12:25:47 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempCX4524.html [2010-11-08 14:36:47 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempCZ4104.html [2010-12-19 16:16:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempcz4668.html [2010-12-16 21:03:40 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempcZ5072.html [2010-12-10 18:22:14 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempdd3964.html [2010-11-06 19:49:13 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempdf3932.html [2010-12-20 17:56:08 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempdG2332.html [2010-11-11 11:38:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDh3588.html [2011-01-09 17:33:55 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempdI5028.html [2011-01-09 11:09:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempdI5092.html [2010-11-19 21:41:07 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDj2660.html [2010-12-12 17:45:19 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDk4780.html [2010-11-06 14:48:10 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempdM2876.html [2010-11-06 21:54:20 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDP3824.html [2011-01-09 11:09:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempdq5092.html [2010-11-08 14:26:07 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempdr4912.html [2010-12-20 15:23:19 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDu3968.html [2010-12-26 16:59:23 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDX4704.html [2010-12-13 14:51:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDY2232.html [2010-11-08 20:30:33 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempDY5008.html [2010-12-19 20:23:40 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempdZ4932.html [2010-11-05 20:08:48 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEC3196.html [2010-11-06 13:03:53 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempef3112.html [2010-12-07 15:50:25 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEg3920.html [2011-01-05 23:24:55 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeI1360.html [2010-12-03 22:16:42 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEI3516.html [2010-11-17 16:31:23 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEj2088.html [2010-12-07 21:10:43 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeK3756.html [2010-12-23 18:27:55 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempem1540.html [2010-11-09 15:50:54 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEq3124.html [2011-01-03 18:35:58 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeS1848.html [2010-11-29 22:09:27 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeV4152.html [2010-11-10 17:04:57 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEV4472.html [2010-12-23 16:41:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempev4596.html [2010-12-07 21:15:12 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEx3972.html [2010-11-20 17:46:18 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeX4328.html [2010-12-11 22:01:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempeZ1192.html [2010-12-26 16:59:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempEZ4704.html [2010-12-17 22:45:09 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFb1524.html [2010-11-25 18:18:54 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFc1876.html [2010-12-02 22:45:25 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempfc4284.html [2011-01-01 21:41:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFe4704.html [2010-12-09 15:16:18 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempfk3540.html [2010-11-05 19:58:43 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFL3140.html [2010-11-05 20:32:49 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFLc360.html [2010-11-28 20:32:55 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempfQ3128.html [2011-01-04 18:11:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFQ4164.html [2010-12-23 22:17:16 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFRA688.html [2010-11-11 11:38:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempFX3588.html [2010-12-02 15:26:56 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempfZ4272.html [2010-11-17 15:25:15 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempfzh120.html [2010-12-12 21:30:33 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempgb1628.html [2010-11-08 14:36:47 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempgB4104.html [2010-11-09 23:28:07 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempgD4948.html [2010-11-27 12:39:37 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempGF3320.html [2010-12-19 16:16:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempgi4668.html [2010-11-06 17:37:50 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempgk1316.html [2010-11-06 11:24:29 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempGn2852.html [2010-11-20 12:59:43 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempGR4576.html [2010-11-05 20:32:49 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempgRu360.html [2010-12-28 21:44:05 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempGX4588.html [2010-11-28 21:30:06 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempGy4744.html [2010-11-07 12:37:53 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHc3460.html [2010-11-10 14:39:08 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphD2408.html [2010-12-13 19:59:51 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphD4588.html [2010-11-15 16:06:41 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphE3352.html [2011-01-08 20:37:10 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temphg4620.html [2010-12-27 15:34:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphI1280.html [2010-11-27 17:06:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHJ3988.html [2011-01-02 16:12:39 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHm3520.html [2011-01-07 21:57:01 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphN4564.html [2010-12-09 16:25:48 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHn4692.html [2010-12-24 17:31:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temphnv372.html [2010-12-27 15:34:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphO1280.html [2010-11-06 11:19:49 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHp3328.html [2010-11-19 14:01:22 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHR3156.html [2010-12-31 11:37:57 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temphr4380.html [2010-12-02 22:45:25 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphT4284.html [2010-11-23 20:22:35 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphU4512.html [2011-01-05 17:48:41 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHX4372.html [2010-11-27 20:42:47 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempHx4984.html [2010-12-14 15:38:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemphZ1972.html [2010-12-08 19:01:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempiE2720.html [2010-11-07 12:58:32 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIe4412.html [2010-12-25 19:30:34 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIe4456.html [2011-01-08 16:30:19 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIH5116.html [2010-12-08 19:01:35 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIi2720.html [2010-12-22 15:46:09 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempII5648.html [2010-12-14 17:02:49 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempimf868.html [2010-11-09 17:33:45 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIQ4976.html [2010-12-27 19:22:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempiu5040.html [2010-11-19 14:01:22 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempiv3156.html [2010-11-07 12:37:53 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIV3460.html [2010-12-12 18:32:22 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempiV4564.html [2010-12-07 21:24:09 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempiv5016.html [2010-11-08 16:45:39 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempiX2032.html [2010-12-14 19:54:51 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempiZ1584.html [2010-11-23 20:22:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIz4512.html [2010-11-26 16:10:42 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempIz5104.html [2010-11-05 20:21:38 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempja2560.html [2010-12-15 15:28:44 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJf3224.html [2010-12-30 23:06:28 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJfb672.html [2010-11-16 22:45:30 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJH1228.html [2011-01-04 18:11:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJh4164.html [2010-11-20 12:12:35 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJH5116.html [2010-12-10 22:39:50 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempjj1300.html [2010-12-23 15:42:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempjj5020.html [2010-12-06 16:22:37 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJL4556.html [2010-12-14 20:26:22 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempjm4320.html [2010-12-30 19:33:12 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJN4592.html [2011-01-08 16:30:19 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempjN5116.html [2010-12-19 18:41:06 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJo1548.html [2010-12-15 15:28:44 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempjp3224.html [2010-11-12 23:12:48 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJp4224.html [2010-12-11 22:01:23 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempjq1192.html [2010-12-27 14:01:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempjS4256.html [2010-12-26 21:18:08 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJt5088.html [2010-11-10 14:39:08 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempjY2408.html [2010-11-22 21:36:42 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempJZ2524.html [2010-12-16 16:29:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempkc2768.html [2010-12-14 20:26:22 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempkc4320.html [2011-01-02 12:25:47 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempkc4524.html [2010-11-06 11:12:05 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKG3064.html [2010-12-05 19:43:39 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempkH1836.html [2010-12-01 16:37:17 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKj4492.html [2010-11-05 20:55:47 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempkK2344.html [2010-11-09 19:30:19 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKk3092.html [2010-11-07 12:29:16 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKL4076.html [2010-11-08 14:30:32 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKM3064.html [2010-12-31 19:10:15 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKn2268.html [2010-11-12 12:25:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKN2920.html [2010-12-21 17:36:51 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempkn4884.html [2010-12-13 14:51:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempko2232.html [2010-12-23 16:41:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempkP4596.html [2010-12-03 23:34:07 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKq4632.html [2010-11-06 15:36:55 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempkU3504.html [2010-11-13 19:55:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKu4656.html [2010-11-25 21:43:41 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKv2932.html [2010-12-16 15:59:04 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKW3720.html [2010-12-07 21:52:56 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKW4024.html [2010-12-25 19:30:34 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKy4456.html [2010-12-27 20:57:36 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKY5044.html [2010-12-24 21:56:13 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempKZ4816.html [2010-12-27 20:57:36 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempkZ5044.html [2010-12-19 20:23:40 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemplA4932.html [2010-12-29 14:56:53 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Templb4784.html [2010-11-11 11:32:32 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLd4884.html [2010-11-29 22:09:27 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLE4152.html [2010-11-11 23:36:49 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Templg1556.html [2010-11-08 20:30:33 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLG5008.html [2010-12-25 12:02:01 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLI1140.html [2010-11-07 12:15:07 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLK4564.html [2010-11-08 16:45:39 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLM2032.html [2010-11-05 20:55:47 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLm2344.html [2010-11-18 19:32:07 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemplM4988.html [2010-12-22 17:41:59 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemplN4500.html [2010-12-03 19:03:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Templn4736.html [2010-11-14 21:34:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemplN4884.html [2010-12-18 16:06:38 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLo4364.html [2010-12-24 17:31:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLPV372.html [2010-11-07 12:29:16 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemplQ4076.html [2010-11-07 19:17:06 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempLT3336.html [2010-12-08 14:36:36 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temply3192.html [2010-11-19 21:41:07 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Templz2660.html [2010-12-31 15:05:25 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemplzC964.html [2010-12-05 14:50:40 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMB4104.html [2010-12-31 18:24:47 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempme1084.html [2010-12-03 23:34:07 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempmf4632.html [2010-12-08 20:54:11 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempmF4988.html [2010-12-25 12:02:01 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMJ1140.html [2010-11-06 11:06:04 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMk3304.html [2010-12-03 22:16:42 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempmk3516.html [2010-11-24 20:24:50 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempml4116.html [2010-11-15 18:14:33 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMM3980.html [2011-01-07 20:33:45 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMM4848.html [2010-11-06 11:19:49 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMN3328.html [2010-12-17 22:22:24 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMO2540.html [2010-12-25 22:43:37 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempmq4420.html [2010-11-11 23:36:49 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMR1556.html [2010-11-20 22:30:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempmS2708.html [2010-11-30 21:29:59 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMS4380.html [2010-12-19 12:37:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempmT1500.html [2010-11-10 23:59:47 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMt4816.html [2010-11-06 14:48:10 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMV2876.html [2010-11-28 21:30:06 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMx4744.html [2010-12-15 14:58:04 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempMx4912.html [2011-01-04 19:49:15 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempmy3320.html [2010-11-27 16:17:34 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempNf5056.html [2010-11-05 21:08:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempNK3700.html [2010-12-19 14:59:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempNL5068.html [2010-12-07 21:52:56 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempnM4024.html [2010-12-23 17:33:51 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempNN3864.html [2010-11-13 19:55:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempnQ4656.html [2010-12-27 14:01:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempNR4256.html [2010-11-10 14:45:31 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempnt4376.html [2011-01-06 20:08:20 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempnT4444.html [2010-11-13 16:24:53 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempnu1524.html [2010-12-07 21:10:43 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempnv3756.html [2010-11-15 16:19:15 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempnV4164.html [2010-12-17 22:09:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempNX4532.html [2010-11-06 11:06:04 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempnY3304.html [2010-11-27 20:42:47 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoC4984.html [2010-12-18 23:55:16 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoD3940.html [2010-11-15 18:14:33 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempod3980.html [2011-01-07 20:33:45 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOf4848.html [2010-11-13 21:42:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempoh2736.html [2010-11-20 14:23:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoH2792.html [2010-11-24 20:24:50 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempoi4116.html [2010-12-21 20:28:57 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoM4572.html [2010-11-12 16:49:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempop2680.html [2011-01-07 17:35:09 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoP4660.html [2011-01-06 20:08:20 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOs4444.html [2010-11-05 20:45:18 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoT3860.html [2010-11-26 23:07:24 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOt4800.html [2011-01-08 19:08:38 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOV4648.html [2010-12-28 21:02:06 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOw1996.html [2010-11-07 12:19:42 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempoY1980.html [2010-12-22 22:39:23 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempOz4028.html [2010-12-24 12:01:44 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temppb4484.html [2010-11-14 22:23:56 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPC2868.html [2011-01-06 15:28:38 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPF1364.html [2010-11-11 13:18:13 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPf4180.html [2010-11-14 22:23:56 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempph2868.html [2010-11-12 22:12:23 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPJ4688.html [2011-01-09 18:20:28 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temppk4812.html [2010-11-20 14:23:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPO2792.html [2010-11-20 12:12:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemppO5116.html [2011-01-02 15:31:13 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPq4392.html [2010-11-26 23:07:24 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPr4800.html [2010-12-28 21:02:06 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempps1996.html [2010-11-29 16:46:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temppt4996.html [2010-12-06 20:00:22 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temppu4772.html [2010-11-13 21:42:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemppV2736.html [2010-11-25 21:43:41 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temppv2932.html [2010-12-07 15:50:25 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempPw3920.html [2010-12-23 15:42:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempQe5020.html [2010-11-06 11:35:43 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempQg1440.html [2010-11-22 13:56:08 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempqHg964.html [2010-12-09 15:16:18 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempQI3540.html [2010-12-25 22:43:37 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempqj4420.html [2010-11-19 18:48:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempqn4100.html [2010-11-06 13:03:53 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempQO3112.html [2010-11-11 11:34:39 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempQp3272.html [2010-11-26 16:10:42 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempqr5104.html [2010-12-18 14:36:38 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempqsn628.html [2010-12-12 21:30:33 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempqt1628.html [2010-11-06 11:17:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempqU3364.html [2010-12-10 22:39:50 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempqW1300.html [2010-12-13 17:20:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempqX1148.html [2011-01-08 19:08:38 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempQY4648.html [2011-01-09 17:33:55 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempqZ5028.html [2010-11-27 18:46:44 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRA3716.html [2010-12-28 21:44:05 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRb4588.html [2010-12-31 19:10:15 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemprC2268.html [2010-12-31 16:38:56 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temprc4784.html [2010-11-27 14:22:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRi4176.html [2011-01-05 23:24:55 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temprl1360.html [2010-12-28 11:54:14 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRl4464.html [2010-12-17 23:16:13 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRm1176.html [2010-12-30 15:52:58 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRn1100.html [2011-01-06 15:28:38 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempro1364.html [2010-12-12 15:15:01 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRo1908.html [2010-11-27 17:06:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemprS3988.html [2010-12-09 20:56:44 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempru4652.html [2010-12-23 22:47:04 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRV2896.html [2010-12-13 19:59:51 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temprv4588.html [2010-11-05 21:46:04 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempRW1116.html [2010-12-18 12:46:18 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temprx4900.html [2010-12-20 15:23:19 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemprY3968.html [2011-01-01 18:53:47 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temprz4020.html [2010-12-16 15:59:04 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSa3720.html [2010-12-12 20:52:53 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSDw832.html [2010-12-05 16:28:03 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSF2384.html [2010-11-18 21:16:33 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSI2156.html [2010-11-27 14:22:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempsi4176.html [2010-11-08 14:26:07 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempsi4912.html [2010-12-17 17:54:11 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSj4584.html [2010-11-29 18:23:34 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSk4664.html [2010-12-19 12:37:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempsL1500.html [2010-12-30 18:11:33 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSM4860.html [2010-12-08 20:54:11 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempsM4988.html [2010-12-05 20:26:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempsN4168.html [2010-12-10 19:27:38 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempsO1000.html [2010-12-06 20:00:22 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSS4772.html [2010-12-05 19:43:39 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSZ1836.html [2010-12-07 21:15:12 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempSz3972.html [2010-11-11 11:35:46 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTF2752.html [2010-11-27 16:17:34 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemptF5056.html [2010-12-28 15:28:36 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTg3448.html [2010-12-13 16:54:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempth4512.html [2010-11-14 21:34:02 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTH4884.html [2010-11-06 17:37:50 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTi1316.html [2010-12-05 16:28:03 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTI2384.html [2010-12-27 19:22:35 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTI5040.html [2010-12-04 12:26:01 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemptJ4464.html [2011-01-04 16:31:04 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTk4396.html [2010-12-08 14:36:36 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTm3192.html [2010-12-12 15:15:01 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTn1908.html [2010-12-30 23:06:28 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temptpu672.html [2010-12-16 16:29:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemptR2768.html [2010-11-05 19:58:43 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTR3140.html [2010-12-23 17:33:51 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temptr3864.html [2010-11-06 21:54:20 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTs3824.html [2010-12-17 23:16:13 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temptt1176.html [2010-12-04 22:44:15 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempTx3188.html [2010-11-06 12:16:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TemptZ3124.html [2011-01-08 11:27:35 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempua4232.html [2010-11-06 10:58:18 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempuE4788.html [2010-12-31 16:38:56 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempuF4784.html [2010-12-31 15:05:25 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempUkl964.html [2010-11-11 11:35:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempul2752.html [2011-01-05 17:48:41 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempuL4372.html [2010-12-16 17:32:41 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempuO2188.html [2010-11-09 15:50:54 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempUP3124.html [2010-11-05 20:37:32 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempUq3980.html [2010-12-23 17:26:21 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempuQ4432.html [2010-12-23 18:27:55 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempus1540.html [2011-01-01 21:41:02 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempUs4704.html [2010-11-05 20:08:48 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Temput3196.html [2010-11-15 16:06:41 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempUt3352.html [2010-12-28 17:14:42 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempuY4244.html [2010-11-22 21:36:42 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVA2524.html [2010-12-28 17:14:42 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempva4244.html [2011-01-02 16:12:39 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvb3520.html [2010-12-07 21:24:09 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvc5016.html [2010-11-27 18:46:44 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVD3716.html [2010-12-06 16:22:37 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVE4556.html [2010-11-18 19:32:07 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempvE4988.html [2010-12-30 10:12:34 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempvF3788.html [2010-12-16 19:08:49 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvg4640.html [2010-12-25 17:17:57 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempvN4412.html [2010-12-12 18:32:22 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVn4564.html [2010-11-06 11:17:23 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvo3364.html [2010-12-15 14:58:04 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVO4912.html [2010-11-11 11:35:07 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempvQ1748.html [2010-12-29 14:56:53 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVQ4784.html [2010-11-06 15:36:55 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVT3504.html [2010-11-27 12:39:37 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvu3320.html [2010-11-22 13:33:20 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvv1472.html [2010-11-05 20:45:18 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvv3860.html [2010-12-30 18:11:33 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempvv4860.html [2010-12-22 15:46:09 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVw5648.html [2010-11-16 22:45:30 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempVz1228.html [2010-11-09 19:30:19 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempwc3092.html [2010-12-22 22:39:23 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempWc4028.html [2010-12-25 17:17:57 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempWj4412.html [2010-11-18 21:16:33 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempwl2156.html [2010-11-05 21:46:04 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempWq1116.html [2010-12-02 22:04:10 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempWW3720.html [2011-01-04 16:31:04 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempww4396.html [2011-01-03 18:35:58 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempWz1848.html [2010-11-21 14:12:52 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempwz4480.html [2010-11-20 22:30:26 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXA2708.html [2011-01-07 22:33:22 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXa4912.html [2010-11-20 12:59:43 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxc4576.html [2010-11-12 12:25:46 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXe2920.html [2011-01-01 18:53:47 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXf4020.html [2010-12-10 19:27:38 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxg1000.html [2010-12-04 12:26:01 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxg4464.html [2011-01-07 22:33:22 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxg4912.html [2010-12-24 13:18:13 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempxI3564.html [2010-12-11 18:41:50 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempxK4356.html [2010-12-21 20:28:57 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxk4572.html [2010-12-14 17:02:49 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempxkH868.html [2011-01-07 23:05:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXN4468.html [2010-12-22 17:41:59 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXo4500.html [2010-11-13 16:24:53 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxp1524.html [2010-12-29 10:23:43 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxp2744.html [2010-12-23 22:47:04 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxp2896.html [2010-12-04 22:44:15 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXP3188.html [2011-01-04 19:49:15 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXp3320.html [2010-11-06 10:58:18 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempxQ4788.html [2010-11-22 13:33:20 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempXt1472.html [2010-11-08 14:30:32 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxu3064.html [2010-11-05 20:21:38 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempxv2560.html [2010-11-11 18:09:14 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyB4292.html [2010-11-25 18:18:54 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempyf1876.html [2010-12-18 23:55:16 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempyk3940.html [2010-11-17 15:25:15 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempymo120.html [2011-01-07 17:35:09 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyO4660.html [2010-11-11 11:34:39 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyP3272.html [2010-12-22 10:05:48 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYQ2608.html [2010-11-12 16:12:51 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYq3224.html [2010-11-22 13:56:08 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYqb964.html [2010-11-06 11:24:29 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYs2852.html [2010-12-09 20:56:44 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyS4652.html [2010-11-06 12:16:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyT3124.html [2010-12-02 18:48:36 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyU2148.html [2010-11-29 18:23:34 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYu4664.html [2010-11-10 23:59:47 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYW4816.html [2010-11-29 16:46:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYw4996.html [2010-12-30 15:52:58 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempYx1100.html [2010-11-21 14:12:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempyX4480.html [2010-11-06 11:35:43 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempyy1440.html [2010-12-29 15:55:31 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempZc1076.html [2010-11-12 23:12:48 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzC4224.html [2010-12-20 17:56:08 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempZj2332.html [2010-12-16 21:03:40 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzK5072.html [2010-11-20 20:19:52 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempZl3812.html [2010-12-01 16:37:17 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzO4492.html [2010-11-15 16:19:15 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempZQ4164.html [2010-11-30 21:29:59 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempzr4380.html [2011-01-02 15:31:13 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzR4392.html [2010-12-19 18:41:06 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempZS1548.html [2010-11-05 20:37:32 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzT3980.html [2010-11-21 19:42:30 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Tempzt4456.html [2011-01-09 18:20:28 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzT4812.html [2010-12-10 18:22:14 | 000,002,432 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzU3964.html [2010-12-17 22:09:26 | 000,002,089 | ---- | M] () -- C:\Users\Adrian\AppData\Local\TempzV4532.html [color=#A23BEC]< C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4152750467-2395009681-3878379516-1000UA.job >[/color] [2011-01-10 08:04:00 | 000,001,062 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4152750467-2395009681-3878379516-1000UA.job [color=#A23BEC]< C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4152750467-2395009681-3878379516-1000Core.job >[/color] [2011-01-08 19:08:38 | 000,001,010 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4152750467-2395009681-3878379516-1000Core.job [color=#A23BEC]< C:\Windows\oodjobd.INI >[/color] [2011-01-04 17:50:33 | 000,000,042 | ---- | M] () -- C:\Windows\oodjobd.INI [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#A23BEC]< C:\ProgramData\mtbjfghn.xbe >[/color] [2010-12-30 15:51:41 | 000,004,924 | ---- | M] () -- C:\ProgramData\mtbjfghn.xbe [color=#A23BEC]< C:\Windows\SysWOW64\tmp5304.tmp >[/color] [6 C:\Windows\SysWOW64\*.tmp files -> C:\Windows\SysWOW64\*.tmp -> ] [color=#A23BEC]< C:\Windows\SysWOW64\tmp52F3.tmp >[/color] [6 C:\Windows\SysWOW64\*.tmp files -> C:\Windows\SysWOW64\*.tmp -> ] [color=#A23BEC]< C:\Windows\SysWOW64\tmp1114.tmp >[/color] [6 C:\Windows\SysWOW64\*.tmp files -> C:\Windows\SysWOW64\*.tmp -> ] [color=#A23BEC]< C:\Windows\SysWOW64\tmp1104.tmp >[/color] [6 C:\Windows\SysWOW64\*.tmp files -> C:\Windows\SysWOW64\*.tmp -> ] [color=#A23BEC]< >[/color] [color=#A23BEC]< :Commands >[/color] [color=#A23BEC]< [emptytemp] >[/color] [color=#A23BEC]< [start explorer] >[/color] [color=#A23BEC]< [Reboot] >[/color] < End of report >[/log] Extras [log]OTL Extras logfile created on: 2011-01-10 08:13:08 - Run 2 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Adrian\Downloads 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 70,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 84,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 48,83 Gb Total Space | 21,36 Gb Free Space | 43,73% Space Free | Partition Type: NTFS Drive D: | 208,01 Gb Total Space | 113,91 Gb Free Space | 54,76% Space Free | Partition Type: NTFS Drive E: | 208,91 Gb Total Space | 122,29 Gb Free Space | 58,54% Space Free | Partition Type: NTFS Computer Name: ADRIAN-KOMPUTER | User Name: Adrian | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 60 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- C:\Users\Adrian\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{62140B07-129A-2BD0-81D2-2A1A7408ADC8}" = ATI Catalyst Install Manager "{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64) "{7353BAE6-5E49-46C4-A9B5-8A269A313789}" = Crysis WARHEAD(R) "{8027B1DD-D875-4315-8FE9-B2CFDD1BB8F1}" = O&O Defrag Professional "{819CA3BC-2FF8-4811-B42F-421F7BFD3559}" = HP Deskjet F2400 All-in-One Driver 14.0 Rel. 6 "{8753DF4D-64B0-474E-9A97-0AB5585D9A53}" = Logitech Gaming Software 5.04 "{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended "{8E5DA9A6-7A9F-3A6F-BC5C-D6CBCA6A29C7}" = Microsoft .NET Framework 4 Extended PLK Language Pack "{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010 "{90140000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2010 "{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant "{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Sterownik 3D Vision 260.99 "{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 260.99 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 260.99 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.10.0514 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Sterownik dźwięku HD 1.1.9.0 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{BE930E38-7BB3-45B6-85B2-5251F374F844}" = 64 Bit HP CIO Components Installer "{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "CCleaner" = CCleaner "CPUID CPU-Z_is1" = CPUID CPU-Z 1.56 "Crysis WARHEAD(R)" = Crysis WARHEAD(R) "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0297078F-D4C8-4774-B7A3-6BBF2C164C76}_is1" = Dirt 2 Spolszczenie by O22y "{06A1D88C-E102-4527-AF70-29FFD7AF215A}" = Scan "{09CF6AF5-9206-4FD7-9B08-BA6819FB47E3}" = Anno 1404 "{153C7D89-9CF4-4719-A551-C5BF45236DB5}" = redist "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1FDA5A37-B22D-43FF-B582-B8964050DC13}" = Microsoft Games for Windows - LIVE Redistributable "{292F0F52-B62D-4E71-921B-89A682402201}" = Toolbox "{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed "{368BA326-73AD-4351-84ED-3C0A7A52CC53}" = Nero Rescue Agent "{38468127-9E6F-4FC9-B5F7-42D4AD437D96}" = Unigine Heaven Benchmark v2.1 "{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}" = ANNO 1404 "{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}" = FIFA 11 "{434D0831-3E0C-4D03-A5D4-5E1000008400}" = F1 2010 "{43E39830-1826-415D-8BAE-86845787B54B}" = Nero Vision "{4c4b12ee-bf69-477e-9a59-0a49c77c9623}" = Nero 9 Trial "{4F0C7CCF-5666-474B-B02E-AC514A95EC93}" = NVIDIA GAME System Software 2.8.1 "{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module "{5454083B-1308-4485-BF17-1110000B8301}" = Grand Theft Auto IV "{5454083B-1308-4485-BF17-1110000B8302}" = Grand Theft Auto IV "{5454083B-1308-4485-BF17-1110000D8301}" = Grand Theft Auto IV "{5454083B-1308-4485-BF17-1110000D8302}" = Grand Theft Auto IV "{5546F4E9-B0F4-4F54-B949-2AB006C9284F}" = DJ_AIO_06_F2400_SW_Min "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{579BA58C-F33D-4970-9953-B94B43768AC3}" = Grand Theft Auto IV "{587178E7-B1DF-494E-9838-FA4DD36E873C}" = ASUSUpdate "{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress "{62AC81F6-BDD3-4110-9D36-3E9EAAB40999}" = Nero CoverDesigner "{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module "{705B639E-FAAF-40D7-AD58-C445321C7C3F}" = LightScribe System Software "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{7353BAE6-5E49-46C4-A9B5-8A269A313789}" = Crysis WARHEAD(R) "{76A232AF-B7D6-41A4-B795-6B355E6D32B1}" = Tom Clancy's H.A.W.X. 2 "{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart "{7829DB6F-A066-4E40-8912-CB07887C20BB}" = Nero BurnRights "{7F3AD00A-1819-4B15-BB7D-08B3586336D7}" = 3DMark06 "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed "{86A4C6D9-29EE-4719-AFA1-BA3341862B83}" = Microsoft Games for Windows - LIVE "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7 "{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher "{8C0CAA7A-3272-4991-A808-2C7559DE3409}" = Win7codecs "{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010 "{90140000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010 "{90140000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2010 "{90140000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2010 "{90140000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2010 "{90140000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2010 "{90140000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2010 "{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010 "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 "{90140000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010 "{90140000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010 "{90140000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2010 "{90140000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010 "{90140000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2010 "{90140000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2010 "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9C916142-C18C-429D-BFED-40094A7E0BEB}" = The Settlers 7 - Droga do królestwa "{A209525B-3377-43F4-B886-32F6B6E7356F}" = Nero WaveEditor "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress "{AC76BA86-7AD7-1045-7B44-A94000000001}" = Adobe Reader 9.4.1 - Polish "{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF}" = DolbyFiles "{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center "{B78120A0-CF84-4366-A393-4D0A59BC546C}" = Menu Templates - Starter Kit "{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX "{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}" = Need for Speed™ SHIFT "{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter "{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo "{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3 "{D025A639-B9C9-417D-8531-208859000AF8}" = NeroBurningROM "{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.4 Game "{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver "{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime "{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0 "{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer "{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F1861F30-3419-44DB-B2A1-C274825698B3}" = Nero Disc Copy Gadget "{FAB1F336-1B7C-4057-A7BC-2922CD82A781}" = Edimax RT6x Wireless LAN Card "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.5 "Afterburner" = MSI Afterburner 2.0.0 "ALLPlayer_is1" = ALLPlayer V4.X "Ashampoo Burning Studio 10_is1" = Ashampoo Burning Studio 10.0.4 "avast5" = avast! Free Antivirus "Crysis WARHEAD(R)" = Crysis WARHEAD(R) "'DIRT 2'_is1" = 'DIRT 2' "EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50 "Fraps" = Fraps (remove only) "Gadu-Gadu 10" = Gadu-Gadu 10 "GFWL_{434D0831-3E0C-4D03-A5D4-5E1000008400}" = F1 2010 "HD Tune Pro_is1" = HD Tune Pro 4.50 "InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver "NapiProjekt_is1" = NapiProjekt 1.0.6.9 "Need For Speed SHIFT_is1" = Need For Speed SHIFT "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver "Office14.PROPLUS" = Microsoft Office Professional Plus 2010 "OpenAL" = OpenAL "Trials 2 Second Edition_is1" = Trials 2 Second Edition v1.08 "uTorrent" = µTorrent [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "GameRanger" = GameRanger "Google Chrome" = Google Chrome [color=#E56717]========== Last 10 Event Log Errors ==========[/color] Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt! < End of report >[/log]
Tomek01 komentarz 10 stycznia 2011 komentarz 10 stycznia 2011 Możliwe, że wcisnąłeś RunScan a nie RunFix ? To by wyjaśniało brak restartu systemu oraz brak loga OTL ( z usuwania), który powinien się pojawić.
Adrianox360 komentarz 11 stycznia 2011 Autor komentarz 11 stycznia 2011 Mam wersję PL! Jest tak: skanuj, szybki skan, wykonaj skrypt, sprzątanie. Ja dałem skanuj więc napisz czy dobrze. Ważna sprawa, właśnie uruchomiłem pierwszy raz komputer w ciągu dnia i od razu, że skype przestał działać i tp, mrugnął ektan i odłączył się internet- normalka. Ale włączyłem prime do testowania stabilności(każdy wie o co chodzi prime95) i nagle [b]bluescreen [/b] reset. Hmmm co jest nie tak? Napięcie za niskie? Uważam, że przy taktowaniu 3.5 ghz napięcie ustawione na manual 1.375 powinno wystarczyć. Ktoś tam napisał zwiększ napięcie ram, ale jak jak mogę tylko albo o o.150 w dół lub w góre czyli albo 1.200 albo 1.450 jakoś tak. Ram mam ustawione w biosie na auto na 1333 chociaż moge na 1600 ale słyszałem, że przy podkręconym nie powinno się na 1600 ustawiać. Czy zrobienie logów w czsie gry komputer jest niestabilny coś zmieni??
Tomek01 komentarz 11 stycznia 2011 komentarz 11 stycznia 2011 Nie skanuj, tylko wykonaj skrypt i wklejasz skrypt, który podałem. Dajesz log z usuwania, który powstanie oraz nowe logi RSIT i OTL ( z opcji skanuj).
Adrianox360 komentarz 12 stycznia 2011 Autor komentarz 12 stycznia 2011 (edytowane) ok zaraz to zrobie i dam edita. Właśnie włączyłem komputer i oto takie np błędy: [url=http://wgrajfoto.pl][img]http://wgrajfoto.pl/pokazfoto/img0111/beztytulu81f3.png[/img][/url] Zaraz zrobie te skrypty. Ok tu daje skrypt: [log]All processes killed ========== PROCESSES ========== No active process named Explorer.exe was found! ========== FILES ========== C:\Users\Adrian\AppData\Roaming\EurekaLog folder moved successfully. C:\Users\Adrian\AppData\Local\TempAA4432.html moved successfully. C:\Users\Adrian\AppData\Local\TempAB4948.html moved successfully. C:\Users\Adrian\AppData\Local\Tempad4464.html moved successfully. C:\Users\Adrian\AppData\Local\Tempae4452.html moved successfully. C:\Users\Adrian\AppData\Local\Tempai4640.html moved successfully. C:\Users\Adrian\AppData\Local\TempAn4232.html moved successfully. C:\Users\Adrian\AppData\Local\Tempaq3064.html moved successfully. C:\Users\Adrian\AppData\Local\TempaU1980.html moved successfully. C:\Users\Adrian\AppData\Local\TempBa5088.html moved successfully. C:\Users\Adrian\AppData\Local\Tempbd4412.html moved successfully. C:\Users\Adrian\AppData\Local\TempbF4884.html moved successfully. C:\Users\Adrian\AppData\Local\TempbG2148.html moved successfully. C:\Users\Adrian\AppData\Local\TempbG4364.html moved successfully. C:\Users\Adrian\AppData\Local\TempBG4736.html moved successfully. C:\Users\Adrian\AppData\Local\TempbK1748.html moved successfully. C:\Users\Adrian\AppData\Local\Tempbl1224.html moved successfully. C:\Users\Adrian\AppData\Local\TempboX628.html moved successfully. C:\Users\Adrian\AppData\Local\Tempbq3284.html moved successfully. C:\Users\Adrian\AppData\Local\Tempbq4688.html moved successfully. C:\Users\Adrian\AppData\Local\TempBs2108.html moved successfully. C:\Users\Adrian\AppData\Local\Tempbt3812.html moved successfully. C:\Users\Adrian\AppData\Local\Tempbu4100.html moved successfully. C:\Users\Adrian\AppData\Local\Tempbx5948.html moved successfully. C:\Users\Adrian\AppData\Local\Tempby5068.html moved successfully. C:\Users\Adrian\AppData\Local\Tempca4468.html moved successfully. C:\Users\Adrian\AppData\Local\TempCB4144.html moved successfully. C:\Users\Adrian\AppData\Local\Tempcb4816.html moved successfully. C:\Users\Adrian\AppData\Local\Tempcd3700.html moved successfully. C:\Users\Adrian\AppData\Local\Tempch4452.html moved successfully. C:\Users\Adrian\AppData\Local\TempCH4884.html moved successfully. C:\Users\Adrian\AppData\Local\TempcL2188.html moved successfully. C:\Users\Adrian\AppData\Local\TempcM4380.html moved successfully. C:\Users\Adrian\AppData\Local\Tempcn2088.html moved successfully. C:\Users\Adrian\AppData\Local\Tempco4180.html moved successfully. C:\Users\Adrian\AppData\Local\Tempco4692.html moved successfully. C:\Users\Adrian\AppData\Local\TempCP4564.html moved successfully. C:\Users\Adrian\AppData\Local\Tempcs2760.html moved successfully. C:\Users\Adrian\AppData\Local\TempCU1148.html moved successfully. C:\Users\Adrian\AppData\Local\TempCV3336.html moved successfully. C:\Users\Adrian\AppData\Local\TempCW3932.html moved successfully. C:\Users\Adrian\AppData\Local\TempCX4524.html moved successfully. C:\Users\Adrian\AppData\Local\TempCZ4104.html moved successfully. C:\Users\Adrian\AppData\Local\Tempcz4668.html moved successfully. C:\Users\Adrian\AppData\Local\TempcZ5072.html moved successfully. C:\Users\Adrian\AppData\Local\Tempdd3964.html moved successfully. C:\Users\Adrian\AppData\Local\Tempdf3932.html moved successfully. C:\Users\Adrian\AppData\Local\TempdG2332.html moved successfully. C:\Users\Adrian\AppData\Local\TempDh3588.html moved successfully. C:\Users\Adrian\AppData\Local\TempdI5028.html moved successfully. C:\Users\Adrian\AppData\Local\TempdI5092.html moved successfully. C:\Users\Adrian\AppData\Local\TempDj2660.html moved successfully. C:\Users\Adrian\AppData\Local\TempDk4780.html moved successfully. C:\Users\Adrian\AppData\Local\TempdM2876.html moved successfully. C:\Users\Adrian\AppData\Local\TempDP3824.html moved successfully. C:\Users\Adrian\AppData\Local\Tempdq5092.html moved successfully. C:\Users\Adrian\AppData\Local\Tempdr4912.html moved successfully. C:\Users\Adrian\AppData\Local\TempDu3968.html moved successfully. C:\Users\Adrian\AppData\Local\TempDX4704.html moved successfully. C:\Users\Adrian\AppData\Local\TempDY2232.html moved successfully. C:\Users\Adrian\AppData\Local\TempDY5008.html moved successfully. C:\Users\Adrian\AppData\Local\TempdZ4932.html moved successfully. C:\Users\Adrian\AppData\Local\TempEC3196.html moved successfully. C:\Users\Adrian\AppData\Local\Tempef3112.html moved successfully. C:\Users\Adrian\AppData\Local\TempEg3920.html moved successfully. C:\Users\Adrian\AppData\Local\TempeI1360.html moved successfully. C:\Users\Adrian\AppData\Local\TempEI3516.html moved successfully. C:\Users\Adrian\AppData\Local\TempEj2088.html moved successfully. C:\Users\Adrian\AppData\Local\TempeK3756.html moved successfully. C:\Users\Adrian\AppData\Local\Tempem1540.html moved successfully. C:\Users\Adrian\AppData\Local\TempEq3124.html moved successfully. C:\Users\Adrian\AppData\Local\TempeS1848.html moved successfully. C:\Users\Adrian\AppData\Local\TempeV4152.html moved successfully. C:\Users\Adrian\AppData\Local\TempEV4472.html moved successfully. C:\Users\Adrian\AppData\Local\Tempev4596.html moved successfully. C:\Users\Adrian\AppData\Local\TempEx3972.html moved successfully. C:\Users\Adrian\AppData\Local\TempeX4328.html moved successfully. C:\Users\Adrian\AppData\Local\TempeZ1192.html moved successfully. C:\Users\Adrian\AppData\Local\TempEZ4704.html moved successfully. C:\Users\Adrian\AppData\Local\TempFb1524.html moved successfully. C:\Users\Adrian\AppData\Local\TempFc1876.html moved successfully. C:\Users\Adrian\AppData\Local\Tempfc4284.html moved successfully. C:\Users\Adrian\AppData\Local\TempFe4704.html moved successfully. C:\Users\Adrian\AppData\Local\Tempfk3540.html moved successfully. C:\Users\Adrian\AppData\Local\TempFL3140.html moved successfully. C:\Users\Adrian\AppData\Local\TempFLc360.html moved successfully. C:\Users\Adrian\AppData\Local\TempfQ3128.html moved successfully. C:\Users\Adrian\AppData\Local\TempFQ4164.html moved successfully. C:\Users\Adrian\AppData\Local\TempFRA688.html moved successfully. C:\Users\Adrian\AppData\Local\TempFX3588.html moved successfully. C:\Users\Adrian\AppData\Local\TempfZ4272.html moved successfully. C:\Users\Adrian\AppData\Local\Tempfzh120.html moved successfully. C:\Users\Adrian\AppData\Local\Tempgb1628.html moved successfully. C:\Users\Adrian\AppData\Local\TempgB4104.html moved successfully. C:\Users\Adrian\AppData\Local\TempgD4948.html moved successfully. C:\Users\Adrian\AppData\Local\TempGF3320.html moved successfully. C:\Users\Adrian\AppData\Local\Tempgi4668.html moved successfully. C:\Users\Adrian\AppData\Local\Tempgk1316.html moved successfully. C:\Users\Adrian\AppData\Local\TempGn2852.html moved successfully. C:\Users\Adrian\AppData\Local\TempGR4576.html moved successfully. C:\Users\Adrian\AppData\Local\TempgRu360.html moved successfully. C:\Users\Adrian\AppData\Local\TempGX4588.html moved successfully. C:\Users\Adrian\AppData\Local\TempGy4744.html moved successfully. C:\Users\Adrian\AppData\Local\TempHc3460.html moved successfully. C:\Users\Adrian\AppData\Local\TemphD2408.html moved successfully. C:\Users\Adrian\AppData\Local\TemphD4588.html moved successfully. C:\Users\Adrian\AppData\Local\TemphE3352.html moved successfully. C:\Users\Adrian\AppData\Local\Temphg4620.html moved successfully. C:\Users\Adrian\AppData\Local\TemphI1280.html moved successfully. C:\Users\Adrian\AppData\Local\TempHJ3988.html moved successfully. C:\Users\Adrian\AppData\Local\TempHm3520.html moved successfully. C:\Users\Adrian\AppData\Local\TemphN4564.html moved successfully. C:\Users\Adrian\AppData\Local\TempHn4692.html moved successfully. C:\Users\Adrian\AppData\Local\Temphnv372.html moved successfully. C:\Users\Adrian\AppData\Local\TemphO1280.html moved successfully. C:\Users\Adrian\AppData\Local\TempHp3328.html moved successfully. C:\Users\Adrian\AppData\Local\TempHR3156.html moved successfully. C:\Users\Adrian\AppData\Local\Temphr4380.html moved successfully. C:\Users\Adrian\AppData\Local\TemphT4284.html moved successfully. C:\Users\Adrian\AppData\Local\TemphU4512.html moved successfully. C:\Users\Adrian\AppData\Local\TempHX4372.html moved successfully. C:\Users\Adrian\AppData\Local\TempHx4984.html moved successfully. C:\Users\Adrian\AppData\Local\TemphZ1972.html moved successfully. C:\Users\Adrian\AppData\Local\TempiE2720.html moved successfully. C:\Users\Adrian\AppData\Local\TempIe4412.html moved successfully. C:\Users\Adrian\AppData\Local\TempIe4456.html moved successfully. C:\Users\Adrian\AppData\Local\TempIH5116.html moved successfully. C:\Users\Adrian\AppData\Local\TempIi2720.html moved successfully. C:\Users\Adrian\AppData\Local\TempII5648.html moved successfully. C:\Users\Adrian\AppData\Local\Tempimf868.html moved successfully. C:\Users\Adrian\AppData\Local\TempIQ4976.html moved successfully. C:\Users\Adrian\AppData\Local\Tempiu5040.html moved successfully. C:\Users\Adrian\AppData\Local\Tempiv3156.html moved successfully. C:\Users\Adrian\AppData\Local\TempIV3460.html moved successfully. C:\Users\Adrian\AppData\Local\TempiV4564.html moved successfully. C:\Users\Adrian\AppData\Local\Tempiv5016.html moved successfully. C:\Users\Adrian\AppData\Local\TempiX2032.html moved successfully. C:\Users\Adrian\AppData\Local\TempiZ1584.html moved successfully. C:\Users\Adrian\AppData\Local\TempIz4512.html moved successfully. C:\Users\Adrian\AppData\Local\TempIz5104.html moved successfully. C:\Users\Adrian\AppData\Local\Tempja2560.html moved successfully. C:\Users\Adrian\AppData\Local\TempJf3224.html moved successfully. C:\Users\Adrian\AppData\Local\TempJfb672.html moved successfully. C:\Users\Adrian\AppData\Local\TempJH1228.html moved successfully. C:\Users\Adrian\AppData\Local\TempJh4164.html moved successfully. C:\Users\Adrian\AppData\Local\TempJH5116.html moved successfully. C:\Users\Adrian\AppData\Local\Tempjj1300.html moved successfully. C:\Users\Adrian\AppData\Local\Tempjj5020.html moved successfully. C:\Users\Adrian\AppData\Local\TempJL4556.html moved successfully. C:\Users\Adrian\AppData\Local\Tempjm4320.html moved successfully. C:\Users\Adrian\AppData\Local\TempJN4592.html moved successfully. C:\Users\Adrian\AppData\Local\TempjN5116.html moved successfully. C:\Users\Adrian\AppData\Local\TempJo1548.html moved successfully. C:\Users\Adrian\AppData\Local\Tempjp3224.html moved successfully. C:\Users\Adrian\AppData\Local\TempJp4224.html moved successfully. C:\Users\Adrian\AppData\Local\Tempjq1192.html moved successfully. C:\Users\Adrian\AppData\Local\TempjS4256.html moved successfully. C:\Users\Adrian\AppData\Local\TempJt5088.html moved successfully. C:\Users\Adrian\AppData\Local\TempjY2408.html moved successfully. C:\Users\Adrian\AppData\Local\TempJZ2524.html moved successfully. C:\Users\Adrian\AppData\Local\Tempkc2768.html moved successfully. C:\Users\Adrian\AppData\Local\Tempkc4320.html moved successfully. C:\Users\Adrian\AppData\Local\Tempkc4524.html moved successfully. C:\Users\Adrian\AppData\Local\TempKG3064.html moved successfully. C:\Users\Adrian\AppData\Local\TempkH1836.html moved successfully. C:\Users\Adrian\AppData\Local\TempKj4492.html moved successfully. C:\Users\Adrian\AppData\Local\TempkK2344.html moved successfully. C:\Users\Adrian\AppData\Local\TempKk3092.html moved successfully. C:\Users\Adrian\AppData\Local\TempKL4076.html moved successfully. C:\Users\Adrian\AppData\Local\TempKM3064.html moved successfully. C:\Users\Adrian\AppData\Local\TempKn2268.html moved successfully. C:\Users\Adrian\AppData\Local\TempKN2920.html moved successfully. C:\Users\Adrian\AppData\Local\Tempkn4884.html moved successfully. C:\Users\Adrian\AppData\Local\Tempko2232.html moved successfully. C:\Users\Adrian\AppData\Local\TempkP4596.html moved successfully. C:\Users\Adrian\AppData\Local\TempKq4632.html moved successfully. C:\Users\Adrian\AppData\Local\TempkU3504.html moved successfully. C:\Users\Adrian\AppData\Local\TempKu4656.html moved successfully. C:\Users\Adrian\AppData\Local\TempKU4852.html moved successfully. C:\Users\Adrian\AppData\Local\TempKv2932.html moved successfully. C:\Users\Adrian\AppData\Local\TempKW3720.html moved successfully. C:\Users\Adrian\AppData\Local\TempKW4024.html moved successfully. C:\Users\Adrian\AppData\Local\TempKy4456.html moved successfully. C:\Users\Adrian\AppData\Local\TempKY5044.html moved successfully. C:\Users\Adrian\AppData\Local\TempKZ4816.html moved successfully. C:\Users\Adrian\AppData\Local\TempkZ5044.html moved successfully. C:\Users\Adrian\AppData\Local\TemplA4932.html moved successfully. C:\Users\Adrian\AppData\Local\Templb4784.html moved successfully. C:\Users\Adrian\AppData\Local\TempLd4884.html moved successfully. C:\Users\Adrian\AppData\Local\TempLE4152.html moved successfully. C:\Users\Adrian\AppData\Local\Templg1556.html moved successfully. C:\Users\Adrian\AppData\Local\TempLG5008.html moved successfully. C:\Users\Adrian\AppData\Local\TempLI1140.html moved successfully. C:\Users\Adrian\AppData\Local\TempLK4564.html moved successfully. C:\Users\Adrian\AppData\Local\TempLM2032.html moved successfully. C:\Users\Adrian\AppData\Local\TempLm2344.html moved successfully. C:\Users\Adrian\AppData\Local\TemplM4988.html moved successfully. C:\Users\Adrian\AppData\Local\TemplN4500.html moved successfully. C:\Users\Adrian\AppData\Local\Templn4736.html moved successfully. C:\Users\Adrian\AppData\Local\TemplN4884.html moved successfully. C:\Users\Adrian\AppData\Local\TempLo4364.html moved successfully. C:\Users\Adrian\AppData\Local\TempLPV372.html moved successfully. C:\Users\Adrian\AppData\Local\TemplQ4076.html moved successfully. C:\Users\Adrian\AppData\Local\TempLT3336.html moved successfully. C:\Users\Adrian\AppData\Local\Temply3192.html moved successfully. C:\Users\Adrian\AppData\Local\Templz2660.html moved successfully. C:\Users\Adrian\AppData\Local\TemplzC964.html moved successfully. C:\Users\Adrian\AppData\Local\TempMB4104.html moved successfully. C:\Users\Adrian\AppData\Local\Tempme1084.html moved successfully. C:\Users\Adrian\AppData\Local\Tempmf4632.html moved successfully. C:\Users\Adrian\AppData\Local\TempmF4988.html moved successfully. C:\Users\Adrian\AppData\Local\TempMJ1140.html moved successfully. C:\Users\Adrian\AppData\Local\TempMk3304.html moved successfully. C:\Users\Adrian\AppData\Local\Tempmk3516.html moved successfully. C:\Users\Adrian\AppData\Local\Tempml4116.html moved successfully. C:\Users\Adrian\AppData\Local\TempMM3980.html moved successfully. C:\Users\Adrian\AppData\Local\TempMM4848.html moved successfully. C:\Users\Adrian\AppData\Local\TempMN3328.html moved successfully. C:\Users\Adrian\AppData\Local\TempMO2540.html moved successfully. C:\Users\Adrian\AppData\Local\Tempmq4420.html moved successfully. C:\Users\Adrian\AppData\Local\TempMR1556.html moved successfully. C:\Users\Adrian\AppData\Local\TempmS2708.html moved successfully. C:\Users\Adrian\AppData\Local\TempMS4380.html moved successfully. C:\Users\Adrian\AppData\Local\TempmT1500.html moved successfully. C:\Users\Adrian\AppData\Local\TempMt4816.html moved successfully. C:\Users\Adrian\AppData\Local\TempMV2876.html moved successfully. C:\Users\Adrian\AppData\Local\TempMx4744.html moved successfully. C:\Users\Adrian\AppData\Local\TempMx4912.html moved successfully. C:\Users\Adrian\AppData\Local\Tempmy3320.html moved successfully. C:\Users\Adrian\AppData\Local\TempNf5056.html moved successfully. C:\Users\Adrian\AppData\Local\TempNK3700.html moved successfully. C:\Users\Adrian\AppData\Local\TempNL5068.html moved successfully. C:\Users\Adrian\AppData\Local\TempnM4024.html moved successfully. C:\Users\Adrian\AppData\Local\TempNN3864.html moved successfully. C:\Users\Adrian\AppData\Local\TempnQ4656.html moved successfully. C:\Users\Adrian\AppData\Local\TempNR4256.html moved successfully. C:\Users\Adrian\AppData\Local\Tempnt4376.html moved successfully. C:\Users\Adrian\AppData\Local\TempnT4444.html moved successfully. C:\Users\Adrian\AppData\Local\Tempnu1524.html moved successfully. C:\Users\Adrian\AppData\Local\Tempnv3756.html moved successfully. C:\Users\Adrian\AppData\Local\TempnV4164.html moved successfully. C:\Users\Adrian\AppData\Local\TempNX4532.html moved successfully. C:\Users\Adrian\AppData\Local\TempnY3304.html moved successfully. C:\Users\Adrian\AppData\Local\TempoC4984.html moved successfully. C:\Users\Adrian\AppData\Local\TempoD3940.html moved successfully. C:\Users\Adrian\AppData\Local\Tempod3980.html moved successfully. C:\Users\Adrian\AppData\Local\TempOf4848.html moved successfully. C:\Users\Adrian\AppData\Local\Tempoh2736.html moved successfully. C:\Users\Adrian\AppData\Local\TempoH2792.html moved successfully. C:\Users\Adrian\AppData\Local\Tempoi4116.html moved successfully. C:\Users\Adrian\AppData\Local\TempoM4572.html moved successfully. C:\Users\Adrian\AppData\Local\Tempop2680.html moved successfully. C:\Users\Adrian\AppData\Local\TempoP4660.html moved successfully. C:\Users\Adrian\AppData\Local\TempOs4444.html moved successfully. C:\Users\Adrian\AppData\Local\TempoT3860.html moved successfully. C:\Users\Adrian\AppData\Local\TempOt4800.html moved successfully. C:\Users\Adrian\AppData\Local\TempOV4648.html moved successfully. C:\Users\Adrian\AppData\Local\TempOw1996.html moved successfully. C:\Users\Adrian\AppData\Local\TempoY1980.html moved successfully. C:\Users\Adrian\AppData\Local\TempOz4028.html moved successfully. C:\Users\Adrian\AppData\Local\Temppb4484.html moved successfully. C:\Users\Adrian\AppData\Local\TempPC2868.html moved successfully. C:\Users\Adrian\AppData\Local\TempPF1364.html moved successfully. C:\Users\Adrian\AppData\Local\TempPf4180.html moved successfully. C:\Users\Adrian\AppData\Local\Tempph2868.html moved successfully. C:\Users\Adrian\AppData\Local\TempPJ4688.html moved successfully. C:\Users\Adrian\AppData\Local\Temppk4812.html moved successfully. C:\Users\Adrian\AppData\Local\TempPO2792.html moved successfully. C:\Users\Adrian\AppData\Local\TemppO5116.html moved successfully. C:\Users\Adrian\AppData\Local\TempPq4392.html moved successfully. C:\Users\Adrian\AppData\Local\TempPQ4800.html moved successfully. C:\Users\Adrian\AppData\Local\TempPr4800.html moved successfully. C:\Users\Adrian\AppData\Local\Tempps1996.html moved successfully. C:\Users\Adrian\AppData\Local\Temppt4996.html moved successfully. C:\Users\Adrian\AppData\Local\Temppu4772.html moved successfully. C:\Users\Adrian\AppData\Local\TemppV2736.html moved successfully. C:\Users\Adrian\AppData\Local\Temppv2932.html moved successfully. C:\Users\Adrian\AppData\Local\TempPw3920.html moved successfully. C:\Users\Adrian\AppData\Local\TempQe5020.html moved successfully. C:\Users\Adrian\AppData\Local\TempQg1440.html moved successfully. C:\Users\Adrian\AppData\Local\TempqHg964.html moved successfully. C:\Users\Adrian\AppData\Local\TempQI3540.html moved successfully. C:\Users\Adrian\AppData\Local\Tempqj4420.html moved successfully. C:\Users\Adrian\AppData\Local\Tempqn4100.html moved successfully. C:\Users\Adrian\AppData\Local\TempQO3112.html moved successfully. C:\Users\Adrian\AppData\Local\TempQp3272.html moved successfully. C:\Users\Adrian\AppData\Local\Tempqr5104.html moved successfully. C:\Users\Adrian\AppData\Local\Tempqsn628.html moved successfully. C:\Users\Adrian\AppData\Local\Tempqt1628.html moved successfully. C:\Users\Adrian\AppData\Local\TempqU3364.html moved successfully. C:\Users\Adrian\AppData\Local\TempqW1300.html moved successfully. C:\Users\Adrian\AppData\Local\TempqX1148.html moved successfully. C:\Users\Adrian\AppData\Local\TempQY4648.html moved successfully. C:\Users\Adrian\AppData\Local\TempqZ5028.html moved successfully. C:\Users\Adrian\AppData\Local\TempRA3716.html moved successfully. C:\Users\Adrian\AppData\Local\TempRb4588.html moved successfully. C:\Users\Adrian\AppData\Local\TemprC2268.html moved successfully. C:\Users\Adrian\AppData\Local\Temprc4784.html moved successfully. C:\Users\Adrian\AppData\Local\TempRi4176.html moved successfully. C:\Users\Adrian\AppData\Local\Temprl1360.html moved successfully. C:\Users\Adrian\AppData\Local\TempRl4464.html moved successfully. C:\Users\Adrian\AppData\Local\TempRm1176.html moved successfully. C:\Users\Adrian\AppData\Local\TempRn1100.html moved successfully. C:\Users\Adrian\AppData\Local\Tempro1364.html moved successfully. C:\Users\Adrian\AppData\Local\TempRo1908.html moved successfully. C:\Users\Adrian\AppData\Local\TemprS3988.html moved successfully. C:\Users\Adrian\AppData\Local\Tempru4652.html moved successfully. C:\Users\Adrian\AppData\Local\TempRV2896.html moved successfully. C:\Users\Adrian\AppData\Local\Temprv4588.html moved successfully. C:\Users\Adrian\AppData\Local\TempRW1116.html moved successfully. C:\Users\Adrian\AppData\Local\Temprx4900.html moved successfully. C:\Users\Adrian\AppData\Local\TemprY3968.html moved successfully. C:\Users\Adrian\AppData\Local\Temprz4020.html moved successfully. C:\Users\Adrian\AppData\Local\TempSa3720.html moved successfully. C:\Users\Adrian\AppData\Local\TempSDw832.html moved successfully. C:\Users\Adrian\AppData\Local\TempSF2384.html moved successfully. C:\Users\Adrian\AppData\Local\TempSI2156.html moved successfully. C:\Users\Adrian\AppData\Local\Tempsi4176.html moved successfully. C:\Users\Adrian\AppData\Local\Tempsi4912.html moved successfully. C:\Users\Adrian\AppData\Local\TempSj4584.html moved successfully. C:\Users\Adrian\AppData\Local\TempSk4664.html moved successfully. C:\Users\Adrian\AppData\Local\TempsL1500.html moved successfully. C:\Users\Adrian\AppData\Local\TempSM4860.html moved successfully. C:\Users\Adrian\AppData\Local\TempsM4988.html moved successfully. C:\Users\Adrian\AppData\Local\TempsN4168.html moved successfully. C:\Users\Adrian\AppData\Local\TempsO1000.html moved successfully. C:\Users\Adrian\AppData\Local\TempSS4772.html moved successfully. C:\Users\Adrian\AppData\Local\TempSZ1836.html moved successfully. C:\Users\Adrian\AppData\Local\TempSz3972.html moved successfully. C:\Users\Adrian\AppData\Local\TempTF2752.html moved successfully. C:\Users\Adrian\AppData\Local\TemptF5056.html moved successfully. C:\Users\Adrian\AppData\Local\TempTg3448.html moved successfully. C:\Users\Adrian\AppData\Local\Tempth4512.html moved successfully. C:\Users\Adrian\AppData\Local\TempTH4884.html moved successfully. C:\Users\Adrian\AppData\Local\TempTi1316.html moved successfully. C:\Users\Adrian\AppData\Local\TempTI2384.html moved successfully. C:\Users\Adrian\AppData\Local\TempTI5040.html moved successfully. C:\Users\Adrian\AppData\Local\TemptJ4464.html moved successfully. C:\Users\Adrian\AppData\Local\TempTk4396.html moved successfully. C:\Users\Adrian\AppData\Local\TempTm3192.html moved successfully. C:\Users\Adrian\AppData\Local\TempTn1908.html moved successfully. C:\Users\Adrian\AppData\Local\Temptpu672.html moved successfully. C:\Users\Adrian\AppData\Local\TemptR2768.html moved successfully. C:\Users\Adrian\AppData\Local\TempTR3140.html moved successfully. C:\Users\Adrian\AppData\Local\Temptr3864.html moved successfully. C:\Users\Adrian\AppData\Local\TempTs3824.html moved successfully. C:\Users\Adrian\AppData\Local\Temptt1176.html moved successfully. C:\Users\Adrian\AppData\Local\TempTx3188.html moved successfully. C:\Users\Adrian\AppData\Local\TemptZ3124.html moved successfully. C:\Users\Adrian\AppData\Local\TemptZ4352.html moved successfully. C:\Users\Adrian\AppData\Local\Tempua4232.html moved successfully. C:\Users\Adrian\AppData\Local\TempuE4788.html moved successfully. C:\Users\Adrian\AppData\Local\TempuF4784.html moved successfully. C:\Users\Adrian\AppData\Local\TempUkl964.html moved successfully. C:\Users\Adrian\AppData\Local\Tempul2752.html moved successfully. C:\Users\Adrian\AppData\Local\TempuL4372.html moved successfully. C:\Users\Adrian\AppData\Local\TempuO2188.html moved successfully. C:\Users\Adrian\AppData\Local\TempUP3124.html moved successfully. C:\Users\Adrian\AppData\Local\TempUq3980.html moved successfully. C:\Users\Adrian\AppData\Local\TempuQ4432.html moved successfully. C:\Users\Adrian\AppData\Local\Tempus1540.html moved successfully. C:\Users\Adrian\AppData\Local\TempUs4704.html moved successfully. C:\Users\Adrian\AppData\Local\Temput3196.html moved successfully. C:\Users\Adrian\AppData\Local\TempUt3352.html moved successfully. C:\Users\Adrian\AppData\Local\TempuY4244.html moved successfully. C:\Users\Adrian\AppData\Local\TempVA2524.html moved successfully. C:\Users\Adrian\AppData\Local\Tempva4244.html moved successfully. C:\Users\Adrian\AppData\Local\Tempvb3520.html moved successfully. C:\Users\Adrian\AppData\Local\Tempvc5016.html moved successfully. C:\Users\Adrian\AppData\Local\TempVD3716.html moved successfully. C:\Users\Adrian\AppData\Local\TempVE4556.html moved successfully. C:\Users\Adrian\AppData\Local\TempvE4988.html moved successfully. C:\Users\Adrian\AppData\Local\TempvF3788.html moved successfully. C:\Users\Adrian\AppData\Local\Tempvg4640.html moved successfully. C:\Users\Adrian\AppData\Local\TempvN4412.html moved successfully. C:\Users\Adrian\AppData\Local\TempVn4564.html moved successfully. C:\Users\Adrian\AppData\Local\Tempvo3364.html moved successfully. C:\Users\Adrian\AppData\Local\TempVO4912.html moved successfully. C:\Users\Adrian\AppData\Local\TempvQ1748.html moved successfully. C:\Users\Adrian\AppData\Local\TempVQ4784.html moved successfully. C:\Users\Adrian\AppData\Local\TempVT3504.html moved successfully. C:\Users\Adrian\AppData\Local\Tempvu3320.html moved successfully. C:\Users\Adrian\AppData\Local\Tempvv1472.html moved successfully. C:\Users\Adrian\AppData\Local\Tempvv3860.html moved successfully. C:\Users\Adrian\AppData\Local\Tempvv4860.html moved successfully. C:\Users\Adrian\AppData\Local\TempVw5648.html moved successfully. C:\Users\Adrian\AppData\Local\TempVz1228.html moved successfully. C:\Users\Adrian\AppData\Local\Tempwc3092.html moved successfully. C:\Users\Adrian\AppData\Local\TempWc4028.html moved successfully. C:\Users\Adrian\AppData\Local\TempWj4412.html moved successfully. C:\Users\Adrian\AppData\Local\Tempwl2156.html moved successfully. C:\Users\Adrian\AppData\Local\TempWl2820.html moved successfully. C:\Users\Adrian\AppData\Local\TempWq1116.html moved successfully. C:\Users\Adrian\AppData\Local\TempWW3720.html moved successfully. C:\Users\Adrian\AppData\Local\Tempww4396.html moved successfully. C:\Users\Adrian\AppData\Local\TempWz1848.html moved successfully. C:\Users\Adrian\AppData\Local\Tempwz4480.html moved successfully. C:\Users\Adrian\AppData\Local\TempXA2708.html moved successfully. C:\Users\Adrian\AppData\Local\TempXa4912.html moved successfully. C:\Users\Adrian\AppData\Local\Tempxc4576.html moved successfully. C:\Users\Adrian\AppData\Local\TempXe2920.html moved successfully. C:\Users\Adrian\AppData\Local\TempXf4020.html moved successfully. C:\Users\Adrian\AppData\Local\Tempxg1000.html moved successfully. C:\Users\Adrian\AppData\Local\Tempxg4464.html moved successfully. C:\Users\Adrian\AppData\Local\Tempxg4912.html moved successfully. C:\Users\Adrian\AppData\Local\TempxI3564.html moved successfully. C:\Users\Adrian\AppData\Local\TempxK4356.html moved successfully. C:\Users\Adrian\AppData\Local\Tempxk4572.html moved successfully. C:\Users\Adrian\AppData\Local\TempxkH868.html moved successfully. C:\Users\Adrian\AppData\Local\TempXM4800.html moved successfully. C:\Users\Adrian\AppData\Local\TempXN4468.html moved successfully. C:\Users\Adrian\AppData\Local\TempXo4500.html moved successfully. C:\Users\Adrian\AppData\Local\Tempxp1524.html moved successfully. C:\Users\Adrian\AppData\Local\Tempxp2744.html moved successfully. C:\Users\Adrian\AppData\Local\Tempxp2896.html moved successfully. C:\Users\Adrian\AppData\Local\TempXP3188.html moved successfully. C:\Users\Adrian\AppData\Local\TempXp3320.html moved successfully. C:\Users\Adrian\AppData\Local\TempxQ4788.html moved successfully. C:\Users\Adrian\AppData\Local\TempXt1472.html moved successfully. C:\Users\Adrian\AppData\Local\Tempxu3064.html moved successfully. C:\Users\Adrian\AppData\Local\Tempxv2560.html moved successfully. C:\Users\Adrian\AppData\Local\TempyB4292.html moved successfully. C:\Users\Adrian\AppData\Local\Tempyf1876.html moved successfully. C:\Users\Adrian\AppData\Local\Tempyk3940.html moved successfully. C:\Users\Adrian\AppData\Local\Tempymo120.html moved successfully. C:\Users\Adrian\AppData\Local\TempyO4660.html moved successfully. C:\Users\Adrian\AppData\Local\TempyP3272.html moved successfully. C:\Users\Adrian\AppData\Local\TempYQ2608.html moved successfully. C:\Users\Adrian\AppData\Local\TempYq3224.html moved successfully. C:\Users\Adrian\AppData\Local\TempYqb964.html moved successfully. C:\Users\Adrian\AppData\Local\TempYs2852.html moved successfully. C:\Users\Adrian\AppData\Local\TempyS4652.html moved successfully. C:\Users\Adrian\AppData\Local\TempyT3124.html moved successfully. C:\Users\Adrian\AppData\Local\TempyU2148.html moved successfully. C:\Users\Adrian\AppData\Local\TempYu4664.html moved successfully. C:\Users\Adrian\AppData\Local\TempYW4816.html moved successfully. C:\Users\Adrian\AppData\Local\TempYw4996.html moved successfully. C:\Users\Adrian\AppData\Local\TempYx1100.html moved successfully. C:\Users\Adrian\AppData\Local\Tempyx2820.html moved successfully. C:\Users\Adrian\AppData\Local\TempyX4480.html moved successfully. C:\Users\Adrian\AppData\Local\Tempyy1440.html moved successfully. C:\Users\Adrian\AppData\Local\TempZc1076.html moved successfully. C:\Users\Adrian\AppData\Local\TempzC4224.html moved successfully. C:\Users\Adrian\AppData\Local\TempZj2332.html moved successfully. C:\Users\Adrian\AppData\Local\TempzK5072.html moved successfully. C:\Users\Adrian\AppData\Local\TempZl3812.html moved successfully. C:\Users\Adrian\AppData\Local\TempzO4492.html moved successfully. C:\Users\Adrian\AppData\Local\TempZQ4164.html moved successfully. C:\Users\Adrian\AppData\Local\Tempzr4380.html moved successfully. C:\Users\Adrian\AppData\Local\TempzR4392.html moved successfully. C:\Users\Adrian\AppData\Local\TempZS1548.html moved successfully. C:\Users\Adrian\AppData\Local\TempzT3980.html moved successfully. C:\Users\Adrian\AppData\Local\Tempzt4456.html moved successfully. C:\Users\Adrian\AppData\Local\TempzT4812.html moved successfully. C:\Users\Adrian\AppData\Local\TempzU3964.html moved successfully. C:\Users\Adrian\AppData\Local\TempzV4532.html moved successfully. C:\Users\Adrian\AppData\Local\TempzV4852.html moved successfully. C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4152750467-2395009681-3878379516-1000UA.job moved successfully. C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4152750467-2395009681-3878379516-1000Core.job moved successfully. C:\Windows\oodjobd.INI moved successfully. C:\ProgramData\mtbjfghn.xbe moved successfully. C:\Windows\SysWOW64\tmp5304.tmp moved successfully. C:\Windows\SysWOW64\tmp52F3.tmp moved successfully. C:\Windows\SysWOW64\tmp1114.tmp moved successfully. C:\Windows\SysWOW64\tmp1104.tmp moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Adrian ->Temp folder emptied: 3045334 bytes ->Temporary Internet Files folder emptied: 24917518 bytes ->Java cache emptied: 12069338 bytes ->Google Chrome cache emptied: 264935029 bytes ->Flash cache emptied: 2646 bytes User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 200704 bytes %systemroot%\System32 .tmp files removed: 1619120 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 545930 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 293,00 mb[/log] OTL skan [log]OTL logfile created on: 2011-01-12 13:25:33 - Run 3 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Adrian\Downloads 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 70,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 84,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 48,83 Gb Total Space | 21,27 Gb Free Space | 43,56% Space Free | Partition Type: NTFS Drive D: | 208,01 Gb Total Space | 113,49 Gb Free Space | 54,56% Space Free | Partition Type: NTFS Drive E: | 208,91 Gb Total Space | 122,29 Gb Free Space | 58,54% Space Free | Partition Type: NTFS Computer Name: ADRIAN-KOMPUTER | User Name: Adrian | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: Off | File Age = 60 Days [color=#E56717]========== Processes (All) ==========[/color] PRC - [2011-01-09 17:45:02 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Adrian\Downloads\OTL.exe PRC - [2010-12-09 00:28:23 | 000,991,800 | ---- | M] (Google Inc.) -- C:\Users\Adrian\AppData\Local\Google\Chrome\Application\chrome.exe PRC - [2010-11-05 18:59:11 | 000,136,176 | ---- | M] (Google Inc.) -- C:\Users\Adrian\AppData\Local\Google\Update\GoogleUpdate.exe PRC - [2010-10-16 11:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2010-09-23 04:47:04 | 000,035,760 | ---- | M] (Adobe Systems Incorporated) -- D:\PROGRAMY\Adobe\Reader 9.0\Reader\reader_sl.exe PRC - [2010-09-07 17:12:02 | 002,838,912 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2010-09-07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2010-08-16 13:50:42 | 000,073,728 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe PRC - [2010-05-18 15:13:58 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe PRC - [2010-03-16 02:58:36 | 000,718,208 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE PRC - [2010-01-22 12:29:40 | 000,106,496 | ---- | M] (NEC Electronics Corporation) -- C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe PRC - [2009-11-04 15:43:18 | 001,617,920 | ---- | M] (Edimax Technology Co., Ltd) -- C:\Program Files (x86)\Edimax\Common\RaUI.exe PRC - [2009-10-06 11:57:44 | 000,185,632 | ---- | M] (Ralink Technology, Corp.) -- C:\Program Files (x86)\Edimax\Common\RaRegistry.exe [color=#E56717]========== Modules (All) ==========[/color] MOD - [2011-01-09 17:45:02 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Adrian\Downloads\OTL.exe MOD - [2010-08-21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll MOD - [2010-07-27 15:03:24 | 012,867,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll MOD - [2010-06-29 06:02:02 | 001,413,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll MOD - [2010-04-07 08:10:36 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll MOD - [2010-03-24 07:37:04 | 001,289,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll MOD - [2009-12-11 08:39:06 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll MOD - [2009-12-11 08:36:33 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll MOD - [2009-07-14 02:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll MOD - [2009-07-14 02:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll MOD - [2009-07-14 02:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll MOD - [2009-07-14 02:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll MOD - [2009-07-14 02:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll MOD - [2009-07-14 02:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll MOD - [2009-07-14 02:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll MOD - [2009-07-14 02:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll MOD - [2009-07-14 02:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll MOD - [2009-07-14 02:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll MOD - [2009-07-14 02:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll MOD - [2009-07-14 02:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll MOD - [2009-07-14 02:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll MOD - [2009-07-14 02:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll MOD - [2009-07-14 02:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll MOD - [2009-07-14 02:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll MOD - [2009-07-14 02:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll MOD - [2009-07-14 02:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll MOD - [2009-07-14 02:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll MOD - [2009-07-14 02:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll MOD - [2009-07-14 02:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll MOD - [2009-07-14 02:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll MOD - [2009-07-14 02:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll MOD - [2009-07-14 02:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2009-07-14 02:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll MOD - [2009-07-14 02:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll MOD - [2009-07-14 02:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll MOD - [2009-07-14 02:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll MOD - [2009-07-14 02:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll MOD - [2009-07-14 02:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll MOD - [2009-07-14 02:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009-07-14 02:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv MOD - [2009-07-14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll MOD - [2009-07-14 02:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll MOD - [2009-07-14 02:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll MOD - [2009-07-14 02:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll MOD - [2009-07-14 02:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll MOD - [2009-07-14 02:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll MOD - [2009-07-14 02:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll MOD - [2009-07-14 02:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - File not found [Auto | Stopped] -- C:\Windows\SysNative\srvany.exe -- (KMService) SRV:[b]64bit:[/b] - [2010-09-07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner) SRV:[b]64bit:[/b] - [2010-09-07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner) SRV:[b]64bit:[/b] - [2010-09-07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2010-11-09 23:20:03 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\srvany.exe -- (KMService) SRV - [2010-10-16 11:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2010-09-30 12:30:10 | 003,140,424 | ---- | M] (O&O Software GmbH) [Auto | Running] -- D:\GRY\OO Software\Defrag\oodag.exe -- (OODefragAgent) SRV - [2010-05-18 15:13:58 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-10-06 11:57:44 | 000,212,256 | ---- | M] (Ralink Technology, Corp.) [Auto | Running] -- C:\Program Files (x86)\Edimax\Common\RaRegistry64.exe -- (RalinkRegistryWriter64) SRV - [2009-10-06 11:57:44 | 000,185,632 | ---- | M] (Ralink Technology, Corp.) [Auto | Running] -- C:\Program Files (x86)\Edimax\Common\RaRegistry.exe -- (RalinkRegistryWriter) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010-11-18 18:29:06 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt) DRV:[b]64bit:[/b] - [2010-11-18 18:29:06 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt) DRV:[b]64bit:[/b] - [2010-11-08 16:45:13 | 000,828,912 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010-09-07 21:08:55 | 000,155,752 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:[b]64bit:[/b] - [2010-09-07 16:47:33 | 000,061,008 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2010-07-09 13:19:04 | 000,021,480 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz134_x64.sys -- (cpuz134) DRV:[b]64bit:[/b] - [2010-04-27 16:57:20 | 000,016,200 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmVirHid.sys -- (WmVirHid) DRV:[b]64bit:[/b] - [2010-04-27 16:57:14 | 000,036,936 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmHidLo.sys -- (WmHidLo) DRV:[b]64bit:[/b] - [2010-04-27 16:57:12 | 000,026,440 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmBEnum.sys -- (WmBEnum) DRV:[b]64bit:[/b] - [2010-04-27 14:03:12 | 000,077,512 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmXlCore.sys -- (WmXlCore) DRV:[b]64bit:[/b] - [2010-04-27 14:02:42 | 000,043,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmFilter.sys -- (WmFilter) DRV:[b]64bit:[/b] - [2010-03-04 14:43:00 | 000,346,144 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2010-01-22 12:22:22 | 000,180,224 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc) DRV:[b]64bit:[/b] - [2010-01-22 12:22:18 | 000,077,824 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub) DRV:[b]64bit:[/b] - [2009-10-16 03:15:00 | 000,439,808 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr6164.sys -- (rt61x64) DRV:[b]64bit:[/b] - [2009-08-23 23:55:32 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO) DRV:[b]64bit:[/b] - [2009-07-16 04:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O4:[b]64bit:[/b] - HKLM..\Run: [OODefragTray] D:\GRY\OO Software\Defrag\oodtray.exe (O&O Software GmbH) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation) O4 - HKCU..\Run: [ALLUpdate] D:\PROGRAMY\ALLPlayer\ALLUpdate.exe () O4 - HKCU..\Run: [DAEMON Tools Lite] D:\PROGRAMY\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O13 - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{f838e424-e90e-11df-8fca-485b39c9a241}\Shell - "" = AutoRun O33 - MountPoints2\{f838e424-e90e-11df-8fca-485b39c9a241}\Shell\AutoRun\command - "" = G:\autorun.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (OODBS) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Base - Driver Group SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group SafeBootMin:[b]64bit:[/b] File system - Driver Group SafeBootMin:[b]64bit:[/b] Filter - Driver Group SafeBootMin:[b]64bit:[/b] HelpSvc - Service SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group SafeBootMin:[b]64bit:[/b] sacsvr - Service SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] vmms - Service SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Base - Driver Group SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group SafeBootNet:[b]64bit:[/b] File system - Driver Group SafeBootNet:[b]64bit:[/b] Filter - Driver Group SafeBootNet:[b]64bit:[/b] HelpSvc - Service SafeBootNet:[b]64bit:[/b] Messenger - Service SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group SafeBootNet:[b]64bit:[/b] Network - Driver Group SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group SafeBootNet:[b]64bit:[/b] rdsessmgr - Service SafeBootNet:[b]64bit:[/b] sacsvr - Service SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] TDI - Driver Group SafeBootNet:[b]64bit:[/b] vmms - Service SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2011-01-12 13:17:55 | 000,000,000 | ---D | C] -- C:\_OTL [2011-01-09 17:52:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\trend micro [2011-01-09 17:52:56 | 000,000,000 | ---D | C] -- C:\rsit [2011-01-07 23:01:02 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Rovio [2011-01-07 16:52:58 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\HD Tune Pro [2011-01-07 16:52:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune Pro [2011-01-06 19:17:16 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Desktop\gra [2011-01-04 19:27:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SpeedFan [2011-01-02 15:10:11 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Settlers7 [2010-12-30 15:51:42 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Carambis [2010-12-28 14:14:12 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Logitech [2010-12-28 14:11:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech [2010-12-28 14:11:22 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech [2010-12-26 19:25:10 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Trials 2 [2010-12-26 19:25:10 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Redlynx [2010-12-26 19:16:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RedLynx [2010-12-25 21:38:23 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\GameRanger [2010-12-25 12:06:34 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Microsoft Games [2010-12-23 21:04:19 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IVMP [2010-12-23 17:26:15 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\oodag [2010-12-23 17:11:03 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\O&O [2010-12-23 17:10:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O&O Software [2010-12-23 15:23:50 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Ashampoo [2010-12-23 15:10:24 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\ashampoo [2010-12-23 15:10:24 | 000,000,000 | ---D | C] -- C:\ProgramData\ashampoo [2010-12-23 15:10:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo [2010-12-21 19:36:03 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Codemasters [2010-12-19 14:27:42 | 002,578,576 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll [2010-12-19 14:27:41 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll [2010-12-19 14:27:41 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll [2010-12-19 14:27:41 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll [2010-12-19 14:27:41 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll [2010-12-19 14:27:40 | 000,220,496 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFNHK64.dll [2010-12-19 14:27:40 | 000,081,232 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFCOM64.dll [2010-12-19 14:27:40 | 000,078,160 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFAPO64.dll [2010-12-19 14:27:40 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll [2010-12-19 14:27:36 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll [2010-12-19 14:27:36 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll [2010-12-19 14:27:36 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll [2010-12-19 14:27:36 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll [2010-12-19 14:27:36 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll [2010-12-19 14:27:36 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll [2010-12-19 14:27:33 | 001,718,616 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64A.dll [2010-12-19 14:27:33 | 000,421,720 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64A.dll [2010-12-19 14:27:33 | 000,127,832 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64A.dll [2010-12-19 14:27:33 | 000,108,888 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64A.dll [2010-12-19 14:27:33 | 000,074,584 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64A.dll [2010-12-19 14:27:32 | 000,334,680 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll [2010-12-19 14:27:31 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll [2010-12-19 14:27:31 | 001,868,944 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll [2010-12-19 14:27:31 | 000,341,336 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll [2010-12-19 14:27:31 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll [2010-12-19 14:27:24 | 001,937,312 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll [2010-12-19 14:27:24 | 001,327,208 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll [2010-12-19 14:27:24 | 001,179,752 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll [2010-12-19 14:27:24 | 000,491,112 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll [2010-12-19 14:27:24 | 000,475,752 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll [2010-12-19 14:27:24 | 000,317,032 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll [2010-12-19 14:27:24 | 000,269,928 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll [2010-12-19 14:27:24 | 000,126,056 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll [2010-12-19 14:27:23 | 001,111,656 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll [2010-12-19 14:27:23 | 000,504,936 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll [2010-12-19 14:27:23 | 000,266,856 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll [2010-12-19 14:27:23 | 000,125,544 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll [2010-12-19 14:27:23 | 000,125,032 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll [2010-12-18 12:30:39 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\SKIDROW [2010-12-18 12:29:57 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Hothead Games [2010-12-12 20:42:15 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Desktop\all [2010-12-11 16:01:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Ripple Sound [2010-12-11 16:01:38 | 001,380,352 | ---- | C] (Blue Ripple Sound Limited) -- C:\Windows\SysWow64\rapture3d_oal.dll [2010-12-11 16:01:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BRS [2010-12-10 19:21:08 | 000,000,000 | ---D | C] -- C:\ProgramData\LightScribe [2010-12-10 19:21:07 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Nero [2010-12-10 19:05:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero [2010-12-10 19:04:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero [2010-12-10 19:04:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero [2010-12-10 19:00:49 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling [2010-12-10 19:00:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\LightScribe [2010-12-10 18:10:41 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Canneverbe Limited [2010-12-10 18:10:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Canneverbe Limited [2010-12-05 18:28:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\KONAMI [2010-12-05 15:48:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PESEdit.com 2011 Patch [2010-12-04 20:58:58 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\NFS SHIFT [2010-12-04 20:22:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard [2010-12-04 20:21:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts [2010-12-04 16:29:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Logitech [2010-12-03 17:23:46 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Wings of Prey [2010-12-03 16:56:37 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\WOP [2010-12-03 16:56:37 | 000,000,000 | ---D | C] -- C:\ProgramData\WOP [2010-11-29 17:16:33 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Moje Gry [2010-11-29 16:46:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts [2010-11-27 18:04:43 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Savegames [2010-11-24 14:46:39 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\.minecraft [2010-11-24 14:29:45 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\bin [2010-11-24 14:29:42 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\resourceses [2010-11-23 16:47:38 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Anti-Malware [2010-11-22 13:22:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NapiProjekt [2010-11-21 19:48:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shark007 Codecs [2010-11-21 19:48:29 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Win7codecs [2010-11-21 19:48:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Win7codecs [2010-11-21 19:48:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Win7codecs [2010-11-20 21:29:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2010-11-20 18:07:14 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\Anno 1404 [2010-11-20 17:59:57 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Ubisoft [2010-11-20 17:57:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Tages [2010-11-19 21:04:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts [2010-11-19 21:04:16 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Core [2010-11-19 18:10:29 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\The Creative Assembly [2010-11-18 16:38:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies [2010-11-18 16:38:47 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\AGEIA [2010-11-18 15:50:11 | 000,000,000 | ---D | C] -- C:\Users\Adrian\Documents\prace szkolne [2010-11-17 17:34:05 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Adobe [2010-11-17 15:26:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace [2010-11-14 22:19:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2010-11-14 22:19:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2010-11-14 22:19:07 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Adobe [2010-11-14 20:18:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft [2010-02-03 23:00:00 | 000,139,264 | ---- | C] ( ) -- C:\Windows\sipr3260.dll [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2011-01-12 13:27:11 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-01-12 13:27:11 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-01-12 13:19:59 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2011-01-12 13:19:57 | 3220,574,208 | -HS- | M] () -- C:\hiberfil.sys [2011-01-12 13:19:57 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-01-12 13:19:56 | 000,117,392 | ---- | M] () -- C:\Windows\SysNative\oodbs.lor [2011-01-12 13:19:09 | 002,359,296 | -HS- | M] () -- C:\Users\Adrian\ntuser.dat [2011-01-12 13:19:07 | 002,829,609 | -H-- | M] () -- C:\Users\Adrian\AppData\Local\IconCache.db [2011-01-12 13:11:37 | 000,081,620 | ---- | M] () -- C:\Users\Adrian\Desktop\Bez tytułu.png [2011-01-11 17:28:32 | 002,746,372 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2011-01-11 17:28:32 | 001,389,410 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011-01-11 17:28:32 | 000,845,920 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2011-01-11 17:28:32 | 000,778,772 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011-01-11 17:28:32 | 000,006,272 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011-01-09 11:55:05 | 000,003,288 | ---- | M] () -- C:\bootsqm.dat [2011-01-04 22:28:42 | 003,569,664 | ---- | M] () -- C:\Users\Adrian\Desktop\WSTĘP.doc [2011-01-04 22:28:42 | 003,569,664 | ---- | M] () -- C:\Users\Adrian\Desktop\WSTĘP - Kopia.doc [2011-01-01 18:44:12 | 000,022,382 | ---- | M] () -- C:\Users\Adrian\Documents\cwicze.rtf [2010-12-30 19:09:31 | 003,746,964 | ---- | M] () -- C:\Users\Adrian\Documents\08. Dueling Guitars.mp3 [2010-12-30 19:05:51 | 002,277,742 | ---- | M] () -- C:\Users\Adrian\Documents\06. Ritual Dance.mp3 [2010-12-30 19:05:50 | 002,324,066 | ---- | M] () -- C:\Users\Adrian\Documents\05. Bari Improv.mp3 [2010-12-30 14:57:50 | 000,016,844 | ---- | M] () -- C:\Users\Adrian\Documents\Rozgrzewka w kolejności.docx [2010-12-23 16:41:12 | 000,524,288 | -HS- | M] () -- C:\Users\Adrian\ntuser.dat{90a5f8cf-0eaa-11e0-b550-485b39c9a241}.TMContainer00000000000000000002.regtrans-ms [2010-12-23 16:41:12 | 000,524,288 | -HS- | M] () -- C:\Users\Adrian\ntuser.dat{90a5f8cf-0eaa-11e0-b550-485b39c9a241}.TMContainer00000000000000000001.regtrans-ms [2010-12-23 16:41:12 | 000,065,536 | -HS- | M] () -- C:\Users\Adrian\ntuser.dat{90a5f8cf-0eaa-11e0-b550-485b39c9a241}.TM.blf [2010-12-15 16:02:47 | 000,415,656 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010-12-11 16:01:35 | 000,466,520 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll [2010-12-11 16:01:34 | 000,445,016 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll [2010-11-29 18:47:42 | 002,578,576 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll [2010-11-29 18:47:12 | 001,868,944 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll [2010-11-29 15:31:48 | 000,007,751 | ---- | M] () -- C:\Users\Adrian\Documents\Osoby na historie spr(1).doc [2010-11-29 15:27:34 | 000,002,889 | ---- | M] () -- C:\Users\Adrian\Documents\sciąga opisowe(1).rtf [2010-11-29 15:27:33 | 000,011,497 | ---- | M] () -- C:\Users\Adrian\Documents\pojęcia na spr nr 2(1).rtf [2010-11-29 15:24:55 | 000,066,166 | ---- | M] () -- C:\Users\Adrian\Documents\sciąga opisowe.rtf [2010-11-29 15:23:03 | 000,028,140 | ---- | M] () -- C:\Users\Adrian\Documents\Osoby na historie spr.doc [2010-11-27 19:44:52 | 000,011,505 | ---- | M] () -- C:\Users\Adrian\Documents\pojęcia na spr nr 2.rtf [2010-11-27 12:41:36 | 000,006,254 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010-11-24 18:27:18 | 000,018,386 | ---- | M] () -- C:\Users\Adrian\Documents\Wojna blyskawiczna.docx [2010-11-22 16:24:19 | 000,026,620 | ---- | M] () -- C:\Users\Adrian\Documents\Przystosowania drapieżników do drapieżnictwa i ofiar do obrony.docx [2010-11-18 18:29:06 | 000,314,016 | ---- | M] () -- C:\Windows\SysNative\drivers\atksgt.sys [2010-11-18 18:29:06 | 000,043,680 | ---- | M] () -- C:\Windows\SysNative\drivers\lirsgt.sys [2010-11-14 12:47:35 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-01-12 13:10:22 | 000,081,620 | ---- | C] () -- C:\Users\Adrian\Desktop\Bez tytułu.png [2011-01-09 11:55:05 | 000,003,288 | ---- | C] () -- C:\bootsqm.dat [2011-01-05 22:27:42 | 003,569,664 | ---- | C] () -- C:\Users\Adrian\Desktop\WSTĘP - Kopia.doc [2011-01-05 22:27:16 | 003,569,664 | ---- | C] () -- C:\Users\Adrian\Desktop\WSTĘP.doc [2011-01-01 18:44:11 | 000,022,382 | ---- | C] () -- C:\Users\Adrian\Documents\cwicze.rtf [2010-12-30 19:06:02 | 003,746,964 | ---- | C] () -- C:\Users\Adrian\Documents\08. Dueling Guitars.mp3 [2010-12-30 19:03:07 | 002,277,742 | ---- | C] () -- C:\Users\Adrian\Documents\06. Ritual Dance.mp3 [2010-12-30 19:03:05 | 002,324,066 | ---- | C] () -- C:\Users\Adrian\Documents\05. Bari Improv.mp3 [2010-12-30 14:57:49 | 000,016,844 | ---- | C] () -- C:\Users\Adrian\Documents\Rozgrzewka w kolejności.docx [2010-12-23 17:27:56 | 000,117,392 | ---- | C] () -- C:\Windows\SysNative\oodbs.lor [2010-12-23 16:38:14 | 000,524,288 | -HS- | C] () -- C:\Users\Adrian\ntuser.dat{90a5f8cf-0eaa-11e0-b550-485b39c9a241}.TMContainer00000000000000000002.regtrans-ms [2010-12-23 16:38:14 | 000,524,288 | -HS- | C] () -- C:\Users\Adrian\ntuser.dat{90a5f8cf-0eaa-11e0-b550-485b39c9a241}.TMContainer00000000000000000001.regtrans-ms [2010-12-23 16:38:14 | 000,065,536 | -HS- | C] () -- C:\Users\Adrian\ntuser.dat{90a5f8cf-0eaa-11e0-b550-485b39c9a241}.TM.blf [2010-11-29 15:27:49 | 000,007,751 | ---- | C] () -- C:\Users\Adrian\Documents\Osoby na historie spr(1).doc [2010-11-29 15:27:21 | 000,002,889 | ---- | C] () -- C:\Users\Adrian\Documents\sciąga opisowe(1).rtf [2010-11-29 15:27:19 | 000,011,497 | ---- | C] () -- C:\Users\Adrian\Documents\pojęcia na spr nr 2(1).rtf [2010-11-27 19:26:37 | 000,066,166 | ---- | C] () -- C:\Users\Adrian\Documents\sciąga opisowe.rtf [2010-11-27 19:26:36 | 000,011,505 | ---- | C] () -- C:\Users\Adrian\Documents\pojęcia na spr nr 2.rtf [2010-11-27 19:26:34 | 000,028,140 | ---- | C] () -- C:\Users\Adrian\Documents\Osoby na historie spr.doc [2010-11-26 22:37:09 | 000,006,254 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010-11-24 18:27:11 | 000,018,386 | ---- | C] () -- C:\Users\Adrian\Documents\Wojna blyskawiczna.docx [2010-11-24 14:31:00 | 000,034,304 | -HS- | C] () -- C:\Users\Adrian\AppData\Roaming\Thumbs.db [2010-11-24 14:29:45 | 000,290,566 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\minecrafthax.jar [2010-11-24 14:29:45 | 000,051,765 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\Minecraft.jar [2010-11-24 14:29:45 | 000,042,555 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\ItemslistV110.png [2010-11-24 14:29:45 | 000,026,486 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\Items_slot_number.JPG [2010-11-24 14:29:42 | 000,232,504 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\Minecraft.exe [2010-11-22 16:24:19 | 000,026,620 | ---- | C] () -- C:\Users\Adrian\Documents\Przystosowania drapieżników do drapieżnictwa i ofiar do obrony.docx [2010-11-18 18:29:06 | 000,314,016 | ---- | C] () -- C:\Windows\SysNative\drivers\atksgt.sys [2010-11-18 18:29:06 | 000,043,680 | ---- | C] () -- C:\Windows\SysNative\drivers\lirsgt.sys [2010-11-11 23:12:27 | 000,524,288 | -HS- | C] () -- C:\ProgramData\NTUser.dat{495500be-eda8-11df-8fa1-485b39c9a241}.TMContainer00000000000000000002.regtrans-ms [2010-11-11 23:12:27 | 000,524,288 | -HS- | C] () -- C:\ProgramData\NTUser.dat{495500be-eda8-11df-8fa1-485b39c9a241}.TMContainer00000000000000000001.regtrans-ms [2010-11-11 23:12:27 | 000,065,536 | -HS- | C] () -- C:\ProgramData\NTUser.dat{495500be-eda8-11df-8fa1-485b39c9a241}.TM.blf [2010-11-11 23:12:26 | 000,524,288 | -HS- | C] () -- C:\ProgramData\NTUser.dat{495500b3-eda8-11df-8fa1-485b39c9a241}.TMContainer00000000000000000002.regtrans-ms [2010-11-11 23:12:25 | 000,524,288 | -HS- | C] () -- C:\ProgramData\NTUser.dat{495500b3-eda8-11df-8fa1-485b39c9a241}.TMContainer00000000000000000001.regtrans-ms [2010-11-11 23:12:25 | 000,065,536 | -HS- | C] () -- C:\ProgramData\NTUser.dat{495500b3-eda8-11df-8fa1-485b39c9a241}.TM.blf [2010-11-11 23:12:24 | 000,262,144 | ---- | C] () -- C:\ProgramData\NTUser.dat [2010-11-11 23:12:24 | 000,005,120 | -HS- | C] () -- C:\ProgramData\NTUser.dat.LOG1 [2010-11-11 23:12:24 | 000,000,000 | -HS- | C] () -- C:\ProgramData\NTUser.dat.LOG2 [2010-11-09 16:11:44 | 000,000,356 | ---- | C] () -- C:\ProgramData\hpzinstall.log [2010-11-06 17:36:01 | 000,790,528 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2010-11-06 17:36:01 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll [2010-11-06 15:33:26 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010-11-06 14:39:19 | 000,024,576 | R--- | C] () -- C:\Windows\SysWow64\AsIO.dll [2010-11-06 14:39:19 | 000,013,440 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys [2010-11-05 18:35:02 | 000,108,840 | ---- | C] () -- C:\Users\Adrian\AppData\Local\GDIPFONTCACHEV1.DAT [2010-11-05 18:24:17 | 002,829,609 | -H-- | C] () -- C:\Users\Adrian\AppData\Local\IconCache.db [2010-11-05 18:04:18 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2010-11-05 18:04:11 | 000,033,662 | ---- | C] () -- C:\Windows\Ascd_tmp.ini [2010-10-30 12:57:02 | 000,095,232 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2010-10-14 01:36:44 | 000,179,263 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2010-06-23 11:35:52 | 000,134,144 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2010-03-15 04:31:48 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2009-07-14 05:54:24 | 000,000,174 | -HS- | C] () -- C:\Program Files\desktop.ini [2009-07-14 05:54:24 | 000,000,174 | -HS- | C] () -- C:\Program Files (x86)\desktop.ini [2009-07-14 03:35:42 | 000,001,405 | ---- | C] () -- C:\Windows\msdfmap.ini [2009-07-14 03:34:57 | 000,000,439 | ---- | C] () -- C:\Windows\win.ini [2009-07-14 03:34:57 | 000,000,219 | ---- | C] () -- C:\Windows\system.ini [2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-07-06 03:48:34 | 000,013,368 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsUpIO.sys [2009-04-02 13:30:14 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS [2007-07-23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll [2007-07-23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll [2007-07-23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll [2007-07-23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll [2007-02-05 19:05:26 | 000,000,038 | ---- | C] () -- C:\Windows\AviSplitter.INI [color=#E56717]========== LOP Check ==========[/color] [2010-11-26 14:12:43 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\.minecraft [2010-12-23 15:24:11 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Ashampoo [2010-11-24 14:51:19 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\bin [2010-11-17 17:36:12 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\BitTorrent [2010-12-10 18:10:41 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Canneverbe Limited [2010-12-30 15:51:42 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Carambis [2010-11-06 10:54:39 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\DAEMON Tools Lite [2010-11-08 19:16:36 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\DAEMON Tools Pro [2010-11-11 23:12:28 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\DeviceVm [2010-11-05 19:58:43 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Gadu-Gadu 10 [2010-12-25 21:38:27 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\GameRanger [2011-01-07 16:52:58 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\HD Tune Pro [2010-12-18 12:29:57 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Hothead Games [2010-11-06 15:21:30 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Leadertech [2010-11-24 14:30:59 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\resourceses [2011-01-07 23:01:02 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Rovio [2010-12-05 18:30:09 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\The Creative Assembly [2010-11-20 17:59:57 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Ubisoft [2011-01-07 23:00:37 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\uTorrent [2010-11-21 19:48:29 | 000,000,000 | ---D | M] -- C:\Users\Adrian\AppData\Roaming\Win7codecs [2010-12-25 11:08:09 | 000,032,594 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%\*.* >[/color] [2009-07-14 02:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr [2010-11-05 17:55:22 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2011-01-09 11:55:05 | 000,003,288 | ---- | M] () -- C:\bootsqm.dat [2010-11-05 18:35:12 | 000,203,316 | RHS- | M] () -- C:\grldr [2011-01-12 13:19:57 | 3220,574,208 | -HS- | M] () -- C:\hiberfil.sys [2011-01-12 13:19:57 | 4294,103,040 | -HS- | M] () -- C:\pagefile.sys [2009-10-06 11:57:48 | 000,000,096 | ---- | M] () -- C:\Program1 [2010-11-05 18:35:27 | 000,000,003 | RHS- | M] () -- C:\win7ldr [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2009-07-14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys [2009-07-14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009-07-14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys [2009-07-14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2009-07-14 01:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2009-07-14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysWow64\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys [2009-07-14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2009-07-14 02:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2009-07-14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe [2009-10-28 08:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe [2009-10-28 07:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe < End of report > [/log] extras [log]OTL Extras logfile created on: 2011-01-12 13:25:33 - Run 3 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Adrian\Downloads 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 70,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 84,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 48,83 Gb Total Space | 21,27 Gb Free Space | 43,56% Space Free | Partition Type: NTFS Drive D: | 208,01 Gb Total Space | 113,49 Gb Free Space | 54,56% Space Free | Partition Type: NTFS Drive E: | 208,91 Gb Total Space | 122,29 Gb Free Space | 58,54% Space Free | Partition Type: NTFS Computer Name: ADRIAN-KOMPUTER | User Name: Adrian | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: Off | File Age = 60 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- C:\Users\Adrian\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{62140B07-129A-2BD0-81D2-2A1A7408ADC8}" = ATI Catalyst Install Manager "{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64) "{7353BAE6-5E49-46C4-A9B5-8A269A313789}" = Crysis WARHEAD(R) "{8027B1DD-D875-4315-8FE9-B2CFDD1BB8F1}" = O&O Defrag Professional "{819CA3BC-2FF8-4811-B42F-421F7BFD3559}" = HP Deskjet F2400 All-in-One Driver 14.0 Rel. 6 "{8753DF4D-64B0-474E-9A97-0AB5585D9A53}" = Logitech Gaming Software 5.04 "{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended "{8E5DA9A6-7A9F-3A6F-BC5C-D6CBCA6A29C7}" = Microsoft .NET Framework 4 Extended PLK Language Pack "{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010 "{90140000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2010 "{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant "{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Sterownik 3D Vision 260.99 "{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 260.99 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 260.99 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.10.0514 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Sterownik dźwięku HD 1.1.9.0 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{BE930E38-7BB3-45B6-85B2-5251F374F844}" = 64 Bit HP CIO Components Installer "{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "CCleaner" = CCleaner "CPUID CPU-Z_is1" = CPUID CPU-Z 1.56 "Crysis WARHEAD(R)" = Crysis WARHEAD(R) "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0297078F-D4C8-4774-B7A3-6BBF2C164C76}_is1" = Dirt 2 Spolszczenie by O22y "{06A1D88C-E102-4527-AF70-29FFD7AF215A}" = Scan "{09CF6AF5-9206-4FD7-9B08-BA6819FB47E3}" = Anno 1404 "{153C7D89-9CF4-4719-A551-C5BF45236DB5}" = redist "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1FDA5A37-B22D-43FF-B582-B8964050DC13}" = Microsoft Games for Windows - LIVE Redistributable "{292F0F52-B62D-4E71-921B-89A682402201}" = Toolbox "{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed "{368BA326-73AD-4351-84ED-3C0A7A52CC53}" = Nero Rescue Agent "{38468127-9E6F-4FC9-B5F7-42D4AD437D96}" = Unigine Heaven Benchmark v2.1 "{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}" = ANNO 1404 "{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}" = FIFA 11 "{434D0831-3E0C-4D03-A5D4-5E1000008400}" = F1 2010 "{43E39830-1826-415D-8BAE-86845787B54B}" = Nero Vision "{4c4b12ee-bf69-477e-9a59-0a49c77c9623}" = Nero 9 Trial "{4F0C7CCF-5666-474B-B02E-AC514A95EC93}" = NVIDIA GAME System Software 2.8.1 "{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module "{5454083B-1308-4485-BF17-1110000B8301}" = Grand Theft Auto IV "{5454083B-1308-4485-BF17-1110000B8302}" = Grand Theft Auto IV "{5454083B-1308-4485-BF17-1110000D8301}" = Grand Theft Auto IV "{5454083B-1308-4485-BF17-1110000D8302}" = Grand Theft Auto IV "{5546F4E9-B0F4-4F54-B949-2AB006C9284F}" = DJ_AIO_06_F2400_SW_Min "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{579BA58C-F33D-4970-9953-B94B43768AC3}" = Grand Theft Auto IV "{587178E7-B1DF-494E-9838-FA4DD36E873C}" = ASUSUpdate "{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress "{62AC81F6-BDD3-4110-9D36-3E9EAAB40999}" = Nero CoverDesigner "{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module "{705B639E-FAAF-40D7-AD58-C445321C7C3F}" = LightScribe System Software "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{7353BAE6-5E49-46C4-A9B5-8A269A313789}" = Crysis WARHEAD(R) "{76A232AF-B7D6-41A4-B795-6B355E6D32B1}" = Tom Clancy's H.A.W.X. 2 "{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart "{7829DB6F-A066-4E40-8912-CB07887C20BB}" = Nero BurnRights "{7F3AD00A-1819-4B15-BB7D-08B3586336D7}" = 3DMark06 "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed "{86A4C6D9-29EE-4719-AFA1-BA3341862B83}" = Microsoft Games for Windows - LIVE "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7 "{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher "{8C0CAA7A-3272-4991-A808-2C7559DE3409}" = Win7codecs "{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010 "{90140000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010 "{90140000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2010 "{90140000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2010 "{90140000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2010 "{90140000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2010 "{90140000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2010 "{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010 "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 "{90140000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010 "{90140000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010 "{90140000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2010 "{90140000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010 "{90140000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2010 "{90140000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2010 "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9C916142-C18C-429D-BFED-40094A7E0BEB}" = The Settlers 7 - Droga do królestwa "{A209525B-3377-43F4-B886-32F6B6E7356F}" = Nero WaveEditor "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress "{AC76BA86-7AD7-1045-7B44-A94000000001}" = Adobe Reader 9.4.1 - Polish "{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF}" = DolbyFiles "{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center "{B78120A0-CF84-4366-A393-4D0A59BC546C}" = Menu Templates - Starter Kit "{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX "{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}" = Need for Speed™ SHIFT "{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter "{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo "{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3 "{D025A639-B9C9-417D-8531-208859000AF8}" = NeroBurningROM "{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.4 Game "{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver "{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime "{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0 "{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer "{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F1861F30-3419-44DB-B2A1-C274825698B3}" = Nero Disc Copy Gadget "{FAB1F336-1B7C-4057-A7BC-2922CD82A781}" = Edimax RT6x Wireless LAN Card "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.5 "Afterburner" = MSI Afterburner 2.0.0 "ALLPlayer_is1" = ALLPlayer V4.X "Ashampoo Burning Studio 10_is1" = Ashampoo Burning Studio 10.0.4 "avast5" = avast! Free Antivirus "Crysis WARHEAD(R)" = Crysis WARHEAD(R) "'DIRT 2'_is1" = 'DIRT 2' "EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50 "Fraps" = Fraps (remove only) "Gadu-Gadu 10" = Gadu-Gadu 10 "GFWL_{434D0831-3E0C-4D03-A5D4-5E1000008400}" = F1 2010 "HD Tune Pro_is1" = HD Tune Pro 4.50 "InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver "NapiProjekt_is1" = NapiProjekt 1.0.6.9 "Need For Speed SHIFT_is1" = Need For Speed SHIFT "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver "Office14.PROPLUS" = Microsoft Office Professional Plus 2010 "OpenAL" = OpenAL "Trials 2 Second Edition_is1" = Trials 2 Second Edition v1.08 "uTorrent" = µTorrent [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "GameRanger" = GameRanger "Google Chrome" = Google Chrome [color=#E56717]========== Last 10 Event Log Errors ==========[/color] Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt! < End of report > [/log] [b]rsit log[/b] [log]Logfile of random's system information tool 1.08 (written by random/random) Run by Adrian at 2011-01-12 13:39:47 Microsoft Windows 7 Ultimate System drive C: has 22 GB (44%) free of 50 GB Total RAM: 4095 MB (66% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 13:39:49, on 2011-01-12 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16700) Boot mode: Normal Running processes: C:\Users\Adrian\AppData\Local\Google\Update\GoogleUpdate.exe C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe C:\Program Files\Alwil Software\Avast5\AvastUI.exe C:\Program Files (x86)\Edimax\Common\RaUI.exe C:\Users\Adrian\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Adrian\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Adrian\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Adrian\Downloads\RSIT.exe C:\Program Files (x86)\trend micro\Adrian.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file) O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\PROGRAMY\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [Google Update] "C:\Users\Adrian\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [ALLUpdate] "D:\PROGRAMY\ALLPlayer\ALLUpdate.exe" "sleep" O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\PROGRAMY\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE" O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'USŁUGA SIECIOWA') O4 - Global Startup: Wireless Utility.lnk = C:\Program Files (x86)\Edimax\Common\RaUI.exe O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000 O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: O&O Defrag (OODefragAgent) - O&O Software GmbH - D:\GRY\OO Software\Defrag\oodag.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Program Files (x86)\Edimax\Common\RaRegistry.exe O23 - Service: Ralink Registry Writer 64 (RalinkRegistryWriter64) - Ralink Technology, Corp. - C:\Program Files (x86)\Edimax\Common\RaRegistry64.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 8612 bytes ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "NUSB3MON"=C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-01-22 106496] "avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912] "BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520] "Adobe Reader Speed Launcher"=D:\PROGRAMY\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Google Update"=C:\Users\Adrian\AppData\Local\Google\Update\GoogleUpdate.exe [2010-11-05 136176] "Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2010-10-11 14940040] "ALLUpdate"=D:\PROGRAMY\ALLPlayer\ALLUpdate.exe [2010-11-02 1432064] "DAEMON Tools Lite"=D:\PROGRAMY\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696] "OfficeSyncProcess"=C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [2010-03-16 718208] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Wireless Utility.lnk - C:\Program Files (x86)\Edimax\Common\RaUI.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 2 months====== 2011-01-12 13:17:55 ----D---- C:\_OTL 2011-01-09 17:52:56 ----D---- C:\rsit 2011-01-09 17:52:56 ----D---- C:\Program Files (x86)\trend micro 2011-01-07 23:01:02 ----D---- C:\Users\Adrian\AppData\Roaming\Rovio 2011-01-07 16:52:58 ----D---- C:\Users\Adrian\AppData\Roaming\HD Tune Pro 2011-01-04 19:27:32 ----D---- C:\Program Files (x86)\SpeedFan 2010-12-30 15:51:42 ----D---- C:\Users\Adrian\AppData\Roaming\Carambis 2010-12-25 21:38:23 ----D---- C:\Users\Adrian\AppData\Roaming\GameRanger 2010-12-23 15:23:50 ----D---- C:\Users\Adrian\AppData\Roaming\Ashampoo 2010-12-23 15:10:24 ----D---- C:\ProgramData\ashampoo 2010-12-19 14:27:40 ----A---- C:\Windows\SysWOW64\SFCOM.dll 2010-12-19 14:27:19 ----A---- C:\Windows\RtlExUpd.dll 2010-12-18 12:29:57 ----D---- C:\Users\Adrian\AppData\Roaming\Hothead Games 2010-12-15 14:55:58 ----A---- C:\Windows\SysWOW64\tzres.dll 2010-12-15 14:55:24 ----A---- C:\Windows\SysWOW64\taskschd.dll 2010-12-15 14:55:24 ----A---- C:\Windows\SysWOW64\taskeng.exe 2010-12-15 14:55:23 ----A---- C:\Windows\SysWOW64\taskcomp.dll 2010-12-15 14:55:23 ----A---- C:\Windows\SysWOW64\schtasks.exe 2010-12-15 14:55:18 ----A---- C:\Windows\SysWOW64\atmfd.dll 2010-12-15 14:55:17 ----A---- C:\Windows\SysWOW64\atmlib.dll 2010-12-15 14:55:11 ----A---- C:\Windows\SysWOW64\webio.dll 2010-12-15 14:54:48 ----A---- C:\Windows\SysWOW64\iertutil.dll 2010-12-15 14:54:47 ----A---- C:\Windows\SysWOW64\mstime.dll 2010-12-15 14:54:45 ----A---- C:\Windows\SysWOW64\mshtml.dll 2010-12-15 14:54:44 ----A---- C:\Windows\SysWOW64\ieframe.dll 2010-12-15 14:54:43 ----A---- C:\Windows\SysWOW64\wininet.dll 2010-12-15 14:54:42 ----A---- C:\Windows\SysWOW64\urlmon.dll 2010-12-15 14:54:41 ----A---- C:\Windows\SysWOW64\msfeeds.dll 2010-12-15 14:54:41 ----A---- C:\Windows\SysWOW64\iedkcs32.dll 2010-12-15 14:54:40 ----A---- C:\Windows\SysWOW64\mshtmled.dll 2010-12-15 14:54:40 ----A---- C:\Windows\SysWOW64\msfeedsbs.dll 2010-12-15 14:54:40 ----A---- C:\Windows\SysWOW64\ieui.dll 2010-12-15 14:54:40 ----A---- C:\Windows\SysWOW64\iepeers.dll 2010-12-15 14:54:39 ----A---- C:\Windows\SysWOW64\msfeedssync.exe 2010-12-15 14:54:39 ----A---- C:\Windows\SysWOW64\licmgr10.dll 2010-12-15 14:54:39 ----A---- C:\Windows\SysWOW64\jsproxy.dll 2010-12-11 16:01:38 ----A---- C:\Windows\SysWOW64\rapture3d_oal.dll 2010-12-11 16:01:38 ----A---- C:\Windows\SysWOW64\mkl_blueripple.dll 2010-12-11 16:01:36 ----D---- C:\Program Files (x86)\BRS 2010-12-10 19:21:08 ----D---- C:\ProgramData\LightScribe 2010-12-10 19:21:07 ----D---- C:\Users\Adrian\AppData\Roaming\Nero 2010-12-10 19:04:47 ----D---- C:\ProgramData\Nero 2010-12-10 19:04:45 ----D---- C:\Program Files (x86)\Common Files\Nero 2010-12-10 19:00:49 ----D---- C:\Program Files (x86)\Common Files\LightScribe 2010-12-10 18:10:41 ----D---- C:\Users\Adrian\AppData\Roaming\Canneverbe Limited 2010-12-10 18:10:41 ----D---- C:\ProgramData\Canneverbe Limited 2010-12-05 18:28:13 ----D---- C:\Program Files (x86)\KONAMI 2010-12-04 20:22:21 ----D---- C:\Program Files (x86)\Common Files\Wise Installation Wizard 2010-12-03 16:56:37 ----D---- C:\ProgramData\WOP 2010-11-29 16:58:21 ----A---- C:\Windows\SysWOW64\d3dx10_39.dll 2010-11-29 16:58:21 ----A---- C:\Windows\SysWOW64\D3DCompiler_39.dll 2010-11-29 16:58:19 ----A---- C:\Windows\SysWOW64\D3DX9_39.dll 2010-11-29 16:46:29 ----D---- C:\Program Files (x86)\Electronic Arts 2010-11-26 22:37:09 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI 2010-11-24 14:46:39 ----D---- C:\Users\Adrian\AppData\Roaming\.minecraft 2010-11-24 14:29:45 ----D---- C:\Users\Adrian\AppData\Roaming\bin 2010-11-24 14:29:42 ----D---- C:\Users\Adrian\AppData\Roaming\resourceses 2010-11-24 14:29:42 ----A---- C:\Users\Adrian\AppData\Roaming\Minecraft.exe 2010-11-21 19:48:29 ----D---- C:\Users\Adrian\AppData\Roaming\Win7codecs 2010-11-21 19:48:25 ----D---- C:\Program Files (x86)\Win7codecs 2010-11-21 19:48:00 ----D---- C:\ProgramData\Win7codecs 2010-11-20 21:29:39 ----D---- C:\ProgramData\Sun 2010-11-20 21:29:24 ----A---- C:\Windows\SysWOW64\deployJava1.dll 2010-11-20 17:59:57 ----D---- C:\Users\Adrian\AppData\Roaming\Ubisoft 2010-11-20 17:57:44 ----D---- C:\ProgramData\Tages 2010-11-19 21:04:16 ----D---- C:\ProgramData\Electronic Arts 2010-11-19 21:04:16 ----D---- C:\ProgramData\EA Core 2010-11-19 18:10:29 ----D---- C:\Users\Adrian\AppData\Roaming\The Creative Assembly 2010-11-18 16:38:47 ----D---- C:\Windows\SysWOW64\AGEIA 2010-11-18 16:38:47 ----D---- C:\Program Files (x86)\AGEIA Technologies 2010-11-17 17:34:05 ----D---- C:\Windows\SysWOW64\Adobe 2010-11-14 22:19:57 ----D---- C:\ProgramData\Adobe 2010-11-14 22:19:55 ----D---- C:\Program Files (x86)\Common Files\Adobe 2010-11-14 20:18:38 ----D---- C:\Program Files (x86)\Ubisoft ======List of files/folders modified in the last 2 months====== 2011-01-12 13:39:48 ----D---- C:\Windows\Temp 2011-01-12 13:21:55 ----D---- C:\Users\Adrian\AppData\Roaming\Skype 2011-01-12 13:20:02 ----D---- C:\ProgramData\NVIDIA 2011-01-12 13:19:56 ----D---- C:\Windows 2011-01-12 13:18:53 ----D---- C:\Windows\SysWOW64 2011-01-12 13:18:01 ----HD---- C:\ProgramData 2011-01-12 13:18:01 ----D---- C:\Windows\Tasks 2011-01-12 13:06:37 ----D---- C:\Users\Adrian\AppData\Roaming\skypePM 2011-01-11 17:28:32 ----D---- C:\Windows\System32 2011-01-11 17:09:52 ----D---- C:\Windows\Prefetch 2011-01-11 17:09:02 ----D---- C:\Windows\Minidump 2011-01-09 17:52:56 ----RD---- C:\Program Files (x86) 2011-01-09 12:09:30 ----SD---- C:\Users\Adrian\AppData\Roaming\Microsoft 2011-01-09 10:30:57 ----SHD---- C:\System Volume Information 2011-01-07 23:00:37 ----D---- C:\Users\Adrian\AppData\Roaming\uTorrent 2011-01-02 15:02:52 ----SHD---- C:\Windows\Installer 2011-01-02 15:02:52 ----HD---- C:\Config.Msi 2011-01-02 15:02:33 ----RSD---- C:\Windows\assembly 2011-01-02 14:59:20 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2010-12-31 10:56:50 ----D---- C:\Windows\debug 2010-12-28 15:46:37 ----D---- C:\Windows\LiveKernelReports 2010-12-28 14:11:22 ----RD---- C:\Program Files 2010-12-28 13:39:13 ----D---- C:\Windows\inf 2010-12-24 16:50:57 ----D---- C:\Windows\SysWOW64\directx 2010-12-24 16:49:14 ----D---- C:\Windows\winsxs 2010-12-23 16:49:53 ----RD---- C:\Program Files (x86)\Skype 2010-12-23 16:44:17 ----D---- C:\Program Files (x86)\Common Files 2010-12-23 16:36:26 ----D---- C:\Windows\registration 2010-12-21 19:36:03 ----D---- C:\ProgramData\Codemasters 2010-12-21 17:31:00 ----D---- C:\Program Files (x86)\OpenAL 2010-12-19 14:29:24 ----HD---- C:\Program Files (x86)\Temp 2010-12-19 14:28:25 ----D---- C:\Windows\SysWOW64\RTCOM 2010-12-19 14:27:22 ----D---- C:\Program Files (x86)\Realtek 2010-12-15 16:02:16 ----D---- C:\Windows\SysWOW64\pl-PL 2010-12-15 16:02:15 ----D---- C:\Program Files (x86)\Windows Mail 2010-12-15 16:02:13 ----D---- C:\Windows\SysWOW64\migration 2010-12-15 16:02:13 ----D---- C:\Program Files (x86)\Internet Explorer 2010-12-15 15:32:19 ----D---- C:\ProgramData\Microsoft Help 2010-12-11 16:01:34 ----A---- C:\Windows\SysWOW64\wrap_oal.dll 2010-12-11 16:01:34 ----A---- C:\Windows\SysWOW64\OpenAL32.dll 2010-12-11 15:49:37 ----SD---- C:\ProgramData\Microsoft 2010-12-04 06:49:03 ----D---- C:\Windows\Logs 2010-11-28 20:57:17 ----D---- C:\Windows\Microsoft.NET 2010-11-26 22:33:25 ----D---- C:\Windows\SysWOW64\en-US 2010-11-26 22:33:21 ----D---- C:\Program Files (x86)\Microsoft.NET 2010-11-17 17:36:12 ----D---- C:\Users\Adrian\AppData\Roaming\BitTorrent 2010-11-17 15:26:41 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE 2010-11-17 15:26:32 ----D---- C:\Program Files (x86)\Common Files\microsoft shared 2010-11-14 22:20:23 ----D---- C:\Users\Adrian\AppData\Roaming\Adobe 2010-11-14 20:18:31 ----D---- C:\Windows\SoftwareDistribution ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [] R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [] R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [] R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2009-08-04 13440] R1 AsUpIO;AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [2009-07-06 13368] R1 aswRdr;aswRdr; C:\Windows\SysWOW64\drivers\aswRdr.sys [] R1 aswSP;aswSP; C:\Windows\SysWOW64\drivers\aswSP.sys [] R1 aswTdi;avast! Network Shield Support; C:\Windows\SysWOW64\drivers\aswTdi.sys [] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [] R2 aswFsBlk;aswFsBlk; C:\Windows\SysWOW64\drivers\aswFsBlk.sys [] R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [] R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [] R2 cpuz134;cpuz134; \??\C:\Windows\system32\drivers\cpuz134_x64.sys [] R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [] R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [] R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [] R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [] R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [] R3 rt61x64;RT61 Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr6164.sys [] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [] R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [] R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [] R3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [] R3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [] R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [] S3 ALSysIO;ALSysIO; \??\C:\Users\Adrian\AppData\Local\Temp\ALSysIO64.sys [] S3 ar8xtjpd;ar8xtjpd; C:\Windows\SysWOW64\drivers\ar8xtjpd.sys [] S3 cpuz130;cpuz130; \??\C:\Users\Adrian\AppData\Local\Temp\cpuz130\cpuz_x64.sys [] S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [] S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [] S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [] S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [] S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [] S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [] S3 usbscan;Sterownik skanera USB; C:\Windows\system32\DRIVERS\usbscan.sys [] S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [] S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [] S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384] R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-08-16 73728] R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2010-05-18 935208] R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992] R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [] R2 OODefragAgent;O&O Defrag; D:\GRY\OO Software\Defrag\oodag.exe [2010-09-30 3140424] R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992] R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files (x86)\Edimax\Common\RaRegistry.exe [2009-10-06 185632] R2 RalinkRegistryWriter64;Ralink Registry Writer 64; C:\Program Files (x86)\Edimax\Common\RaRegistry64.exe [2009-10-06 212256] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-16 369256] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568] R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384] R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] S2 KMService;KMService; C:\Windows\system32\srvany.exe [2010-11-09 8192] S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992] S3 aspnet_state;„Usługa stanu ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376] S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240] -----------------EOF----------------- [/log]
Tomek01 komentarz 12 stycznia 2011 komentarz 12 stycznia 2011 Nic specjalnego już nie widać. Wykonaj pełny skan [url=http://www.instalki.pl/programy/download_c/14/155.html][color=#0000CD][b]DrWebCureIt[/b][/color][/url] oraz [url=http://www.instalki.pl/programy/download_c/13/96.html][color=#0000CD][b]Malwarebytes Anti-Malware[/b][/color][/url] i raporty pokaż na forum.
Adrianox360 komentarz 15 stycznia 2011 Autor komentarz 15 stycznia 2011 (edytowane) dobrze zaraz to zrobię. Dodam jeszcze, że właśnie włączyłem komputer pierwszy raz w ciągu dnia. Jest pulpit już, i nic nie mogę zrobić, da się poruszać tylko myszką. I nagle blucreen mam nadzieję, że dojdziemy o co chodzi. Pierwszy skan już jest: [log]Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Wersja bazy: 5511 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 2011-01-13 15:55:18 mbam-log-2011-01-13 (15-55-09).txt Typ skanowania: Pełne skanowanie (C:\|D:\|E:\|) Przeskanowano obiektów: 305230 Upłynęło: 22 minut(y), 33 sekund(y) Zainfekowanych procesów w pamięci: 0 Zainfekowanych modułów w pamięci: 0 Zainfekowanych kluczy rejestru: 0 Zainfekowanych wartości rejestru: 0 Zainfekowane informacje rejestru systemowego: 0 Zainfekowanych folderów: 0 Zainfekowanych plików: 2 Zainfekowanych procesów w pamięci: (Nie znaleziono zagrożeń) Zainfekowanych modułów w pamięci: (Nie znaleziono zagrożeń) Zainfekowanych kluczy rejestru: (Nie znaleziono zagrożeń) Zainfekowanych wartości rejestru: (Nie znaleziono zagrożeń) Zainfekowane informacje rejestru systemowego: (Nie znaleziono zagrożeń) Zainfekowanych folderów: (Nie znaleziono zagrożeń) Zainfekowanych plików: d:\PROGRAMY\everest ultimate edition 5.50.2100 pl +serial and keygen upload by ekspert28\everest.5.0.1650.all.edition_keygen-fff.exe (RiskWare.Tool.CK) -> No action taken. d:\PROGRAMY\hd.tune.pro.v4.50.winall.cracked-blizzard\b-htp450\b-htp450\b-hdtp450-patch.exe (RiskWare.Tool.CK) -> No action taken. [/log] [b][b]Oby dwa programy nie wykryły żadnych wirusów[/b][/b]! Co dalej? Może to wona zasialcza? W każdym razie czekam na propozycje. dodam ciekawą rzecz, właśnie włączyłem kompa i jak zawsze jakiś błąd czy coś, internetu nie ma. Ok, mam teraz proca ustawionego na 3.6 i napięcie ok. 1.389. Włączam prime95 do testowania stabilności, testuje ok 4 min. Proc ma juz 42 stopnie i wyłączam program. A tu nagle mrugnął ekran i pojawiło się, że jest połączenie z internetem. Może to rzeczywiście wina nierozgrzanych ramów. Czekam na propozycje. Chłopaki, dziś również sprawdziłem i jak zawsze error ale włązczam prime i testuje 5 min i wyłączam a tu mruga ekran i pojawia się połączenie z internetem. Czyli czego wina?? Proszę pomóżcie.
Tomek01 komentarz 15 stycznia 2011 komentarz 15 stycznia 2011 http://www.forumpc.pl/index.php?showtopic=16074
Adrianox360 komentarz 16 stycznia 2011 Autor komentarz 16 stycznia 2011 (edytowane) Dzięki, zastosuje się do tego co pisze w poście ale dodam, że to jednak może być wina nierozgrzanych ramów. bo gry rozgrzeje podzespoły prime95 błędy się nagle wyłączają ponieważ wzrasta temperatura procesora i pamięci.
Adrianox360 komentarz 20 lutego 2011 Autor komentarz 20 lutego 2011 (edytowane) Witam znowu!! Napięcie na moich Kingston Hyperx było po prostu za niskie. Ustawiłem na 1.890 i nie ma już problemów. Wszystko ładnie działa, nie wyskakują errory, internet się nie odłącza. Powracam do tematu ponieważ dopiero 3 dni temu zmieniłem napięcie ram ale jest problem. Wcześniej przed formatem, mimo, że były te błędy i tp. to wszystkie gry się ładnie instalował a teraz po formacie i ustawieniu napięcia ram gry mi się nie chcą instalować. To znaczy wcześniej Shift normalnie instalowałem i działał a teraz zatrzymuję się instalacja i nie idzie. Albo Dirt 2 zainstaluje się ale strasznie tnie, tak, że jest 1-2 fps. Just Cause 2 zatrzymuje się w 50% instalacji. Wcześniej tego nie było. Proszę o pomoc!chłopaki pomóżcie ! Proszę Was. Czy kazać im w sklepie wymienić ram czy co?
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.