fatal smile utworzono 9 lutego 2011 utworzono 9 lutego 2011 (edytowane) Witam, na wstępie: MOBO - Gigabyte GA-MA78GM-S2H CPU - AMD Phenom Quad Core 9650 2,3 MHz RAM - 2*1 GB Mushkin DDR2 HP2-8500 Grafika - Gigabyte GeForce 9800GT OC Zalman Zasilacz - Amacrox Free Style 450W Dzwięk - Creative X-Fi XtremeGamer Dysk - Jakiś Samsung 1TB System - Windows Vista 64b Problem: Często jak w coś gram, gdy chcę zminimalizować/wyłączyć grę, to komputer przełącza się do pulpitu przez kilka minut i wszystko zaczyna mulić. Czasami mija z 15 minut zanim zaczyna wszystko normalnie działać, albo i w ogóle nie zaczyna. Dzieje się tak nawet jak gram w mało wymagające gry (np. CS 1.6), co przy takim sprzęcie nie powinno mieć miejsca i nie miało wcześniej. Temperatury są w porządku, defragmentowałem dysk (tak myślałem, że to może mieć wpływ, ale niestety). Prosiłbym o pomoc.
fatal smile komentarz 9 lutego 2011 Autor komentarz 9 lutego 2011 (edytowane) OTL: [log]OTL logfile created on: 2011-02-09 23:51:11 - Run 1 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Users\Bartek\Downloads 64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 7.0.6002.18005) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 0,00 Gb Available Physical Memory | 22,00% Memory free 4,00 Gb Paging File | 1,00 Gb Available in Paging File | 20,00% Paging File free Paging file location(s): c:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 390,62 Gb Total Space | 260,44 Gb Free Space | 66,67% Space Free | Partition Type: NTFS Drive D: | 195,31 Gb Total Space | 168,50 Gb Free Space | 86,27% Space Free | Partition Type: NTFS Drive E: | 195,31 Gb Total Space | 170,69 Gb Free Space | 87,39% Space Free | Partition Type: NTFS Drive F: | 150,26 Gb Total Space | 137,92 Gb Free Space | 91,79% Space Free | Partition Type: NTFS Computer Name: BARTEKK | User Name: Bartek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days [color=#E56717]========== Processes (All) ==========[/color] PRC - [2011-02-09 23:50:18 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Bartek\Downloads\OTL.exe PRC - [2011-02-09 22:37:50 | 000,136,176 | ---- | M] (Google Inc.) -- C:\Users\Bartek\AppData\Local\Google\Update\1.2.183.23\GoogleCrashHandler.exe PRC - [2011-02-07 10:29:02 | 000,994,872 | ---- | M] (Google Inc.) -- C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe PRC - [2011-01-11 18:42:36 | 000,071,464 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Valve\Steam\GameOverlayUI.exe PRC - [2011-01-11 18:42:33 | 000,407,336 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe PRC - [2010-11-29 14:38:29 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2010-11-17 13:56:58 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Valve\Steam\Steam.exe PRC - [2010-06-07 20:35:08 | 000,086,077 | ---- | M] (Valve) -- c:\Program Files (x86)\Valve\Steam\SteamApps\azarath211\counter-strike\hl.exe PRC - [2010-02-26 01:21:50 | 000,126,392 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccsvchst.exe PRC - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe PRC - [2009-12-22 21:52:42 | 000,067,128 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe PRC - [2009-09-18 17:02:30 | 001,708,032 | ---- | M] (D-Link Corp.) -- C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\AirGCFG.exe PRC - [2009-08-31 10:26:04 | 004,053,504 | ---- | M] () -- C:\Program Files (x86)\OSCAR Editor\OscarEditor.exe PRC - [2009-08-21 09:27:24 | 000,098,304 | ---- | M] (Wireless Service) -- C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe PRC - [2009-07-07 20:10:14 | 000,151,552 | ---- | M] () -- C:\Windows\SysWOW64\ANIWConnService.exe PRC - [2009-06-04 00:55:16 | 000,025,600 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysWOW64\Ctxfihlp.exe PRC - [2009-06-04 00:49:56 | 001,213,440 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysWOW64\CTxfispi.exe PRC - [2008-01-24 12:36:22 | 000,073,728 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe PRC - [2008-01-21 03:48:05 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe [comLaunch] PRC - [2007-01-30 02:08:40 | 000,077,824 | ---- | M] () -- C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe PRC - [2006-12-06 10:51:08 | 000,734,736 | ---- | M] (Raxco Software, Inc.) -- C:\Program Files (x86)\Raxco\PerfectDisk\PDEngine.exe PRC - [2006-12-06 10:50:56 | 000,407,056 | ---- | M] (Raxco Software, Inc.) -- C:\Program Files (x86)\Raxco\PerfectDisk\PDAgent.exe PRC - [2006-11-02 10:45:37 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rundll32.exe PRC - [2006-11-02 10:45:02 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dllhost.exe PRC - [2003-12-22 14:36:14 | 000,561,152 | ---- | M] () -- C:\Program Files (x86)\Ventrilo\Ventrilo.exe [color=#E56717]========== Modules (All) ==========[/color] MOD - [2011-02-09 23:50:18 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Bartek\Downloads\OTL.exe MOD - [2010-09-20 20:26:01 | 000,415,088 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\asoehook.dll MOD - [2010-08-31 16:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll MOD - [2010-07-26 16:51:48 | 011,584,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll MOD - [2010-06-28 18:00:21 | 001,316,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll MOD - [2010-04-16 17:46:48 | 000,502,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll MOD - [2009-07-17 14:54:43 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll MOD - [2009-07-12 09:02:02 | 000,653,120 | R--- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\microsoft.vc90.crt\msvcr90.dll MOD - [2009-07-12 09:02:00 | 000,569,664 | R--- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\microsoft.vc90.crt\msvcp90.dll MOD - [2009-06-15 15:54:11 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll MOD - [2009-04-23 13:15:39 | 000,677,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll MOD - [2009-04-11 07:28:25 | 001,077,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll MOD - [2009-04-11 07:28:25 | 000,287,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll MOD - [2009-04-11 07:28:25 | 000,108,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\userenv.dll MOD - [2009-04-11 07:28:25 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll MOD - [2009-04-11 07:28:24 | 001,591,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll MOD - [2009-04-11 07:28:24 | 001,068,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll MOD - [2009-04-11 07:28:24 | 000,353,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll MOD - [2009-04-11 07:28:24 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll MOD - [2009-04-11 07:28:24 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll MOD - [2009-04-11 07:28:23 | 000,754,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll MOD - [2009-04-11 07:28:23 | 000,563,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll MOD - [2009-04-11 07:28:23 | 000,467,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netapi32.dll MOD - [2009-04-11 07:28:23 | 000,121,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll MOD - [2009-04-11 07:28:23 | 000,088,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll MOD - [2009-04-11 07:28:22 | 000,679,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll MOD - [2009-04-11 07:28:20 | 000,807,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll MOD - [2009-04-11 07:28:20 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mpr.dll MOD - [2009-04-11 07:28:18 | 000,450,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2009-04-11 07:28:18 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\authz.dll MOD - [2009-04-11 07:28:17 | 000,800,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll MOD - [2009-04-11 07:28:17 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll MOD - [2009-04-11 07:27:50 | 001,165,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll MOD - [2009-04-11 07:27:12 | 000,258,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv MOD - [2009-04-11 07:26:45 | 000,648,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll MOD - [2009-04-11 07:26:44 | 000,858,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll MOD - [2009-04-11 07:26:44 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll MOD - [2009-04-11 07:26:43 | 000,303,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll MOD - [2009-04-11 07:26:43 | 000,116,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll MOD - [2008-01-21 03:52:09 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll MOD - [2008-01-21 03:51:05 | 000,234,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll MOD - [2008-01-21 03:50:35 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ws2_32.dll MOD - [2008-01-21 03:50:15 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\nsi.dll MOD - [2008-01-21 03:50:01 | 000,183,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\xmllite.dll MOD - [2008-01-21 03:50:01 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2008-01-21 03:49:43 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll MOD - [2008-01-21 03:49:34 | 000,523,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll MOD - [2006-11-02 10:46:12 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2008-01-21 03:47:32 | 000,383,544 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2011-01-11 18:42:33 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2011-01-05 10:53:07 | 003,129,432 | ---- | M] () [Auto | Running] -- c:\Program Files (x86)\Common Files\Akamai\netsession_win_dbc0250.dll -- (Akamai) SRV - [2011-01-03 14:10:24 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service) SRV - [2011-01-02 20:26:14 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service) SRV - [2010-12-06 08:31:50 | 002,101,640 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2010-11-29 14:38:29 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2010-02-26 01:21:50 | 000,126,392 | R--- | M] (Symantec Corporation) [Unknown | Running] -- C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe -- (N360) SRV - [2010-02-19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2009-07-07 20:10:14 | 000,151,552 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\ANIWConnService.exe -- (ANIWConnService) SRV - [2009-03-30 05:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2006-12-06 10:51:08 | 000,734,736 | ---- | M] (Raxco Software, Inc.) [On_Demand | Running] -- C:\Program Files (x86)\Raxco\PerfectDisk\PDEngine.exe -- (PDEngine) SRV - [2006-12-06 10:50:56 | 000,407,056 | ---- | M] (Raxco Software, Inc.) [Auto | Running] -- C:\Program Files (x86)\Raxco\PerfectDisk\PDAgent.exe -- (PDAgent) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010-12-26 14:03:27 | 000,173,104 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\SYMEVENT64x86.SYS -- (SymEvent) DRV:[b]64bit:[/b] - [2010-10-27 21:41:22 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010-10-12 09:30:28 | 000,025,528 | ---- | M] (Turtle Entertainment GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ESLvnic.sys -- (ESLvnic1) DRV:[b]64bit:[/b] - [2010-05-06 05:01:59 | 000,451,120 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\N360x64\0403000.005\SYMTDIV.SYS -- (SYMTDIv) DRV:[b]64bit:[/b] - [2010-04-29 06:03:51 | 000,150,064 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\0403000.005\Ironx64.SYS -- (SymIRON) DRV:[b]64bit:[/b] - [2010-04-22 04:02:20 | 000,221,232 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\N360x64\0403000.005\SYMEFA64.SYS -- (SymEFA) DRV:[b]64bit:[/b] - [2010-04-22 03:29:51 | 000,505,392 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\Windows\SysNative\Drivers\N360x64\0403000.005\SRTSP64.SYS -- (SRTSP) DRV:[b]64bit:[/b] - [2010-04-22 03:29:51 | 000,032,304 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\0403000.005\SRTSPX64.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL) DRV:[b]64bit:[/b] - [2010-02-26 01:22:52 | 000,615,040 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\0403000.005\ccHPx64.sys -- (ccHP) DRV:[b]64bit:[/b] - [2010-02-03 14:56:56 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\hamachi.sys -- (hamachi) DRV:[b]64bit:[/b] - [2009-12-24 14:57:52 | 000,034,152 | R--- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:[b]64bit:[/b] - [2009-10-15 04:50:05 | 000,433,200 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\N360x64\0403000.005\SYMDS64.SYS -- (SymDS) DRV:[b]64bit:[/b] - [2009-09-05 14:27:12 | 001,449,984 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009-08-03 10:56:28 | 000,900,608 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\Dnetr28ux.sys -- (netr28ux) DRV:[b]64bit:[/b] - [2009-06-04 02:49:58 | 001,561,112 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ha20x2k.sys -- (ha20x2k) DRV:[b]64bit:[/b] - [2009-06-04 02:49:42 | 000,118,296 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\emupia2k.sys -- (emupia) DRV:[b]64bit:[/b] - [2009-06-04 02:49:34 | 000,213,016 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctsfm2k.sys -- (ctsfm2k) DRV:[b]64bit:[/b] - [2009-06-04 02:49:26 | 000,015,896 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctprxy2k.sys -- (ctprxy2k) DRV:[b]64bit:[/b] - [2009-06-04 02:49:18 | 000,179,224 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctoss2k.sys -- (ossrv) DRV:[b]64bit:[/b] - [2009-06-04 02:49:08 | 000,684,312 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM) DRV:[b]64bit:[/b] - [2009-06-04 02:49:00 | 000,580,632 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctac32k.sys -- (ctac32k) DRV:[b]64bit:[/b] - [2009-06-04 02:48:50 | 001,417,240 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CTEXFIFX.SYS -- (CTEXFIFX.SYS) DRV:[b]64bit:[/b] - [2009-06-04 02:48:50 | 001,417,240 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTEXFIFX.SYS -- (CTEXFIFX) DRV:[b]64bit:[/b] - [2009-06-04 02:48:38 | 000,094,744 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CTHWIUT.SYS -- (CTHWIUT.SYS) DRV:[b]64bit:[/b] - [2009-06-04 02:48:38 | 000,094,744 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTHWIUT.SYS -- (CTHWIUT) DRV:[b]64bit:[/b] - [2009-06-04 02:48:30 | 000,202,776 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CT20XUT.SYS -- (CT20XUT.SYS) DRV:[b]64bit:[/b] - [2009-06-04 02:48:30 | 000,202,776 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CT20XUT.SYS -- (CT20XUT) DRV:[b]64bit:[/b] - [2009-03-06 18:10:10 | 000,015,872 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\anodlwfx.sys -- (anodlwf) DRV:[b]64bit:[/b] - [2008-12-26 11:56:04 | 000,021,504 | ---- | M] (Avnex) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\vcsvad.sys -- (VCSVADHWSer) Avnex Virtual Audio Device (WDM) DRV:[b]64bit:[/b] - [2008-10-24 23:29:20 | 000,830,592 | ---- | M] (Line 6) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\L6GX64.sys -- (L6GX) DRV:[b]64bit:[/b] - [2008-01-21 03:47:28 | 000,046,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb) DRV:[b]64bit:[/b] - [2007-01-23 15:48:00 | 000,136,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\LMouKE.Sys -- (LMouKE) DRV:[b]64bit:[/b] - [2007-01-23 15:47:00 | 000,112,400 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\L8042mou.Sys -- (L8042mou) DRV:[b]64bit:[/b] - [2007-01-23 15:47:00 | 000,051,984 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\LHidFilt.Sys -- (LHidFilt) DRV:[b]64bit:[/b] - [2007-01-23 15:47:00 | 000,048,912 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\LMouFilt.Sys -- (LMouFilt) DRV:[b]64bit:[/b] - [2007-01-23 15:47:00 | 000,035,600 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\L8042Kbd.sys -- (L8042Kbd) DRV:[b]64bit:[/b] - [2006-10-03 03:13:44 | 000,051,200 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\Rtlh64.sys -- (RTL8169) DRV:[b]64bit:[/b] - [2006-09-18 22:36:24 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\Wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2005-11-03 15:40:56 | 000,089,600 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfvfs02.sys -- (sfvfs02) StarForce Protection VFS Driver (version 2.x) DRV:[b]64bit:[/b] - [2005-08-10 13:46:20 | 000,068,608 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x) DRV:[b]64bit:[/b] - [2005-05-16 14:21:16 | 000,007,168 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x) DRV - [2010-12-26 15:21:36 | 001,791,096 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20110209.002\EX64.SYS -- (NAVEX15) DRV - [2010-12-26 15:21:35 | 000,475,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl) DRV - [2010-12-26 15:21:35 | 000,117,880 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20110209.002\ENG64.SYS -- (NAVENG) DRV - [2010-12-01 01:03:34 | 000,476,792 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20110208.003\IDSviA64.sys -- (IDSVia64) DRV - [2010-11-23 03:34:08 | 000,953,904 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20110114.001\BHDrvx64.sys -- (BHDrvx64) DRV - [2010-07-20 13:45:31 | 000,022,336 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv) DRV - [2010-07-10 10:37:39 | 000,035,363 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\windrvNT.sys -- (windrvNT) DRV - [2010-05-27 09:00:00 | 000,132,656 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2418384579-601973546-2015653325-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-2418384579-601973546-2015653325-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..extensions.enabledItems: eafo3fflauncher@ea.com:1.1 FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0 FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:4.6 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPlgn\ [2010-12-27 20:03:14 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\coFFPlgn\ [2010-12-26 14:07:53 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-12-10 22:12:47 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-12-10 22:12:47 | 000,000,000 | ---D | M] [2009-12-23 11:04:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Bartek\AppData\Roaming\mozilla\Extensions [2011-02-09 19:19:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Bartek\AppData\Roaming\mozilla\Firefox\Profiles\9w0oe0y6.default\extensions [2010-06-04 09:35:15 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Bartek\AppData\Roaming\mozilla\Firefox\Profiles\9w0oe0y6.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-07-25 16:37:41 | 000,000,000 | ---D | M] (FIFA Online Web Launcher) -- C:\Users\Bartek\AppData\Roaming\mozilla\Firefox\Profiles\9w0oe0y6.default\extensions\eafo3fflauncher@ea.com [2011-01-03 14:30:08 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2010-04-17 14:29:23 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010-08-12 18:14:19 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010-11-28 16:00:15 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011-01-03 14:30:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2010-12-26 14:07:53 | 000,000,000 | ---D | M] (Norton Toolbar) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\COFFPLGN [2010-12-27 20:03:14 | 000,000,000 | ---D | M] (Norton IPS) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPLGN [2010-11-12 18:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll [2010-04-01 18:33:11 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\allegro-pl.xml [2010-04-01 18:33:11 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\fbc-pl.xml [2010-04-01 18:33:11 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\merlin-pl.xml [2010-04-01 18:33:11 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\pwn-pl.xml [2010-04-01 18:33:11 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010-04-01 18:33:11 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2010-12-18 23:41:29 | 000,000,410 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 5.89.34.34 pes6gate-ec.winning-eleven.net O1 - Hosts: 210.249.144.166 we9stun.winning-eleven.net O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coieplg.dll (Symantec Corporation) O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ipsbho.dll (Symantec Corporation) O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found. O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coieplg.dll (Symantec Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKLM..\Run: [ANIWZCS2Service] C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe (Wireless Service) O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\SysWow64\Ctxfihlp.exe (Creative Technology Ltd) O4 - HKLM..\Run: [D-Link D-Link Wireless G DWL-G122_DWA-110] C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\AirGCFG.exe (D-Link Corp.) O4 - HKLM..\Run: [P17Helper] C:\Windows\SysWow64\P17.DLL () O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [WZCSLDR2] File not found O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-21-2418384579-601973546-2015653325-1000..\Run: [AdobeBridge] File not found O4 - HKU\S-1-5-21-2418384579-601973546-2015653325-1000..\Run: [OscarEditor] C:\Program Files (x86)\OSCAR Editor\OscarEditor.exe () O4 - HKU\S-1-5-21-2418384579-601973546-2015653325-1000..\Run: [SetDefaultMIDI] C:\Windows\MIDIDEF.EXE (Creative Technology Ltd) O4 - HKU\S-1-5-21-2418384579-601973546-2015653325-1000..\Run: [WMPNSCFG] File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O13 - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKU\S-1-5-21-2418384579-601973546-2015653325-1000\..Trusted Domains: line6.net ([]* in Trusted sites) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package) O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPID.cab (Creative Software AutoUpdate Support Package) O18:[b]64bit:[/b] - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Bartek\Desktop\wszystko\tapety\cat.jpg O24 - Desktop BackupWallPaper: C:\Users\Bartek\Desktop\wszystko\tapety\cat.jpg O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{f2c40a2e-e20a-11df-ad6b-00ff01000001}\Shell - "" = AutoRun O33 - MountPoints2\{f2c40a2e-e20a-11df-ad6b-00ff01000001}\Shell\AutoRun\command - "" = I:\autorun6e.exe O34 - HKLM BootExecute: (PDBoot.exe) - File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2011-02-09 23:52:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\trend micro [2011-02-09 23:51:53 | 000,000,000 | ---D | C] -- C:\rsit [2011-02-09 22:40:03 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2011-02-09 19:36:20 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Desktop\cod patch [2011-02-07 20:06:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CPU Speed Pro [2011-02-06 17:27:08 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Desktop\mp3 [2011-02-06 16:05:23 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Desktop\zadania [2011-02-05 14:36:08 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Left 4 Dead 2 [2011-02-05 09:16:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Raxco [2011-02-05 09:16:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Raxco [2011-02-05 09:14:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Raxco [2011-02-05 00:26:56 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Garena [2011-02-05 00:26:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garena [2011-02-05 00:26:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Garena [2011-02-02 16:57:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Left 4 Dead 2 [2011-02-02 16:42:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Left 4 Dead 2 [2011-02-02 16:26:44 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Desktop\Left.4.Dead.2.MULTi.20 [2011-01-24 14:24:01 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Desktop\PREZENTACJA MATURALNA [2011-01-17 13:24:57 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Desktop\demka [2011-01-16 20:09:34 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\Smart Recorder [2011-01-10 20:09:00 | 000,000,000 | ---D | C] -- C:\FSDownloader [2011-01-04 19:57:10 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Documents\NFS Most Wanted [2011-01-03 14:30:05 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2011-01-03 14:30:05 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2011-01-03 14:30:05 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2011-01-02 20:35:57 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\Creative [2011-01-02 20:35:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Creative Labs [2011-01-02 20:26:53 | 000,647,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mscomct2.ocx [2011-01-02 20:26:49 | 000,053,248 | ---- | C] (Creative Technology Ltd ) -- C:\Windows\Ctregrun.exe [2011-01-02 19:01:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative [2011-01-02 19:00:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative Labs Shared [2011-01-02 18:59:34 | 000,102,400 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\cttele32.dll [2011-01-02 18:57:17 | 022,691,984 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\AppSetup.exe [2011-01-02 18:41:23 | 000,012,288 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysNative\INRES.DLL [2011-01-02 18:41:23 | 000,011,776 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysWow64\INRES.DLL [2011-01-02 17:27:05 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Local\CrashDumps [2011-01-02 17:22:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative [2011-01-02 17:22:16 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Creative Installation Information [2011-01-02 17:21:43 | 000,000,000 | ---D | C] -- C:\Program Files\Creative [2011-01-02 17:21:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Creative [2011-01-02 17:20:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Creative [2011-01-02 17:20:46 | 000,107,008 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysNative\cttele64.dll [2011-01-02 17:20:34 | 000,466,456 | ---- | C] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll [2011-01-02 17:20:34 | 000,444,952 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll [2011-01-02 17:20:34 | 000,121,880 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll [2011-01-02 17:20:34 | 000,109,080 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll [2011-01-02 17:20:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenAL [2011-01-02 17:20:14 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\data [2011-01-02 17:20:03 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\data [2011-01-02 17:19:03 | 000,595,244 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\APOIM64.exe [2011-01-02 17:19:03 | 000,567,808 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\CTAPO64.dll [2011-01-02 17:19:03 | 000,057,856 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\ctppld.dll [2011-01-02 17:19:02 | 000,497,152 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\CTAPO32.dll [2011-01-02 17:19:02 | 000,077,824 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\eaxac3.dll [2011-01-02 17:19:02 | 000,048,400 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\AddCat.exe [2011-01-02 17:18:59 | 000,805,400 | ---- | C] (Creative Labs Inc.) -- C:\Windows\SysWow64\oalinst.exe [2011-01-02 17:18:59 | 000,099,064 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysNative\ctpxst64.exe [2011-01-02 17:18:59 | 000,089,336 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\ctpxst32.exe [2011-01-02 17:18:59 | 000,073,728 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysNative\ctcoinst.dll [2011-01-02 17:18:59 | 000,072,704 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysNative\CTMLFX64.dll [2011-01-02 17:04:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\D-Link [2011-01-02 17:03:30 | 000,720,896 | ---- | C] (Wireless Service) -- C:\Windows\SysWow64\ANIWZCS2.dll [2011-01-02 17:03:30 | 000,270,336 | ---- | C] (Wireless Service) -- C:\Windows\SysWow64\wnicapi.dll [2011-01-02 17:03:29 | 001,327,189 | ---- | C] (Funk Software, Inc.) -- C:\Windows\SysWow64\odSupp_M.dll [2011-01-02 17:03:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ANI [2011-01-02 17:02:39 | 001,110,016 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\Windows\SysWow64\libeay32.dll [2011-01-02 17:02:39 | 000,204,800 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\Windows\SysWow64\ssleay32.dll [2011-01-02 17:01:05 | 000,479,360 | ---- | C] (Ralink Technology, Corp.) -- C:\Windows\SysWow64\Dr71WU98.sys [2011-01-02 17:01:05 | 000,247,808 | ---- | C] (Ralink Technology Inc.) -- C:\Windows\SysWow64\rt25u98.sys [2011-01-02 16:48:31 | 000,900,608 | ---- | C] (Ralink Technology Corp.) -- C:\Windows\SysNative\drivers\Dnetr28ux.sys [2011-01-02 16:48:31 | 000,305,152 | ---- | C] (Ralink Technology, Inc.) -- C:\Windows\SysNative\RaCoInstx.dll [2011-01-02 16:48:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\D-Link [2011-01-02 16:48:22 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\InstallShield [2010-12-27 11:56:38 | 000,590,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2010-12-27 11:56:38 | 000,471,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll [2010-12-27 11:56:37 | 000,758,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2010-12-27 11:56:37 | 000,485,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2010-12-27 11:56:37 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2010-12-27 11:56:36 | 000,422,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2010-12-27 11:56:36 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2010-12-27 11:56:36 | 000,380,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [2010-12-27 11:56:36 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2010-12-27 11:56:36 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2010-12-27 11:56:36 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieencode.dll [2010-12-27 11:56:36 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieencode.dll [2010-12-27 11:56:32 | 000,367,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2010-12-27 11:56:31 | 000,292,352 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2010-12-27 11:56:31 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll [2010-12-27 11:56:31 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll [2010-12-27 11:56:31 | 000,048,128 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2010-12-27 11:56:31 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2010-12-27 11:16:00 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe [2010-12-27 11:15:17 | 000,655,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll [2010-12-27 11:15:17 | 000,500,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll [2010-12-27 11:15:17 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll [2010-12-27 11:15:17 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll [2010-12-27 11:15:17 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe [2010-12-27 11:15:16 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll [2010-12-23 11:00:38 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\Moje pliki Bitwy o Śródziemie™ II [2010-12-23 10:53:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts [2010-12-17 22:00:40 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\Moje pliki zapisu Bitwy o Śródziemie [2010-12-17 21:59:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES [2010-12-16 21:24:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite [2010-12-16 21:24:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite [2010-12-16 21:24:20 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\DAEMON Tools Lite [2010-12-16 21:23:34 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite [2009-06-04 00:57:38 | 000,060,928 | ---- | C] ( ) -- C:\Windows\SysWow64\a3d.dll [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2011-02-09 23:42:04 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2418384579-601973546-2015653325-1000UA.job [2011-02-09 22:42:00 | 000,001,010 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2418384579-601973546-2015653325-1000Core.job [2011-02-09 22:40:05 | 000,002,047 | ---- | M] () -- C:\Users\Bartek\Desktop\Google Chrome.lnk [2011-02-09 22:33:45 | 000,037,013 | ---- | M] () -- C:\ProgramData\nvModes.001 [2011-02-09 22:32:30 | 000,003,284 | ---- | M] () -- C:\Windows\SysWow64\ANIWZCS{A37175AC-F692-4FAC-B325-D0F88F7AA621} [2011-02-09 22:32:30 | 000,003,284 | ---- | M] () -- C:\Users\Bartek\AppData\Roaming\ANIWZCS{A37175AC-F692-4FAC-B325-D0F88F7AA621} [2011-02-09 22:32:18 | 004,823,656 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011-02-09 22:31:58 | 000,003,712 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011-02-09 22:31:57 | 000,003,712 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011-02-09 22:31:30 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-02-09 22:31:10 | 2144,854,016 | -HS- | M] () -- C:\hiberfil.sys [2011-02-09 22:25:53 | 002,348,748 | ---- | M] () -- C:\Windows\SysNative\drivers\N360x64\0403000.005\Cat.DB [2011-02-09 20:11:49 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempXe4208.html [2011-02-09 19:44:44 | 000,103,736 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2011-02-09 15:50:33 | 000,061,160 | ---- | M] () -- C:\Windows\SysNative\BMXStateBkp-{00000002-00000000-00000006-00001102-00000005-00291102}.rfx [2011-02-09 15:50:33 | 000,061,160 | ---- | M] () -- C:\Windows\SysNative\BMXState-{00000002-00000000-00000006-00001102-00000005-00291102}.rfx [2011-02-09 15:50:33 | 000,000,788 | ---- | M] () -- C:\Windows\SysNative\DVCState-{00000002-00000000-00000006-00001102-00000005-00291102}.rfx [2011-02-08 19:29:02 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempEg3656.html [2011-02-06 18:30:58 | 000,082,012 | ---- | M] () -- C:\Users\Bartek\Documents\xss.xps [2011-02-06 15:12:19 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\Tempww2932.html [2011-02-06 15:12:19 | 000,002,089 | ---- | M] () -- C:\Users\Bartek\AppData\Local\Tempmp2932.html [2011-02-05 16:13:45 | 372,800,131 | ---- | M] () -- C:\Windows\MEMORY.DMP [2011-02-05 14:36:08 | 000,001,799 | ---- | M] () -- C:\Users\Bartek\Desktop\L4D2 Control Panel.lnk [2011-02-05 14:36:08 | 000,001,789 | ---- | M] () -- C:\Users\Bartek\Desktop\Left 4 Dead 2.lnk [2011-02-05 14:36:08 | 000,001,757 | ---- | M] () -- C:\Users\Bartek\Desktop\L4D2 Updater.lnk [2011-02-05 00:36:35 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TemplO4756.html [2011-02-05 00:26:57 | 000,000,778 | ---- | M] () -- C:\Users\Bartek\Desktop\Garena.lnk [2011-02-04 23:56:50 | 001,468,980 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011-02-04 23:56:50 | 000,661,818 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2011-02-04 23:56:50 | 000,586,980 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011-02-04 23:56:50 | 000,126,702 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2011-02-04 23:56:50 | 000,101,052 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011-02-04 19:16:23 | 000,032,546 | ---- | M] () -- C:\Users\Bartek\Desktop\gitara.jpg [2011-02-03 16:14:22 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempfkX972.html [2011-02-02 22:10:03 | 000,001,072 | ---- | M] () -- C:\Windows\SysNative\settingsbkup.sfm [2011-02-02 22:10:03 | 000,001,072 | ---- | M] () -- C:\Windows\SysNative\settings.sfm [2011-02-02 22:05:58 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\Tempxo3364.html [2011-01-31 21:25:28 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\Templna820.html [2011-01-23 12:22:40 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempVO4204.html [2011-01-18 19:20:04 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempDM2908.html [2011-01-16 16:22:27 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempQq3068.html [2011-01-14 21:03:47 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TemppR4180.html [2011-01-13 15:09:54 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempOs4452.html [2011-01-09 18:04:59 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempfG3692.html [2011-01-07 22:31:02 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempDO4864.html [2011-01-06 21:39:32 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempFt4836.html [2011-01-04 19:54:25 | 000,001,976 | ---- | M] () -- C:\Users\Public\Desktop\Need for Speed™ Most Wanted.lnk [2011-01-03 20:22:57 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempLvR444.html [2011-01-02 18:59:28 | 000,466,456 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll [2011-01-02 18:59:28 | 000,444,952 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll [2011-01-02 18:59:28 | 000,121,880 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll [2011-01-02 18:59:27 | 000,109,080 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll [2011-01-02 18:59:27 | 000,000,159 | RH-- | M] () -- C:\Windows\ctfile.rfc [2011-01-02 18:42:24 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempBc3328.html [2011-01-02 17:04:43 | 000,000,007 | ---- | M] () -- C:\Windows\SysWow64\ANIWZCSUSERNAME{A37175AC-F692-4FAC-B325-D0F88F7AA621} [2011-01-02 16:45:13 | 000,525,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\DIFxAPI.dll [2010-12-26 14:03:27 | 000,173,104 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS [2010-12-26 14:03:27 | 000,007,440 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT [2010-12-26 14:03:27 | 000,000,854 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF [2010-12-24 20:48:31 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempFn4384.html [2010-12-23 21:09:50 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempsV4428.html [2010-12-23 10:54:34 | 000,002,014 | ---- | M] () -- C:\Users\Public\Desktop\Bitwa o Śródziemie™ II.lnk [2010-12-19 17:49:00 | 007,358,400 | ---- | M] () -- C:\Users\Bartek\Desktop\nothing else matters.mp3 [2010-12-18 23:41:29 | 000,000,410 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2010-12-17 21:59:17 | 000,001,919 | ---- | M] () -- C:\Users\Public\Desktop\Bitwa o Śródziemie™.lnk [2010-12-16 21:22:55 | 000,000,299 | ---- | M] () -- C:\Users\Bartek\Documents\ax_files.xml [2010-12-16 18:25:25 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempSF3756.html [2010-12-15 21:44:22 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempDE4536.html [2010-12-13 18:43:08 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempTF4980.html [2010-12-12 22:20:01 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempEe1596.html [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-02-09 22:40:05 | 000,002,047 | ---- | C] () -- C:\Users\Bartek\Desktop\Google Chrome.lnk [2011-02-09 22:37:56 | 000,001,062 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2418384579-601973546-2015653325-1000UA.job [2011-02-09 22:37:55 | 000,001,010 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2418384579-601973546-2015653325-1000Core.job [2011-02-09 19:47:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXe4208.html [2011-02-08 18:04:48 | 007,358,400 | ---- | C] () -- C:\Users\Bartek\Desktop\nothing else matters.mp3 [2011-02-08 16:34:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEg3656.html [2011-02-06 18:30:55 | 000,082,012 | ---- | C] () -- C:\Users\Bartek\Documents\xss.xps [2011-02-06 15:12:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempww2932.html [2011-02-06 15:12:19 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmp2932.html [2011-02-05 09:16:11 | 000,001,974 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PerfectDisk 8.0.lnk [2011-02-05 00:28:32 | 000,001,799 | ---- | C] () -- C:\Users\Bartek\Desktop\L4D2 Control Panel.lnk [2011-02-05 00:28:32 | 000,001,757 | ---- | C] () -- C:\Users\Bartek\Desktop\L4D2 Updater.lnk [2011-02-05 00:26:57 | 000,000,778 | ---- | C] () -- C:\Users\Bartek\Desktop\Garena.lnk [2011-02-04 23:38:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemplO4756.html [2011-02-04 19:16:16 | 000,032,546 | ---- | C] () -- C:\Users\Bartek\Desktop\gitara.jpg [2011-02-03 15:13:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempfkX972.html [2011-02-02 21:52:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempxo3364.html [2011-02-02 17:11:57 | 000,595,476 | ---- | C] () -- C:\Users\Bartek\AppData\Local\dd_vcredistMSI25B3.txt [2011-02-02 17:11:49 | 000,014,342 | ---- | C] () -- C:\Users\Bartek\AppData\Local\dd_vcredistUI25B3.txt [2011-02-02 16:57:17 | 000,001,789 | ---- | C] () -- C:\Users\Bartek\Desktop\Left 4 Dead 2.lnk [2011-01-31 20:24:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Templna820.html [2011-01-23 12:21:37 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempVO4204.html [2011-01-18 18:59:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempDM2908.html [2011-01-16 16:06:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQq3068.html [2011-01-14 17:24:01 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemppR4180.html [2011-01-13 15:08:57 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOs4452.html [2011-01-09 17:47:18 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempfG3692.html [2011-01-07 20:37:45 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempDO4864.html [2011-01-06 21:39:02 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFt4836.html [2011-01-04 19:54:25 | 000,001,976 | ---- | C] () -- C:\Users\Public\Desktop\Need for Speed™ Most Wanted.lnk [2011-01-03 20:16:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLvR444.html [2011-01-02 20:29:23 | 000,001,072 | ---- | C] () -- C:\Windows\SysNative\settingsbkup.sfm [2011-01-02 20:29:23 | 000,001,072 | ---- | C] () -- C:\Windows\SysNative\settings.sfm [2011-01-02 19:03:48 | 000,061,160 | ---- | C] () -- C:\Windows\SysNative\BMXStateBkp-{00000002-00000000-00000006-00001102-00000005-00291102}.rfx [2011-01-02 19:03:48 | 000,061,160 | ---- | C] () -- C:\Windows\SysNative\BMXState-{00000002-00000000-00000006-00001102-00000005-00291102}.rfx [2011-01-02 19:03:48 | 000,000,788 | ---- | C] () -- C:\Windows\SysNative\DVCState-{00000002-00000000-00000006-00001102-00000005-00291102}.rfx [2011-01-02 19:02:00 | 000,007,062 | ---- | C] () -- C:\Windows\SysWow64\audiopid.vxd [2011-01-02 18:59:27 | 000,190,976 | ---- | C] () -- C:\Windows\SysNative\APOMgr64.DLL [2011-01-02 18:59:27 | 000,148,480 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL [2011-01-02 18:59:27 | 000,089,088 | ---- | C] () -- C:\Windows\SysNative\CmdRtr64.DLL [2011-01-02 18:59:27 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL [2011-01-02 18:59:27 | 000,000,159 | RH-- | C] () -- C:\Windows\ctfile.rfc [2011-01-02 18:41:31 | 000,006,768 | ---- | C] () -- C:\Windows\SysWow64\Ludap17.ini [2011-01-02 18:41:31 | 000,006,768 | ---- | C] () -- C:\Windows\SysNative\Ludap17.ini [2011-01-02 18:06:27 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBc3328.html [2011-01-02 17:19:02 | 002,167,684 | ---- | C] () -- C:\Windows\SysWow64\CT2MGM.SF2 [2011-01-02 17:19:02 | 002,167,684 | ---- | C] () -- C:\Windows\SysNative\CT2MGM.SF2 [2011-01-02 17:19:02 | 001,048,576 | ---- | C] () -- C:\Windows\SysWow64\CT1MGM.ROM [2011-01-02 17:19:02 | 001,048,576 | ---- | C] () -- C:\Windows\SysNative\CT1MGM.ROM [2011-01-02 17:19:02 | 000,008,386 | ---- | C] () -- C:\Windows\SysWow64\CTAPO64.UDA [2011-01-02 17:19:02 | 000,000,766 | ---- | C] () -- C:\Windows\SysNative\SBXFi.ico [2011-01-02 17:18:59 | 000,005,530 | ---- | C] () -- C:\Windows\SysWow64\CTMLFX64.UDA [2011-01-02 17:18:59 | 000,003,128 | ---- | C] () -- C:\Windows\SysNative\XFi.bmp [2011-01-02 17:18:59 | 000,000,059 | ---- | C] () -- C:\Windows\SysWow64\default8.sfm [2011-01-02 17:18:59 | 000,000,059 | ---- | C] () -- C:\Windows\SysNative\default8.sfm [2011-01-02 17:18:59 | 000,000,059 | ---- | C] () -- C:\Windows\SysWow64\default4.sfm [2011-01-02 17:18:59 | 000,000,059 | ---- | C] () -- C:\Windows\SysNative\default4.sfm [2011-01-02 17:18:59 | 000,000,059 | ---- | C] () -- C:\Windows\SysWow64\default.sfm [2011-01-02 17:18:59 | 000,000,059 | ---- | C] () -- C:\Windows\SysNative\default.sfm [2011-01-02 17:04:50 | 000,003,284 | ---- | C] () -- C:\Windows\SysWow64\ANIWZCS{A37175AC-F692-4FAC-B325-D0F88F7AA621} [2011-01-02 17:04:50 | 000,003,284 | ---- | C] () -- C:\Users\Bartek\AppData\Roaming\ANIWZCS{A37175AC-F692-4FAC-B325-D0F88F7AA621} [2011-01-02 17:03:55 | 000,000,007 | ---- | C] () -- C:\Windows\SysWow64\ANIWZCSUSERNAME{A37175AC-F692-4FAC-B325-D0F88F7AA621} [2011-01-02 17:03:44 | 000,151,552 | ---- | C] () -- C:\Windows\SysWow64\ANIWConnService.exe [2011-01-02 17:03:30 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\wlanapp.dll [2011-01-02 17:03:30 | 000,217,088 | ---- | C] () -- C:\Windows\SysWow64\aIPH.dll [2011-01-02 17:03:30 | 000,049,152 | ---- | C] () -- C:\Windows\SysWow64\AQCKGen.dll [2011-01-02 17:03:30 | 000,045,115 | ---- | C] () -- C:\Windows\SysWow64\ANICtl.dll [2011-01-02 17:03:13 | 000,315,392 | ---- | C] () -- C:\Windows\SysWow64\ANIOApi.dll [2011-01-02 17:02:40 | 000,302,080 | ---- | C] () -- C:\Windows\lwd.exe [2011-01-02 17:02:39 | 000,733,184 | ---- | C] () -- C:\Windows\SysWow64\ANIOWPS.dll [2011-01-02 17:02:39 | 000,237,568 | ---- | C] () -- C:\Windows\SysWow64\ANIWPS.exe [2011-01-02 17:01:05 | 000,002,048 | ---- | C] () -- C:\Windows\SysWow64\rt73.bin [2011-01-02 16:51:38 | 000,015,872 | ---- | C] () -- C:\Windows\SysNative\drivers\anodlwfx.sys [2011-01-02 16:48:31 | 000,013,931 | ---- | C] () -- C:\Windows\SysNative\RaCoInst.dat [2010-12-24 20:24:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFn4384.html [2010-12-23 21:09:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempsV4428.html [2010-12-23 10:54:34 | 000,002,014 | ---- | C] () -- C:\Users\Public\Desktop\Bitwa o Śródziemie™ II.lnk [2010-12-17 21:59:17 | 000,001,919 | ---- | C] () -- C:\Users\Public\Desktop\Bitwa o Śródziemie™.lnk [2010-12-16 18:03:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSF3756.html [2010-12-15 21:24:23 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempDE4536.html [2010-12-13 14:56:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTF4980.html [2010-12-12 22:18:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEe1596.html [2010-12-11 14:18:54 | 000,000,016 | ---- | C] () -- C:\Windows\SysWow64\msvcsv60.dll [2010-12-09 20:53:29 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempzv4204.html [2010-12-09 20:14:01 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempma4528.html [2010-12-09 15:09:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempgX1388.html [2010-12-08 18:09:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempsB5100.html [2010-12-07 17:40:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemprV4476.html [2010-12-05 20:25:42 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOm5064.html [2010-12-02 13:46:34 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempec4444.html [2010-12-01 15:34:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempwO4372.html [2010-11-27 16:45:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvT2760.html [2010-11-25 19:17:59 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemprE4816.html [2010-11-25 13:33:56 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempai5076.html [2010-11-22 12:55:22 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempbU5024.html [2010-11-20 13:52:16 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempbr1948.html [2010-11-18 17:02:50 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempxA2180.html [2010-11-16 20:09:18 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXMU496.html [2010-11-15 16:44:46 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvH4256.html [2010-11-14 17:43:13 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEvX232.html [2010-11-13 21:59:13 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempoC3476.html [2010-11-13 17:31:06 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempfB4224.html [2010-11-13 11:46:20 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempym4932.html [2010-11-12 19:35:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempVx1004.html [2010-11-12 14:44:27 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnV4604.html [2010-11-11 12:21:35 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempjW4940.html [2010-11-10 18:36:40 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKI4132.html [2010-11-09 15:21:15 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempbB4988.html [2010-11-08 19:28:08 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXf2080.html [2010-11-08 19:05:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLB4648.html [2010-11-08 13:35:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFL4540.html [2010-11-07 21:11:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempuX4696.html [2010-11-07 15:28:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRa3276.html [2010-11-07 12:48:47 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempkz3608.html [2010-11-04 20:50:37 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKz4584.html [2010-11-02 17:25:45 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temppa2628.html [2010-11-02 12:08:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempov3488.html [2010-11-01 20:25:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempUx4376.html [2010-11-01 10:07:06 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temprx3476.html [2010-10-31 19:35:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnG1644.html [2010-10-30 15:18:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOS5092.html [2010-10-30 15:17:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTy3104.html [2010-10-30 15:17:04 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZR3104.html [2010-10-29 11:37:33 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnZ1280.html [2010-10-28 15:25:08 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempnf4300.html [2010-10-28 15:23:02 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempDfl768.html [2010-10-28 15:23:02 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGTr768.html [2010-10-27 17:32:01 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZZ4480.html [2010-10-25 17:36:39 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempvn2420.html [2010-10-25 17:36:39 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempwV2420.html [2010-10-24 15:48:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSm4660.html [2010-10-24 15:21:54 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFo3920.html [2010-10-23 16:28:17 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempuA4312.html [2010-10-22 22:44:40 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempea4440.html [2010-10-22 20:33:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempwwc828.html [2010-10-21 15:13:08 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempaL4384.html [2010-10-17 14:52:40 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQB4580.html [2010-10-16 15:35:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRd4540.html [2010-10-15 13:44:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYK4832.html [2010-10-14 18:23:15 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempcj4688.html [2010-10-13 14:51:35 | 000,439,994 | ---- | C] () -- C:\Users\Bartek\AppData\Local\dd_vcredistMSI0B76.txt [2010-10-13 14:51:34 | 000,011,856 | ---- | C] () -- C:\Users\Bartek\AppData\Local\dd_vcredistUI0B76.txt [2010-10-12 15:58:34 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempsO3124.html [2010-10-11 16:43:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Templn3428.html [2010-10-10 14:20:55 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmg3912.html [2010-10-09 12:03:01 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempqq3052.html [2010-10-03 18:21:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempdZ3612.html [2010-10-02 13:50:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnE4200.html [2010-10-02 13:46:38 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempkU4616.html [2010-10-02 13:46:38 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGL4616.html [2010-10-01 16:13:34 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOX4468.html [2010-10-01 16:13:06 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYl3748.html [2010-10-01 16:13:06 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempWy3748.html [2010-09-30 14:17:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAK4732.html [2010-09-30 14:16:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMG3832.html [2010-09-30 14:16:36 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvT3832.html [2010-09-29 15:26:34 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSQ3248.html [2010-09-28 19:50:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGU4344.html [2010-09-26 15:53:21 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempur3592.html [2010-09-26 15:43:17 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempsq3648.html [2010-09-26 14:36:03 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempfJ3472.html [2010-09-25 17:40:41 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temphy4352.html [2010-09-24 15:35:22 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempVT5096.html [2010-09-23 16:22:13 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZyA716.html [2010-09-20 15:28:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempVO5056.html [2010-09-19 19:06:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXY1852.html [2010-09-19 19:06:07 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnI4712.html [2010-09-19 19:06:07 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempzo4712.html [2010-09-18 18:29:18 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temppp4352.html [2010-09-18 13:04:00 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempcN2908.html [2010-09-17 19:49:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOS5004.html [2010-09-16 18:20:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempei3040.html [2010-09-16 14:17:20 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempfc5108.html [2010-09-15 15:45:08 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempxq4536.html [2010-09-14 16:41:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAy4796.html [2010-09-14 16:41:31 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempkS4796.html [2010-09-13 12:47:35 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempyA1064.html [2010-09-12 16:57:52 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempht2404.html [2010-09-12 12:00:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempdd4668.html [2010-09-11 14:04:12 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempxJ2532.html [2010-09-10 20:49:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQL4892.html [2010-09-09 16:04:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEL1504.html [2010-09-08 19:35:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempbu1084.html [2010-09-08 19:10:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temprj3816.html [2010-09-08 17:35:07 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempeGw472.html [2010-09-07 17:31:11 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempjW2964.html [2010-09-06 19:17:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempdm4012.html [2010-09-06 15:08:23 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemphY4716.html [2010-09-05 19:55:39 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempjB4224.html [2010-09-05 15:25:01 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempqk4036.html [2010-09-05 15:25:01 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temply4036.html [2010-09-05 10:27:16 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemptU4160.html [2010-09-05 10:27:16 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYL4160.html [2010-09-04 18:13:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQC4800.html [2010-09-03 18:28:30 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMt4288.html [2010-09-02 15:56:18 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmf4828.html [2010-09-01 15:35:46 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFH4264.html [2010-08-31 18:38:03 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempeF4328.html [2010-08-31 11:36:07 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTV5072.html [2010-08-31 11:36:07 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempjE5072.html [2010-08-30 20:53:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMI3604.html [2010-08-30 10:02:53 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEL4476.html [2010-08-30 10:02:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempcI4476.html [2010-08-28 13:07:38 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvY4260.html [2010-08-25 15:53:42 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2010-08-24 22:14:16 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEF4496.html [2010-08-24 17:39:56 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvL1984.html [2010-08-24 11:51:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXx3508.html [2010-08-23 15:08:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempvh3468.html [2010-08-20 19:17:47 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempeY2704.html [2010-08-20 13:55:47 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAs5048.html [2010-08-19 20:30:26 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEI3024.html [2010-08-19 17:11:53 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLh4344.html [2010-08-17 16:53:17 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempmX4632.html [2010-08-15 20:03:56 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmo4552.html [2010-08-15 11:59:41 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempwQ3776.html [2010-08-14 15:17:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemplU4448.html [2010-08-12 14:37:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQw2828.html [2010-08-12 14:20:59 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXc4844.html [2010-08-12 14:20:59 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBb4844.html [2010-08-08 20:21:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnQ4428.html [2010-08-08 20:19:54 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Templc2872.html [2010-08-08 20:19:54 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempzQ2872.html [2010-08-05 17:07:26 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempvi4636.html [2010-08-05 16:03:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTj4640.html [2010-08-05 13:15:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemphX4520.html [2010-08-03 13:14:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempDe4356.html [2010-08-02 18:14:30 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFn2120.html [2010-08-01 14:37:37 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAx4852.html [2010-07-31 13:08:42 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOK3716.html [2010-07-31 11:10:35 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempyI4904.html [2010-07-29 15:47:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempJa3500.html [2010-07-29 14:51:29 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempqF4920.html [2010-07-29 14:51:29 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempfI4920.html [2010-07-29 14:51:02 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempWu1036.html [2010-07-29 14:51:02 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQh1036.html [2010-07-29 10:13:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempun2552.html [2010-07-25 11:28:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemptW4620.html [2010-07-24 23:27:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSA4160.html [2010-07-24 22:44:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempeQ4412.html [2010-07-24 16:49:01 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnA4332.html [2010-07-24 10:19:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempuTU792.html [2010-07-23 11:28:06 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHV4368.html [2010-07-22 11:27:30 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKw4048.html [2010-07-19 18:06:00 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempeO4956.html [2010-07-19 18:06:00 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYN4956.html [2010-07-19 18:05:53 | 000,000,680 | ---- | C] () -- C:\Users\Bartek\AppData\Local\d3d9caps.dat [2010-07-17 18:08:49 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempcJ4260.html [2010-07-16 10:24:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempPQ4204.html [2010-07-15 16:39:25 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemptW4416.html [2010-07-15 09:32:39 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempmT4112.html [2010-07-14 17:16:45 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIG5096.html [2010-07-13 15:08:03 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHv4300.html [2010-07-13 13:46:17 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemplH1644.html [2010-07-13 11:27:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempaa2508.html [2010-07-13 11:27:31 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCW2508.html [2010-07-13 08:45:27 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOa1232.html [2010-07-12 21:37:00 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempVy4448.html [2010-07-12 14:04:47 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmu3764.html [2010-07-12 12:10:25 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempNe4056.html [2010-07-12 12:10:25 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIN4056.html [2010-07-11 13:53:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGm3012.html [2010-07-10 10:37:38 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\suppdll.dll [2010-07-10 10:37:38 | 000,035,363 | ---- | C] () -- C:\Windows\SysWow64\windrvNT.sys [2010-07-10 10:25:13 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemppQ5024.html [2010-07-09 18:18:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempcu2364.html [2010-07-09 15:05:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temppu3984.html [2010-07-09 14:05:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temprg4272.html [2010-07-09 08:41:43 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemplN4604.html [2010-07-09 08:41:43 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGc4604.html [2010-07-08 17:56:23 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempoW3000.html [2010-07-06 15:10:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYg4488.html [2010-07-02 12:50:54 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemplS2528.html [2010-07-02 12:50:54 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempeH2528.html [2010-07-01 18:55:13 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempjJ2912.html [2010-07-01 12:25:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempaY2644.html [2010-07-01 11:02:16 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempkP4160.html [2010-06-30 20:09:50 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnN3160.html [2010-06-28 15:52:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempkl4220.html [2010-06-28 11:20:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempNJ3988.html [2010-06-27 19:17:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempqbm920.html [2010-06-27 09:32:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQd3860.html [2010-06-26 16:19:44 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKFO760.html [2010-06-26 15:50:11 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempaE2424.html [2010-06-26 10:01:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQU4812.html [2010-06-25 17:59:56 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmo4388.html [2010-06-25 14:34:25 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZWa276.html [2010-06-23 19:26:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLcn716.html [2010-06-23 17:31:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempbN5024.html [2010-06-23 09:20:07 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRm4260.html [2010-06-22 19:29:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempPr2044.html [2010-06-22 17:46:29 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempxo3376.html [2010-06-22 13:20:01 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGq4440.html [2010-06-21 20:19:18 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXN4540.html [2010-06-21 19:58:35 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmb4604.html [2010-06-21 15:20:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempup4220.html [2010-06-21 12:20:56 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEk2924.html [2010-06-20 17:29:30 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSdL372.html [2010-06-20 10:42:20 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempfM4552.html [2010-06-20 10:22:13 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYu4796.html [2010-06-19 19:35:41 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temphj3996.html [2010-06-19 13:23:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temppi3836.html [2010-06-19 12:46:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnX1908.html [2010-06-19 12:32:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempyZk976.html [2010-06-19 12:32:19 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemppIp976.html [2010-06-18 16:51:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempUV4056.html [2010-06-17 18:44:12 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYQ2356.html [2010-06-17 16:26:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOg4796.html [2010-06-17 16:26:31 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempgk4796.html [2010-06-17 14:44:44 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temphw2024.html [2010-06-17 12:58:25 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempzN4176.html [2010-06-17 12:58:25 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKF4176.html [2010-06-17 12:33:03 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHZ3380.html [2010-06-16 15:33:00 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemppC4028.html [2010-06-15 16:53:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFSc608.html [2010-06-13 13:40:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZY3032.html [2010-06-13 13:22:11 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOh5060.html [2010-06-13 13:22:11 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOV5060.html [2010-06-11 19:00:57 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXky504.html [2010-06-11 14:58:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempbj4316.html [2010-06-10 14:28:44 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempVV2992.html [2010-06-08 19:34:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQn3396.html [2010-06-07 18:47:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemppTI772.html [2010-06-06 18:47:25 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempuC4040.html [2010-06-05 16:53:50 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQP5032.html [2010-06-04 10:22:08 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZsi196.html [2010-06-03 13:19:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHL2092.html [2010-06-02 21:49:47 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBFF788.html [2010-06-02 21:24:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempka4692.html [2010-06-02 21:14:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemppF3320.html [2010-06-02 16:22:15 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Templs1636.html [2010-06-01 11:39:30 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBi4080.html [2010-05-31 18:06:03 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempmK1520.html [2010-05-31 13:10:47 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGx4120.html [2010-05-31 09:05:12 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempvl3008.html [2010-05-31 08:47:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYE2996.html [2010-05-30 18:46:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMK3268.html [2010-05-30 10:03:00 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temphm3840.html [2010-05-29 17:52:02 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCR3516.html [2010-05-29 14:00:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHi5024.html [2010-05-28 16:03:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemppX2968.html [2010-05-26 18:04:02 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKJ3028.html [2010-05-25 19:11:45 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFG4160.html [2010-05-25 15:17:39 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempsw3364.html [2010-05-24 17:55:42 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempoI1316.html [2010-05-23 14:23:49 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempfd3600.html [2010-05-23 10:59:17 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmf4148.html [2010-05-22 21:26:57 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempPA3056.html [2010-05-22 19:24:23 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempkP1168.html [2010-05-22 10:22:52 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempVG3456.html [2010-05-21 15:53:55 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSA4776.html [2010-05-21 15:33:27 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGN4688.html [2010-05-20 19:18:45 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvN3812.html [2010-05-20 16:20:18 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCO3372.html [2010-05-20 09:08:43 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempvj4028.html [2010-05-19 19:49:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHk3396.html [2010-05-19 14:16:06 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempxy3440.html [2010-05-19 10:37:43 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRr3376.html [2010-05-18 22:41:06 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempsT4808.html [2010-05-18 19:55:17 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempNL3044.html [2010-05-18 11:16:39 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGo3592.html [2010-05-18 08:18:47 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRj1564.html [2010-05-18 07:26:30 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTX1140.html [2010-05-17 17:46:12 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSdis12.html [2010-05-17 14:39:07 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRZ3976.html [2010-05-16 21:21:22 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCm2964.html [2010-05-16 17:42:53 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempwG4564.html [2010-05-16 10:10:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZV1376.html [2010-05-16 10:10:24 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGb1376.html [2010-05-15 20:50:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRI3148.html [2010-05-15 18:21:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempoY4040.html [2010-05-15 12:49:12 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempST3628.html [2010-05-15 12:44:23 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempxs4176.html [2010-05-15 12:44:23 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOU4176.html [2010-05-15 12:44:00 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempei3468.html [2010-05-15 12:44:00 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempJS3468.html [2010-05-15 12:43:49 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempfW2848.html [2010-05-15 12:43:49 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temprm2848.html [2010-05-14 20:25:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempdN2364.html [2010-05-14 20:25:05 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXF2364.html [2010-05-14 19:13:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLi4040.html [2010-05-14 19:13:58 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvL4040.html [2010-05-14 14:14:01 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIx2008.html [2010-05-14 14:14:01 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempDV2008.html [2010-05-14 06:18:56 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCK3620.html [2010-05-14 06:18:56 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempUA3620.html [2010-05-13 19:18:41 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempgX1108.html [2010-05-13 19:18:41 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temphk1108.html [2010-05-13 14:20:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZz2104.html [2010-05-13 14:20:51 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Templx2104.html [2010-05-13 14:12:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTn3520.html [2010-05-13 14:12:36 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBd3520.html [2010-05-12 18:01:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQf3304.html [2010-05-12 18:01:24 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempku3304.html [2010-05-11 16:30:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCk2952.html [2010-05-11 16:30:24 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempUR2952.html [2010-05-10 21:27:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempfdd512.html [2010-05-10 21:27:51 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempaQC512.html [2010-05-10 17:48:20 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempjl3880.html [2010-05-10 17:48:20 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXj3880.html [2010-05-08 15:42:15 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTE4916.html [2010-05-08 15:42:15 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempwp4916.html [2010-05-08 09:07:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempUl2092.html [2010-05-08 09:07:10 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQP2092.html [2010-05-07 17:27:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYA4188.html [2010-05-07 17:27:28 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temphe4188.html [2010-05-06 08:12:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempWf3976.html [2010-05-06 08:12:36 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFL3976.html [2010-05-05 19:34:52 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOu1172.html [2010-05-05 19:34:52 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXx1172.html [2010-05-03 18:31:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKU4552.html [2010-05-03 18:31:24 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAI4552.html [2010-05-03 11:04:52 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmj4376.html [2010-05-03 11:04:52 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempvn4376.html [2010-05-02 11:22:38 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempyh3984.html [2010-05-02 11:22:38 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKD3984.html [2010-05-01 19:32:16 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempdN1824.html [2010-05-01 19:32:16 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempzi1824.html [2010-05-01 14:27:37 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIj3636.html [2010-05-01 14:27:37 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempzT3636.html [2010-05-01 12:44:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempqk4168.html [2010-05-01 12:44:28 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempwI4168.html [2010-05-01 11:44:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLT1704.html [2010-05-01 11:44:31 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempqK1704.html [2010-04-30 19:29:23 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempdI1032.html [2010-04-30 19:29:23 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCI1032.html [2010-04-28 19:01:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCx4856.html [2010-04-28 19:01:48 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempDW4856.html [2010-04-28 15:56:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemphG4832.html [2010-04-28 15:56:48 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempkl4832.html [2010-04-25 17:03:33 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempiM3416.html [2010-04-25 17:03:33 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempfv3416.html [2010-04-25 10:22:40 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMrC456.html [2010-04-25 10:22:40 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemprgF456.html [2010-04-24 11:16:03 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRi4704.html [2010-04-24 11:16:03 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOR4704.html [2010-04-19 19:33:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGkB748.html [2010-04-19 19:33:04 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMLM748.html [2010-04-19 15:03:02 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSt5028.html [2010-04-19 15:03:02 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKx5028.html [2010-04-18 15:26:38 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempoR2460.html [2010-04-18 15:26:38 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempcH2460.html [2010-04-17 19:56:02 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempkM3500.html [2010-04-17 19:56:02 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvF3500.html [2010-04-17 18:20:43 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempcJ4768.html [2010-04-17 18:20:43 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKo4768.html [2010-04-17 14:26:26 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temppa2224.html [2010-04-17 14:26:26 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYW2224.html [2010-04-16 16:14:27 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAg4812.html [2010-04-16 16:14:27 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempbT4812.html [2010-04-15 19:20:41 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempdC3168.html [2010-04-15 19:20:41 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempht3168.html [2010-04-15 14:18:11 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemptT3612.html [2010-04-15 14:18:11 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKx3612.html [2010-04-14 19:22:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGqn496.html [2010-04-14 19:22:48 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSdx496.html [2010-04-13 18:03:20 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempfk3132.html [2010-04-13 18:03:20 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempsT3132.html [2010-04-11 17:34:44 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBK3140.html [2010-04-11 17:34:44 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQE3140.html [2010-04-10 13:08:35 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIy3892.html [2010-04-10 13:08:35 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMV3892.html [2010-04-09 20:21:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempoj3308.html [2010-04-09 20:21:51 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAW3308.html [2010-04-09 14:22:11 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempqy4004.html [2010-04-09 14:22:11 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAE4004.html [2010-04-08 14:29:52 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempuk2608.html [2010-04-08 14:29:52 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMo2608.html [2010-04-07 16:38:25 | 000,037,013 | ---- | C] () -- C:\ProgramData\nvModes.001 [2010-04-07 16:38:24 | 000,037,013 | ---- | C] () -- C:\ProgramData\nvModes.dat [2010-04-06 14:24:45 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBV4392.html [2010-04-06 14:24:45 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKe4392.html [2010-04-01 14:42:53 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempiK2344.html [2010-04-01 14:42:53 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempwS2344.html [2010-03-31 12:41:56 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempqi4260.html [2010-03-31 12:41:56 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempkE4260.html [2010-03-29 18:44:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRTq856.html [2010-03-29 18:44:05 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempsuv856.html [2010-03-29 16:05:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIL3880.html [2010-03-29 16:05:28 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSo3880.html [2010-03-28 18:57:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempiMz856.html [2010-03-28 18:57:36 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempNuM856.html [2010-03-28 10:02:43 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFW3604.html [2010-03-28 10:02:43 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSj3604.html [2010-03-27 20:17:35 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempuD3896.html [2010-03-27 20:17:35 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempcK3896.html [2010-03-27 12:27:53 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAu4876.html [2010-03-27 12:27:53 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempaL4876.html [2010-03-26 19:05:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temptk4748.html [2010-03-26 19:05:09 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempWd4748.html [2010-03-25 19:14:55 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemppyA684.html [2010-03-25 19:14:55 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCWe684.html [2010-03-25 15:53:40 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLn4592.html [2010-03-25 15:53:40 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temppq4592.html [2010-03-25 13:15:41 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempUx2268.html [2010-03-25 13:15:41 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFH2268.html [2010-03-24 12:59:15 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempoK2376.html [2010-03-24 12:59:15 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLv2376.html [2010-03-23 18:56:55 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempakv304.html [2010-03-23 18:56:55 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempUKx304.html [2010-03-20 22:21:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTq2412.html [2010-03-20 22:21:58 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHZ2412.html [2010-03-20 16:07:49 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQl4804.html [2010-03-20 16:07:49 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYV4804.html [2010-03-18 18:53:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempnu1976.html [2010-03-18 18:53:48 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnI1976.html [2010-03-17 15:27:30 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvG4376.html [2010-03-17 15:27:30 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMs4376.html [2010-03-16 18:30:35 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCj4068.html [2010-03-16 18:30:34 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTm4068.html [2010-03-15 19:56:55 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMD4500.html [2010-03-15 19:56:55 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQX4500.html [2010-03-14 19:22:39 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temptk3576.html [2010-03-14 19:22:39 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempae3576.html [2010-03-14 14:32:49 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempNPo764.html [2010-03-14 14:32:49 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBKi764.html [2010-03-14 10:25:52 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLn4588.html [2010-03-14 10:25:52 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempsk4588.html [2010-03-12 16:31:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMO5036.html [2010-03-12 16:31:48 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXn5036.html [2010-03-11 20:07:42 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempsV3420.html [2010-03-11 20:07:42 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempnh3420.html [2010-03-09 15:17:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempgo3416.html [2010-03-09 15:17:36 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZW3416.html [2010-03-08 19:58:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIr2920.html [2010-03-08 19:58:32 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOD2920.html [2010-03-08 14:23:42 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempuL1424.html [2010-03-08 14:23:42 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRi1424.html [2010-03-07 12:01:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOH4760.html [2010-03-07 12:01:14 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBB4760.html [2010-03-06 20:36:43 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempnq2876.html [2010-03-06 20:36:43 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKQ2876.html [2010-03-06 14:58:22 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempUE3372.html [2010-03-06 14:58:22 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGl3372.html [2010-03-05 15:32:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempup2856.html [2010-03-05 15:32:05 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempgv2856.html [2010-03-04 20:23:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempyh2872.html [2010-03-04 20:23:04 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAL2872.html [2010-03-04 16:08:53 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZV3564.html [2010-03-04 16:08:53 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQM3564.html [2010-02-27 19:18:27 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempgv4036.html [2010-02-27 19:18:27 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempgp4036.html [2010-02-27 17:28:16 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemplQ4708.html [2010-02-27 17:28:16 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temphq4708.html [2010-02-27 11:53:12 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempnf3352.html [2010-02-27 11:53:12 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempdq3352.html [2010-02-26 15:52:26 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKZ3400.html [2010-02-26 15:52:26 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOG3400.html [2010-02-26 09:49:11 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGl3880.html [2010-02-26 09:49:11 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemptU3880.html [2010-02-25 14:43:47 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempii2904.html [2010-02-25 14:43:47 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temppw2904.html [2010-02-25 10:42:16 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempoB2744.html [2010-02-25 10:42:16 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOC2744.html [2010-02-24 16:47:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempgVR480.html [2010-02-24 16:47:10 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEvd480.html [2010-02-24 12:11:25 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAQ4072.html [2010-02-24 12:11:25 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempsW4072.html [2010-02-23 14:16:11 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempaYZ200.html [2010-02-23 14:16:11 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempWti200.html [2010-02-22 18:45:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempkw2668.html [2010-02-22 18:45:09 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempgA2668.html [2010-02-22 09:50:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHH2944.html [2010-02-22 09:50:32 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRr2944.html [2010-02-21 18:57:35 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempeyg568.html [2010-02-21 18:57:35 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempScG568.html [2010-02-21 13:50:49 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temptq4152.html [2010-02-21 13:50:49 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEU4152.html [2010-02-20 13:33:54 | 000,000,060 | ---- | C] () -- C:\Windows\wininit.ini [2010-02-20 13:27:40 | 000,000,551 | ---- | C] () -- C:\Windows\Vf2k.ini [2010-02-19 14:04:00 | 000,000,331 | ---- | C] () -- C:\Windows\game.ini [2009-12-29 22:32:28 | 000,022,528 | ---- | C] () -- C:\Users\Bartek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-12-27 13:03:44 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll [2009-12-27 13:02:31 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-12-22 21:27:10 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini [2009-12-22 21:21:31 | 000,001,460 | ---- | C] () -- C:\Users\Bartek\AppData\Local\d3d9caps64.dat [2009-06-04 01:37:08 | 000,021,093 | ---- | C] () -- C:\Windows\SysWow64\instwdm.ini [2009-06-04 01:37:06 | 000,000,054 | ---- | C] () -- C:\Windows\SysWow64\ctzapxx.ini [2009-06-04 00:55:20 | 000,002,560 | ---- | C] () -- C:\Windows\SysWow64\CtxfiRes.dll [2009-05-27 09:49:00 | 000,000,285 | ---- | C] () -- C:\Windows\SysWow64\kill.ini [2008-01-21 03:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini [2005-10-21 09:12:42 | 000,064,512 | ---- | C] () -- C:\Windows\SysWow64\P17.DLL [2005-10-14 11:56:50 | 003,596,288 | ---- | C] () -- C:\Windows\SysWow64\qt-dx331.dll [2005-10-14 11:56:50 | 000,921,600 | ---- | C] () -- C:\Windows\SysWow64\VorbisEnc.dll [2005-10-14 11:56:50 | 000,881,664 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2005-10-14 11:56:50 | 000,344,064 | ---- | C] () -- C:\Windows\SysWow64\xvid.dll [2005-10-14 11:56:50 | 000,237,568 | ---- | C] () -- C:\Windows\SysWow64\OggDS.dll [2005-10-14 11:56:50 | 000,188,416 | ---- | C] () -- C:\Windows\SysWow64\vorbis.dll [2005-10-14 11:56:50 | 000,155,136 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2005-10-14 11:56:50 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\ogg.dll [2005-10-14 11:56:48 | 000,077,824 | ---- | C] () -- C:\Windows\SysWow64\MMSwitch.dll [2003-10-02 18:48:18 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\P17CPI.DLL [color=#E56717]========== LOP Check ==========[/color] [2010-10-23 19:06:05 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\Avnex [2010-12-16 21:26:17 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\DAEMON Tools Lite [2010-10-27 22:07:48 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\DAEMON Tools Pro [2010-06-20 11:00:18 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\Facebook [2010-07-06 15:11:02 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\Gadu-Gadu 10 [2010-11-14 18:36:38 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\GHISLER [2010-08-31 19:24:50 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\IrfanView [2011-01-04 19:01:46 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\Moje pliki Bitwy o Śródziemie™ II [2010-12-17 22:24:21 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\Moje pliki zapisu Bitwy o Śródziemie [2010-12-08 16:29:36 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\Octoshape [2011-01-16 20:10:52 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\Smart Recorder [2010-08-18 19:57:38 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\TS3Client [2010-12-08 16:24:04 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\Uniblue [2011-02-09 15:50:19 | 000,032,610 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report > [/log] [log]OTL logfile created on: 2011-02-09 23:51:11 - Run 1 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Users\Bartek\Downloads 64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 7.0.6002.18005) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 0,00 Gb Available Physical Memory | 22,00% Memory free 4,00 Gb Paging File | 1,00 Gb Available in Paging File | 20,00% Paging File free Paging file location(s): c:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 390,62 Gb Total Space | 260,44 Gb Free Space | 66,67% Space Free | Partition Type: NTFS Drive D: | 195,31 Gb Total Space | 168,50 Gb Free Space | 86,27% Space Free | Partition Type: NTFS Drive E: | 195,31 Gb Total Space | 170,69 Gb Free Space | 87,39% Space Free | Partition Type: NTFS Drive F: | 150,26 Gb Total Space | 137,92 Gb Free Space | 91,79% Space Free | Partition Type: NTFS Computer Name: BARTEKK | User Name: Bartek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days [color=#E56717]========== Processes (All) ==========[/color] PRC - [2011-02-09 23:50:18 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Bartek\Downloads\OTL.exe PRC - [2011-02-09 22:37:50 | 000,136,176 | ---- | M] (Google Inc.) -- C:\Users\Bartek\AppData\Local\Google\Update\1.2.183.23\GoogleCrashHandler.exe PRC - [2011-02-07 10:29:02 | 000,994,872 | ---- | M] (Google Inc.) -- C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe PRC - [2011-01-11 18:42:36 | 000,071,464 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Valve\Steam\GameOverlayUI.exe PRC - [2011-01-11 18:42:33 | 000,407,336 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe PRC - [2010-11-29 14:38:29 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2010-11-17 13:56:58 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Valve\Steam\Steam.exe PRC - [2010-06-07 20:35:08 | 000,086,077 | ---- | M] (Valve) -- c:\Program Files (x86)\Valve\Steam\SteamApps\azarath211\counter-strike\hl.exe PRC - [2010-02-26 01:21:50 | 000,126,392 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccsvchst.exe PRC - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe PRC - [2009-12-22 21:52:42 | 000,067,128 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe PRC - [2009-09-18 17:02:30 | 001,708,032 | ---- | M] (D-Link Corp.) -- C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\AirGCFG.exe PRC - [2009-08-31 10:26:04 | 004,053,504 | ---- | M] () -- C:\Program Files (x86)\OSCAR Editor\OscarEditor.exe PRC - [2009-08-21 09:27:24 | 000,098,304 | ---- | M] (Wireless Service) -- C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe PRC - [2009-07-07 20:10:14 | 000,151,552 | ---- | M] () -- C:\Windows\SysWOW64\ANIWConnService.exe PRC - [2009-06-04 00:55:16 | 000,025,600 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysWOW64\Ctxfihlp.exe PRC - [2009-06-04 00:49:56 | 001,213,440 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysWOW64\CTxfispi.exe PRC - [2008-01-24 12:36:22 | 000,073,728 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe PRC - [2008-01-21 03:48:05 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\svchost.exe [comLaunch] PRC - [2007-01-30 02:08:40 | 000,077,824 | ---- | M] () -- C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe PRC - [2006-12-06 10:51:08 | 000,734,736 | ---- | M] (Raxco Software, Inc.) -- C:\Program Files (x86)\Raxco\PerfectDisk\PDEngine.exe PRC - [2006-12-06 10:50:56 | 000,407,056 | ---- | M] (Raxco Software, Inc.) -- C:\Program Files (x86)\Raxco\PerfectDisk\PDAgent.exe PRC - [2006-11-02 10:45:37 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rundll32.exe PRC - [2006-11-02 10:45:02 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dllhost.exe PRC - [2003-12-22 14:36:14 | 000,561,152 | ---- | M] () -- C:\Program Files (x86)\Ventrilo\Ventrilo.exe [color=#E56717]========== Modules (All) ==========[/color] MOD - [2011-02-09 23:50:18 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Bartek\Downloads\OTL.exe MOD - [2010-09-20 20:26:01 | 000,415,088 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\asoehook.dll MOD - [2010-08-31 16:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll MOD - [2010-07-26 16:51:48 | 011,584,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll MOD - [2010-06-28 18:00:21 | 001,316,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll MOD - [2010-04-16 17:46:48 | 000,502,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll MOD - [2009-07-17 14:54:43 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll MOD - [2009-07-12 09:02:02 | 000,653,120 | R--- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\microsoft.vc90.crt\msvcr90.dll MOD - [2009-07-12 09:02:00 | 000,569,664 | R--- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\microsoft.vc90.crt\msvcp90.dll MOD - [2009-06-15 15:54:11 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll MOD - [2009-04-23 13:15:39 | 000,677,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll MOD - [2009-04-11 07:28:25 | 001,077,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll MOD - [2009-04-11 07:28:25 | 000,287,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll MOD - [2009-04-11 07:28:25 | 000,108,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\userenv.dll MOD - [2009-04-11 07:28:25 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll MOD - [2009-04-11 07:28:24 | 001,591,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll MOD - [2009-04-11 07:28:24 | 001,068,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll MOD - [2009-04-11 07:28:24 | 000,353,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll MOD - [2009-04-11 07:28:24 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll MOD - [2009-04-11 07:28:24 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll MOD - [2009-04-11 07:28:23 | 000,754,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll MOD - [2009-04-11 07:28:23 | 000,563,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll MOD - [2009-04-11 07:28:23 | 000,467,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netapi32.dll MOD - [2009-04-11 07:28:23 | 000,121,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll MOD - [2009-04-11 07:28:23 | 000,088,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll MOD - [2009-04-11 07:28:22 | 000,679,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll MOD - [2009-04-11 07:28:20 | 000,807,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll MOD - [2009-04-11 07:28:20 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mpr.dll MOD - [2009-04-11 07:28:18 | 000,450,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2009-04-11 07:28:18 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\authz.dll MOD - [2009-04-11 07:28:17 | 000,800,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll MOD - [2009-04-11 07:28:17 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll MOD - [2009-04-11 07:27:50 | 001,165,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll MOD - [2009-04-11 07:27:12 | 000,258,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv MOD - [2009-04-11 07:26:45 | 000,648,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll MOD - [2009-04-11 07:26:44 | 000,858,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll MOD - [2009-04-11 07:26:44 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll MOD - [2009-04-11 07:26:43 | 000,303,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll MOD - [2009-04-11 07:26:43 | 000,116,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll MOD - [2008-01-21 03:52:09 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll MOD - [2008-01-21 03:51:05 | 000,234,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll MOD - [2008-01-21 03:50:35 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ws2_32.dll MOD - [2008-01-21 03:50:15 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\nsi.dll MOD - [2008-01-21 03:50:01 | 000,183,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\xmllite.dll MOD - [2008-01-21 03:50:01 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2008-01-21 03:49:43 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll MOD - [2008-01-21 03:49:34 | 000,523,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll MOD - [2006-11-02 10:46:12 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2008-01-21 03:47:32 | 000,383,544 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2011-01-11 18:42:33 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2011-01-05 10:53:07 | 003,129,432 | ---- | M] () [Auto | Running] -- c:\Program Files (x86)\Common Files\Akamai\netsession_win_dbc0250.dll -- (Akamai) SRV - [2011-01-03 14:10:24 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service) SRV - [2011-01-02 20:26:14 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service) SRV - [2010-12-06 08:31:50 | 002,101,640 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2010-11-29 14:38:29 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2010-02-26 01:21:50 | 000,126,392 | R--- | M] (Symantec Corporation) [Unknown | Running] -- C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe -- (N360) SRV - [2010-02-19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2009-07-07 20:10:14 | 000,151,552 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\ANIWConnService.exe -- (ANIWConnService) SRV - [2009-03-30 05:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2006-12-06 10:51:08 | 000,734,736 | ---- | M] (Raxco Software, Inc.) [On_Demand | Running] -- C:\Program Files (x86)\Raxco\PerfectDisk\PDEngine.exe -- (PDEngine) SRV - [2006-12-06 10:50:56 | 000,407,056 | ---- | M] (Raxco Software, Inc.) [Auto | Running] -- C:\Program Files (x86)\Raxco\PerfectDisk\PDAgent.exe -- (PDAgent) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010-12-26 14:03:27 | 000,173,104 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\SYMEVENT64x86.SYS -- (SymEvent) DRV:[b]64bit:[/b] - [2010-10-27 21:41:22 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010-10-12 09:30:28 | 000,025,528 | ---- | M] (Turtle Entertainment GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ESLvnic.sys -- (ESLvnic1) DRV:[b]64bit:[/b] - [2010-05-06 05:01:59 | 000,451,120 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\N360x64\0403000.005\SYMTDIV.SYS -- (SYMTDIv) DRV:[b]64bit:[/b] - [2010-04-29 06:03:51 | 000,150,064 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\0403000.005\Ironx64.SYS -- (SymIRON) DRV:[b]64bit:[/b] - [2010-04-22 04:02:20 | 000,221,232 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\N360x64\0403000.005\SYMEFA64.SYS -- (SymEFA) DRV:[b]64bit:[/b] - [2010-04-22 03:29:51 | 000,505,392 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\Windows\SysNative\Drivers\N360x64\0403000.005\SRTSP64.SYS -- (SRTSP) DRV:[b]64bit:[/b] - [2010-04-22 03:29:51 | 000,032,304 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\0403000.005\SRTSPX64.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL) DRV:[b]64bit:[/b] - [2010-02-26 01:22:52 | 000,615,040 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\N360x64\0403000.005\ccHPx64.sys -- (ccHP) DRV:[b]64bit:[/b] - [2010-02-03 14:56:56 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\hamachi.sys -- (hamachi) DRV:[b]64bit:[/b] - [2009-12-24 14:57:52 | 000,034,152 | R--- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:[b]64bit:[/b] - [2009-10-15 04:50:05 | 000,433,200 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\N360x64\0403000.005\SYMDS64.SYS -- (SymDS) DRV:[b]64bit:[/b] - [2009-09-05 14:27:12 | 001,449,984 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009-08-03 10:56:28 | 000,900,608 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\Dnetr28ux.sys -- (netr28ux) DRV:[b]64bit:[/b] - [2009-06-04 02:49:58 | 001,561,112 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ha20x2k.sys -- (ha20x2k) DRV:[b]64bit:[/b] - [2009-06-04 02:49:42 | 000,118,296 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\emupia2k.sys -- (emupia) DRV:[b]64bit:[/b] - [2009-06-04 02:49:34 | 000,213,016 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctsfm2k.sys -- (ctsfm2k) DRV:[b]64bit:[/b] - [2009-06-04 02:49:26 | 000,015,896 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctprxy2k.sys -- (ctprxy2k) DRV:[b]64bit:[/b] - [2009-06-04 02:49:18 | 000,179,224 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctoss2k.sys -- (ossrv) DRV:[b]64bit:[/b] - [2009-06-04 02:49:08 | 000,684,312 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM) DRV:[b]64bit:[/b] - [2009-06-04 02:49:00 | 000,580,632 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctac32k.sys -- (ctac32k) DRV:[b]64bit:[/b] - [2009-06-04 02:48:50 | 001,417,240 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CTEXFIFX.SYS -- (CTEXFIFX.SYS) DRV:[b]64bit:[/b] - [2009-06-04 02:48:50 | 001,417,240 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTEXFIFX.SYS -- (CTEXFIFX) DRV:[b]64bit:[/b] - [2009-06-04 02:48:38 | 000,094,744 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CTHWIUT.SYS -- (CTHWIUT.SYS) DRV:[b]64bit:[/b] - [2009-06-04 02:48:38 | 000,094,744 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTHWIUT.SYS -- (CTHWIUT) DRV:[b]64bit:[/b] - [2009-06-04 02:48:30 | 000,202,776 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CT20XUT.SYS -- (CT20XUT.SYS) DRV:[b]64bit:[/b] - [2009-06-04 02:48:30 | 000,202,776 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CT20XUT.SYS -- (CT20XUT) DRV:[b]64bit:[/b] - [2009-03-06 18:10:10 | 000,015,872 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\anodlwfx.sys -- (anodlwf) DRV:[b]64bit:[/b] - [2008-12-26 11:56:04 | 000,021,504 | ---- | M] (Avnex) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\vcsvad.sys -- (VCSVADHWSer) Avnex Virtual Audio Device (WDM) DRV:[b]64bit:[/b] - [2008-10-24 23:29:20 | 000,830,592 | ---- | M] (Line 6) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\L6GX64.sys -- (L6GX) DRV:[b]64bit:[/b] - [2008-01-21 03:47:28 | 000,046,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb) DRV:[b]64bit:[/b] - [2007-01-23 15:48:00 | 000,136,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\LMouKE.Sys -- (LMouKE) DRV:[b]64bit:[/b] - [2007-01-23 15:47:00 | 000,112,400 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\L8042mou.Sys -- (L8042mou) DRV:[b]64bit:[/b] - [2007-01-23 15:47:00 | 000,051,984 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\LHidFilt.Sys -- (LHidFilt) DRV:[b]64bit:[/b] - [2007-01-23 15:47:00 | 000,048,912 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\LMouFilt.Sys -- (LMouFilt) DRV:[b]64bit:[/b] - [2007-01-23 15:47:00 | 000,035,600 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\L8042Kbd.sys -- (L8042Kbd) DRV:[b]64bit:[/b] - [2006-10-03 03:13:44 | 000,051,200 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\Rtlh64.sys -- (RTL8169) DRV:[b]64bit:[/b] - [2006-09-18 22:36:24 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\Wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2005-11-03 15:40:56 | 000,089,600 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfvfs02.sys -- (sfvfs02) StarForce Protection VFS Driver (version 2.x) DRV:[b]64bit:[/b] - [2005-08-10 13:46:20 | 000,068,608 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x) DRV:[b]64bit:[/b] - [2005-05-16 14:21:16 | 000,007,168 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x) DRV - [2010-12-26 15:21:36 | 001,791,096 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20110209.002\EX64.SYS -- (NAVEX15) DRV - [2010-12-26 15:21:35 | 000,475,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl) DRV - [2010-12-26 15:21:35 | 000,117,880 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20110209.002\ENG64.SYS -- (NAVENG) DRV - [2010-12-01 01:03:34 | 000,476,792 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20110208.003\IDSviA64.sys -- (IDSVia64) DRV - [2010-11-23 03:34:08 | 000,953,904 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20110114.001\BHDrvx64.sys -- (BHDrvx64) DRV - [2010-07-20 13:45:31 | 000,022,336 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv) DRV - [2010-07-10 10:37:39 | 000,035,363 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\windrvNT.sys -- (windrvNT) DRV - [2010-05-27 09:00:00 | 000,132,656 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2418384579-601973546-2015653325-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-2418384579-601973546-2015653325-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..extensions.enabledItems: eafo3fflauncher@ea.com:1.1 FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0 FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:4.6 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPlgn\ [2010-12-27 20:03:14 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\coFFPlgn\ [2010-12-26 14:07:53 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-12-10 22:12:47 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-12-10 22:12:47 | 000,000,000 | ---D | M] [2009-12-23 11:04:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Bartek\AppData\Roaming\mozilla\Extensions [2011-02-09 19:19:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Bartek\AppData\Roaming\mozilla\Firefox\Profiles\9w0oe0y6.default\extensions [2010-06-04 09:35:15 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Bartek\AppData\Roaming\mozilla\Firefox\Profiles\9w0oe0y6.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-07-25 16:37:41 | 000,000,000 | ---D | M] (FIFA Online Web Launcher) -- C:\Users\Bartek\AppData\Roaming\mozilla\Firefox\Profiles\9w0oe0y6.default\extensions\eafo3fflauncher@ea.com [2011-01-03 14:30:08 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2010-04-17 14:29:23 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010-08-12 18:14:19 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010-11-28 16:00:15 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011-01-03 14:30:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2010-12-26 14:07:53 | 000,000,000 | ---D | M] (Norton Toolbar) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\COFFPLGN [2010-12-27 20:03:14 | 000,000,000 | ---D | M] (Norton IPS) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPLGN [2010-11-12 18:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll [2010-04-01 18:33:11 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\allegro-pl.xml [2010-04-01 18:33:11 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\fbc-pl.xml [2010-04-01 18:33:11 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\merlin-pl.xml [2010-04-01 18:33:11 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\pwn-pl.xml [2010-04-01 18:33:11 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010-04-01 18:33:11 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2010-12-18 23:41:29 | 000,000,410 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 5.89.34.34 pes6gate-ec.winning-eleven.net O1 - Hosts: 210.249.144.166 we9stun.winning-eleven.net O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coieplg.dll (Symantec Corporation) O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ipsbho.dll (Symantec Corporation) O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found. O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coieplg.dll (Symantec Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKLM..\Run: [ANIWZCS2Service] C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe (Wireless Service) O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\SysWow64\Ctxfihlp.exe (Creative Technology Ltd) O4 - HKLM..\Run: [D-Link D-Link Wireless G DWL-G122_DWA-110] C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\AirGCFG.exe (D-Link Corp.) O4 - HKLM..\Run: [P17Helper] C:\Windows\SysWow64\P17.DLL () O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [WZCSLDR2] File not found O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-21-2418384579-601973546-2015653325-1000..\Run: [AdobeBridge] File not found O4 - HKU\S-1-5-21-2418384579-601973546-2015653325-1000..\Run: [OscarEditor] C:\Program Files (x86)\OSCAR Editor\OscarEditor.exe () O4 - HKU\S-1-5-21-2418384579-601973546-2015653325-1000..\Run: [SetDefaultMIDI] C:\Windows\MIDIDEF.EXE (Creative Technology Ltd) O4 - HKU\S-1-5-21-2418384579-601973546-2015653325-1000..\Run: [WMPNSCFG] File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O13 - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKU\S-1-5-21-2418384579-601973546-2015653325-1000\..Trusted Domains: line6.net ([]* in Trusted sites) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package) O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPID.cab (Creative Software AutoUpdate Support Package) O18:[b]64bit:[/b] - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Bartek\Desktop\wszystko\tapety\cat.jpg O24 - Desktop BackupWallPaper: C:\Users\Bartek\Desktop\wszystko\tapety\cat.jpg O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{f2c40a2e-e20a-11df-ad6b-00ff01000001}\Shell - "" = AutoRun O33 - MountPoints2\{f2c40a2e-e20a-11df-ad6b-00ff01000001}\Shell\AutoRun\command - "" = I:\autorun6e.exe O34 - HKLM BootExecute: (PDBoot.exe) - File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2011-02-09 23:52:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\trend micro [2011-02-09 23:51:53 | 000,000,000 | ---D | C] -- C:\rsit [2011-02-09 22:40:03 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2011-02-09 19:36:20 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Desktop\cod patch [2011-02-07 20:06:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CPU Speed Pro [2011-02-06 17:27:08 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Desktop\mp3 [2011-02-06 16:05:23 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Desktop\zadania [2011-02-05 14:36:08 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Left 4 Dead 2 [2011-02-05 09:16:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Raxco [2011-02-05 09:16:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Raxco [2011-02-05 09:14:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Raxco [2011-02-05 00:26:56 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Garena [2011-02-05 00:26:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garena [2011-02-05 00:26:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Garena [2011-02-02 16:57:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Left 4 Dead 2 [2011-02-02 16:42:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Left 4 Dead 2 [2011-02-02 16:26:44 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Desktop\Left.4.Dead.2.MULTi.20 [2011-01-24 14:24:01 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Desktop\PREZENTACJA MATURALNA [2011-01-17 13:24:57 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Desktop\demka [2011-01-16 20:09:34 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\Smart Recorder [2011-01-10 20:09:00 | 000,000,000 | ---D | C] -- C:\FSDownloader [2011-01-04 19:57:10 | 000,000,000 | ---D | C] -- C:\Users\Bartek\Documents\NFS Most Wanted [2011-01-03 14:30:05 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2011-01-03 14:30:05 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2011-01-03 14:30:05 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2011-01-02 20:35:57 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\Creative [2011-01-02 20:35:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Creative Labs [2011-01-02 20:26:53 | 000,647,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mscomct2.ocx [2011-01-02 20:26:49 | 000,053,248 | ---- | C] (Creative Technology Ltd ) -- C:\Windows\Ctregrun.exe [2011-01-02 19:01:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative [2011-01-02 19:00:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative Labs Shared [2011-01-02 18:59:34 | 000,102,400 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\cttele32.dll [2011-01-02 18:57:17 | 022,691,984 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\AppSetup.exe [2011-01-02 18:41:23 | 000,012,288 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysNative\INRES.DLL [2011-01-02 18:41:23 | 000,011,776 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysWow64\INRES.DLL [2011-01-02 17:27:05 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Local\CrashDumps [2011-01-02 17:22:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative [2011-01-02 17:22:16 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Creative Installation Information [2011-01-02 17:21:43 | 000,000,000 | ---D | C] -- C:\Program Files\Creative [2011-01-02 17:21:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Creative [2011-01-02 17:20:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Creative [2011-01-02 17:20:46 | 000,107,008 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysNative\cttele64.dll [2011-01-02 17:20:34 | 000,466,456 | ---- | C] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll [2011-01-02 17:20:34 | 000,444,952 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll [2011-01-02 17:20:34 | 000,121,880 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll [2011-01-02 17:20:34 | 000,109,080 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll [2011-01-02 17:20:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenAL [2011-01-02 17:20:14 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\data [2011-01-02 17:20:03 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\data [2011-01-02 17:19:03 | 000,595,244 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\APOIM64.exe [2011-01-02 17:19:03 | 000,567,808 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\CTAPO64.dll [2011-01-02 17:19:03 | 000,057,856 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\ctppld.dll [2011-01-02 17:19:02 | 000,497,152 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\CTAPO32.dll [2011-01-02 17:19:02 | 000,077,824 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\eaxac3.dll [2011-01-02 17:19:02 | 000,048,400 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\AddCat.exe [2011-01-02 17:18:59 | 000,805,400 | ---- | C] (Creative Labs Inc.) -- C:\Windows\SysWow64\oalinst.exe [2011-01-02 17:18:59 | 000,099,064 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysNative\ctpxst64.exe [2011-01-02 17:18:59 | 000,089,336 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\ctpxst32.exe [2011-01-02 17:18:59 | 000,073,728 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysNative\ctcoinst.dll [2011-01-02 17:18:59 | 000,072,704 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysNative\CTMLFX64.dll [2011-01-02 17:04:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\D-Link [2011-01-02 17:03:30 | 000,720,896 | ---- | C] (Wireless Service) -- C:\Windows\SysWow64\ANIWZCS2.dll [2011-01-02 17:03:30 | 000,270,336 | ---- | C] (Wireless Service) -- C:\Windows\SysWow64\wnicapi.dll [2011-01-02 17:03:29 | 001,327,189 | ---- | C] (Funk Software, Inc.) -- C:\Windows\SysWow64\odSupp_M.dll [2011-01-02 17:03:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ANI [2011-01-02 17:02:39 | 001,110,016 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\Windows\SysWow64\libeay32.dll [2011-01-02 17:02:39 | 000,204,800 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\Windows\SysWow64\ssleay32.dll [2011-01-02 17:01:05 | 000,479,360 | ---- | C] (Ralink Technology, Corp.) -- C:\Windows\SysWow64\Dr71WU98.sys [2011-01-02 17:01:05 | 000,247,808 | ---- | C] (Ralink Technology Inc.) -- C:\Windows\SysWow64\rt25u98.sys [2011-01-02 16:48:31 | 000,900,608 | ---- | C] (Ralink Technology Corp.) -- C:\Windows\SysNative\drivers\Dnetr28ux.sys [2011-01-02 16:48:31 | 000,305,152 | ---- | C] (Ralink Technology, Inc.) -- C:\Windows\SysNative\RaCoInstx.dll [2011-01-02 16:48:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\D-Link [2011-01-02 16:48:22 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\InstallShield [2010-12-27 11:56:38 | 000,590,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2010-12-27 11:56:38 | 000,471,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll [2010-12-27 11:56:37 | 000,758,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2010-12-27 11:56:37 | 000,485,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2010-12-27 11:56:37 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2010-12-27 11:56:36 | 000,422,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2010-12-27 11:56:36 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2010-12-27 11:56:36 | 000,380,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [2010-12-27 11:56:36 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2010-12-27 11:56:36 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2010-12-27 11:56:36 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieencode.dll [2010-12-27 11:56:36 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieencode.dll [2010-12-27 11:56:32 | 000,367,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2010-12-27 11:56:31 | 000,292,352 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2010-12-27 11:56:31 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll [2010-12-27 11:56:31 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll [2010-12-27 11:56:31 | 000,048,128 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2010-12-27 11:56:31 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2010-12-27 11:16:00 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe [2010-12-27 11:15:17 | 000,655,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll [2010-12-27 11:15:17 | 000,500,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll [2010-12-27 11:15:17 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll [2010-12-27 11:15:17 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll [2010-12-27 11:15:17 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe [2010-12-27 11:15:16 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll [2010-12-23 11:00:38 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\Moje pliki Bitwy o Śródziemie™ II [2010-12-23 10:53:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts [2010-12-17 22:00:40 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\Moje pliki zapisu Bitwy o Śródziemie [2010-12-17 21:59:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES [2010-12-16 21:24:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite [2010-12-16 21:24:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite [2010-12-16 21:24:20 | 000,000,000 | ---D | C] -- C:\Users\Bartek\AppData\Roaming\DAEMON Tools Lite [2010-12-16 21:23:34 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite [2009-06-04 00:57:38 | 000,060,928 | ---- | C] ( ) -- C:\Windows\SysWow64\a3d.dll [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2011-02-09 23:42:04 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2418384579-601973546-2015653325-1000UA.job [2011-02-09 22:42:00 | 000,001,010 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2418384579-601973546-2015653325-1000Core.job [2011-02-09 22:40:05 | 000,002,047 | ---- | M] () -- C:\Users\Bartek\Desktop\Google Chrome.lnk [2011-02-09 22:33:45 | 000,037,013 | ---- | M] () -- C:\ProgramData\nvModes.001 [2011-02-09 22:32:30 | 000,003,284 | ---- | M] () -- C:\Windows\SysWow64\ANIWZCS{A37175AC-F692-4FAC-B325-D0F88F7AA621} [2011-02-09 22:32:30 | 000,003,284 | ---- | M] () -- C:\Users\Bartek\AppData\Roaming\ANIWZCS{A37175AC-F692-4FAC-B325-D0F88F7AA621} [2011-02-09 22:32:18 | 004,823,656 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011-02-09 22:31:58 | 000,003,712 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011-02-09 22:31:57 | 000,003,712 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011-02-09 22:31:30 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-02-09 22:31:10 | 2144,854,016 | -HS- | M] () -- C:\hiberfil.sys [2011-02-09 22:25:53 | 002,348,748 | ---- | M] () -- C:\Windows\SysNative\drivers\N360x64\0403000.005\Cat.DB [2011-02-09 20:11:49 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempXe4208.html [2011-02-09 19:44:44 | 000,103,736 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2011-02-09 15:50:33 | 000,061,160 | ---- | M] () -- C:\Windows\SysNative\BMXStateBkp-{00000002-00000000-00000006-00001102-00000005-00291102}.rfx [2011-02-09 15:50:33 | 000,061,160 | ---- | M] () -- C:\Windows\SysNative\BMXState-{00000002-00000000-00000006-00001102-00000005-00291102}.rfx [2011-02-09 15:50:33 | 000,000,788 | ---- | M] () -- C:\Windows\SysNative\DVCState-{00000002-00000000-00000006-00001102-00000005-00291102}.rfx [2011-02-08 19:29:02 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempEg3656.html [2011-02-06 18:30:58 | 000,082,012 | ---- | M] () -- C:\Users\Bartek\Documents\xss.xps [2011-02-06 15:12:19 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\Tempww2932.html [2011-02-06 15:12:19 | 000,002,089 | ---- | M] () -- C:\Users\Bartek\AppData\Local\Tempmp2932.html [2011-02-05 16:13:45 | 372,800,131 | ---- | M] () -- C:\Windows\MEMORY.DMP [2011-02-05 14:36:08 | 000,001,799 | ---- | M] () -- C:\Users\Bartek\Desktop\L4D2 Control Panel.lnk [2011-02-05 14:36:08 | 000,001,789 | ---- | M] () -- C:\Users\Bartek\Desktop\Left 4 Dead 2.lnk [2011-02-05 14:36:08 | 000,001,757 | ---- | M] () -- C:\Users\Bartek\Desktop\L4D2 Updater.lnk [2011-02-05 00:36:35 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TemplO4756.html [2011-02-05 00:26:57 | 000,000,778 | ---- | M] () -- C:\Users\Bartek\Desktop\Garena.lnk [2011-02-04 23:56:50 | 001,468,980 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011-02-04 23:56:50 | 000,661,818 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2011-02-04 23:56:50 | 000,586,980 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011-02-04 23:56:50 | 000,126,702 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2011-02-04 23:56:50 | 000,101,052 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011-02-04 19:16:23 | 000,032,546 | ---- | M] () -- C:\Users\Bartek\Desktop\gitara.jpg [2011-02-03 16:14:22 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempfkX972.html [2011-02-02 22:10:03 | 000,001,072 | ---- | M] () -- C:\Windows\SysNative\settingsbkup.sfm [2011-02-02 22:10:03 | 000,001,072 | ---- | M] () -- C:\Windows\SysNative\settings.sfm [2011-02-02 22:05:58 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\Tempxo3364.html [2011-01-31 21:25:28 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\Templna820.html [2011-01-23 12:22:40 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempVO4204.html [2011-01-18 19:20:04 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempDM2908.html [2011-01-16 16:22:27 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempQq3068.html [2011-01-14 21:03:47 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TemppR4180.html [2011-01-13 15:09:54 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempOs4452.html [2011-01-09 18:04:59 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempfG3692.html [2011-01-07 22:31:02 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempDO4864.html [2011-01-06 21:39:32 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempFt4836.html [2011-01-04 19:54:25 | 000,001,976 | ---- | M] () -- C:\Users\Public\Desktop\Need for Speed™ Most Wanted.lnk [2011-01-03 20:22:57 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempLvR444.html [2011-01-02 18:59:28 | 000,466,456 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll [2011-01-02 18:59:28 | 000,444,952 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll [2011-01-02 18:59:28 | 000,121,880 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll [2011-01-02 18:59:27 | 000,109,080 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll [2011-01-02 18:59:27 | 000,000,159 | RH-- | M] () -- C:\Windows\ctfile.rfc [2011-01-02 18:42:24 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempBc3328.html [2011-01-02 17:04:43 | 000,000,007 | ---- | M] () -- C:\Windows\SysWow64\ANIWZCSUSERNAME{A37175AC-F692-4FAC-B325-D0F88F7AA621} [2011-01-02 16:45:13 | 000,525,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\DIFxAPI.dll [2010-12-26 14:03:27 | 000,173,104 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS [2010-12-26 14:03:27 | 000,007,440 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT [2010-12-26 14:03:27 | 000,000,854 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF [2010-12-24 20:48:31 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempFn4384.html [2010-12-23 21:09:50 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempsV4428.html [2010-12-23 10:54:34 | 000,002,014 | ---- | M] () -- C:\Users\Public\Desktop\Bitwa o Śródziemie™ II.lnk [2010-12-19 17:49:00 | 007,358,400 | ---- | M] () -- C:\Users\Bartek\Desktop\nothing else matters.mp3 [2010-12-18 23:41:29 | 000,000,410 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2010-12-17 21:59:17 | 000,001,919 | ---- | M] () -- C:\Users\Public\Desktop\Bitwa o Śródziemie™.lnk [2010-12-16 21:22:55 | 000,000,299 | ---- | M] () -- C:\Users\Bartek\Documents\ax_files.xml [2010-12-16 18:25:25 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempSF3756.html [2010-12-15 21:44:22 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempDE4536.html [2010-12-13 18:43:08 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempTF4980.html [2010-12-12 22:20:01 | 000,002,432 | ---- | M] () -- C:\Users\Bartek\AppData\Local\TempEe1596.html [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-02-09 22:40:05 | 000,002,047 | ---- | C] () -- C:\Users\Bartek\Desktop\Google Chrome.lnk [2011-02-09 22:37:56 | 000,001,062 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2418384579-601973546-2015653325-1000UA.job [2011-02-09 22:37:55 | 000,001,010 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2418384579-601973546-2015653325-1000Core.job [2011-02-09 19:47:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXe4208.html [2011-02-08 18:04:48 | 007,358,400 | ---- | C] () -- C:\Users\Bartek\Desktop\nothing else matters.mp3 [2011-02-08 16:34:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEg3656.html [2011-02-06 18:30:55 | 000,082,012 | ---- | C] () -- C:\Users\Bartek\Documents\xss.xps [2011-02-06 15:12:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempww2932.html [2011-02-06 15:12:19 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmp2932.html [2011-02-05 09:16:11 | 000,001,974 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PerfectDisk 8.0.lnk [2011-02-05 00:28:32 | 000,001,799 | ---- | C] () -- C:\Users\Bartek\Desktop\L4D2 Control Panel.lnk [2011-02-05 00:28:32 | 000,001,757 | ---- | C] () -- C:\Users\Bartek\Desktop\L4D2 Updater.lnk [2011-02-05 00:26:57 | 000,000,778 | ---- | C] () -- C:\Users\Bartek\Desktop\Garena.lnk [2011-02-04 23:38:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemplO4756.html [2011-02-04 19:16:16 | 000,032,546 | ---- | C] () -- C:\Users\Bartek\Desktop\gitara.jpg [2011-02-03 15:13:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempfkX972.html [2011-02-02 21:52:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempxo3364.html [2011-02-02 17:11:57 | 000,595,476 | ---- | C] () -- C:\Users\Bartek\AppData\Local\dd_vcredistMSI25B3.txt [2011-02-02 17:11:49 | 000,014,342 | ---- | C] () -- C:\Users\Bartek\AppData\Local\dd_vcredistUI25B3.txt [2011-02-02 16:57:17 | 000,001,789 | ---- | C] () -- C:\Users\Bartek\Desktop\Left 4 Dead 2.lnk [2011-01-31 20:24:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Templna820.html [2011-01-23 12:21:37 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempVO4204.html [2011-01-18 18:59:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempDM2908.html [2011-01-16 16:06:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQq3068.html [2011-01-14 17:24:01 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemppR4180.html [2011-01-13 15:08:57 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOs4452.html [2011-01-09 17:47:18 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempfG3692.html [2011-01-07 20:37:45 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempDO4864.html [2011-01-06 21:39:02 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFt4836.html [2011-01-04 19:54:25 | 000,001,976 | ---- | C] () -- C:\Users\Public\Desktop\Need for Speed™ Most Wanted.lnk [2011-01-03 20:16:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLvR444.html [2011-01-02 20:29:23 | 000,001,072 | ---- | C] () -- C:\Windows\SysNative\settingsbkup.sfm [2011-01-02 20:29:23 | 000,001,072 | ---- | C] () -- C:\Windows\SysNative\settings.sfm [2011-01-02 19:03:48 | 000,061,160 | ---- | C] () -- C:\Windows\SysNative\BMXStateBkp-{00000002-00000000-00000006-00001102-00000005-00291102}.rfx [2011-01-02 19:03:48 | 000,061,160 | ---- | C] () -- C:\Windows\SysNative\BMXState-{00000002-00000000-00000006-00001102-00000005-00291102}.rfx [2011-01-02 19:03:48 | 000,000,788 | ---- | C] () -- C:\Windows\SysNative\DVCState-{00000002-00000000-00000006-00001102-00000005-00291102}.rfx [2011-01-02 19:02:00 | 000,007,062 | ---- | C] () -- C:\Windows\SysWow64\audiopid.vxd [2011-01-02 18:59:27 | 000,190,976 | ---- | C] () -- C:\Windows\SysNative\APOMgr64.DLL [2011-01-02 18:59:27 | 000,148,480 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL [2011-01-02 18:59:27 | 000,089,088 | ---- | C] () -- C:\Windows\SysNative\CmdRtr64.DLL [2011-01-02 18:59:27 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL [2011-01-02 18:59:27 | 000,000,159 | RH-- | C] () -- C:\Windows\ctfile.rfc [2011-01-02 18:41:31 | 000,006,768 | ---- | C] () -- C:\Windows\SysWow64\Ludap17.ini [2011-01-02 18:41:31 | 000,006,768 | ---- | C] () -- C:\Windows\SysNative\Ludap17.ini [2011-01-02 18:06:27 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBc3328.html [2011-01-02 17:19:02 | 002,167,684 | ---- | C] () -- C:\Windows\SysWow64\CT2MGM.SF2 [2011-01-02 17:19:02 | 002,167,684 | ---- | C] () -- C:\Windows\SysNative\CT2MGM.SF2 [2011-01-02 17:19:02 | 001,048,576 | ---- | C] () -- C:\Windows\SysWow64\CT1MGM.ROM [2011-01-02 17:19:02 | 001,048,576 | ---- | C] () -- C:\Windows\SysNative\CT1MGM.ROM [2011-01-02 17:19:02 | 000,008,386 | ---- | C] () -- C:\Windows\SysWow64\CTAPO64.UDA [2011-01-02 17:19:02 | 000,000,766 | ---- | C] () -- C:\Windows\SysNative\SBXFi.ico [2011-01-02 17:18:59 | 000,005,530 | ---- | C] () -- C:\Windows\SysWow64\CTMLFX64.UDA [2011-01-02 17:18:59 | 000,003,128 | ---- | C] () -- C:\Windows\SysNative\XFi.bmp [2011-01-02 17:18:59 | 000,000,059 | ---- | C] () -- C:\Windows\SysWow64\default8.sfm [2011-01-02 17:18:59 | 000,000,059 | ---- | C] () -- C:\Windows\SysNative\default8.sfm [2011-01-02 17:18:59 | 000,000,059 | ---- | C] () -- C:\Windows\SysWow64\default4.sfm [2011-01-02 17:18:59 | 000,000,059 | ---- | C] () -- C:\Windows\SysNative\default4.sfm [2011-01-02 17:18:59 | 000,000,059 | ---- | C] () -- C:\Windows\SysWow64\default.sfm [2011-01-02 17:18:59 | 000,000,059 | ---- | C] () -- C:\Windows\SysNative\default.sfm [2011-01-02 17:04:50 | 000,003,284 | ---- | C] () -- C:\Windows\SysWow64\ANIWZCS{A37175AC-F692-4FAC-B325-D0F88F7AA621} [2011-01-02 17:04:50 | 000,003,284 | ---- | C] () -- C:\Users\Bartek\AppData\Roaming\ANIWZCS{A37175AC-F692-4FAC-B325-D0F88F7AA621} [2011-01-02 17:03:55 | 000,000,007 | ---- | C] () -- C:\Windows\SysWow64\ANIWZCSUSERNAME{A37175AC-F692-4FAC-B325-D0F88F7AA621} [2011-01-02 17:03:44 | 000,151,552 | ---- | C] () -- C:\Windows\SysWow64\ANIWConnService.exe [2011-01-02 17:03:30 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\wlanapp.dll [2011-01-02 17:03:30 | 000,217,088 | ---- | C] () -- C:\Windows\SysWow64\aIPH.dll [2011-01-02 17:03:30 | 000,049,152 | ---- | C] () -- C:\Windows\SysWow64\AQCKGen.dll [2011-01-02 17:03:30 | 000,045,115 | ---- | C] () -- C:\Windows\SysWow64\ANICtl.dll [2011-01-02 17:03:13 | 000,315,392 | ---- | C] () -- C:\Windows\SysWow64\ANIOApi.dll [2011-01-02 17:02:40 | 000,302,080 | ---- | C] () -- C:\Windows\lwd.exe [2011-01-02 17:02:39 | 000,733,184 | ---- | C] () -- C:\Windows\SysWow64\ANIOWPS.dll [2011-01-02 17:02:39 | 000,237,568 | ---- | C] () -- C:\Windows\SysWow64\ANIWPS.exe [2011-01-02 17:01:05 | 000,002,048 | ---- | C] () -- C:\Windows\SysWow64\rt73.bin [2011-01-02 16:51:38 | 000,015,872 | ---- | C] () -- C:\Windows\SysNative\drivers\anodlwfx.sys [2011-01-02 16:48:31 | 000,013,931 | ---- | C] () -- C:\Windows\SysNative\RaCoInst.dat [2010-12-24 20:24:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFn4384.html [2010-12-23 21:09:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempsV4428.html [2010-12-23 10:54:34 | 000,002,014 | ---- | C] () -- C:\Users\Public\Desktop\Bitwa o Śródziemie™ II.lnk [2010-12-17 21:59:17 | 000,001,919 | ---- | C] () -- C:\Users\Public\Desktop\Bitwa o Śródziemie™.lnk [2010-12-16 18:03:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSF3756.html [2010-12-15 21:24:23 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempDE4536.html [2010-12-13 14:56:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTF4980.html [2010-12-12 22:18:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEe1596.html [2010-12-11 14:18:54 | 000,000,016 | ---- | C] () -- C:\Windows\SysWow64\msvcsv60.dll [2010-12-09 20:53:29 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempzv4204.html [2010-12-09 20:14:01 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempma4528.html [2010-12-09 15:09:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempgX1388.html [2010-12-08 18:09:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempsB5100.html [2010-12-07 17:40:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemprV4476.html [2010-12-05 20:25:42 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOm5064.html [2010-12-02 13:46:34 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempec4444.html [2010-12-01 15:34:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempwO4372.html [2010-11-27 16:45:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvT2760.html [2010-11-25 19:17:59 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemprE4816.html [2010-11-25 13:33:56 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempai5076.html [2010-11-22 12:55:22 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempbU5024.html [2010-11-20 13:52:16 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempbr1948.html [2010-11-18 17:02:50 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempxA2180.html [2010-11-16 20:09:18 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXMU496.html [2010-11-15 16:44:46 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvH4256.html [2010-11-14 17:43:13 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEvX232.html [2010-11-13 21:59:13 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempoC3476.html [2010-11-13 17:31:06 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempfB4224.html [2010-11-13 11:46:20 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempym4932.html [2010-11-12 19:35:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempVx1004.html [2010-11-12 14:44:27 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnV4604.html [2010-11-11 12:21:35 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempjW4940.html [2010-11-10 18:36:40 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKI4132.html [2010-11-09 15:21:15 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempbB4988.html [2010-11-08 19:28:08 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXf2080.html [2010-11-08 19:05:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLB4648.html [2010-11-08 13:35:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFL4540.html [2010-11-07 21:11:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempuX4696.html [2010-11-07 15:28:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRa3276.html [2010-11-07 12:48:47 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempkz3608.html [2010-11-04 20:50:37 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKz4584.html [2010-11-02 17:25:45 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temppa2628.html [2010-11-02 12:08:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempov3488.html [2010-11-01 20:25:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempUx4376.html [2010-11-01 10:07:06 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temprx3476.html [2010-10-31 19:35:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnG1644.html [2010-10-30 15:18:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOS5092.html [2010-10-30 15:17:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTy3104.html [2010-10-30 15:17:04 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZR3104.html [2010-10-29 11:37:33 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnZ1280.html [2010-10-28 15:25:08 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempnf4300.html [2010-10-28 15:23:02 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempDfl768.html [2010-10-28 15:23:02 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGTr768.html [2010-10-27 17:32:01 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZZ4480.html [2010-10-25 17:36:39 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempvn2420.html [2010-10-25 17:36:39 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempwV2420.html [2010-10-24 15:48:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSm4660.html [2010-10-24 15:21:54 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFo3920.html [2010-10-23 16:28:17 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempuA4312.html [2010-10-22 22:44:40 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempea4440.html [2010-10-22 20:33:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempwwc828.html [2010-10-21 15:13:08 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempaL4384.html [2010-10-17 14:52:40 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQB4580.html [2010-10-16 15:35:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRd4540.html [2010-10-15 13:44:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYK4832.html [2010-10-14 18:23:15 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempcj4688.html [2010-10-13 14:51:35 | 000,439,994 | ---- | C] () -- C:\Users\Bartek\AppData\Local\dd_vcredistMSI0B76.txt [2010-10-13 14:51:34 | 000,011,856 | ---- | C] () -- C:\Users\Bartek\AppData\Local\dd_vcredistUI0B76.txt [2010-10-12 15:58:34 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempsO3124.html [2010-10-11 16:43:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Templn3428.html [2010-10-10 14:20:55 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmg3912.html [2010-10-09 12:03:01 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempqq3052.html [2010-10-03 18:21:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempdZ3612.html [2010-10-02 13:50:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnE4200.html [2010-10-02 13:46:38 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempkU4616.html [2010-10-02 13:46:38 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGL4616.html [2010-10-01 16:13:34 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOX4468.html [2010-10-01 16:13:06 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYl3748.html [2010-10-01 16:13:06 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempWy3748.html [2010-09-30 14:17:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAK4732.html [2010-09-30 14:16:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMG3832.html [2010-09-30 14:16:36 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvT3832.html [2010-09-29 15:26:34 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSQ3248.html [2010-09-28 19:50:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGU4344.html [2010-09-26 15:53:21 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempur3592.html [2010-09-26 15:43:17 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempsq3648.html [2010-09-26 14:36:03 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempfJ3472.html [2010-09-25 17:40:41 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temphy4352.html [2010-09-24 15:35:22 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempVT5096.html [2010-09-23 16:22:13 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZyA716.html [2010-09-20 15:28:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempVO5056.html [2010-09-19 19:06:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXY1852.html [2010-09-19 19:06:07 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnI4712.html [2010-09-19 19:06:07 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempzo4712.html [2010-09-18 18:29:18 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temppp4352.html [2010-09-18 13:04:00 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempcN2908.html [2010-09-17 19:49:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOS5004.html [2010-09-16 18:20:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempei3040.html [2010-09-16 14:17:20 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempfc5108.html [2010-09-15 15:45:08 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempxq4536.html [2010-09-14 16:41:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAy4796.html [2010-09-14 16:41:31 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempkS4796.html [2010-09-13 12:47:35 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempyA1064.html [2010-09-12 16:57:52 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempht2404.html [2010-09-12 12:00:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempdd4668.html [2010-09-11 14:04:12 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempxJ2532.html [2010-09-10 20:49:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQL4892.html [2010-09-09 16:04:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEL1504.html [2010-09-08 19:35:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempbu1084.html [2010-09-08 19:10:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temprj3816.html [2010-09-08 17:35:07 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempeGw472.html [2010-09-07 17:31:11 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempjW2964.html [2010-09-06 19:17:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempdm4012.html [2010-09-06 15:08:23 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemphY4716.html [2010-09-05 19:55:39 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempjB4224.html [2010-09-05 15:25:01 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempqk4036.html [2010-09-05 15:25:01 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temply4036.html [2010-09-05 10:27:16 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemptU4160.html [2010-09-05 10:27:16 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYL4160.html [2010-09-04 18:13:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQC4800.html [2010-09-03 18:28:30 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMt4288.html [2010-09-02 15:56:18 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmf4828.html [2010-09-01 15:35:46 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFH4264.html [2010-08-31 18:38:03 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempeF4328.html [2010-08-31 11:36:07 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTV5072.html [2010-08-31 11:36:07 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempjE5072.html [2010-08-30 20:53:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMI3604.html [2010-08-30 10:02:53 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEL4476.html [2010-08-30 10:02:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempcI4476.html [2010-08-28 13:07:38 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvY4260.html [2010-08-25 15:53:42 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2010-08-24 22:14:16 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEF4496.html [2010-08-24 17:39:56 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvL1984.html [2010-08-24 11:51:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXx3508.html [2010-08-23 15:08:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempvh3468.html [2010-08-20 19:17:47 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempeY2704.html [2010-08-20 13:55:47 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAs5048.html [2010-08-19 20:30:26 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEI3024.html [2010-08-19 17:11:53 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLh4344.html [2010-08-17 16:53:17 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempmX4632.html [2010-08-15 20:03:56 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmo4552.html [2010-08-15 11:59:41 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempwQ3776.html [2010-08-14 15:17:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemplU4448.html [2010-08-12 14:37:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQw2828.html [2010-08-12 14:20:59 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXc4844.html [2010-08-12 14:20:59 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBb4844.html [2010-08-08 20:21:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnQ4428.html [2010-08-08 20:19:54 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Templc2872.html [2010-08-08 20:19:54 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempzQ2872.html [2010-08-05 17:07:26 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempvi4636.html [2010-08-05 16:03:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTj4640.html [2010-08-05 13:15:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemphX4520.html [2010-08-03 13:14:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempDe4356.html [2010-08-02 18:14:30 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFn2120.html [2010-08-01 14:37:37 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAx4852.html [2010-07-31 13:08:42 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOK3716.html [2010-07-31 11:10:35 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempyI4904.html [2010-07-29 15:47:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempJa3500.html [2010-07-29 14:51:29 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempqF4920.html [2010-07-29 14:51:29 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempfI4920.html [2010-07-29 14:51:02 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempWu1036.html [2010-07-29 14:51:02 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQh1036.html [2010-07-29 10:13:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempun2552.html [2010-07-25 11:28:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemptW4620.html [2010-07-24 23:27:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSA4160.html [2010-07-24 22:44:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempeQ4412.html [2010-07-24 16:49:01 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnA4332.html [2010-07-24 10:19:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempuTU792.html [2010-07-23 11:28:06 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHV4368.html [2010-07-22 11:27:30 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKw4048.html [2010-07-19 18:06:00 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempeO4956.html [2010-07-19 18:06:00 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYN4956.html [2010-07-19 18:05:53 | 000,000,680 | ---- | C] () -- C:\Users\Bartek\AppData\Local\d3d9caps.dat [2010-07-17 18:08:49 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempcJ4260.html [2010-07-16 10:24:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempPQ4204.html [2010-07-15 16:39:25 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemptW4416.html [2010-07-15 09:32:39 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempmT4112.html [2010-07-14 17:16:45 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIG5096.html [2010-07-13 15:08:03 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHv4300.html [2010-07-13 13:46:17 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemplH1644.html [2010-07-13 11:27:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempaa2508.html [2010-07-13 11:27:31 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCW2508.html [2010-07-13 08:45:27 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOa1232.html [2010-07-12 21:37:00 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempVy4448.html [2010-07-12 14:04:47 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmu3764.html [2010-07-12 12:10:25 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempNe4056.html [2010-07-12 12:10:25 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIN4056.html [2010-07-11 13:53:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGm3012.html [2010-07-10 10:37:38 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\suppdll.dll [2010-07-10 10:37:38 | 000,035,363 | ---- | C] () -- C:\Windows\SysWow64\windrvNT.sys [2010-07-10 10:25:13 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemppQ5024.html [2010-07-09 18:18:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempcu2364.html [2010-07-09 15:05:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temppu3984.html [2010-07-09 14:05:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temprg4272.html [2010-07-09 08:41:43 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemplN4604.html [2010-07-09 08:41:43 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGc4604.html [2010-07-08 17:56:23 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempoW3000.html [2010-07-06 15:10:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYg4488.html [2010-07-02 12:50:54 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemplS2528.html [2010-07-02 12:50:54 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempeH2528.html [2010-07-01 18:55:13 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempjJ2912.html [2010-07-01 12:25:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempaY2644.html [2010-07-01 11:02:16 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempkP4160.html [2010-06-30 20:09:50 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnN3160.html [2010-06-28 15:52:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempkl4220.html [2010-06-28 11:20:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempNJ3988.html [2010-06-27 19:17:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempqbm920.html [2010-06-27 09:32:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQd3860.html [2010-06-26 16:19:44 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKFO760.html [2010-06-26 15:50:11 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempaE2424.html [2010-06-26 10:01:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQU4812.html [2010-06-25 17:59:56 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmo4388.html [2010-06-25 14:34:25 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZWa276.html [2010-06-23 19:26:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLcn716.html [2010-06-23 17:31:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempbN5024.html [2010-06-23 09:20:07 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRm4260.html [2010-06-22 19:29:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempPr2044.html [2010-06-22 17:46:29 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempxo3376.html [2010-06-22 13:20:01 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGq4440.html [2010-06-21 20:19:18 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXN4540.html [2010-06-21 19:58:35 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmb4604.html [2010-06-21 15:20:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempup4220.html [2010-06-21 12:20:56 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEk2924.html [2010-06-20 17:29:30 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSdL372.html [2010-06-20 10:42:20 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempfM4552.html [2010-06-20 10:22:13 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYu4796.html [2010-06-19 19:35:41 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temphj3996.html [2010-06-19 13:23:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temppi3836.html [2010-06-19 12:46:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnX1908.html [2010-06-19 12:32:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempyZk976.html [2010-06-19 12:32:19 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemppIp976.html [2010-06-18 16:51:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempUV4056.html [2010-06-17 18:44:12 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYQ2356.html [2010-06-17 16:26:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOg4796.html [2010-06-17 16:26:31 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempgk4796.html [2010-06-17 14:44:44 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temphw2024.html [2010-06-17 12:58:25 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempzN4176.html [2010-06-17 12:58:25 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKF4176.html [2010-06-17 12:33:03 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHZ3380.html [2010-06-16 15:33:00 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemppC4028.html [2010-06-15 16:53:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFSc608.html [2010-06-13 13:40:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZY3032.html [2010-06-13 13:22:11 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOh5060.html [2010-06-13 13:22:11 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOV5060.html [2010-06-11 19:00:57 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXky504.html [2010-06-11 14:58:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempbj4316.html [2010-06-10 14:28:44 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempVV2992.html [2010-06-08 19:34:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQn3396.html [2010-06-07 18:47:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemppTI772.html [2010-06-06 18:47:25 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempuC4040.html [2010-06-05 16:53:50 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQP5032.html [2010-06-04 10:22:08 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZsi196.html [2010-06-03 13:19:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHL2092.html [2010-06-02 21:49:47 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBFF788.html [2010-06-02 21:24:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempka4692.html [2010-06-02 21:14:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemppF3320.html [2010-06-02 16:22:15 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Templs1636.html [2010-06-01 11:39:30 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBi4080.html [2010-05-31 18:06:03 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempmK1520.html [2010-05-31 13:10:47 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGx4120.html [2010-05-31 09:05:12 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempvl3008.html [2010-05-31 08:47:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYE2996.html [2010-05-30 18:46:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMK3268.html [2010-05-30 10:03:00 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temphm3840.html [2010-05-29 17:52:02 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCR3516.html [2010-05-29 14:00:19 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHi5024.html [2010-05-28 16:03:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemppX2968.html [2010-05-26 18:04:02 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKJ3028.html [2010-05-25 19:11:45 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFG4160.html [2010-05-25 15:17:39 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempsw3364.html [2010-05-24 17:55:42 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempoI1316.html [2010-05-23 14:23:49 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempfd3600.html [2010-05-23 10:59:17 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmf4148.html [2010-05-22 21:26:57 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempPA3056.html [2010-05-22 19:24:23 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempkP1168.html [2010-05-22 10:22:52 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempVG3456.html [2010-05-21 15:53:55 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSA4776.html [2010-05-21 15:33:27 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGN4688.html [2010-05-20 19:18:45 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvN3812.html [2010-05-20 16:20:18 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCO3372.html [2010-05-20 09:08:43 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempvj4028.html [2010-05-19 19:49:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHk3396.html [2010-05-19 14:16:06 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempxy3440.html [2010-05-19 10:37:43 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRr3376.html [2010-05-18 22:41:06 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempsT4808.html [2010-05-18 19:55:17 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempNL3044.html [2010-05-18 11:16:39 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGo3592.html [2010-05-18 08:18:47 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRj1564.html [2010-05-18 07:26:30 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTX1140.html [2010-05-17 17:46:12 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSdis12.html [2010-05-17 14:39:07 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRZ3976.html [2010-05-16 21:21:22 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCm2964.html [2010-05-16 17:42:53 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempwG4564.html [2010-05-16 10:10:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZV1376.html [2010-05-16 10:10:24 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGb1376.html [2010-05-15 20:50:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRI3148.html [2010-05-15 18:21:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempoY4040.html [2010-05-15 12:49:12 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempST3628.html [2010-05-15 12:44:23 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempxs4176.html [2010-05-15 12:44:23 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOU4176.html [2010-05-15 12:44:00 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempei3468.html [2010-05-15 12:44:00 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempJS3468.html [2010-05-15 12:43:49 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempfW2848.html [2010-05-15 12:43:49 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temprm2848.html [2010-05-14 20:25:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempdN2364.html [2010-05-14 20:25:05 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXF2364.html [2010-05-14 19:13:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLi4040.html [2010-05-14 19:13:58 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvL4040.html [2010-05-14 14:14:01 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIx2008.html [2010-05-14 14:14:01 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempDV2008.html [2010-05-14 06:18:56 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCK3620.html [2010-05-14 06:18:56 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempUA3620.html [2010-05-13 19:18:41 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempgX1108.html [2010-05-13 19:18:41 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temphk1108.html [2010-05-13 14:20:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZz2104.html [2010-05-13 14:20:51 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Templx2104.html [2010-05-13 14:12:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTn3520.html [2010-05-13 14:12:36 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBd3520.html [2010-05-12 18:01:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQf3304.html [2010-05-12 18:01:24 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempku3304.html [2010-05-11 16:30:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCk2952.html [2010-05-11 16:30:24 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempUR2952.html [2010-05-10 21:27:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempfdd512.html [2010-05-10 21:27:51 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempaQC512.html [2010-05-10 17:48:20 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempjl3880.html [2010-05-10 17:48:20 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXj3880.html [2010-05-08 15:42:15 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTE4916.html [2010-05-08 15:42:15 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempwp4916.html [2010-05-08 09:07:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempUl2092.html [2010-05-08 09:07:10 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQP2092.html [2010-05-07 17:27:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYA4188.html [2010-05-07 17:27:28 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temphe4188.html [2010-05-06 08:12:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempWf3976.html [2010-05-06 08:12:36 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFL3976.html [2010-05-05 19:34:52 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOu1172.html [2010-05-05 19:34:52 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXx1172.html [2010-05-03 18:31:24 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKU4552.html [2010-05-03 18:31:24 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAI4552.html [2010-05-03 11:04:52 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempmj4376.html [2010-05-03 11:04:52 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempvn4376.html [2010-05-02 11:22:38 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempyh3984.html [2010-05-02 11:22:38 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKD3984.html [2010-05-01 19:32:16 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempdN1824.html [2010-05-01 19:32:16 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempzi1824.html [2010-05-01 14:27:37 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIj3636.html [2010-05-01 14:27:37 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempzT3636.html [2010-05-01 12:44:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempqk4168.html [2010-05-01 12:44:28 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempwI4168.html [2010-05-01 11:44:31 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLT1704.html [2010-05-01 11:44:31 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempqK1704.html [2010-04-30 19:29:23 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempdI1032.html [2010-04-30 19:29:23 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCI1032.html [2010-04-28 19:01:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCx4856.html [2010-04-28 19:01:48 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempDW4856.html [2010-04-28 15:56:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemphG4832.html [2010-04-28 15:56:48 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempkl4832.html [2010-04-25 17:03:33 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempiM3416.html [2010-04-25 17:03:33 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempfv3416.html [2010-04-25 10:22:40 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMrC456.html [2010-04-25 10:22:40 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemprgF456.html [2010-04-24 11:16:03 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRi4704.html [2010-04-24 11:16:03 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOR4704.html [2010-04-19 19:33:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGkB748.html [2010-04-19 19:33:04 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMLM748.html [2010-04-19 15:03:02 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSt5028.html [2010-04-19 15:03:02 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKx5028.html [2010-04-18 15:26:38 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempoR2460.html [2010-04-18 15:26:38 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempcH2460.html [2010-04-17 19:56:02 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempkM3500.html [2010-04-17 19:56:02 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvF3500.html [2010-04-17 18:20:43 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempcJ4768.html [2010-04-17 18:20:43 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKo4768.html [2010-04-17 14:26:26 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temppa2224.html [2010-04-17 14:26:26 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYW2224.html [2010-04-16 16:14:27 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAg4812.html [2010-04-16 16:14:27 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempbT4812.html [2010-04-15 19:20:41 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempdC3168.html [2010-04-15 19:20:41 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempht3168.html [2010-04-15 14:18:11 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemptT3612.html [2010-04-15 14:18:11 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKx3612.html [2010-04-14 19:22:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGqn496.html [2010-04-14 19:22:48 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSdx496.html [2010-04-13 18:03:20 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempfk3132.html [2010-04-13 18:03:20 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempsT3132.html [2010-04-11 17:34:44 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBK3140.html [2010-04-11 17:34:44 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQE3140.html [2010-04-10 13:08:35 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIy3892.html [2010-04-10 13:08:35 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMV3892.html [2010-04-09 20:21:51 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempoj3308.html [2010-04-09 20:21:51 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAW3308.html [2010-04-09 14:22:11 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempqy4004.html [2010-04-09 14:22:11 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAE4004.html [2010-04-08 14:29:52 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempuk2608.html [2010-04-08 14:29:52 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMo2608.html [2010-04-07 16:38:25 | 000,037,013 | ---- | C] () -- C:\ProgramData\nvModes.001 [2010-04-07 16:38:24 | 000,037,013 | ---- | C] () -- C:\ProgramData\nvModes.dat [2010-04-06 14:24:45 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBV4392.html [2010-04-06 14:24:45 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKe4392.html [2010-04-01 14:42:53 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempiK2344.html [2010-04-01 14:42:53 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempwS2344.html [2010-03-31 12:41:56 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempqi4260.html [2010-03-31 12:41:56 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempkE4260.html [2010-03-29 18:44:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRTq856.html [2010-03-29 18:44:05 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempsuv856.html [2010-03-29 16:05:28 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIL3880.html [2010-03-29 16:05:28 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSo3880.html [2010-03-28 18:57:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempiMz856.html [2010-03-28 18:57:36 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempNuM856.html [2010-03-28 10:02:43 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFW3604.html [2010-03-28 10:02:43 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempSj3604.html [2010-03-27 20:17:35 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempuD3896.html [2010-03-27 20:17:35 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempcK3896.html [2010-03-27 12:27:53 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAu4876.html [2010-03-27 12:27:53 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempaL4876.html [2010-03-26 19:05:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temptk4748.html [2010-03-26 19:05:09 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempWd4748.html [2010-03-25 19:14:55 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemppyA684.html [2010-03-25 19:14:55 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCWe684.html [2010-03-25 15:53:40 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLn4592.html [2010-03-25 15:53:40 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temppq4592.html [2010-03-25 13:15:41 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempUx2268.html [2010-03-25 13:15:41 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempFH2268.html [2010-03-24 12:59:15 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempoK2376.html [2010-03-24 12:59:15 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLv2376.html [2010-03-23 18:56:55 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempakv304.html [2010-03-23 18:56:55 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempUKx304.html [2010-03-20 22:21:58 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTq2412.html [2010-03-20 22:21:58 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHZ2412.html [2010-03-20 16:07:49 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQl4804.html [2010-03-20 16:07:49 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempYV4804.html [2010-03-18 18:53:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempnu1976.html [2010-03-18 18:53:48 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempnI1976.html [2010-03-17 15:27:30 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempvG4376.html [2010-03-17 15:27:30 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMs4376.html [2010-03-16 18:30:35 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempCj4068.html [2010-03-16 18:30:34 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempTm4068.html [2010-03-15 19:56:55 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMD4500.html [2010-03-15 19:56:55 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQX4500.html [2010-03-14 19:22:39 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temptk3576.html [2010-03-14 19:22:39 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempae3576.html [2010-03-14 14:32:49 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempNPo764.html [2010-03-14 14:32:49 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBKi764.html [2010-03-14 10:25:52 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempLn4588.html [2010-03-14 10:25:52 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempsk4588.html [2010-03-12 16:31:48 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempMO5036.html [2010-03-12 16:31:48 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempXn5036.html [2010-03-11 20:07:42 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempsV3420.html [2010-03-11 20:07:42 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempnh3420.html [2010-03-09 15:17:36 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempgo3416.html [2010-03-09 15:17:36 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZW3416.html [2010-03-08 19:58:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempIr2920.html [2010-03-08 19:58:32 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOD2920.html [2010-03-08 14:23:42 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempuL1424.html [2010-03-08 14:23:42 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRi1424.html [2010-03-07 12:01:14 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOH4760.html [2010-03-07 12:01:14 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempBB4760.html [2010-03-06 20:36:43 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempnq2876.html [2010-03-06 20:36:43 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKQ2876.html [2010-03-06 14:58:22 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempUE3372.html [2010-03-06 14:58:22 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGl3372.html [2010-03-05 15:32:05 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempup2856.html [2010-03-05 15:32:05 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempgv2856.html [2010-03-04 20:23:04 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempyh2872.html [2010-03-04 20:23:04 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAL2872.html [2010-03-04 16:08:53 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempZV3564.html [2010-03-04 16:08:53 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempQM3564.html [2010-02-27 19:18:27 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempgv4036.html [2010-02-27 19:18:27 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempgp4036.html [2010-02-27 17:28:16 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemplQ4708.html [2010-02-27 17:28:16 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temphq4708.html [2010-02-27 11:53:12 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempnf3352.html [2010-02-27 11:53:12 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempdq3352.html [2010-02-26 15:52:26 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempKZ3400.html [2010-02-26 15:52:26 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOG3400.html [2010-02-26 09:49:11 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempGl3880.html [2010-02-26 09:49:11 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TemptU3880.html [2010-02-25 14:43:47 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempii2904.html [2010-02-25 14:43:47 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temppw2904.html [2010-02-25 10:42:16 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempoB2744.html [2010-02-25 10:42:16 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempOC2744.html [2010-02-24 16:47:10 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempgVR480.html [2010-02-24 16:47:10 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEvd480.html [2010-02-24 12:11:25 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempAQ4072.html [2010-02-24 12:11:25 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempsW4072.html [2010-02-23 14:16:11 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempaYZ200.html [2010-02-23 14:16:11 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempWti200.html [2010-02-22 18:45:09 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempkw2668.html [2010-02-22 18:45:09 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempgA2668.html [2010-02-22 09:50:32 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempHH2944.html [2010-02-22 09:50:32 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempRr2944.html [2010-02-21 18:57:35 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Tempeyg568.html [2010-02-21 18:57:35 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempScG568.html [2010-02-21 13:50:49 | 000,002,432 | ---- | C] () -- C:\Users\Bartek\AppData\Local\Temptq4152.html [2010-02-21 13:50:49 | 000,002,089 | ---- | C] () -- C:\Users\Bartek\AppData\Local\TempEU4152.html [2010-02-20 13:33:54 | 000,000,060 | ---- | C] () -- C:\Windows\wininit.ini [2010-02-20 13:27:40 | 000,000,551 | ---- | C] () -- C:\Windows\Vf2k.ini [2010-02-19 14:04:00 | 000,000,331 | ---- | C] () -- C:\Windows\game.ini [2009-12-29 22:32:28 | 000,022,528 | ---- | C] () -- C:\Users\Bartek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-12-27 13:03:44 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll [2009-12-27 13:02:31 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-12-22 21:27:10 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini [2009-12-22 21:21:31 | 000,001,460 | ---- | C] () -- C:\Users\Bartek\AppData\Local\d3d9caps64.dat [2009-06-04 01:37:08 | 000,021,093 | ---- | C] () -- C:\Windows\SysWow64\instwdm.ini [2009-06-04 01:37:06 | 000,000,054 | ---- | C] () -- C:\Windows\SysWow64\ctzapxx.ini [2009-06-04 00:55:20 | 000,002,560 | ---- | C] () -- C:\Windows\SysWow64\CtxfiRes.dll [2009-05-27 09:49:00 | 000,000,285 | ---- | C] () -- C:\Windows\SysWow64\kill.ini [2008-01-21 03:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini [2005-10-21 09:12:42 | 000,064,512 | ---- | C] () -- C:\Windows\SysWow64\P17.DLL [2005-10-14 11:56:50 | 003,596,288 | ---- | C] () -- C:\Windows\SysWow64\qt-dx331.dll [2005-10-14 11:56:50 | 000,921,600 | ---- | C] () -- C:\Windows\SysWow64\VorbisEnc.dll [2005-10-14 11:56:50 | 000,881,664 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2005-10-14 11:56:50 | 000,344,064 | ---- | C] () -- C:\Windows\SysWow64\xvid.dll [2005-10-14 11:56:50 | 000,237,568 | ---- | C] () -- C:\Windows\SysWow64\OggDS.dll [2005-10-14 11:56:50 | 000,188,416 | ---- | C] () -- C:\Windows\SysWow64\vorbis.dll [2005-10-14 11:56:50 | 000,155,136 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2005-10-14 11:56:50 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\ogg.dll [2005-10-14 11:56:48 | 000,077,824 | ---- | C] () -- C:\Windows\SysWow64\MMSwitch.dll [2003-10-02 18:48:18 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\P17CPI.DLL [color=#E56717]========== LOP Check ==========[/color] [2010-10-23 19:06:05 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\Avnex [2010-12-16 21:26:17 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\DAEMON Tools Lite [2010-10-27 22:07:48 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\DAEMON Tools Pro [2010-06-20 11:00:18 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\Facebook [2010-07-06 15:11:02 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\Gadu-Gadu 10 [2010-11-14 18:36:38 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\GHISLER [2010-08-31 19:24:50 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\IrfanView [2011-01-04 19:01:46 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\Moje pliki Bitwy o Śródziemie™ II [2010-12-17 22:24:21 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\Moje pliki zapisu Bitwy o Śródziemie [2010-12-08 16:29:36 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\Octoshape [2011-01-16 20:10:52 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\Smart Recorder [2010-08-18 19:57:38 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\TS3Client [2010-12-08 16:24:04 | 000,000,000 | ---D | M] -- C:\Users\Bartek\AppData\Roaming\Uniblue [2011-02-09 15:50:19 | 000,032,610 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report > [/log] RSIT: [log]info.txt logfile of random's system information tool 1.08 2011-02-10 00:02:13 ======Uninstall list====== -->"C:\Program Files (x86)\Creative Installation Information\CREATIVE_MEDIASOURCE_U\Setup.exe" /remove /l0x0009 -->"C:\Program Files (x86)\Creative Installation Information\E-CENTER_NET_CONTENT_U\Setup.exe" /remove /l0x0009 -->"C:\Program Files (x86)\Creative Installation Information\E-CENTER_PLUGIN_MINIDISC_U\Setup.exe" /remove /l0x0009 -->"C:\Program Files (x86)\Creative Installation Information\E-CENTER_PLUGIN_ONLINESTORE_U\Setup.exe" /remove /l0x0009 -->"C:\Program Files (x86)\Creative Installation Information\MEDIASOURCE_PLAYER_SKINPACK_U\Setup.exe" /remove /l0x0009 -->C:\Program Files (x86)\Nero\Nero 7\\nero\uninstall\UNNERO.exe /UNINSTALL -->C:\Windows\UNNeroBackItUp.exe /UNINSTALL -->MsiExec /X{DEA314C4-0929-4250-BC92-98E4C105F28D} -->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{12321490-F573-4815-B6CC-7ABEF18C9AC4}\setup.exe" -l0x9 -->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{17E96A7F-AFE3-4171-87B1-583E376319E8}\setup.exe" -l0x9 -->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{2670895A-4E6C-4450-B868-7B7DB80A3357}\setup.exe" -l0x9 -->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x9 -->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x9 /remove -->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{888347B3-AEC5-4BB5-8BAB-781D72A57C73}\setup.exe" -l0x9 -->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{88B1984E-36F0-47B8-B8DC-728966807A9C}\setup.exe" -l0x9 -->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x9 -->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{BD6928A2-9F8F-4AA7-9A3A-FD4A271712EE}\setup.exe" -l0x9 -->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{CC3D3A93-C433-4329-AC3A-7EFC52A332C2}\setup.exe" -l0x9 -->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{CC3D3A93-C433-4329-AC3A-7EFC52A332C2}\setup.exe" -l0x9 /remove -->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{FBFF2411-D066-4D24-BCE0-893086009E1B}\setup.exe" -l0x9 -->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{FBFF2411-D066-4D24-BCE0-893086009E1B}\setup.exe" -l0x9 /remove A4tech USB Mouse Quality Testing Program V6.0-->MsiExec.exe /I{361693F2-A153-4359-A4CB-A1B9FF2AA5E6} Adobe AIR-->C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723} Adobe Community Help-->msiexec /qb /x {0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7} Adobe Community Help-->MsiExec.exe /I{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7} Adobe Flash Player 10 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player 10 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_Plugin.exe -maintain plugin Adobe Media Player-->msiexec /qb /x {DE3A9DC5-9A5D-6485-9662-347162C7E4CA} Adobe Media Player-->MsiExec.exe /I{DE3A9DC5-9A5D-6485-9662-347162C7E4CA} Adobe Photoshop CS5-->C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\core\PDApp.exe --appletID="DWA_UI" --appletVersion="1.0" --mode="Uninstall" --mediaSignature="{15FEDA5F-141C-4127-8D7E-B962D1742728}" Adobe Reader 9.3.2 - Polish-->MsiExec.exe /I{AC76BA86-7AD7-1045-7B44-A93000000001} Adobe Shockwave Player 11.5-->"C:\Windows\system32\Adobe\Shockwave 11\uninstaller.exe" Akamai NetSession Interface-->C:\Program Files (x86)\Common Files\Akamai\uninstall.exe Alien Swarm-->"C:\Program Files (x86)\Valve\Steam\steam.exe" steam://uninstall/630 ALLPlayer V4.X-->"C:\Program Files (x86)\ALLPlayer\unins000.exe" AmpliTube 3-->C:\Program Files (x86)\InstallShield Installation Information\{5DD152A8-BFB3-439E-90CD-5C00C2116E23}\setup.exe -runfromtemp -l0x0009 uninstall -removeonly ANIWZCS2 Service-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{4C590030-7469-453E-8589-D15DA9D03F52}\Setup.exe" Archiwizator WinRAR-->C:\Program Files (x86)\WinRAR\uninstall.exe Bitwa o Śródziemie™ II-->C:\Program Files (x86)\Electronic Arts\Bitwa o Śródziemie II\EAUninstall.exe Bitwa o Śródziemie™-->C:\Program Files (x86)\EA GAMES\Bitwa o Śródziemie\EAUninstall.exe Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch-->C:\Program Files (x86)\InstallShield Installation Information\{931C37FC-594D-43A9-B10F-A2F2B1F03498}\setup.exe -runfromtemp -l0x0409 Call of Duty(R) 4 - Modern Warfare(TM)-->C:\Program Files (x86)\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x0415 CDDRV_Installer-->MsiExec.exe /I{8CC990CD-87C8-475C-AC32-8A7984E2FCFA} Chinese Traditional Fonts Support For Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-2448-0000-900000000003} Codec Pack - All In 1 6.0.3.0-->C:\Windows\iun6002.exe "C:\Program Files (x86)\Codec Pack - All In 1\irunin.ini" Counter-Strike-->"C:\Program Files (x86)\Valve\Steam\steam.exe" steam://uninstall/10 Creative ALchemy-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{12321490-F573-4815-B6CC-7ABEF18C9AC4}\setup.exe" -l0x9 /remove Creative Audio Control Panel-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{17E96A7F-AFE3-4171-87B1-583E376319E8}\setup.exe" -l0x9 /remove Creative Console Launcher-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{888347B3-AEC5-4BB5-8BAB-781D72A57C73}\setup.exe" -l0x9 /remove Creative MediaSource 5-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}\setup.exe" -l0x9 /remove Creative Smart Recorder-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{BD6928A2-9F8F-4AA7-9A3A-FD4A271712EE}\setup.exe" -l0x9 /remove Creative Software AutoUpdate-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{88B1984E-36F0-47B8-B8DC-728966807A9C}\setup.exe" -l0x9 /remove Creative Sound Blaster Properties x64 Edition-->"C:\Program Files (x86)\Creative Installation Information\SBCONTROL64\Setup.exe" /remove /l0x0009 Creative WaveStudio 7-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{2670895A-4E6C-4450-B868-7B7DB80A3357}\setup.exe" -l0x9 /remove dBpoweramp Music Converter-->"C:\Windows\system32\SpoonUninstall.exe" <uninstall>C:\Windows\system32\SpoonUninstall-dBpoweramp Music Converter.dat D-Link Wireless G DWL-G122_DWA-110-->C:\Program Files (x86)\InstallShield Installation Information\{5F753314-628E-4C13-B8AE-BFA7FD514CBE}\setup.exe -runfromtemp -l0x0015 -removeonly DMIView B7.0108.01-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{3EE1008C-11A1-4F4F-8DB7-27573924DE78}\setup.exe" -l0x9 -removeonly EA SPORTS(TM) FIFA Online-->MsiExec.exe /X{6FE3B0CE-37C1-4825-908A-5A84C9B4EC2F} Folder Lock-->C:\Program Files (x86)\Folder Lock\Uninstall.exe Gadu-Gadu 10-->C:\Program Files (x86)\Gadu-Gadu 10\Uninstall.exe Garena 2010-->C:\Program Files (x86)\Garena\uninst.exe GEAR driver installer for x86 and x64-->MsiExec.exe /I{2EA45803-BEB7-46C4-9ADC-46A5F9E7BB77} GearDrvs-->MsiExec.exe /I{CB84F0F2-927B-458D-9DC5-87832E3DC653} GoldWave v5.20-->"C:\Program Files (x86)\GoldWave\unstall.exe" "GoldWave v5.20" "C:\Program Files (x86)\GoldWave\unstall.log" Guitar Pro 5.2-->"C:\Program Files (x86)\Guitar Pro 5\unins000.exe" Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->c:\Windows\SysWOW64\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->c:\Windows\SysWOW64\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {08155812-0202-4D5F-A7FF-12A2782DC548} /qb+ REBOOTPROMPT="" Java(TM) 6 Update 23-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216017FF} Left 4 Dead 2 Standalone Patch™-->C:\Program Files (x86)\Left 4 Dead 2\Uninstall SP.exe Left 4 Dead 2-->"C:\Program Files (x86)\Left 4 Dead 2\unins000.exe" LightScribe System Software 1.12.29.2-->MsiExec.exe /X{CF8C077A-B467-4C43-8DB5-3A9B94FF9681} Line 6 Uninstaller-->C:\Program Files (x86)\Line6\Tools\Line 6 Uninstaller.exe Logitech Desktop Messenger-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\SETUP.EXE" -l0x9 UNINSTALL Logitech SetPoint-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}\setup.exe" -l0x15 -removeonly LogMeIn Hamachi-->C:\Windows\SysWOW64\\msiexec.exe /i {CE4A3D0F-D1B0-47D1-BF99-3E957C548D12} REMOVE=ALL LogMeIn Hamachi-->MsiExec.exe /I{CE4A3D0F-D1B0-47D1-BF99-3E957C548D12} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-0415-0000-0000000FF1CE} /uninstall {79EB535E-76E4-4356-8146-A24EE55AB69D} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-0415-0000-0000000FF1CE} /uninstall {79EB535E-76E4-4356-8146-A24EE55AB69D} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-0415-0000-0000000FF1CE} /uninstall {79EB535E-76E4-4356-8146-A24EE55AB69D} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-002A-0000-1000-0000000FF1CE} /uninstall {E64BA721-2310-4B55-BE5A-2925F9706192} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-002A-0415-1000-0000000FF1CE} /uninstall {D45F91DE-F0FC-4D5F-9A0C-FDE5B251AAC6} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0415-0000-0000000FF1CE} /uninstall {D45F91DE-F0FC-4D5F-9A0C-FDE5B251AAC6} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-0415-0000-0000000FF1CE} /uninstall {79EB535E-76E4-4356-8146-A24EE55AB69D} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B} Microsoft Office Excel MUI (Polish) 2007-->MsiExec.exe /X{90120000-0016-0415-0000-0000000FF1CE} Microsoft Office Home and Student 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE} Microsoft Office OneNote MUI (Polish) 2007-->MsiExec.exe /X{90120000-00A1-0415-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (Polish) 2007-->MsiExec.exe /X{90120000-0018-0415-0000-0000000FF1CE} Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE} Microsoft Office Proof (Polish) 2007-->MsiExec.exe /X{90120000-001F-0415-0000-0000000FF1CE} Microsoft Office Proofing (Polish) 2007-->MsiExec.exe /X{90120000-002C-0415-0000-0000000FF1CE} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0415-0000-0000000FF1CE} /uninstall {E9EA2604-8AC9-47D2-8F4B-6BF60787A357} Microsoft Office Shared MUI (Polish) 2007-->MsiExec.exe /X{90120000-006E-0415-0000-0000000FF1CE} Microsoft Office Word MUI (Polish) 2007-->MsiExec.exe /X{90120000-001B-0415-0000-0000000FF1CE} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475} Microsoft_VC80_CRT_x86-->MsiExec.exe /I{92D58719-BBC1-4CC3-A08B-56C9E884CC2C} Microsoft_VC80_MFC_x86-->MsiExec.exe /I{D1A19B02-817E-4296-A45B-07853FD74D57} Microsoft_VC80_MFCLOC_x86-->MsiExec.exe /I{D92BBB52-82FF-42ED-8A3C-4E062F944AB7} Microsoft_VC90_ATL_x86-->MsiExec.exe /I{033E378E-6AD3-4AD5-BDEB-CBD69B31046C} Microsoft_VC90_CRT_x86-->MsiExec.exe /I{08D2E121-7F6A-43EB-97FD-629B44903403} Microsoft_VC90_MFC_x86-->MsiExec.exe /I{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A} mIRC-->C:\Program Files (x86)\mIRC\uninstall.exe _?=C:\Program Files (x86)\mIRC Mozilla Firefox (3.6.13)-->C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC} NapiProjekt 1.0.6.9-->"C:\Program Files (x86)\NAPI-PROJEKT\unins000.exe" Need for Speed™ Most Wanted-->C:\Program Files (x86)\EA GAMES\Need for Speed Most Wanted\EAUninstall.exe Need for Speed™ SHIFT-->MsiExec.exe /X{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4} Nero 7 Essentials-->MsiExec.exe /X{714ACFF3-B8A3-4AD6-937B-13C833D71045} neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B} Norton 360-->C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360\2454B0AB\4.3.0.5\InstStub.exe /X NVIDIA PhysX-->MsiExec.exe /X{DEA314C4-0929-4250-BC92-98E4C105F28D} OpenAL-->"C:\Program Files (x86)\OpenAL\OALInst.exe" /U OSCAR Editor-->C:\Program Files (x86)\InstallShield Installation Information\{21FFDD40-F6B9-4609-B1C9-514E0A342BFA}\setup.exe -runfromtemp -l0x0409 PDF Settings CS5-->MsiExec.exe /I{A78FE97A-C0C8-49CE-89D0-EDD524A17392} Pro Evolution Soccer 6-->C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{EBB794ED-D282-4334-92FB-254481EFF514} /l1045 PunkBuster Services-->C:\Windows\system32\pbsvc.exe -u RiffWorks T4-->C:\Program Files (x86)\Sonoma Wire Works\RiffWorks T4\Uninstall.exe Security Update for 2007 Microsoft Office System (KB2288621)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5C497F0B-2061-4CC9-A61C-6B45B867354D} Security Update for 2007 Microsoft Office System (KB2288931)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {CD769337-C8AC-46DB-A7DC-643E50089263} Security Update for 2007 Microsoft Office System (KB2289158)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {210B16C0-CEBD-4DE9-B474-04A7E8735E16} Security Update for 2007 Microsoft Office System (KB2344875)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6FC5C4C1-D7AE-44C3-94B7-6424FC3E752F} Security Update for 2007 Microsoft Office System (KB2345043)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {536FB502-775F-4494-BACE-C02CC90B7A5B} Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08} Security Update for 2007 Microsoft Office System (KB976321)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7F207DCA-3399-40CB-A968-6E5991B1421A} Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)-->c:\Windows\SysWOW64\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {8EAF4926-5B5D-398A-BA46-4603D8095BDE} /qb+ REBOOTPROMPT="" Security Update for Microsoft Office Excel 2007 (KB2345035)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {B23002DD-34EC-4988-B810-A5E2A0BF04F1} Security Update for Microsoft Office InfoPath 2007 (KB979441)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB} Security Update for Microsoft Office PowerPoint 2007 (KB982158)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {F5B70033-E79C-4569-90BF-BC9B4E4F3F46} Security Update for Microsoft Office PowerPoint Viewer (KB2413381)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3DED0A62-44C8-4E00-A785-5212F297A9D9} Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF} Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC} Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D} Security Update for Microsoft Office Word 2007 (KB2344993)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48} Shockwave-->C:\Windows\System32\Macromed\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Macromed\SHOCKW~1\Install.log Skype™ 4.0-->MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D} Steam(TM)-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3} Total Commander (Remove or Repair)-->c:\totalcmd\tcuninst.exe TrackMania Nations Forever-->"C:\Program Files (x86)\Valve\Steam\steam.exe" steam://uninstall/11020 Update for 2007 Microsoft Office System (KB2284654)-->msiexec /package {90120000-002A-0000-1000-0000000FF1CE} /uninstall {FB166E7C-8AA6-48C8-B726-1F25BEE7825A} Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D} Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->c:\Windows\SysWOW64\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT="" Update for Microsoft Office OneNote 2007 (KB980729)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {329050A9-EF80-40F9-B633-74508F54C1FF} Ventrilo-->MsiExec.exe /I{789289CA-F73A-4A16-A331-54D498CE069F} Winamp-->"C:\Program Files (x86)\Winamp\UninstWA.exe" ======Hosts File====== 127.0.0.1 localhost 5.89.34.34 pes6gate-ec.winning-eleven.net 210.249.144.166 we9stun.winning-eleven.net ======Security center information====== AS: Windows Defender ======System event log====== Computer Name: Bartekk Event Code: 7036 Message: Usługa Pomoc IP weszła w stan uruchomienia. Record Number: 99637 Source Name: Service Control Manager Time Written: 20100721144129.000000-000 Event Type: Informacje User: Computer Name: Bartekk Event Code: 7036 Message: Usługa Usługa modułu wyliczającego urządzenia przenośne weszła w stan uruchomienia. Record Number: 99636 Source Name: Service Control Manager Time Written: 20100721144129.000000-000 Event Type: Informacje User: Computer Name: Bartekk Event Code: 7036 Message: Usługa Instrumentacja zarządzania Windows weszła w stan uruchomienia. Record Number: 99635 Source Name: Service Control Manager Time Written: 20100721144129.000000-000 Event Type: Informacje User: Computer Name: Bartekk Event Code: 7036 Message: Usługa Usługa Czas systemu Windows weszła w stan uruchomienia. Record Number: 99634 Source Name: Service Control Manager Time Written: 20100721144129.000000-000 Event Type: Informacje User: Computer Name: Bartekk Event Code: 7036 Message: Usługa Usługa raportowania błędów systemu Windows weszła w stan uruchomienia. Record Number: 99633 Source Name: Service Control Manager Time Written: 20100721144129.000000-000 Event Type: Informacje User: =====Application event log===== Computer Name: 26L2233B3-02 Event Code: 5615 Message: Windows Management Instrumentation Service started sucessfully Record Number: 5 Source Name: Microsoft-Windows-WMI Time Written: 20091222201354.000000-000 Event Type: Informacje User: Computer Name: WIN-JQ5AP34VZDE Event Code: 4625 Message: System podrzędny EventSystem pomija zduplikowane wpisy dziennika zdarzeń przez okres 86400 sekund. Limit czasu pomijania można kontrolować za pomocą wartości REG_DWORD o nazwie SuppressDuplicateDuration w następującym kluczu rejestru: HKLM\Software\Microsoft\EventSystem\EventLog. Record Number: 4 Source Name: Microsoft-Windows-EventSystem Time Written: 20091222201351.000000-000 Event Type: Informacje User: Computer Name: WIN-JQ5AP34VZDE Event Code: 900 Message: Usługa licencjonowania oprogramowania jest uruchamiana. Record Number: 3 Source Name: Microsoft-Windows-Security-Licensing-SLC Time Written: 20091222201350.000000-000 Event Type: Informacje User: Computer Name: WIN-JQ5AP34VZDE Event Code: 1531 Message: Usługa profilów użytkowników została uruchomiona pomyślnie. Record Number: 2 Source Name: Microsoft-Windows-User Profiles Service Time Written: 20091222201349.000000-000 Event Type: Informacje User: ZARZĄDZANIE NT\SYSTEM Computer Name: 26L2233B3-02 Event Code: 2 Message: Klient usług certyfikatów został zatrzymany. Record Number: 1 Source Name: Microsoft-Windows-CertificateServicesClient Time Written: 20080121034608.460800-000 Event Type: Informacje User: ZARZĄDZANIE NT\SYSTEM =====Security event log===== Computer Name: Bartekk Event Code: 4648 Message: Podjęto próbę logowania przy użyciu jawnych poświadczeń. Podmiot: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: BARTEKK$ Domena konta: WORKGROUP Identyfikator logowania: 0x3e7 Identyfikator GUID logowania: {00000000-0000-0000-0000-000000000000} Konto, którego poświadczenia zostały użyte: Nazwa konta: SYSTEM Domena konta: ZARZĄDZANIE NT Identyfikator GUID logowania: {00000000-0000-0000-0000-000000000000} Serwer docelowy: Nazwa serwera docelowego: localhost Informacje dodatkowe: localhost Informacje o procesie: Identyfikator procesu: 0x268 Nazwa procesu: C:\Windows\System32\services.exe Informacje o sieci: Adres sieciowy: - Port: - To zdarzenie jest generowane, gdy proces podejmie próbę zalogowania się na koncie, określając w sposób jawny poświadczenia konta. To zdarzenie najczęściej występuje w konfiguracjach wsadowych, takich jak zaplanowane zadania, lub podczas używania polecenia RUNAS. Record Number: 29417 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100724105123.869990-000 Event Type: Sukces inspekcji User: Computer Name: Bartekk Event Code: 4672 Message: Przypisano specjalne uprawnienia do nowego logowania. Podmiot: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: SYSTEM Domena konta: ZARZĄDZANIE NT Identyfikator logowania: 0x3e7 Uprawnienia: SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege Record Number: 29416 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100724105123.851990-000 Event Type: Sukces inspekcji User: Computer Name: Bartekk Event Code: 4624 Message: Użytkownik pomyślnie zalogował się na koncie. Podmiot: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: BARTEKK$ Domena konta: WORKGROUP Identyfikator logowania: 0x3e7 Typ logowania: 5 Nowe logowanie: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: SYSTEM Domena konta: ZARZĄDZANIE NT Identyfikator logowania: 0x3e7 Identyfikator GUID logowania: {00000000-0000-0000-0000-000000000000} Informacje o procesie: Identyfikator procesu: 0x268 Nazwa procesu: C:\Windows\System32\services.exe Informacje o sieci: Nazwa stacji roboczej: Adres źródłowy sieci: - Port źródłowy: - Szczegółowe informacje o uwierzytelnianiu: Proces logowania: Advapi Pakiet uwierzytelniania: Negotiate Usługi przejściowe: - Nazwa pakietu (tylko NTLM): - Długość klucza: 0 To zdarzenie jest generowane w momencie utworzenia sesji logowania. Jest ono generowane na komputerze, do którego został uzyskany dostęp. Pola podmiotu wskazują konto w systemie lokalnym, które zażądało logowania. Najczęściej jest to usługa, na przykład usługa Serwer, lub proces lokalny taki jak Winlogon.exe lub Services.exe. Pole typu logowania wskazuje rodzaj zaistniałego logowania. Najczęstsze typy to 2 (interakcyjne) i 3 (sieciowe). Pola nowego logowania wskazują konto, dla którego zostało utworzone nowe logowanie, czyli konto, które zostało zalogowane. Pola sieci wskazują lokalizację, z której pochodziło zdalne żądanie logowania. Nazwa stacji roboczej nie zawsze jest dostępna i w niektórych przypadkach może być pusta. Pola informacji o uwierzytelnianiu zawierają szczegółowe informacje o tym konkretnym żądaniu logowania. - Identyfikator GUID logowania to unikatowy identyfikator, za pomocą którego można skorelować to zdarzenie ze zdarzeniem centrum dystrybucji kluczy. - Usługi przejściowe wskazują, które usługi pośrednie uczestniczyły w tym żądaniu logowania. - Nazwa pakietu wskazuje, który protokół podrzędny spośród protokołów NTLM został użyty. - Długość klucza wskazuje długość wygenerowanego klucza sesji. Jeśli nie zażądano klucza sesji, jest to wartość 0. Record Number: 29415 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100724105123.851990-000 Event Type: Sukces inspekcji User: Computer Name: Bartekk Event Code: 4648 Message: Podjęto próbę logowania przy użyciu jawnych poświadczeń. Podmiot: Identyfikator zabezpieczeń: S-1-5-18 Nazwa konta: BARTEKK$ Domena konta: WORKGROUP Identyfikator logowania: 0x3e7 Identyfikator GUID logowania: {00000000-0000-0000-0000-000000000000} Konto, którego poświadczenia zostały użyte: Nazwa konta: SYSTEM Domena konta: ZARZĄDZANIE NT Identyfikator GUID logowania: {00000000-0000-0000-0000-000000000000} Serwer docelowy: Nazwa serwera docelowego: localhost Informacje dodatkowe: localhost Informacje o procesie: Identyfikator procesu: 0x268 Nazwa procesu: C:\Windows\System32\services.exe Informacje o sieci: Adres sieciowy: - Port: - To zdarzenie jest generowane, gdy proces podejmie próbę zalogowania się na koncie, określając w sposób jawny poświadczenia konta. To zdarzenie najczęściej występuje w konfiguracjach wsadowych, takich jak zaplanowane zadania, lub podczas używania polecenia RUNAS. Record Number: 29414 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100724105123.851990-000 Event Type: Sukces inspekcji User: Computer Name: Bartekk Event Code: 4624 Message: Użytkownik pomyślnie zalogował się na koncie. Podmiot: Identyfikator zabezpieczeń: S-1-0-0 Nazwa konta: - Domena konta: - Identyfikator logowania: 0x0 Typ logowania: 3 Nowe logowanie: Identyfikator zabezpieczeń: S-1-5-7 Nazwa konta: LOGOWANIE ANONIMOWE Domena konta: ZARZĄDZANIE NT Identyfikator logowania: 0x2a552 Identyfikator GUID logowania: {00000000-0000-0000-0000-000000000000} Informacje o procesie: Identyfikator procesu: 0x0 Nazwa procesu: - Informacje o sieci: Nazwa stacji roboczej: Adres źródłowy sieci: - Port źródłowy: - Szczegółowe informacje o uwierzytelnianiu: Proces logowania: NtLmSsp Pakiet uwierzytelniania: NTLM Usługi przejściowe: - Nazwa pakietu (tylko NTLM): NTLM V1 Długość klucza: 0 To zdarzenie jest generowane w momencie utworzenia sesji logowania. Jest ono generowane na komputerze, do którego został uzyskany dostęp. Pola podmiotu wskazują konto w systemie lokalnym, które zażądało logowania. Najczęściej jest to usługa, na przykład usługa Serwer, lub proces lokalny taki jak Winlogon.exe lub Services.exe. Pole typu logowania wskazuje rodzaj zaistniałego logowania. Najczęstsze typy to 2 (interakcyjne) i 3 (sieciowe). Pola nowego logowania wskazują konto, dla którego zostało utworzone nowe logowanie, czyli konto, które zostało zalogowane. Pola sieci wskazują lokalizację, z której pochodziło zdalne żądanie logowania. Nazwa stacji roboczej nie zawsze jest dostępna i w niektórych przypadkach może być pusta. Pola informacji o uwierzytelnianiu zawierają szczegółowe informacje o tym konkretnym żądaniu logowania. - Identyfikator GUID logowania to unikatowy identyfikator, za pomocą którego można skorelować to zdarzenie ze zdarzeniem centrum dystrybucji kluczy. - Usługi przejściowe wskazują, które usługi pośrednie uczestniczyły w tym żądaniu logowania. - Nazwa pakietu wskazuje, który protokół podrzędny spośród protokołów NTLM został użyty. - Długość klucza wskazuje długość wygenerowanego klucza sesji. Jeśli nie zażądano klucza sesji, jest to wartość 0. Record Number: 29413 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100724105123.060990-000 Event Type: Sukces inspekcji User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "Path"=c:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC "PROCESSOR_ARCHITECTURE"=AMD64 "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "USERNAME"=SYSTEM "windir"=%SystemRoot% "PROCESSOR_LEVEL"=16 "PROCESSOR_IDENTIFIER"=AMD64 Family 16 Model 2 Stepping 3, AuthenticAMD "PROCESSOR_REVISION"=0203 "NUMBER_OF_PROCESSORS"=4 "TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\34FB5F65-FFEB-4B61-BF0E-A6A76C450FAA\TraceFormat "DFSTRACINGON"=FALSE -----------------EOF----------------- [/log] [log]Logfile of random's system information tool 1.08 (written by random/random) Run by Bartek at 2011-02-10 00:01:58 Microsoft® Windows Vista™ Home Premium Service Pack 2 System drive C: has 267 GB (67%) free of 400 GB Total RAM: 2045 MB (21% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 00:02:07, on 2011-02-10 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v7.00 (7.00.6002.18005) Boot mode: Normal Running processes: C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe C:\Program Files (x86)\OSCAR Editor\OscarEditor.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\AirGCFG.exe C:\Windows\SysWOW64\rundll32.exe C:\Windows\SysWOW64\Ctxfihlp.exe C:\Windows\SysWOW64\CTXFISPI.EXE C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe C:\Program Files (x86)\Ventrilo\Ventrilo.exe C:\Program Files (x86)\Valve\Steam\Steam.exe C:\Users\Bartek\AppData\Local\Google\Update\1.2.183.23\GoogleCrashHandler.exe C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Bartek\Downloads\RSIT.exe C:\Program Files (x86)\trend micro\Bartek.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O1 - Hosts: 5.89.34.34 pes6gate-ec.winning-eleven.net O1 - Hosts: 210.249.144.166 we9stun.winning-eleven.net O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coIEPlg.dll O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\IPSBHO.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - (no file) O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coIEPlg.dll O4 - HKLM\..\Run: [SwitchBoard] "C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" O4 - HKLM\..\Run: [ANIWZCS2Service] "C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe" O4 - HKLM\..\Run: [D-Link D-Link Wireless G DWL-G122_DWA-110] "C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\AirGCFG.exe" O4 - HKLM\..\Run: [WZCSLDR2] C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\WZCSLDR2.exe O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files (x86)\OSCAR Editor\OscarEditor.exe" Minimum O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [Google Update] "C:\Users\Bartek\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA SIECIOWA') O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - Global Startup: Logitech SetPoint.lnk = ? O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O15 - Trusted Zone: *.line6.net O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPID.cab O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: ANIWConn Service (ANIWConnService) - Unknown owner - C:\Windows\system32\ANIWConnService.exe O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing) O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files (x86)\Raxco\PerfectDisk\PDAgent.exe O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files (x86)\Raxco\PerfectDisk\PDEngine.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 9713 bytes ======Scheduled tasks folder====== C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2418384579-601973546-2015653325-1000Core.job C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2418384579-601973546-2015653325-1000UA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}] Symantec NCO BHO - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coIEPlg.dll [2010-09-04 396144] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}] Symantec Intrusion Prevention - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\IPSBHO.DLL [2009-11-17 79224] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-11-24 41760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}] IEPluginBHO Class [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coIEPlg.dll [2010-09-04 396144] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] "ANIWZCS2Service"=C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe [2009-08-21 98304] "D-Link D-Link Wireless G DWL-G122_DWA-110"=C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\AirGCFG.exe [2009-09-18 1708032] "WZCSLDR2"=C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\WZCSLDR2.exe [] "P17Helper"=Rundll32 P17.dll,P17Helper [] "CTxfiHlp"=C:\Windows\system32\CTXFIHLP.EXE [2009-06-04 25600] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1555968] "OscarEditor"=C:\Program Files (x86)\OSCAR Editor\OscarEditor.exe [2009-08-31 4053504] "AdobeBridge"= [] "SetDefaultMIDI"=C:\Windows\MIDIDef.exe [2002-12-03 49152] "WMPNSCFG"=C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe [] "Google Update"=C:\Users\Bartek\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-09 136176] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Adobe Gamma Loader.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 "BindDirectlyToPropertySetStorage"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] ======List of files/folders created in the last 3 months====== 2011-02-09 23:52:01 ----D---- C:\Program Files (x86)\trend micro 2011-02-09 23:51:53 ----D---- C:\rsit 2011-02-07 20:06:27 ----D---- C:\Program Files (x86)\CPU Speed Pro 2011-02-05 09:16:09 ----D---- C:\ProgramData\Raxco 2011-02-05 09:16:09 ----D---- C:\Program Files (x86)\Common Files\Raxco 2011-02-05 09:14:59 ----D---- C:\Program Files (x86)\Raxco 2011-02-05 00:26:53 ----D---- C:\Program Files (x86)\Garena 2011-02-02 16:42:43 ----D---- C:\Program Files (x86)\Left 4 Dead 2 2011-01-16 20:09:34 ----D---- C:\Users\Bartek\AppData\Roaming\Smart Recorder 2011-01-10 20:09:00 ----D---- C:\FSDownloader 2011-01-03 14:30:05 ----A---- C:\Windows\SysWOW64\javaws.exe 2011-01-03 14:30:05 ----A---- C:\Windows\SysWOW64\javaw.exe 2011-01-03 14:30:05 ----A---- C:\Windows\SysWOW64\java.exe 2011-01-02 20:35:57 ----D---- C:\Users\Bartek\AppData\Roaming\Creative 2011-01-02 20:35:17 ----D---- C:\ProgramData\Creative Labs 2011-01-02 20:26:49 ----N---- C:\Windows\Ctregrun.exe 2011-01-02 19:00:56 ----D---- C:\Program Files (x86)\Common Files\Creative Labs Shared 2011-01-02 18:59:34 ----A---- C:\Windows\SysWOW64\cttele32.dll 2011-01-02 18:59:27 ----A---- C:\Windows\SysWOW64\CmdRtr.DLL 2011-01-02 18:59:27 ----A---- C:\Windows\SysWOW64\APOMngr.DLL 2011-01-02 18:57:17 ----A---- C:\Windows\SysWOW64\AppSetup.exe 2011-01-02 18:41:31 ----A---- C:\Windows\SysWOW64\Ludap17.ini 2011-01-02 18:41:23 ----A---- C:\Windows\SysWOW64\INRES.DLL 2011-01-02 17:22:18 ----D---- C:\Program Files (x86)\Common Files\Creative 2011-01-02 17:22:16 ----HD---- C:\Program Files (x86)\Creative Installation Information 2011-01-02 17:21:23 ----D---- C:\Program Files (x86)\Creative 2011-01-02 17:20:48 ----D---- C:\ProgramData\Creative 2011-01-02 17:20:34 ----D---- C:\Program Files (x86)\OpenAL 2011-01-02 17:20:34 ----A---- C:\Windows\SysWOW64\wrap_oal.dll 2011-01-02 17:20:34 ----A---- C:\Windows\SysWOW64\OpenAL32.dll 2011-01-02 17:20:14 ----D---- C:\Windows\SysWOW64\data 2011-01-02 17:19:03 ----A---- C:\Windows\SysWOW64\APOIM64.exe 2011-01-02 17:19:02 ----A---- C:\Windows\SysWOW64\eaxac3.dll 2011-01-02 17:19:02 ----A---- C:\Windows\SysWOW64\CTAPO32.dll 2011-01-02 17:19:02 ----A---- C:\Windows\SysWOW64\AddCat.exe 2011-01-02 17:18:59 ----A---- C:\Windows\SysWOW64\oalinst.exe 2011-01-02 17:18:59 ----A---- C:\Windows\SysWOW64\ctpxst32.exe 2011-01-02 17:03:44 ----A---- C:\Windows\SysWOW64\ANIWConnService.exe 2011-01-02 17:03:30 ----A---- C:\Windows\SysWOW64\wnicapi.dll 2011-01-02 17:03:30 ----A---- C:\Windows\SysWOW64\wlanapp.dll 2011-01-02 17:03:30 ----A---- C:\Windows\SysWOW64\AQCKGen.dll 2011-01-02 17:03:30 ----A---- C:\Windows\SysWOW64\ANIWZCS2.dll 2011-01-02 17:03:30 ----A---- C:\Windows\SysWOW64\ANICtl.dll 2011-01-02 17:03:30 ----A---- C:\Windows\SysWOW64\aIPH.dll 2011-01-02 17:03:29 ----A---- C:\Windows\SysWOW64\odSupp_M.dll 2011-01-02 17:03:13 ----D---- C:\Program Files (x86)\ANI 2011-01-02 17:03:13 ----A---- C:\Windows\SysWOW64\ANIOApi.dll 2011-01-02 17:02:40 ----A---- C:\Windows\lwd.exe 2011-01-02 17:02:39 ----A---- C:\Windows\SysWOW64\ssleay32.dll 2011-01-02 17:02:39 ----A---- C:\Windows\SysWOW64\libeay32.dll 2011-01-02 17:02:39 ----A---- C:\Windows\SysWOW64\ANIWPS.exe 2011-01-02 17:02:39 ----A---- C:\Windows\SysWOW64\ANIOWPS.dll 2011-01-02 17:01:05 ----A---- C:\Windows\SysWOW64\rt25u98.sys 2011-01-02 17:01:05 ----A---- C:\Windows\SysWOW64\Dr71WU98.sys 2011-01-02 16:48:30 ----D---- C:\Program Files (x86)\D-Link 2011-01-02 16:48:22 ----D---- C:\Users\Bartek\AppData\Roaming\InstallShield 2010-12-27 11:56:39 ----A---- C:\Windows\SysWOW64\mstime.dll 2010-12-27 11:56:39 ----A---- C:\Windows\SysWOW64\ieframe.dll 2010-12-27 11:56:38 ----A---- C:\Windows\SysWOW64\mshtml.dll 2010-12-27 11:56:38 ----A---- C:\Windows\SysWOW64\msfeeds.dll 2010-12-27 11:56:37 ----A---- C:\Windows\SysWOW64\wininet.dll 2010-12-27 11:56:37 ----A---- C:\Windows\SysWOW64\urlmon.dll 2010-12-27 11:56:37 ----A---- C:\Windows\SysWOW64\mshtmled.dll 2010-12-27 11:56:36 ----A---- C:\Windows\SysWOW64\iepeers.dll 2010-12-27 11:56:36 ----A---- C:\Windows\SysWOW64\ieencode.dll 2010-12-27 11:56:36 ----A---- C:\Windows\SysWOW64\ieapfltr.dll 2010-12-27 11:56:31 ----A---- C:\Windows\SysWOW64\fontsub.dll 2010-12-27 11:56:31 ----A---- C:\Windows\SysWOW64\atmlib.dll 2010-12-27 11:56:31 ----A---- C:\Windows\SysWOW64\atmfd.dll 2010-12-27 11:54:45 ----A---- C:\Windows\SysWOW64\tzres.dll 2010-12-27 11:15:17 ----A---- C:\Windows\SysWOW64\taskschd.dll 2010-12-27 11:15:17 ----A---- C:\Windows\SysWOW64\taskeng.exe 2010-12-27 11:15:16 ----A---- C:\Windows\SysWOW64\taskcomp.dll 2010-12-23 11:00:38 ----D---- C:\Users\Bartek\AppData\Roaming\Moje pliki Bitwy o Śródziemie™ II 2010-12-17 22:00:40 ----D---- C:\Users\Bartek\AppData\Roaming\Moje pliki zapisu Bitwy o Śródziemie 2010-12-16 21:24:41 ----D---- C:\Program Files (x86)\DAEMON Tools Lite 2010-12-16 21:24:20 ----D---- C:\Users\Bartek\AppData\Roaming\DAEMON Tools Lite 2010-12-16 21:23:34 ----D---- C:\ProgramData\DAEMON Tools Lite 2010-12-11 14:18:54 ----A---- C:\Windows\SysWOW64\msvcsv60.dll 2010-12-11 14:14:27 ----D---- C:\Program Files (x86)\Vstplugins 2010-12-11 14:14:26 ----D---- C:\Program Files (x86)\IK Multimedia 2010-12-09 18:50:41 ----D---- C:\ProgramData\Sonoma Wire Works 2010-12-09 18:50:24 ----D---- C:\Program Files (x86)\Sonoma Wire Works 2010-12-09 18:13:25 ----D---- C:\ProgramData\Line 6 2010-12-09 18:13:25 ----D---- C:\Program Files (x86)\Common Files\Digidesign 2010-12-09 18:13:20 ----D---- C:\Program Files (x86)\Line6 2010-12-09 14:16:48 ----D---- C:\Program Files (x86)\LogMeIn Hamachi 2010-12-08 16:24:04 ----D---- C:\Users\Bartek\AppData\Roaming\Uniblue 2010-11-29 12:28:53 ----D---- C:\Program Files (x86)\Activision 2010-11-14 18:36:00 ----D---- C:\totalcmd ======List of files/folders modified in the last 3 months====== 2011-02-10 00:01:49 ----D---- C:\Windows\Temp 2011-02-09 23:52:01 ----D---- C:\Program Files (x86) 2011-02-09 22:45:14 ----D---- C:\Users\Bartek\AppData\Roaming\mIRC 2011-02-09 22:37:56 ----D---- C:\Windows\Tasks 2011-02-09 22:31:48 ----D---- C:\Program Files (x86)\Common Files\Akamai 2011-02-09 20:18:24 ----SHD---- C:\System Volume Information 2011-02-09 20:11:48 ----D---- C:\Users\Bartek\AppData\Roaming\Skype 2011-02-09 19:44:44 ----A---- C:\Windows\SysWOW64\PnkBstrB.exe 2011-02-09 19:40:55 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2011-02-09 19:39:59 ----SHD---- C:\Windows\Installer 2011-02-09 19:39:58 ----SHD---- C:\Config.Msi 2011-02-05 16:14:01 ----D---- C:\Windows\Minidump 2011-02-05 16:13:45 ----D---- C:\Windows 2011-02-05 09:16:09 ----HD---- C:\ProgramData 2011-02-05 09:16:09 ----D---- C:\Windows\System32 2011-02-05 09:16:09 ----D---- C:\Program Files (x86)\Common Files 2011-02-04 23:56:50 ----D---- C:\Windows\inf 2011-02-02 17:12:42 ----D---- C:\Windows\winsxs 2011-01-21 01:45:35 ----D---- C:\ProgramData\TrackMania 2011-01-19 16:51:54 ----D---- C:\Program Files (x86)\GIGABYTE 2011-01-19 16:50:00 ----D---- C:\Program Files (x86)\ALLConverter 2011-01-14 17:50:36 ----SD---- C:\Users\Bartek\AppData\Roaming\Microsoft 2011-01-11 18:43:48 ----D---- C:\Program Files (x86)\Common Files\Steam 2011-01-05 17:01:19 ----D---- C:\Program Files (x86)\EA Games 2011-01-04 19:29:46 ----RSD---- C:\Windows\assembly 2011-01-03 14:30:05 ----D---- C:\Windows\SysWOW64 2011-01-03 14:29:59 ----D---- C:\Program Files (x86)\Java 2011-01-03 14:06:39 ----SD---- C:\Windows\Downloaded Program Files 2011-01-02 17:21:43 ----RD---- C:\Program Files 2011-01-02 17:03:19 ----D---- C:\Program Files (x86)\Common Files\InstallShield 2011-01-02 16:45:13 ----A---- C:\Windows\DIFxAPI.dll 2011-01-02 16:43:22 ----D---- C:\Windows\Prefetch 2010-12-27 20:09:09 ----D---- C:\Windows\rescache 2010-12-27 12:05:40 ----D---- C:\Windows\SysWOW64\pl-PL 2010-12-27 12:05:40 ----D---- C:\Program Files (x86)\Windows Mail 2010-12-27 12:03:58 ----D---- C:\ProgramData\Microsoft Help 2010-12-26 14:02:57 ----D---- C:\ProgramData\Norton 2010-12-26 14:02:16 ----D---- C:\ProgramData\NortonInstaller 2010-12-23 10:46:07 ----D---- C:\Program Files (x86)\Electronic Arts 2010-12-16 21:23:58 ----D---- C:\Program Files (x86)\DAEMON Tools Pro 2010-12-11 14:17:41 ----D---- C:\ProgramData\InstallShield 2010-12-10 22:12:47 ----D---- C:\Program Files (x86)\Mozilla Firefox 2010-12-08 16:29:36 ----D---- C:\Users\Bartek\AppData\Roaming\Octoshape 2010-11-29 14:38:29 ----A---- C:\Windows\SysWOW64\PnkBstrA.exe 2010-11-29 12:49:32 ----A---- C:\Windows\game.ini 2010-11-28 15:52:23 ----D---- C:\Users\Bartek\AppData\Roaming\Winamp 2010-11-14 18:36:38 ----D---- C:\Users\Bartek\AppData\Roaming\GHISLER 2010-11-12 18:53:06 ----A---- C:\Windows\SysWOW64\deployJava1.dll ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 DefragFS;DefragFS; C:\Windows\SysWOW64\drivers\DefragFS.sys [] R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [] R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\N360x64\0403000.005\SYMDS64.SYS [] R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\N360x64\0403000.005\SYMEFA64.SYS [] R1 anodlwf;ANOD Network Security Filter driver; C:\Windows\system32\DRIVERS\anodlwfx.sys [] R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20110114.001\BHDrvx64.sys [2010-11-23 953904] R1 ccHP;Symantec Hash Provider; C:\Windows\system32\drivers\N360x64\0403000.005\ccHPx64.sys [] R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2010-12-26 475696] R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20110208.003\IDSvia64.sys [2010-12-01 476792] R1 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\N360x64\0403000.005\SRTSP64.SYS [] R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\N360x64\0403000.005\SRTSPX64.SYS [] R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\N360x64\0403000.005\Ironx64.SYS [] R1 SYMTDIv;Symantec Vista Network Dispatch Driver; C:\Windows\System32\Drivers\N360x64\0403000.005\SYMTDIV.SYS [] R3 CT20XUT.SYS;CT20XUT.SYS; C:\Windows\System32\drivers\CT20XUT.SYS [] R3 ctac32k;Creative AC3 Software Decoder; C:\Windows\system32\drivers\ctac32k.sys [] R3 ctaud2k;Creative Audio Driver (WDM); C:\Windows\system32\drivers\ctaud2k.sys [] R3 CTEXFIFX.SYS;CTEXFIFX.SYS; C:\Windows\System32\drivers\CTEXFIFX.SYS [] R3 CTHWIUT.SYS;CTHWIUT.SYS; C:\Windows\System32\drivers\CTHWIUT.SYS [] R3 ctprxy2k;Creative Proxy Driver; C:\Windows\system32\drivers\ctprxy2k.sys [] R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\Windows\system32\drivers\ctsfm2k.sys [] R3 emupia;E-mu Plug-in Architecture Driver; C:\Windows\system32\drivers\emupia2k.sys [] R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2010-05-27 132656] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys [] R3 ha20x2k;Creative 20X HAL Driver; C:\Windows\system32\drivers\ha20x2k.sys [] R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [] R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [] R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [] R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20110209.002\ENG64.SYS [2010-12-26 117880] R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20110209.002\EX64.SYS [2010-12-26 1791096] R3 netr28ux;D-Link dnetr28u USB Extensible Wireless LAN Card Driver; C:\Windows\system32\DRIVERS\Dnetr28ux.sys [] R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [] R3 ossrv;Creative OS Services Driver; C:\Windows\system32\drivers\ctoss2k.sys [] R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [] S2 windrvNT;windrvNT; \??\C:\Windows\system32\windrvNT.sys [2010-07-10 35363] S3 a6qxfidk;a6qxfidk; C:\Windows\SysWOW64\drivers\a6qxfidk.sys [] S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [] S3 CT20XUT;CT20XUT; C:\Windows\system32\drivers\CT20XUT.SYS [] S3 CTEXFIFX;CTEXFIFX; C:\Windows\system32\drivers\CTEXFIFX.SYS [] S3 CTHWIUT;CTHWIUT; C:\Windows\system32\drivers\CTHWIUT.SYS [] S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [] S3 ESLvnic1;ESLvnic Virtual Network 64 Bit; C:\Windows\system32\DRIVERS\ESLvnic.sys [] S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2010-07-20 22336] S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena\safedrv.sys [] S3 HdAudAddService;Sterownik funkcji Microsoft 1.1 UAA dla usługi standardu High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [] S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [] S3 L6GX;Service - Line 6 GX; C:\Windows\System32\Drivers\L6GX64.sys [] S3 L8042Kbd;SetPoint Keyboard Driver; C:\Windows\system32\DRIVERS\L8042Kbd.sys [] S3 L8042mou;SetPoint PS/2 Mouse Filter Driver; C:\Windows\system32\DRIVERS\L8042mou.Sys [] S3 LMouKE;SetPoint Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouKE.Sys [] S3 MSKSSRV;Serwer proxy usługi Microsoft Streaming; C:\Windows\system32\drivers\MSKSSRV.sys [] S3 MSPCLOCK;Serwer proxy zegara Microsoft Streaming; C:\Windows\system32\drivers\MSPCLOCK.sys [] S3 MSPQM;Serwer proxy menedżera jakości Microsoft Streaming; C:\Windows\system32\drivers\MSPQM.sys [] S3 MSTEE;Konwerter strumieni Tee/Sink-to-Sink Microsoft Streaming; C:\Windows\system32\drivers\MSTEE.sys [] S3 RTL8169;Sterownik kart Realtek 8169 dla systemu NT; C:\Windows\system32\DRIVERS\Rtlh64.sys [] S3 SYMFW;Symantec Network Filter Driver; C:\Windows\System32\Drivers\N360x64\0308000.029\SYMFW.SYS [] S3 SYMNDISV;Symantec Network Filter Driver; C:\Windows\System32\Drivers\N360x64\0308000.029\SYMNDISV.SYS [] S3 usbscan;Sterownik skanera USB; C:\Windows\system32\DRIVERS\usbscan.sys [] S3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\Windows\system32\DRIVERS\vcsvad.sys [] S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [] S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [] S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [] S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [] S4 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\Windows\System32\drivers\sfdrv01.sys [] S4 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\Windows\System32\drivers\sfhlp02.sys [] S4 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\Windows\System32\drivers\sfvfs02.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Akamai;Akamai NetSession Interface; C:\Windows\System32\svchost.exe [2008-01-21 21504] R2 ANIWConnService;ANIWConn Service; C:\Windows\system32\ANIWConnService.exe [2009-07-07 151552] R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2010-12-06 2101640] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2008-01-24 73728] R2 N360;Norton 360; C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe [2010-02-26 126392] R2 PDAgent;PDAgent; C:\Program Files (x86)\Raxco\PerfectDisk\PDAgent.exe [2006-12-06 407056] R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-11-29 66872] R2 StarWindServiceAE;StarWind AE Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688] R3 PDEngine;PDEngine; C:\Program Files (x86)\Raxco\PerfectDisk\PDEngine.exe [2006-12-06 734736] R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2011-01-11 407336] S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2011-01-02 79360] S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2011-01-03 79360] S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-09-17 800040] S3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848] S3 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-21 19968] S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] -----------------EOF----------------- [/log]
Tomek01 komentarz 9 lutego 2011 komentarz 9 lutego 2011 Wklej do okna w OTL: [code]:Files C:\Users\Bartek\AppData\Local\Temp*.html :Commands [emptytemp][/code] Wciskasz RunFix, po restarcie pokaże się log, który wrzuć na forum. Znasz te aplikacje ? [code]O4 - HKLM\..\Run: [ANIWZCS2Service] "C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe" O4 - HKLM\..\Run: [D-Link D-Link Wireless G DWL-G122_DWA-110] "C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\AirGCFG.exe" O4 - HKLM\..\Run: [WZCSLDR2] C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\WZCSLDR2.exe [/code]
fatal smile komentarz 22 lutego 2011 Autor komentarz 22 lutego 2011 (edytowane) [log]All processes killed ========== FILES ========== C:\Users\Bartek\AppData\Local\Tempaa2508.html moved successfully. C:\Users\Bartek\AppData\Local\TempaE2424.html moved successfully. C:\Users\Bartek\AppData\Local\Tempae3576.html moved successfully. C:\Users\Bartek\AppData\Local\TempAE4004.html moved successfully. C:\Users\Bartek\AppData\Local\TempAg4812.html moved successfully. C:\Users\Bartek\AppData\Local\TempAI4552.html moved successfully. C:\Users\Bartek\AppData\Local\Tempai5076.html moved successfully. C:\Users\Bartek\AppData\Local\TempAK4732.html moved successfully. C:\Users\Bartek\AppData\Local\Tempakv304.html moved successfully. C:\Users\Bartek\AppData\Local\TempAL2872.html moved successfully. C:\Users\Bartek\AppData\Local\TempaL4384.html moved successfully. C:\Users\Bartek\AppData\Local\TempaL4876.html moved successfully. C:\Users\Bartek\AppData\Local\TempAQ4072.html moved successfully. C:\Users\Bartek\AppData\Local\TempaQC512.html moved successfully. C:\Users\Bartek\AppData\Local\TempAs5048.html moved successfully. C:\Users\Bartek\AppData\Local\TempAu4876.html moved successfully. C:\Users\Bartek\AppData\Local\TempAW3308.html moved successfully. C:\Users\Bartek\AppData\Local\TempAx4852.html moved successfully. C:\Users\Bartek\AppData\Local\TempaY2644.html moved successfully. C:\Users\Bartek\AppData\Local\TempAy4796.html moved successfully. C:\Users\Bartek\AppData\Local\TempaYZ200.html moved successfully. C:\Users\Bartek\AppData\Local\TempBB4760.html moved successfully. C:\Users\Bartek\AppData\Local\TempBb4844.html moved successfully. C:\Users\Bartek\AppData\Local\TempbB4988.html moved successfully. C:\Users\Bartek\AppData\Local\TempBc3328.html moved successfully. C:\Users\Bartek\AppData\Local\TempBd3520.html moved successfully. C:\Users\Bartek\AppData\Local\TempBFF788.html moved successfully. C:\Users\Bartek\AppData\Local\TempBi4080.html moved successfully. C:\Users\Bartek\AppData\Local\Tempbj4316.html moved successfully. C:\Users\Bartek\AppData\Local\TempBK3140.html moved successfully. C:\Users\Bartek\AppData\Local\TempBKi764.html moved successfully. C:\Users\Bartek\AppData\Local\TempbN5024.html moved successfully. C:\Users\Bartek\AppData\Local\Tempbr1948.html moved successfully. C:\Users\Bartek\AppData\Local\TempbT4812.html moved successfully. C:\Users\Bartek\AppData\Local\Tempbu1084.html moved successfully. C:\Users\Bartek\AppData\Local\TempbU5024.html moved successfully. C:\Users\Bartek\AppData\Local\TempBV4392.html moved successfully. C:\Users\Bartek\AppData\Local\TempcH2460.html moved successfully. C:\Users\Bartek\AppData\Local\TempCI1032.html moved successfully. C:\Users\Bartek\AppData\Local\TempcI4476.html moved successfully. C:\Users\Bartek\AppData\Local\TempCj4068.html moved successfully. C:\Users\Bartek\AppData\Local\TempcJ4260.html moved successfully. C:\Users\Bartek\AppData\Local\Tempcj4688.html moved successfully. C:\Users\Bartek\AppData\Local\TempcJ4768.html moved successfully. C:\Users\Bartek\AppData\Local\TempCk2952.html moved successfully. C:\Users\Bartek\AppData\Local\TempCK3620.html moved successfully. C:\Users\Bartek\AppData\Local\TempcK3896.html moved successfully. C:\Users\Bartek\AppData\Local\TempCm2964.html moved successfully. C:\Users\Bartek\AppData\Local\TempcN2908.html moved successfully. C:\Users\Bartek\AppData\Local\TempCO3372.html moved successfully. C:\Users\Bartek\AppData\Local\TempCR3516.html moved successfully. C:\Users\Bartek\AppData\Local\Tempcu2364.html moved successfully. C:\Users\Bartek\AppData\Local\TempCW2508.html moved successfully. C:\Users\Bartek\AppData\Local\TempCWe684.html moved successfully. C:\Users\Bartek\AppData\Local\TempCx4856.html moved successfully. C:\Users\Bartek\AppData\Local\TempdC3168.html moved successfully. C:\Users\Bartek\AppData\Local\Tempdd4668.html moved successfully. C:\Users\Bartek\AppData\Local\TempDe4356.html moved successfully. C:\Users\Bartek\AppData\Local\TempDE4536.html moved successfully. C:\Users\Bartek\AppData\Local\TempDfl768.html moved successfully. C:\Users\Bartek\AppData\Local\TempdI1032.html moved successfully. C:\Users\Bartek\AppData\Local\TempDM2908.html moved successfully. C:\Users\Bartek\AppData\Local\Tempdm4012.html moved successfully. C:\Users\Bartek\AppData\Local\TempdN1824.html moved successfully. C:\Users\Bartek\AppData\Local\TempdN2364.html moved successfully. C:\Users\Bartek\AppData\Local\TempDO4864.html moved successfully. C:\Users\Bartek\AppData\Local\Tempdq3352.html moved successfully. C:\Users\Bartek\AppData\Local\TempDV2008.html moved successfully. C:\Users\Bartek\AppData\Local\TempDW4856.html moved successfully. C:\Users\Bartek\AppData\Local\TempdZ3612.html moved successfully. C:\Users\Bartek\AppData\Local\Tempea4440.html moved successfully. C:\Users\Bartek\AppData\Local\Tempec4444.html moved successfully. C:\Users\Bartek\AppData\Local\TempEe1596.html moved successfully. C:\Users\Bartek\AppData\Local\TempeF4328.html moved successfully. C:\Users\Bartek\AppData\Local\TempEF4496.html moved successfully. C:\Users\Bartek\AppData\Local\TempEg3656.html moved successfully. C:\Users\Bartek\AppData\Local\TempeGw472.html moved successfully. C:\Users\Bartek\AppData\Local\TempeH2528.html moved successfully. C:\Users\Bartek\AppData\Local\TempEI3024.html moved successfully. C:\Users\Bartek\AppData\Local\Tempei3040.html moved successfully. C:\Users\Bartek\AppData\Local\Tempei3468.html moved successfully. C:\Users\Bartek\AppData\Local\TempEk2924.html moved successfully. C:\Users\Bartek\AppData\Local\TempEL1504.html moved successfully. C:\Users\Bartek\AppData\Local\TempEL4476.html moved successfully. C:\Users\Bartek\AppData\Local\TempeO4956.html moved successfully. C:\Users\Bartek\AppData\Local\TempeQ4412.html moved successfully. C:\Users\Bartek\AppData\Local\TempEU4152.html moved successfully. C:\Users\Bartek\AppData\Local\TempEvd480.html moved successfully. C:\Users\Bartek\AppData\Local\TempEvX232.html moved successfully. C:\Users\Bartek\AppData\Local\TempeY2704.html moved successfully. C:\Users\Bartek\AppData\Local\Tempeyg568.html moved successfully. C:\Users\Bartek\AppData\Local\TempfB4224.html moved successfully. C:\Users\Bartek\AppData\Local\Tempfc5108.html moved successfully. C:\Users\Bartek\AppData\Local\Tempfd3600.html moved successfully. C:\Users\Bartek\AppData\Local\Tempfdd512.html moved successfully. C:\Users\Bartek\AppData\Local\TempfG3692.html moved successfully. C:\Users\Bartek\AppData\Local\TempFG4160.html moved successfully. C:\Users\Bartek\AppData\Local\TempFH2268.html moved successfully. C:\Users\Bartek\AppData\Local\TempFH4264.html moved successfully. C:\Users\Bartek\AppData\Local\TempfI4920.html moved successfully. C:\Users\Bartek\AppData\Local\TempfJ3472.html moved successfully. C:\Users\Bartek\AppData\Local\Tempfk3132.html moved successfully. C:\Users\Bartek\AppData\Local\TempfkX972.html moved successfully. C:\Users\Bartek\AppData\Local\TempFL3976.html moved successfully. C:\Users\Bartek\AppData\Local\TempFL4540.html moved successfully. C:\Users\Bartek\AppData\Local\TempfM4552.html moved successfully. C:\Users\Bartek\AppData\Local\TempFn2120.html moved successfully. C:\Users\Bartek\AppData\Local\TempFn4384.html moved successfully. C:\Users\Bartek\AppData\Local\TempFo3920.html moved successfully. C:\Users\Bartek\AppData\Local\TempFSc608.html moved successfully. C:\Users\Bartek\AppData\Local\TempFt4836.html moved successfully. C:\Users\Bartek\AppData\Local\Tempfv3416.html moved successfully. C:\Users\Bartek\AppData\Local\TempfW2848.html moved successfully. C:\Users\Bartek\AppData\Local\TempFW3604.html moved successfully. C:\Users\Bartek\AppData\Local\TempgA2668.html moved successfully. C:\Users\Bartek\AppData\Local\TempGb1376.html moved successfully. C:\Users\Bartek\AppData\Local\TempGc4604.html moved successfully. C:\Users\Bartek\AppData\Local\Tempgk4796.html moved successfully. C:\Users\Bartek\AppData\Local\TempGkB748.html moved successfully. C:\Users\Bartek\AppData\Local\TempGl3372.html moved successfully. C:\Users\Bartek\AppData\Local\TempGl3880.html moved successfully. C:\Users\Bartek\AppData\Local\TempGL4616.html moved successfully. C:\Users\Bartek\AppData\Local\TempGm3012.html moved successfully. C:\Users\Bartek\AppData\Local\TempGN4688.html moved successfully. C:\Users\Bartek\AppData\Local\Tempgo3416.html moved successfully. C:\Users\Bartek\AppData\Local\TempGo3592.html moved successfully. C:\Users\Bartek\AppData\Local\Tempgp4036.html moved successfully. C:\Users\Bartek\AppData\Local\TempGq4440.html moved successfully. C:\Users\Bartek\AppData\Local\TempGqn496.html moved successfully. C:\Users\Bartek\AppData\Local\TempGTr768.html moved successfully. C:\Users\Bartek\AppData\Local\TempGU4344.html moved successfully. C:\Users\Bartek\AppData\Local\Tempgv2856.html moved successfully. C:\Users\Bartek\AppData\Local\Tempgv4036.html moved successfully. C:\Users\Bartek\AppData\Local\TempgVR480.html moved successfully. C:\Users\Bartek\AppData\Local\TempgX1108.html moved successfully. C:\Users\Bartek\AppData\Local\TempgX1388.html moved successfully. C:\Users\Bartek\AppData\Local\TempGx4120.html moved successfully. C:\Users\Bartek\AppData\Local\Temphe4188.html moved successfully. C:\Users\Bartek\AppData\Local\TemphG4832.html moved successfully. C:\Users\Bartek\AppData\Local\TempHH2944.html moved successfully. C:\Users\Bartek\AppData\Local\TempHi5024.html moved successfully. C:\Users\Bartek\AppData\Local\Temphj3996.html moved successfully. C:\Users\Bartek\AppData\Local\Temphk1108.html moved successfully. C:\Users\Bartek\AppData\Local\TempHk3396.html moved successfully. C:\Users\Bartek\AppData\Local\TempHL2092.html moved successfully. C:\Users\Bartek\AppData\Local\Temphm3840.html moved successfully. C:\Users\Bartek\AppData\Local\Temphq4708.html moved successfully. C:\Users\Bartek\AppData\Local\Tempht2404.html moved successfully. C:\Users\Bartek\AppData\Local\Tempht3168.html moved successfully. C:\Users\Bartek\AppData\Local\TempHv4300.html moved successfully. C:\Users\Bartek\AppData\Local\TempHV4368.html moved successfully. C:\Users\Bartek\AppData\Local\Temphw2024.html moved successfully. C:\Users\Bartek\AppData\Local\TemphX4520.html moved successfully. C:\Users\Bartek\AppData\Local\Temphy4352.html moved successfully. C:\Users\Bartek\AppData\Local\TemphY4716.html moved successfully. C:\Users\Bartek\AppData\Local\TempHZ2412.html moved successfully. C:\Users\Bartek\AppData\Local\TempHZ3380.html moved successfully. C:\Users\Bartek\AppData\Local\TempIG5096.html moved successfully. C:\Users\Bartek\AppData\Local\Tempii2904.html moved successfully. C:\Users\Bartek\AppData\Local\TempIj3636.html moved successfully. C:\Users\Bartek\AppData\Local\TempiK2344.html moved successfully. C:\Users\Bartek\AppData\Local\TempIL3880.html moved successfully. C:\Users\Bartek\AppData\Local\TempiM3416.html moved successfully. C:\Users\Bartek\AppData\Local\TempiMz856.html moved successfully. C:\Users\Bartek\AppData\Local\TempIN4056.html moved successfully. C:\Users\Bartek\AppData\Local\TempIr2920.html moved successfully. C:\Users\Bartek\AppData\Local\TempIx2008.html moved successfully. C:\Users\Bartek\AppData\Local\TempIy3892.html moved successfully. C:\Users\Bartek\AppData\Local\TempJa3500.html moved successfully. C:\Users\Bartek\AppData\Local\TempjB4224.html moved successfully. C:\Users\Bartek\AppData\Local\TempjE5072.html moved successfully. C:\Users\Bartek\AppData\Local\TempjJ2912.html moved successfully. C:\Users\Bartek\AppData\Local\Tempjl3880.html moved successfully. C:\Users\Bartek\AppData\Local\TempJS3468.html moved successfully. C:\Users\Bartek\AppData\Local\TempjW2964.html moved successfully. C:\Users\Bartek\AppData\Local\TempjW4940.html moved successfully. C:\Users\Bartek\AppData\Local\Tempka4692.html moved successfully. C:\Users\Bartek\AppData\Local\TempKD3984.html moved successfully. C:\Users\Bartek\AppData\Local\TempkE4260.html moved successfully. C:\Users\Bartek\AppData\Local\TempKe4392.html moved successfully. C:\Users\Bartek\AppData\Local\TempKF4176.html moved successfully. C:\Users\Bartek\AppData\Local\TempKFO760.html moved successfully. C:\Users\Bartek\AppData\Local\TempKI4132.html moved successfully. C:\Users\Bartek\AppData\Local\TempKJ3028.html moved successfully. C:\Users\Bartek\AppData\Local\Tempkl4220.html moved successfully. C:\Users\Bartek\AppData\Local\Tempkl4832.html moved successfully. C:\Users\Bartek\AppData\Local\TempkM3500.html moved successfully. C:\Users\Bartek\AppData\Local\TempKo4768.html moved successfully. C:\Users\Bartek\AppData\Local\TempkP1168.html moved successfully. C:\Users\Bartek\AppData\Local\TempkP4160.html moved successfully. C:\Users\Bartek\AppData\Local\TempKQ2876.html moved successfully. C:\Users\Bartek\AppData\Local\TempkS4796.html moved successfully. C:\Users\Bartek\AppData\Local\Tempku3304.html moved successfully. C:\Users\Bartek\AppData\Local\TempKU4552.html moved successfully. C:\Users\Bartek\AppData\Local\TempkU4616.html moved successfully. C:\Users\Bartek\AppData\Local\Tempkw2668.html moved successfully. C:\Users\Bartek\AppData\Local\TempKw4048.html moved successfully. C:\Users\Bartek\AppData\Local\TempKx3612.html moved successfully. C:\Users\Bartek\AppData\Local\TempKx5028.html moved successfully. C:\Users\Bartek\AppData\Local\TempKZ3400.html moved successfully. C:\Users\Bartek\AppData\Local\Tempkz3608.html moved successfully. C:\Users\Bartek\AppData\Local\TempKz4584.html moved successfully. C:\Users\Bartek\AppData\Local\TempLB4648.html moved successfully. C:\Users\Bartek\AppData\Local\Templc2872.html moved successfully. C:\Users\Bartek\AppData\Local\TempLcn716.html moved successfully. C:\Users\Bartek\AppData\Local\TemplH1644.html moved successfully. C:\Users\Bartek\AppData\Local\TempLh4344.html moved successfully. C:\Users\Bartek\AppData\Local\TempLi4040.html moved successfully. C:\Users\Bartek\AppData\Local\Templn3428.html moved successfully. C:\Users\Bartek\AppData\Local\TempLn4588.html moved successfully. C:\Users\Bartek\AppData\Local\TempLn4592.html moved successfully. C:\Users\Bartek\AppData\Local\TemplN4604.html moved successfully. C:\Users\Bartek\AppData\Local\Templna820.html moved successfully. C:\Users\Bartek\AppData\Local\TemplO4756.html moved successfully. C:\Users\Bartek\AppData\Local\TemplQ4708.html moved successfully. C:\Users\Bartek\AppData\Local\Templs1636.html moved successfully. C:\Users\Bartek\AppData\Local\TemplS2528.html moved successfully. C:\Users\Bartek\AppData\Local\TempLT1704.html moved successfully. C:\Users\Bartek\AppData\Local\TemplU4448.html moved successfully. C:\Users\Bartek\AppData\Local\TempLv2376.html moved successfully. C:\Users\Bartek\AppData\Local\TempLvR444.html moved successfully. C:\Users\Bartek\AppData\Local\Templx2104.html moved successfully. C:\Users\Bartek\AppData\Local\Temply4036.html moved successfully. C:\Users\Bartek\AppData\Local\Tempma4528.html moved successfully. C:\Users\Bartek\AppData\Local\Tempmb4604.html moved successfully. C:\Users\Bartek\AppData\Local\TempMD4500.html moved successfully. C:\Users\Bartek\AppData\Local\Tempmf4148.html moved successfully. C:\Users\Bartek\AppData\Local\Tempmf4828.html moved successfully. C:\Users\Bartek\AppData\Local\TempMG3832.html moved successfully. C:\Users\Bartek\AppData\Local\Tempmg3912.html moved successfully. C:\Users\Bartek\AppData\Local\TempMI3604.html moved successfully. C:\Users\Bartek\AppData\Local\Tempmj4376.html moved successfully. C:\Users\Bartek\AppData\Local\TempmK1520.html moved successfully. C:\Users\Bartek\AppData\Local\TempMK3268.html moved successfully. C:\Users\Bartek\AppData\Local\TempMLM748.html moved successfully. C:\Users\Bartek\AppData\Local\TempMo2608.html moved successfully. C:\Users\Bartek\AppData\Local\Tempmo4388.html moved successfully. C:\Users\Bartek\AppData\Local\Tempmo4552.html moved successfully. C:\Users\Bartek\AppData\Local\TempMO5036.html moved successfully. C:\Users\Bartek\AppData\Local\Tempmp2932.html moved successfully. C:\Users\Bartek\AppData\Local\TempMrC456.html moved successfully. C:\Users\Bartek\AppData\Local\TempMs4376.html moved successfully. C:\Users\Bartek\AppData\Local\TempmT4112.html moved successfully. C:\Users\Bartek\AppData\Local\TempMt4288.html moved successfully. C:\Users\Bartek\AppData\Local\Tempmu3764.html moved successfully. C:\Users\Bartek\AppData\Local\TempMV3892.html moved successfully. C:\Users\Bartek\AppData\Local\TempmX4632.html moved successfully. C:\Users\Bartek\AppData\Local\TempnA4332.html moved successfully. C:\Users\Bartek\AppData\Local\TempNe4056.html moved successfully. C:\Users\Bartek\AppData\Local\TempnE4200.html moved successfully. C:\Users\Bartek\AppData\Local\Tempnf3352.html moved successfully. C:\Users\Bartek\AppData\Local\Tempnf4300.html moved successfully. C:\Users\Bartek\AppData\Local\TempnG1644.html moved successfully. C:\Users\Bartek\AppData\Local\Tempnh3420.html moved successfully. C:\Users\Bartek\AppData\Local\TempnI1976.html moved successfully. C:\Users\Bartek\AppData\Local\TempnI4712.html moved successfully. C:\Users\Bartek\AppData\Local\TempNJ3988.html moved successfully. C:\Users\Bartek\AppData\Local\TempNL3044.html moved successfully. C:\Users\Bartek\AppData\Local\TempnN3160.html moved successfully. C:\Users\Bartek\AppData\Local\TempNPo764.html moved successfully. C:\Users\Bartek\AppData\Local\Tempnq2876.html moved successfully. C:\Users\Bartek\AppData\Local\TempnQ4428.html moved successfully. C:\Users\Bartek\AppData\Local\Tempnu1976.html moved successfully. C:\Users\Bartek\AppData\Local\TempNuM856.html moved successfully. C:\Users\Bartek\AppData\Local\TempnV4604.html moved successfully. C:\Users\Bartek\AppData\Local\TempnX1908.html moved successfully. C:\Users\Bartek\AppData\Local\TempnZ1280.html moved successfully. C:\Users\Bartek\AppData\Local\TempOa1232.html moved successfully. C:\Users\Bartek\AppData\Local\TempoB2744.html moved successfully. C:\Users\Bartek\AppData\Local\TempOC2744.html moved successfully. C:\Users\Bartek\AppData\Local\TempoC3476.html moved successfully. C:\Users\Bartek\AppData\Local\TempOD2920.html moved successfully. C:\Users\Bartek\AppData\Local\TempOG3400.html moved successfully. C:\Users\Bartek\AppData\Local\TempOg4796.html moved successfully. C:\Users\Bartek\AppData\Local\TempOH4760.html moved successfully. C:\Users\Bartek\AppData\Local\TempOh5060.html moved successfully. C:\Users\Bartek\AppData\Local\TempoI1316.html moved successfully. C:\Users\Bartek\AppData\Local\Tempoj3308.html moved successfully. C:\Users\Bartek\AppData\Local\TempoK2376.html moved successfully. C:\Users\Bartek\AppData\Local\TempOK3716.html moved successfully. C:\Users\Bartek\AppData\Local\TempOm5064.html moved successfully. C:\Users\Bartek\AppData\Local\TempoR2460.html moved successfully. C:\Users\Bartek\AppData\Local\TempOR4704.html moved successfully. C:\Users\Bartek\AppData\Local\TempOs4452.html moved successfully. C:\Users\Bartek\AppData\Local\TempOS5004.html moved successfully. C:\Users\Bartek\AppData\Local\TempOS5092.html moved successfully. C:\Users\Bartek\AppData\Local\TempOu1172.html moved successfully. C:\Users\Bartek\AppData\Local\TempOU4176.html moved successfully. C:\Users\Bartek\AppData\Local\Tempov3488.html moved successfully. C:\Users\Bartek\AppData\Local\TempOV5060.html moved successfully. C:\Users\Bartek\AppData\Local\TempoW3000.html moved successfully. C:\Users\Bartek\AppData\Local\TempOX4468.html moved successfully. C:\Users\Bartek\AppData\Local\TempoY4040.html moved successfully. C:\Users\Bartek\AppData\Local\Temppa2224.html moved successfully. C:\Users\Bartek\AppData\Local\Temppa2628.html moved successfully. C:\Users\Bartek\AppData\Local\TempPA3056.html moved successfully. C:\Users\Bartek\AppData\Local\TemppC4028.html moved successfully. C:\Users\Bartek\AppData\Local\TemppF3320.html moved successfully. C:\Users\Bartek\AppData\Local\Temppi3836.html moved successfully. C:\Users\Bartek\AppData\Local\TemppIp976.html moved successfully. C:\Users\Bartek\AppData\Local\Temppp4352.html moved successfully. C:\Users\Bartek\AppData\Local\TempPQ4204.html moved successfully. C:\Users\Bartek\AppData\Local\Temppq4592.html moved successfully. C:\Users\Bartek\AppData\Local\TemppQ5024.html moved successfully. C:\Users\Bartek\AppData\Local\TempPr2044.html moved successfully. C:\Users\Bartek\AppData\Local\TemppR4180.html moved successfully. C:\Users\Bartek\AppData\Local\TemppTI772.html moved successfully. C:\Users\Bartek\AppData\Local\Temppu3984.html moved successfully. C:\Users\Bartek\AppData\Local\Temppw2904.html moved successfully. C:\Users\Bartek\AppData\Local\TemppX2968.html moved successfully. C:\Users\Bartek\AppData\Local\TemppyA684.html moved successfully. C:\Users\Bartek\AppData\Local\TempQB4580.html moved successfully. C:\Users\Bartek\AppData\Local\Tempqbm920.html moved successfully. C:\Users\Bartek\AppData\Local\TempQC4800.html moved successfully. C:\Users\Bartek\AppData\Local\TempQd3860.html moved successfully. C:\Users\Bartek\AppData\Local\TempQE3140.html moved successfully. C:\Users\Bartek\AppData\Local\TempQf3304.html moved successfully. C:\Users\Bartek\AppData\Local\TempqF4920.html moved successfully. C:\Users\Bartek\AppData\Local\TempQh1036.html moved successfully. C:\Users\Bartek\AppData\Local\Tempqi4260.html moved successfully. C:\Users\Bartek\AppData\Local\TempqK1704.html moved successfully. C:\Users\Bartek\AppData\Local\Tempqk4036.html moved successfully. C:\Users\Bartek\AppData\Local\Tempqk4168.html moved successfully. C:\Users\Bartek\AppData\Local\TempQl4804.html moved successfully. C:\Users\Bartek\AppData\Local\TempQL4892.html moved successfully. C:\Users\Bartek\AppData\Local\TempQM3564.html moved successfully. C:\Users\Bartek\AppData\Local\TempQn3396.html moved successfully. C:\Users\Bartek\AppData\Local\TempQP2092.html moved successfully. C:\Users\Bartek\AppData\Local\TempQP5032.html moved successfully. C:\Users\Bartek\AppData\Local\Tempqq3052.html moved successfully. C:\Users\Bartek\AppData\Local\TempQq3068.html moved successfully. C:\Users\Bartek\AppData\Local\TempQU4812.html moved successfully. C:\Users\Bartek\AppData\Local\TempQw2828.html moved successfully. C:\Users\Bartek\AppData\Local\TempQX4500.html moved successfully. C:\Users\Bartek\AppData\Local\Tempqy4004.html moved successfully. C:\Users\Bartek\AppData\Local\TempRa3276.html moved successfully. C:\Users\Bartek\AppData\Local\TempRd4540.html moved successfully. C:\Users\Bartek\AppData\Local\TemprE4816.html moved successfully. C:\Users\Bartek\AppData\Local\Temprg4272.html moved successfully. C:\Users\Bartek\AppData\Local\TemprgF456.html moved successfully. C:\Users\Bartek\AppData\Local\TempRi1424.html moved successfully. C:\Users\Bartek\AppData\Local\TempRI3148.html moved successfully. C:\Users\Bartek\AppData\Local\TempRi4704.html moved successfully. C:\Users\Bartek\AppData\Local\TempRj1564.html moved successfully. C:\Users\Bartek\AppData\Local\Temprj3816.html moved successfully. C:\Users\Bartek\AppData\Local\Temprm2848.html moved successfully. C:\Users\Bartek\AppData\Local\TempRm4260.html moved successfully. C:\Users\Bartek\AppData\Local\TempRr2944.html moved successfully. C:\Users\Bartek\AppData\Local\TempRr3376.html moved successfully. C:\Users\Bartek\AppData\Local\TempRTq856.html moved successfully. C:\Users\Bartek\AppData\Local\TemprV4476.html moved successfully. C:\Users\Bartek\AppData\Local\Temprx3476.html moved successfully. C:\Users\Bartek\AppData\Local\TempRZ3976.html moved successfully. C:\Users\Bartek\AppData\Local\TempSA4160.html moved successfully. C:\Users\Bartek\AppData\Local\TempSA4776.html moved successfully. C:\Users\Bartek\AppData\Local\TempsB5100.html moved successfully. C:\Users\Bartek\AppData\Local\TempScG568.html moved successfully. C:\Users\Bartek\AppData\Local\TempSdis12.html moved successfully. C:\Users\Bartek\AppData\Local\TempSdL372.html moved successfully. C:\Users\Bartek\AppData\Local\TempSdx496.html moved successfully. C:\Users\Bartek\AppData\Local\TempSF3756.html moved successfully. C:\Users\Bartek\AppData\Local\TempSj3604.html moved successfully. C:\Users\Bartek\AppData\Local\Tempsk4588.html moved successfully. C:\Users\Bartek\AppData\Local\TempSm4660.html moved successfully. C:\Users\Bartek\AppData\Local\TempsO3124.html moved successfully. C:\Users\Bartek\AppData\Local\TempSo3880.html moved successfully. C:\Users\Bartek\AppData\Local\TempSQ3248.html moved successfully. C:\Users\Bartek\AppData\Local\Tempsq3648.html moved successfully. C:\Users\Bartek\AppData\Local\TempsT3132.html moved successfully. C:\Users\Bartek\AppData\Local\TempST3628.html moved successfully. C:\Users\Bartek\AppData\Local\TempsT4808.html moved successfully. C:\Users\Bartek\AppData\Local\TempSt5028.html moved successfully. C:\Users\Bartek\AppData\Local\Tempsuv856.html moved successfully. C:\Users\Bartek\AppData\Local\TempsV3420.html moved successfully. C:\Users\Bartek\AppData\Local\TempsV4428.html moved successfully. C:\Users\Bartek\AppData\Local\Tempsw3364.html moved successfully. C:\Users\Bartek\AppData\Local\TempsW4072.html moved successfully. C:\Users\Bartek\AppData\Local\TempTE4916.html moved successfully. C:\Users\Bartek\AppData\Local\TempTF4980.html moved successfully. C:\Users\Bartek\AppData\Local\TempTj4640.html moved successfully. C:\Users\Bartek\AppData\Local\Temptk3576.html moved successfully. C:\Users\Bartek\AppData\Local\Temptk4748.html moved successfully. C:\Users\Bartek\AppData\Local\TempTm4068.html moved successfully. C:\Users\Bartek\AppData\Local\TempTn3520.html moved successfully. C:\Users\Bartek\AppData\Local\TempTq2412.html moved successfully. C:\Users\Bartek\AppData\Local\Temptq4152.html moved successfully. C:\Users\Bartek\AppData\Local\TemptT3612.html moved successfully. C:\Users\Bartek\AppData\Local\TemptU3880.html moved successfully. C:\Users\Bartek\AppData\Local\TemptU4160.html moved successfully. C:\Users\Bartek\AppData\Local\TempTV5072.html moved successfully. C:\Users\Bartek\AppData\Local\TemptW4416.html moved successfully. C:\Users\Bartek\AppData\Local\TemptW4620.html moved successfully. C:\Users\Bartek\AppData\Local\TempTX1140.html moved successfully. C:\Users\Bartek\AppData\Local\TempTy3104.html moved successfully. C:\Users\Bartek\AppData\Local\TempUA3620.html moved successfully. C:\Users\Bartek\AppData\Local\TempuA4312.html moved successfully. C:\Users\Bartek\AppData\Local\TempuC4040.html moved successfully. C:\Users\Bartek\AppData\Local\TempuD3896.html moved successfully. C:\Users\Bartek\AppData\Local\TempUE3372.html moved successfully. C:\Users\Bartek\AppData\Local\Tempuk2608.html moved successfully. C:\Users\Bartek\AppData\Local\TempUKx304.html moved successfully. C:\Users\Bartek\AppData\Local\TempuL1424.html moved successfully. C:\Users\Bartek\AppData\Local\TempUl2092.html moved successfully. C:\Users\Bartek\AppData\Local\Tempun2552.html moved successfully. C:\Users\Bartek\AppData\Local\Tempup2856.html moved successfully. C:\Users\Bartek\AppData\Local\Tempup4220.html moved successfully. C:\Users\Bartek\AppData\Local\TempUR2952.html moved successfully. C:\Users\Bartek\AppData\Local\Tempur3592.html moved successfully. C:\Users\Bartek\AppData\Local\TempuTU792.html moved successfully. C:\Users\Bartek\AppData\Local\TempUV4056.html moved successfully. C:\Users\Bartek\AppData\Local\TempUx2268.html moved successfully. C:\Users\Bartek\AppData\Local\TempUx4376.html moved successfully. C:\Users\Bartek\AppData\Local\TempuX4696.html moved successfully. C:\Users\Bartek\AppData\Local\TempvF3500.html moved successfully. C:\Users\Bartek\AppData\Local\TempVG3456.html moved successfully. C:\Users\Bartek\AppData\Local\TempvG4376.html moved successfully. C:\Users\Bartek\AppData\Local\Tempvh3468.html moved successfully. C:\Users\Bartek\AppData\Local\TempvH4256.html moved successfully. C:\Users\Bartek\AppData\Local\Tempvi4636.html moved successfully. C:\Users\Bartek\AppData\Local\Tempvj4028.html moved successfully. C:\Users\Bartek\AppData\Local\TempvL1984.html moved successfully. C:\Users\Bartek\AppData\Local\Tempvl3008.html moved successfully. C:\Users\Bartek\AppData\Local\TempvL4040.html moved successfully. C:\Users\Bartek\AppData\Local\Tempvn2420.html moved successfully. C:\Users\Bartek\AppData\Local\TempvN3812.html moved successfully. C:\Users\Bartek\AppData\Local\Tempvn4376.html moved successfully. C:\Users\Bartek\AppData\Local\TempVO4204.html moved successfully. C:\Users\Bartek\AppData\Local\TempVO5056.html moved successfully. C:\Users\Bartek\AppData\Local\TempvT2760.html moved successfully. C:\Users\Bartek\AppData\Local\TempvT3832.html moved successfully. C:\Users\Bartek\AppData\Local\TempVT5096.html moved successfully. C:\Users\Bartek\AppData\Local\TempVV2992.html moved successfully. C:\Users\Bartek\AppData\Local\TempVx1004.html moved successfully. C:\Users\Bartek\AppData\Local\TempvY4260.html moved successfully. C:\Users\Bartek\AppData\Local\TempVy4448.html moved successfully. C:\Users\Bartek\AppData\Local\TempWd4748.html moved successfully. C:\Users\Bartek\AppData\Local\TempWf3976.html moved successfully. C:\Users\Bartek\AppData\Local\TempwG4564.html moved successfully. C:\Users\Bartek\AppData\Local\TempwI4168.html moved successfully. C:\Users\Bartek\AppData\Local\TempwO4372.html moved successfully. C:\Users\Bartek\AppData\Local\Tempwp4916.html moved successfully. C:\Users\Bartek\AppData\Local\TempwQ3776.html moved successfully. C:\Users\Bartek\AppData\Local\TempwS2344.html moved successfully. C:\Users\Bartek\AppData\Local\TempWti200.html moved successfully. C:\Users\Bartek\AppData\Local\TempWu1036.html moved successfully. C:\Users\Bartek\AppData\Local\TempwV2420.html moved successfully. C:\Users\Bartek\AppData\Local\Tempww2932.html moved successfully. C:\Users\Bartek\AppData\Local\Tempwwc828.html moved successfully. C:\Users\Bartek\AppData\Local\TempWy3748.html moved successfully. C:\Users\Bartek\AppData\Local\TempxA2180.html moved successfully. C:\Users\Bartek\AppData\Local\TempXc4844.html moved successfully. C:\Users\Bartek\AppData\Local\TempXe4208.html moved successfully. C:\Users\Bartek\AppData\Local\TempXf2080.html moved successfully. C:\Users\Bartek\AppData\Local\TempXF2364.html moved successfully. C:\Users\Bartek\AppData\Local\TempxJ2532.html moved successfully. C:\Users\Bartek\AppData\Local\TempXj3880.html moved successfully. C:\Users\Bartek\AppData\Local\TempXky504.html moved successfully. C:\Users\Bartek\AppData\Local\TempXMU496.html moved successfully. C:\Users\Bartek\AppData\Local\TempXN4540.html moved successfully. C:\Users\Bartek\AppData\Local\TempXn5036.html moved successfully. C:\Users\Bartek\AppData\Local\Tempxo3364.html moved successfully. C:\Users\Bartek\AppData\Local\Tempxo3376.html moved successfully. C:\Users\Bartek\AppData\Local\Tempxq4536.html moved successfully. C:\Users\Bartek\AppData\Local\Tempxs4176.html moved successfully. C:\Users\Bartek\AppData\Local\TempXx1172.html moved successfully. C:\Users\Bartek\AppData\Local\TempXx3508.html moved successfully. C:\Users\Bartek\AppData\Local\TempXY1852.html moved successfully. C:\Users\Bartek\AppData\Local\Tempxy3440.html moved successfully. C:\Users\Bartek\AppData\Local\TempyA1064.html moved successfully. C:\Users\Bartek\AppData\Local\TempYA4188.html moved successfully. C:\Users\Bartek\AppData\Local\TempYE2996.html moved successfully. C:\Users\Bartek\AppData\Local\TempYg4488.html moved successfully. C:\Users\Bartek\AppData\Local\Tempyh2872.html moved successfully. C:\Users\Bartek\AppData\Local\Tempyh3984.html moved successfully. C:\Users\Bartek\AppData\Local\TempyI4904.html moved successfully. C:\Users\Bartek\AppData\Local\TempYK4832.html moved successfully. C:\Users\Bartek\AppData\Local\TempYl3748.html moved successfully. C:\Users\Bartek\AppData\Local\TempYL4160.html moved successfully. C:\Users\Bartek\AppData\Local\Tempym4932.html moved successfully. C:\Users\Bartek\AppData\Local\TempYN4956.html moved successfully. C:\Users\Bartek\AppData\Local\TempYQ2356.html moved successfully. C:\Users\Bartek\AppData\Local\TempYu4796.html moved successfully. C:\Users\Bartek\AppData\Local\TempYV4804.html moved successfully. C:\Users\Bartek\AppData\Local\TempYW2224.html moved successfully. C:\Users\Bartek\AppData\Local\TempyZk976.html moved successfully. C:\Users\Bartek\AppData\Local\Tempzi1824.html moved successfully. C:\Users\Bartek\AppData\Local\TempzN4176.html moved successfully. C:\Users\Bartek\AppData\Local\Tempzo4712.html moved successfully. C:\Users\Bartek\AppData\Local\TempzQ2872.html moved successfully. C:\Users\Bartek\AppData\Local\TempZR3104.html moved successfully. C:\Users\Bartek\AppData\Local\TempZsi196.html moved successfully. C:\Users\Bartek\AppData\Local\TempzT3636.html moved successfully. C:\Users\Bartek\AppData\Local\TempZV1376.html moved successfully. C:\Users\Bartek\AppData\Local\TempZV3564.html moved successfully. C:\Users\Bartek\AppData\Local\Tempzv4204.html moved successfully. C:\Users\Bartek\AppData\Local\TempZW3416.html moved successfully. C:\Users\Bartek\AppData\Local\TempZWa276.html moved successfully. C:\Users\Bartek\AppData\Local\TempZY3032.html moved successfully. C:\Users\Bartek\AppData\Local\TempZyA716.html moved successfully. C:\Users\Bartek\AppData\Local\TempZz2104.html moved successfully. C:\Users\Bartek\AppData\Local\TempZZ4480.html moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Bartek ->Temp folder emptied: 125562261 bytes ->Temporary Internet Files folder emptied: 4691511 bytes ->Java cache emptied: 29511802 bytes ->FireFox cache emptied: 42799341 bytes ->Google Chrome cache emptied: 819568 bytes ->Flash cache emptied: 71484 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 41620 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 3197833 bytes %systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 45197 bytes %systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 753 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 197,00 mb OTL by OldTimer - Version 3.2.20.6 log created on 02102011_004519 Files\Folders moved on Reboot... Registry entries deleted on Reboot... [/log] Następne odpowiedzi sprawdzę dopiero za kilka dni, bo idę do szpitala, więc wtedy odpiszę na wszystko. [quote name='Tomek01' date='10 luty 2011 - 00:41' timestamp='1297295021' post='1195627'] Znasz te aplikacje ? O4 - HKLM\..\Run: [ANIWZCS2Service] "C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe" O4 - HKLM\..\Run: [D-Link D-Link Wireless G DWL-G122_DWA-110] "C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\AirGCFG.exe" O4 - HKLM\..\Run: [WZCSLDR2] C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\WZCSLDR2.exe [/quote] Tej pierwszej nie znam. Dwie pozostałe to od karty sieciowej USB. ANIWZCS2 - usunięte. Pomoże ktoś? Do wszystkich objawów doszły jeszcze dziwne zwiechy w Call Of Duty 4 MW. Po dłuższym czasie grania gra zwieszała się na 5-10 sek. Później wyskoczyły jakieś dziwne zygzaki na ekranie. Po zminimalizowaniu i zmaksymalizowaniu gry było przez chwile ok, a potem znowu to samo.
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.