x-kom hosting

problem z blokadą ukash

trophy250
utworzono
utworzono (edytowane)

Witam. ;) ale nie jest mi do śmiechu :/ chodzi mianowicie o to że chciałem zarejestrować program avast po przez znaleziony klucz licencji w sieci. i nagle wyskoczyła mi wiadomość żę jest blokada ukash i że trzeba płącić 500zł lub 200zł ;/ wszedłem więc w tryb awaryjny odinstalowałem avast-a i jak teraz uruchamiam komputer w trybie normalnym to nie wyskakuje mi blokada ;) ale się boję że jakieś pozostałości po tym mogą zostać w systemie. daje wam log z mojego komputera a wy jak możecie to sprawdźcie i podajcie mi dobry log który by to całkiem usunął oraz jak są inne problemy z systemem to też. Pozdrawiam i z góry dziękuję ;) [log]OTL logfile created on: 2012-07-24 19:01:54 - Run 1
OTL by OldTimer - Version 3.2.54.1 Folder = D:\
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16982)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,27 Gb Available Physical Memory | 63,69% Memory free
4,20 Gb Paging File | 3,49 Gb Available in Paging File | 83,11% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 91,45 Gb Total Space | 1,72 Gb Free Space | 1,89% Space Free | Partition Type: NTFS
Drive D: | 45,72 Gb Total Space | 8,29 Gb Free Space | 18,12% Space Free | Partition Type: NTFS
Drive F: | 11,67 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: USER-PC | User Name: user | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (All) ==========[/color]

PRC - [2012-07-24 18:59:51 | 000,596,480 | ---- | M] (OldTimer Tools) -- D:\OTL.exe
PRC - [2012-07-05 18:41:46 | 003,048,136 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2012-05-19 18:51:23 | 000,924,600 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012-05-19 18:51:15 | 000,016,824 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe
PRC - [2012-02-10 11:28:06 | 000,240,408 | ---- | M] (Microsoft Corporation.) -- C:\Program Files\Microsoft\BingBar\7.1.361.0\SeaPort.EXE
PRC - [2012-02-10 11:28:06 | 000,193,816 | ---- | M] (Microsoft Corporation.) -- C:\Program Files\Microsoft\BingBar\7.1.361.0\BBSvc.EXE
PRC - [2011-07-04 19:58:02 | 003,302,720 | ---- | M] () -- C:\Program Files\Plus Internet\Plus Internet.exe
PRC - [2010-07-10 20:43:33 | 001,535,176 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe
PRC - [2010-06-01 11:16:01 | 000,116,648 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\GoogleUpdate.exe
PRC - [2009-06-15 15:10:12 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsass.exe
PRC - [2008-10-29 08:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008-02-20 17:33:47 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\servicing\TrustedInstaller.exe
PRC - [2007-11-10 18:08:29 | 002,605,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SLsvc.exe
PRC - [2007-04-11 21:52:46 | 000,593,920 | ---- | M] (ATI Technologies Inc.) -- C:\Windows\System32\Ati2evxx.exe
PRC - [2006-12-08 19:52:04 | 000,204,800 | ---- | M] (Fujitsu Siemens Computers) -- C:\FirstSteps\OnlineDiagnostic\TestManager\TestHandler.exe
PRC - [2006-11-02 14:36:04 | 000,895,488 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnetwk.exe
PRC - [2006-11-02 14:36:04 | 000,201,728 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnscfg.exe
PRC - [2006-11-02 14:35:32 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehtray.exe
PRC - [2006-11-02 14:35:32 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehmsas.exe
PRC - [2006-11-02 11:45:57 | 000,308,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winlogon.exe
PRC - [2006-11-02 11:45:57 | 000,095,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininit.exe
PRC - [2006-11-02 11:45:48 | 000,166,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskeng.exe
PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2006-11-02 11:45:46 | 000,124,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spoolsv.exe
PRC - [2006-11-02 11:45:45 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\smss.exe
PRC - [2006-11-02 11:45:40 | 000,279,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\services.exe
PRC - [2006-11-02 11:45:21 | 000,210,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsm.exe
PRC - [2006-11-02 11:45:04 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe
PRC - [2006-11-02 11:45:00 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrss.exe
PRC - [2006-11-02 11:44:59 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe


[color=#E56717]========== Modules (All) ==========[/color]

MOD - [2012-07-24 18:59:51 | 000,596,480 | ---- | M] (OldTimer Tools) -- D:\OTL.exe
MOD - [2012-05-19 18:51:25 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browsercomps.dll
MOD - [2012-05-19 18:51:23 | 000,924,600 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
MOD - [2012-05-19 18:51:23 | 000,269,240 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\freebl3.dll
MOD - [2012-05-19 18:51:22 | 001,952,696 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2012-05-19 18:51:22 | 000,043,960 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\mozglue.dll
MOD - [2012-05-19 18:51:22 | 000,016,312 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\mozalloc.dll
MOD - [2012-05-19 18:51:21 | 000,838,584 | ---- | M] (sqlite.org) -- C:\Program Files\Mozilla Firefox\mozsqlite3.dll
MOD - [2012-05-19 18:51:20 | 000,187,320 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nspr4.dll
MOD - [2012-05-19 18:51:19 | 000,646,072 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nss3.dll
MOD - [2012-05-19 18:51:19 | 000,371,640 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nssckbi.dll
MOD - [2012-05-19 18:51:19 | 000,109,496 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nssdbm3.dll
MOD - [2012-05-19 18:51:19 | 000,105,400 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nssutil3.dll
MOD - [2012-05-19 18:51:15 | 000,170,936 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\softokn3.dll
MOD - [2012-05-19 18:51:15 | 000,158,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\ssl3.dll
MOD - [2012-05-19 18:51:15 | 000,105,400 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\smime3.dll
MOD - [2012-05-19 18:51:15 | 000,022,456 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\plc4.dll
MOD - [2012-05-19 18:51:15 | 000,020,920 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\plds4.dll
MOD - [2012-05-19 18:51:15 | 000,016,824 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe
MOD - [2012-05-19 18:51:14 | 015,743,928 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\xul.dll
MOD - [2012-05-19 18:51:14 | 000,019,896 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\xpcom.dll
MOD - [2012-01-26 11:45:01 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll
MOD - [2012-01-26 11:45:01 | 000,554,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcp80.dll
MOD - [2012-01-26 11:44:58 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421de\ATL80.dll
MOD - [2011-07-27 06:14:02 | 000,967,008 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveUtil.dll
MOD - [2011-07-04 19:58:02 | 003,302,720 | ---- | M] () -- C:\Program Files\Plus Internet\Plus Internet.exe
MOD - [2011-07-04 19:57:58 | 001,097,728 | ---- | M] () -- C:\Program Files\Plus Internet\NDISAPI.dll
MOD - [2010-07-10 20:43:33 | 001,535,176 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe
MOD - [2010-07-10 20:43:32 | 009,459,912 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_3_300_262.dll
MOD - [2009-12-23 14:45:43 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wintrust.dll
MOD - [2009-12-18 14:52:36 | 000,832,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininet.dll
MOD - [2009-12-18 14:52:27 | 001,168,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\urlmon.dll
MOD - [2009-12-18 14:48:23 | 000,268,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iertutil.dll
MOD - [2009-12-18 14:48:22 | 006,067,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieframe.dll
MOD - [2009-10-23 19:54:58 | 000,713,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
MOD - [2009-10-19 16:42:37 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
MOD - [2009-10-19 16:39:09 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpk.dll
MOD - [2009-09-10 19:38:29 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msv1_0.dll
MOD - [2009-09-04 14:38:11 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msasn1.dll
MOD - [2009-08-29 05:40:25 | 000,537,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\AppPatch\AcLayers.dll
MOD - [2009-08-24 14:47:07 | 000,378,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winhttp.dll
MOD - [2009-08-10 15:05:23 | 001,260,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml3.dll
MOD - [2009-07-17 16:52:41 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\atl.dll
MOD - [2009-07-11 21:32:57 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanapi.dll
MOD - [2009-06-15 17:28:58 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secur32.dll
MOD - [2009-06-15 17:28:56 | 000,272,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schannel.dll
MOD - [2009-04-23 15:01:43 | 000,788,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpcrt4.dll
MOD - [2009-02-27 15:48:36 | 001,008,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\1045\GrooveIntlResource.dll
MOD - [2009-02-26 19:37:02 | 000,178,040 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
MOD - [2009-02-26 19:36:54 | 002,217,832 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
MOD - [2009-02-26 19:36:48 | 000,021,856 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveNew.dll
MOD - [2009-02-26 19:36:46 | 001,560,912 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMisc.dll
MOD - [2009-02-13 09:26:37 | 000,875,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kernel32.dll
MOD - [2008-11-27 06:35:51 | 001,744,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6000.16782_none_9ea1072ec96e0be7\GdiPlus.dll
MOD - [2008-11-06 14:57:06 | 011,315,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shell32.dll
MOD - [2008-10-29 08:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
MOD - [2008-10-22 05:43:51 | 000,241,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
MOD - [2008-10-22 05:43:51 | 000,160,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceTypes.dll
MOD - [2008-10-21 07:16:20 | 000,297,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gdi32.dll
MOD - [2008-10-16 06:40:36 | 000,425,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netapi32.dll
MOD - [2008-08-28 05:24:51 | 000,712,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecs.dll
MOD - [2008-06-26 05:22:33 | 001,523,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0000.dll
MOD - [2008-06-26 05:22:33 | 000,797,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NaturalLanguage6.dll
MOD - [2008-04-19 10:13:07 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\es.dll
MOD - [2008-02-29 08:39:13 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srclient.dll
MOD - [2008-02-20 17:33:48 | 001,585,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupapi.dll
MOD - [2008-02-20 17:33:48 | 000,558,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleaut32.dll
MOD - [2007-12-16 13:42:18 | 000,162,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnsapi.dll
MOD - [2007-11-15 08:48:56 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wtsapi32.dll
MOD - [2007-11-10 18:11:32 | 000,392,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FirewallAPI.dll
MOD - [2007-11-10 18:08:31 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SLC.dll
MOD - [2007-11-10 18:07:30 | 001,984,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
MOD - [2007-11-10 18:07:30 | 000,204,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc.dll
MOD - [2007-11-10 18:07:30 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll
MOD - [2007-06-16 15:41:11 | 000,974,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\crypt32.dll
MOD - [2007-06-16 15:40:33 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imagehlp.dll
MOD - [2007-06-16 15:39:24 | 000,090,296 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MpOAV.dll
MOD - [2007-06-16 15:35:12 | 000,229,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msshsq.dll
MOD - [2007-06-16 15:31:15 | 000,633,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\user32.dll
MOD - [2007-04-11 21:54:20 | 000,159,744 | ---- | M] () -- C:\Windows\System32\atitmmxx.dll
MOD - [2007-04-11 21:54:10 | 000,253,952 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\System32\atipdlxx.dll
MOD - [2007-04-11 21:42:24 | 002,792,448 | ---- | M] (ATI Technologies Inc. ) -- C:\Windows\System32\atiumdag.dll
MOD - [2007-04-11 21:30:14 | 002,802,176 | ---- | M] (ATI Technologies Inc. ) -- C:\Windows\System32\atiumdva.dll
MOD - [2007-03-02 20:44:34 | 000,073,728 | ---- | M] () -- c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll
MOD - [2006-11-02 14:36:19 | 000,208,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uDWM.dll
MOD - [2006-11-02 14:36:16 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spp.dll
MOD - [2006-11-02 14:36:04 | 000,201,728 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnscfg.exe
MOD - [2006-11-02 14:36:04 | 000,194,560 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnssci.dll
MOD - [2006-11-02 14:36:03 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\HotStartUserAgent.dll
MOD - [2006-11-02 14:35:58 | 000,131,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WPDShServiceObj.dll
MOD - [2006-11-02 14:35:52 | 000,099,328 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpband.dll
MOD - [2006-11-02 14:35:38 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnrpnsp.dll
MOD - [2006-11-02 14:35:34 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wpc.dll
MOD - [2006-11-02 14:35:33 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehProxy.dll
MOD - [2006-11-02 14:35:32 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehtray.exe
MOD - [2006-11-02 14:35:32 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehmsas.exe
MOD - [2006-11-02 14:35:30 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehSSO.dll
MOD - [2006-11-02 14:35:09 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll
MOD - [2006-11-02 14:34:50 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AltTab.dll
MOD - [2006-11-02 14:34:48 | 002,205,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncCenter.dll
MOD - [2006-11-02 14:34:48 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\linkinfo.dll
MOD - [2006-11-02 14:34:47 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscntfy.dll
MOD - [2006-11-02 14:34:35 | 001,298,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TMM.dll
MOD - [2006-11-02 14:34:33 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IconCodecService.dll
MOD - [2006-11-02 14:34:32 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\davclnt.dll
MOD - [2006-11-02 11:47:26 | 001,162,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntdll.dll
MOD - [2006-11-02 11:47:18 | 000,228,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rsaenh.dll
MOD - [2006-11-02 11:46:16 | 000,126,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xmllite.dll
MOD - [2006-11-02 11:46:14 | 000,288,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wldap32.dll
MOD - [2006-11-02 11:46:14 | 000,193,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winmm.dll
MOD - [2006-11-02 11:46:14 | 000,178,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ws2_32.dll
MOD - [2006-11-02 11:46:14 | 000,134,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winsta.dll
MOD - [2006-11-02 11:46:14 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSCard.dll
MOD - [2006-11-02 11:46:14 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrnr.dll
MOD - [2006-11-02 11:46:14 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winnsi.dll
MOD - [2006-11-02 11:46:14 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsock32.dll
MOD - [2006-11-02 11:46:14 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSHTCPIP.DLL
MOD - [2006-11-02 11:46:14 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wship6.dll
MOD - [2006-11-02 11:46:14 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanutil.dll
MOD - [2006-11-02 11:46:13 | 001,064,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shdocvw.dll
MOD - [2006-11-02 11:46:13 | 000,994,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vssapi.dll
MOD - [2006-11-02 11:46:13 | 000,869,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winbrand.dll
MOD - [2006-11-02 11:46:13 | 000,586,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\stobject.dll
MOD - [2006-11-02 11:46:13 | 000,502,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usp10.dll
MOD - [2006-11-02 11:46:13 | 000,339,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shlwapi.dll
MOD - [2006-11-02 11:46:13 | 000,247,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll
MOD - [2006-11-02 11:46:13 | 000,244,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wevtapi.dll
MOD - [2006-11-02 11:46:13 | 000,240,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uxtheme.dll
MOD - [2006-11-02 11:46:13 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\webcheck.dll
MOD - [2006-11-02 11:46:13 | 000,191,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapi32.dll
MOD - [2006-11-02 11:46:13 | 000,185,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SndVolSSO.dll
MOD - [2006-11-02 11:46:13 | 000,111,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shimeng.dll
MOD - [2006-11-02 11:46:13 | 000,107,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\userenv.dll
MOD - [2006-11-02 11:46:13 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shacct.dll
MOD - [2006-11-02 11:46:13 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vsstrace.dll
MOD - [2006-11-02 11:46:13 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\thumbcache.dll
MOD - [2006-11-02 11:46:13 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\version.dll
MOD - [2006-11-02 11:46:13 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSChannel.dll
MOD - [2006-11-02 11:46:13 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\slwga.dll
MOD - [2006-11-02 11:46:12 | 001,822,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnidui.dll
MOD - [2006-11-02 11:46:12 | 001,314,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ole32.dll
MOD - [2006-11-02 11:46:12 | 000,733,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\propsys.dll
MOD - [2006-11-02 11:46:12 | 000,296,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntshrui.dll
MOD - [2006-11-02 11:46:12 | 000,280,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasapi32.dll
MOD - [2006-11-02 11:46:12 | 000,214,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleacc.dll
MOD - [2006-11-02 11:46:12 | 000,163,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QAGENT.DLL
MOD - [2006-11-02 11:46:12 | 000,162,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\onex.dll
MOD - [2006-11-02 11:46:12 | 000,120,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntmarta.dll
MOD - [2006-11-02 11:46:12 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powrprof.dll
MOD - [2006-11-02 11:46:12 | 000,088,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olepro32.dll
MOD - [2006-11-02 11:46:12 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntdsapi.dll
MOD - [2006-11-02 11:46:12 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QUTIL.DLL
MOD - [2006-11-02 11:46:12 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasman.dll
MOD - [2006-11-02 11:46:12 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntlanman.dll
MOD - [2006-11-02 11:46:12 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samlib.dll
MOD - [2006-11-02 11:46:12 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pautoenr.dll
MOD - [2006-11-02 11:46:12 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll
MOD - [2006-11-02 11:46:12 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PlaySndSrv.dll
MOD - [2006-11-02 11:46:12 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\npmproxy.dll
MOD - [2006-11-02 11:46:12 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psapi.dll
MOD - [2006-11-02 11:46:12 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasadhlp.dll
MOD - [2006-11-02 11:46:12 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nsi.dll
MOD - [2006-11-02 11:46:11 | 003,174,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netshell.dll
MOD - [2006-11-02 11:46:11 | 000,193,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
MOD - [2006-11-02 11:46:11 | 000,180,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\newdev.dll
MOD - [2006-11-02 11:46:11 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NapiNSP.dll
MOD - [2006-11-02 11:46:11 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlaapi.dll
MOD - [2006-11-02 11:46:10 | 000,681,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcrt.dll
MOD - [2006-11-02 11:46:10 | 000,227,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mswsock.dll
MOD - [2006-11-02 11:46:10 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msutb.dll
MOD - [2006-11-02 11:46:07 | 002,095,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msi.dll
MOD - [2006-11-02 11:46:07 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msiltcfg.dll
MOD - [2006-11-02 11:46:07 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msimg32.dll
MOD - [2006-11-02 11:46:06 | 000,805,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msctf.dll
MOD - [2006-11-02 11:46:06 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscms.dll
MOD - [2006-11-02 11:46:06 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm32.dll
MOD - [2006-11-02 11:46:06 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsCtfMonitor.dll
MOD - [2006-11-02 11:46:05 | 002,014,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\milcore.dll
MOD - [2006-11-02 11:46:05 | 000,543,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
MOD - [2006-11-02 11:46:05 | 000,316,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imapi2.dll
MOD - [2006-11-02 11:46:05 | 000,213,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icm32.dll
MOD - [2006-11-02 11:46:05 | 000,187,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mlang.dll
MOD - [2006-11-02 11:46:05 | 000,146,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MMDevAPI.dll
MOD - [2006-11-02 11:46:05 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imm32.dll
MOD - [2006-11-02 11:46:05 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IPHLPAPI.DLL
MOD - [2006-11-02 11:46:05 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpapi.dll
MOD - [2006-11-02 11:46:05 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mpr.dll
MOD - [2006-11-02 11:46:05 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hid.dll
MOD - [2006-11-02 11:46:05 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\midimap.dll
MOD - [2006-11-02 11:46:05 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksuser.dll
MOD - [2006-11-02 11:46:04 | 000,445,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsound.dll
MOD - [2006-11-02 11:46:04 | 000,183,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\duser.dll
MOD - [2006-11-02 11:46:04 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eappcfg.dll
MOD - [2006-11-02 11:46:04 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fundisc.dll
MOD - [2006-11-02 11:46:04 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmredir.dll
MOD - [2006-11-02 11:46:04 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\feclient.dll
MOD - [2006-11-02 11:46:04 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eappprxy.dll
MOD - [2006-11-02 11:46:04 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmapi.dll
MOD - [2006-11-02 11:46:04 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdProxy.dll
MOD - [2006-11-02 11:46:04 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
MOD - [2006-11-02 11:46:04 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drprov.dll
MOD - [2006-11-02 11:46:03 | 001,788,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d9.dll
MOD - [2006-11-02 11:46:03 | 000,798,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dbghelp.dll
MOD - [2006-11-02 11:46:03 | 000,454,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comdlg32.dll
MOD - [2006-11-02 11:46:03 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptdll.dll
MOD - [2006-11-02 11:46:03 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dimsjob.dll
MOD - [2006-11-02 11:46:03 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscapi.dll
MOD - [2006-11-02 11:46:03 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\credssp.dll
MOD - [2006-11-02 11:46:03 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d8thk.dll
MOD - [2006-11-02 11:46:02 | 001,321,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\browseui.dll
MOD - [2006-11-02 11:46:02 | 001,105,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
MOD - [2006-11-02 11:46:02 | 000,770,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\advapi32.dll
MOD - [2006-11-02 11:46:02 | 000,737,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\batmeter.dll
MOD - [2006-11-02 11:46:02 | 000,523,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clbcatq.dll
MOD - [2006-11-02 11:46:02 | 000,398,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AudioEng.dll
MOD - [2006-11-02 11:46:02 | 000,327,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\actxprxy.dll
MOD - [2006-11-02 11:46:02 | 000,320,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certcli.dll
MOD - [2006-11-02 11:46:02 | 000,265,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcrypt.dll
MOD - [2006-11-02 11:46:02 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apphelp.dll
MOD - [2006-11-02 11:46:02 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AudioSes.dll
MOD - [2006-11-02 11:46:02 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authz.dll
MOD - [2006-11-02 11:46:02 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cabinet.dll
MOD - [2006-11-02 11:46:02 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avrt.dll
MOD - [2006-11-02 11:45:48 | 000,166,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskeng.exe
MOD - [2006-11-02 11:45:04 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe
MOD - [2006-11-02 11:44:59 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
MOD - [2006-11-02 11:44:49 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx
MOD - [2006-11-02 11:44:42 | 000,989,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthprops.cpl
MOD - [2006-11-02 11:44:42 | 000,255,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winspool.drv
MOD - [2006-11-02 11:44:42 | 000,168,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdmaud.drv
MOD - [2006-11-02 11:44:42 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm32.drv
MOD - [2006-11-02 11:38:57 | 001,648,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll
MOD - [2006-11-02 11:38:56 | 000,537,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6000.16386_none_87e0cb09378714f1\comctl32.dll
MOD - [2006-11-02 10:33:06 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\normaliz.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - [2012-07-05 18:41:46 | 003,048,136 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012-05-19 18:51:22 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-05-03 08:31:10 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-02-10 11:28:06 | 000,240,408 | ---- | M] (Microsoft Corporation.) [On_Demand | Running] -- C:\Program Files\Microsoft\BingBar\7.1.361.0\SeaPort.EXE -- (BBUpdate)
SRV - [2012-02-10 11:28:06 | 000,193,816 | ---- | M] (Microsoft Corporation.) [Auto | Running] -- C:\Program Files\Microsoft\BingBar\7.1.361.0\BBSvc.EXE -- (BBSvc)
SRV - [2010-02-03 18:35:34 | 005,730,304 | ---- | M] () [Auto | Stopped] -- C:\Program Files\MySql\MySqlServer\bin\mysqld-nt.exe -- (MySql)
SRV - [2009-08-24 14:47:07 | 000,378,368 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc)
SRV - [2007-06-16 15:39:23 | 000,265,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2006-12-08 19:52:04 | 000,204,800 | ---- | M] (Fujitsu Siemens Computers) [Auto | Running] -- C:\FirstSteps\OnlineDiagnostic\TestManager\TestHandler.exe -- (TestHandler)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2011-07-04 19:58:18 | 000,072,576 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV - [2011-07-04 19:58:16 | 000,116,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2011-07-04 19:58:16 | 000,106,880 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2011-07-04 19:58:16 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2011-07-04 19:58:16 | 000,011,136 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ew_usbenumfilter.sys -- (ew_usbenumfilter)
DRV - [2007-07-11 16:51:48 | 000,019,840 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbdiag.sys -- (UsbDiag)
DRV - [2007-07-11 11:45:00 | 000,021,632 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbmodem.sys -- (USBModem)
DRV - [2007-07-11 11:40:18 | 000,012,416 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbbus.sys -- (usbbus)
DRV - [2007-04-11 22:03:22 | 002,589,696 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2007-04-04 05:57:00 | 000,046,592 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\itecir.sys -- (itecir)
DRV - [2007-02-25 06:14:00 | 002,216,448 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw4v32.sys -- (NETw4v32)
DRV - [2006-11-22 18:35:00 | 000,982,272 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\smserial.sys -- (smserial)
DRV - [2006-11-02 09:30:56 | 000,044,544 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2006-11-02 09:30:54 | 001,781,760 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32)
DRV - [2006-07-14 14:55:34 | 000,105,088 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\nvatabus.sys -- (nvatabus)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\URLSearchHook: {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = [url="http://search.live.com/results.aspx?q=%7BsearchTerms%7D&src=%7Breferrer:source?%7D"]http://search.live.c...ferrer:source?}[/url]
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = [url="http://search.conduit.com/ResultsExt.aspx?q=%7BsearchTerms%7D&SearchSource=4&ctid=CT2417076"]http://search.condui...&ctid=CT2417076[/url]


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = [url="http://www.google.com/ie"]http://www.google.com/ie[/url]
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = [url="http://www.google.com/ie"]http://www.google.com/ie[/url]
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = [url="http://www.google.com"]http://www.google.com[/url]
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [url="http://mystart.incredimail.com/mb68?u=92541377313324536"]http://mystart.incre...541377313324536[/url]
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = [url="http://www.google.com/ie"]http://www.google.com/ie[/url]
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = [url="http://www.google.com/ie"]http://www.google.com/ie[/url]
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\URLSearchHook: {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = [url="http://www.bing.com/search?FORM=VIATDF&PC=VIATDF&q=%7BsearchTerms%7D&src=IE-SearchBox"]http://www.bing.com/...rc=IE-SearchBox[/url]
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{3666ACE4-6933-485B-B072-6B899C319C93}: "URL" = [url="http://www.google.com/search?q=%7BsearchTerms%7D&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"]http://www.google.co...ie=utf8&oe=utf8[/url]
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = [url="http://www.google.com/search?q=%7Bsear"]http://www.google.com/search?q={sear[/url]
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: "URL" = [url="http://search.bearshare.com/webResults.html?src=ieb&q=%7BsearchTerms%7D"]http://search.bearsh...q={searchTerms}[/url]
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = [url="http://search.conduit.com/ResultsExt.aspx?q=%7BsearchTerms%7D&SearchSource=4&ctid=CT2417076"]http://search.condui...&ctid=CT2417076[/url]
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = [url="http://mystart.incredimail.com/mb68/?search=%7BsearchTerms%7D&loc=search_box&u=92541377313324536"]http://mystart.incre...541377313324536[/url]
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.defaultenginename: "MyStart Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://mystart.incredimail.com/mb68?u=92541377313324536"
FF - prefs.js..keyword.URL: "http://mystart.incredimail.com/mb68/?loc=ff_address_bar&u=92541377313324536&search="
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2571: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1739: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-05-19 18:51:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-05-19 18:51:27 | 000,000,000 | ---D | M]

[2010-02-22 15:22:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\mozilla\Extensions
[2012-05-19 19:58:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\f22kkhei.default\extensions
[2010-02-28 15:41:36 | 000,000,572 | ---- | M] () -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f22kkhei.default\searchplugins\bing.xml
[2010-08-22 14:48:55 | 000,002,207 | ---- | M] () -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f22kkhei.default\searchplugins\MyStart Search.xml
[2010-07-14 19:02:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010-07-14 19:02:05 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012-05-19 18:51:25 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2004-01-07 11:33:20 | 001,499,214 | ---- | M] (LizardTech) -- C:\Program Files\mozilla firefox\plugins\npdjvu.dll
[2012-05-19 18:51:15 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-05-19 18:51:15 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-05-19 18:51:15 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-05-19 18:51:15 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-05-19 18:51:15 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-05-19 18:51:15 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml

[color=#E56717]========== Chrome ==========[/color]

CHR - homepage: [url="http://www.google.com"]http://www.google.com[/url]
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: [url="http://www.google.com"]http://www.google.com[/url]
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\20.0.1132.47\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\20.0.1132.47\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\20.0.1132.47\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java™ Platform SE 6 U12 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdeploytk.dll
CHR - plugin: LizardTech DjVu (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdjvu.dll
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: QuickTime Plug-in 7.3.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.3.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.3.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.3.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.3.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.3.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.3.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

O1 HOSTS File: ([2004-09-19 14:18:40 | 000,000,001 | ---- | M]) - C:\Windows\System32\drivers\etc\HOSTS
O2 - BHO: (Winamp Toolbar BHO) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC)
O2 - BHO: (UrlHelper Class) - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareIEHelper.dll ()
O2 - BHO: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found
O3 - HKLM\..\Toolbar: (&Tłumaczenie) - {2F7DB8D7-9BE7-4666-901E-F380555BCAC7} - D:\Russkij Translator\InternetTranslatorRusPol.dll (Techland)
O3 - HKLM\..\Toolbar: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll (BearShare)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC)
O3 - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\Toolbar\WebBrowser: (gry Toolbar) - {8532A8B7-C06A-41BB-936A-8CE73E4711ED} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\Toolbar\WebBrowser: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll (BearShare)
O3 - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC)
O4 - HKLM..\Run: [MSConfig] C:\Windows\System32\msconfig.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O7 - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &Winamp Toolbar Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : @D:\Russkij Translator\InternetTranslatorRusPol.dll,-103 - {94C70A96-012C-4171-98FC-C1971511F20D} - D:\Russkij Translator\InternetTranslatorRusPol.dll (Techland)
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} [url="http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab"]http://fpdownload2.m...ash/swflash.cab[/url] (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.2.96.54 212.2.96.52
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2C434B99-9E13-4DFB-A5C3-D7A44E3A02DA}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{32554CE4-5A72-4519-8850-DD4ED6D58C11}: DhcpNameServer = 212.2.96.53 212.2.96.51
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{54232790-5603-4CAC-895B-7F7C4F2CCCDF}: DhcpNameServer = 212.2.96.54 212.2.96.52
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8748D998-C05C-40ED-9C50-1E29919DCC41}: DhcpNameServer = 95.160.170.92 88.156.222.92 82.139.8.40
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\user\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\user\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2011-07-04 14:36:26 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.) - F:\AutoRun.exe -- [ CDFS ]
O32 - AutoRun File - [2011-06-22 13:01:37 | 000,000,044 | R--- | M] () - F:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{36349cbc-1fdf-11df-86a7-00030d6fe73d}\Shell\AutoRun\command - "" = SYSTEM\S-1-5-21-1482476501-1644491937-682003330-1013\system32.exe
O33 - MountPoints2\{36349cbc-1fdf-11df-86a7-00030d6fe73d}\Shell\open\command - "" = SYSTEM\S-1-5-21-1482476501-1644491937-682003330-1013\system32.exe
O33 - MountPoints2\{6b522c5b-7300-11df-9ee0-00030d6fe73d}\Shell\AutoRun\command - "" = F:\12gn6id2.exe
O33 - MountPoints2\{6b522c5b-7300-11df-9ee0-00030d6fe73d}\Shell\open\Command - "" = F:\12gn6id2.exe
O33 - MountPoints2\{a465b05f-858f-11e1-b710-97155b4ce97b}\Shell - "" = AutoRun
O33 - MountPoints2\{a465b05f-858f-11e1-b710-97155b4ce97b}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2011-07-04 14:36:26 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{a465b0ed-858f-11e1-b710-9b783aa66222}\Shell - "" = AutoRun
O33 - MountPoints2\{a465b0ed-858f-11e1-b710-9b783aa66222}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2011-07-04 14:36:26 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{bfa2284c-9c57-11dd-af55-806e6f6e6963}\Shell\AutoRun\command - "" = RESTORE\k-1-3542-4232123213-7676767-8888886\BLUE.exe
O33 - MountPoints2\{bfa2284c-9c57-11dd-af55-806e6f6e6963}\Shell\open\command - "" = RESTORE\k-1-3542-4232123213-7676767-8888886\BLUE.exe
O33 - MountPoints2\{d28627b7-17cd-11df-b6ba-00030d6fe73d}\Shell - "" = AutoRun
O33 - MountPoints2\{d28627b7-17cd-11df-b6ba-00030d6fe73d}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{dbc4adeb-886c-11e1-9ce1-aaa476b8d490}\Shell - "" = AutoRun
O33 - MountPoints2\{dbc4adeb-886c-11e1-9ce1-aaa476b8d490}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2011-07-04 14:36:26 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{fd24fc5b-9759-11e1-a383-bf3ea5eed0c4}\Shell - "" = AutoRun
O33 - MountPoints2\{fd24fc5b-9759-11e1-a383-bf3ea5eed0c4}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2011-07-04 14:36:26 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2011-07-04 14:36:26 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk - - File not found
MsConfig - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: [b]avast![/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}[/b] - hkey= - key= - C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
MsConfig - StartUpReg: [b]ChomikBox[/b] - hkey= - key= - C:\Program Files\ChomikBox\chomikbox.exe ()
MsConfig - StartUpReg: [b]EA Core[/b] - hkey= - key= - C:\Program Files\Electronic Arts\EADM\Core.exe (Electronic Arts)
MsConfig - StartUpReg: [b]GoD[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]GrooveMonitor[/b] - hkey= - key= - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
MsConfig - StartUpReg: [b]IPLA![/b] - hkey= - key= - C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.)
MsConfig - StartUpReg: [b]NeroFilterCheck[/b] - hkey= - key= - C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
MsConfig - StartUpReg: [b]Nowe Gadu-Gadu[/b] - hkey= - key= - C:\Program Files\Nowe Gadu-Gadu\gg.exe (Gadu-Gadu S.A.)
MsConfig - StartUpReg: [b]Orb[/b] - hkey= - key= - C:\Program Files\Winamp Remote\bin\OrbTray.exe (Orb Networks)
MsConfig - StartUpReg: [b]Plus Internet[/b] - hkey= - key= - C:\Program Files\Plus Internet\PlusInternetChecker.exe ()
MsConfig - StartUpReg: [b]QuickTime Task[/b] - hkey= - key= - C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
MsConfig - StartUpReg: [b]RtHDVCpl[/b] - hkey= - key= - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
MsConfig - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
MsConfig - StartUpReg: [b]SMSERIAL[/b] - hkey= - key= - C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.)
MsConfig - StartUpReg: [b]StartCCC[/b] - hkey= - key= - c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()
MsConfig - StartUpReg: [b]Windows Defender[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]yinariixfrtlwyu[/b] - hkey= - key= - C:\ProgramData\yinariix.exe ()
MsConfig - State: "startup" - 2
MsConfig - State: "services" - 2

SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2012-07-24 18:22:41 | 000,000,000 | ---D | C] -- C:\ProgramData\tvhezzqffmikhut
[2012-07-23 08:59:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Fashion Solitaire 1.2
[2012-07-23 08:57:44 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fashion Solitaire
[2012-07-23 08:57:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fashion Solitaire
[2012-07-23 08:57:44 | 000,000,000 | ---D | C] -- C:\Program Files\Fashion Solitaire
[2012-07-23 08:53:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Big Fish Games
[2012-07-23 08:53:06 | 000,000,000 | ---D | C] -- C:\Program Files\bfgclient
[2012-07-23 08:49:40 | 000,000,000 | ---D | C] -- C:\BigFishGamesCache
[1 C:\*.tmp files -> C:\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2012-07-24 18:51:03 | 000,613,046 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012-07-24 18:51:03 | 000,538,916 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012-07-24 18:51:03 | 000,104,768 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012-07-24 18:51:03 | 000,087,672 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012-07-24 18:45:30 | 000,003,472 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012-07-24 18:45:29 | 000,003,472 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012-07-24 18:45:28 | 000,001,028 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012-07-24 18:45:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-07-24 18:45:09 | 2145,837,056 | -HS- | M] () -- C:\hiberfil.sys
[2012-07-24 18:22:47 | 000,000,051 | ---- | M] () -- C:\ProgramData\ardzseokbdrpcvb
[2012-07-24 18:22:30 | 000,057,344 | ---- | M] () -- C:\ProgramData\yinariix.exe
[2012-07-24 18:22:30 | 000,057,344 | ---- | M] () -- C:\Users\user\ms.exe
[2012-07-24 18:17:01 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012-07-23 18:51:32 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[1 C:\*.tmp files -> C:\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2012-07-24 18:45:09 | 2145,837,056 | -HS- | C] () -- C:\hiberfil.sys
[2012-07-24 18:22:47 | 000,057,344 | ---- | C] () -- C:\ProgramData\yinariix.exe
[2012-07-24 18:22:32 | 000,000,051 | ---- | C] () -- C:\ProgramData\ardzseokbdrpcvb
[2012-07-24 18:22:30 | 000,057,344 | ---- | C] () -- C:\Users\user\ms.exe
[2012-07-23 08:53:21 | 000,001,718 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Manager.lnk
[2012-07-23 08:53:21 | 000,001,542 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\More Great Games.lnk
[2012-05-03 08:22:08 | 000,000,914 | ---- | C] () -- C:\Users\user\.recently-used.xbel
[2012-04-30 15:07:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempOA3428.html
[2012-04-30 09:25:30 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempdzc764.html
[2012-04-27 18:51:50 | 000,000,495 | ---- | C] () -- C:\Windows\PWN_LIT_SZTUK.ini
[2012-04-14 11:41:55 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempKQO836.html
[2012-04-13 19:41:57 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempER1404.html
[2012-04-13 19:41:57 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempCs1404.html
[2012-02-19 10:45:59 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPL1428.html
[2012-02-03 11:21:54 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempNbs908.html
[2012-02-01 21:01:15 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempid1528.html
[2012-01-22 11:32:41 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempYx1964.html
[2012-01-11 23:20:46 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempeK1412.html
[2012-01-11 23:20:46 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempjG1412.html
[2012-01-07 12:05:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEhh844.html
[2012-01-07 12:05:50 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempCNA844.html
[2012-01-06 21:11:52 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempXq3844.html
[2012-01-06 21:11:52 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempQG3844.html
[2012-01-05 15:03:28 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempuvt780.html
[2012-01-05 15:03:28 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTkh780.html
[2012-01-04 14:55:13 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempove836.html
[2012-01-04 14:55:13 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempoxC836.html
[2012-01-03 15:04:56 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempnO1468.html
[2012-01-03 15:04:56 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempoh1468.html
[2012-01-01 13:47:47 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempaD1460.html
[2011-12-31 11:51:53 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemppV1228.html
[2011-12-26 20:33:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPJ1604.html
[2011-12-24 16:11:59 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempTy1072.html
[2011-12-24 16:11:59 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempBt1072.html
[2011-12-22 12:27:38 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempiL1056.html
[2011-12-22 12:27:38 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempLK1056.html
[2011-12-22 12:14:38 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEF1428.html
[2011-12-22 12:14:38 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempgj1428.html
[2011-12-21 16:14:52 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempXZ1428.html
[2011-12-21 16:14:52 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempnI1428.html
[2011-12-19 21:47:16 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempXp5288.html
[2011-12-19 21:47:16 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempwD5288.html
[2011-12-19 18:47:15 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempbN1480.html
[2011-12-19 18:47:15 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempAf1480.html
[2011-12-16 18:58:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempnW1228.html
[2011-12-11 12:33:18 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempyD1216.html
[2011-12-11 12:33:18 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempei1216.html
[2011-12-11 11:10:05 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempjo1420.html
[2011-12-11 11:10:05 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTV1420.html
[2011-12-10 17:04:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempbX1400.html
[2011-12-10 17:04:39 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempSu1400.html
[2011-11-30 12:43:57 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempCo1256.html
[2011-11-30 12:43:57 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemptC1256.html
[2011-11-24 18:03:34 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempxR1460.html
[2011-11-24 18:03:34 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempkh1460.html
[2011-11-24 12:19:52 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempqpH808.html
[2011-11-24 12:19:52 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempqDQ808.html
[2011-11-23 20:14:19 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempxW3216.html
[2011-11-23 20:14:19 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemplK3216.html
[2011-11-23 16:25:36 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempcgw404.html
[2011-11-23 16:25:36 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempnTj404.html
[2011-11-20 13:47:45 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEC1540.html
[2011-11-20 13:47:45 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempJF1540.html
[2011-11-19 11:40:24 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempqL1740.html
[2011-11-19 11:40:24 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempXt1740.html
[2011-11-18 18:34:49 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempvl1684.html
[2011-11-18 18:34:49 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempjq1684.html
[2011-11-13 10:19:05 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempYK1384.html
[2011-11-13 10:19:05 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Temphn1384.html
[2011-11-11 15:34:48 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempSJ3168.html
[2011-11-01 17:03:19 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempOz1436.html
[2011-11-01 11:10:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempqY1260.html
[2011-10-31 11:33:19 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempCO1380.html
[2011-10-30 19:01:51 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempWd1496.html
[2011-10-30 19:01:51 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempVj1496.html
[2011-10-30 14:41:20 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempka2744.html
[2011-10-30 14:38:19 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempxu1504.html
[2011-10-30 14:38:19 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempMm1504.html
[2011-01-30 20:44:43 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAq3740.html
[2011-01-28 12:47:21 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempnM1412.html
[2011-01-26 21:13:30 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempnB2040.html
[2011-01-26 21:13:30 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempix2040.html
[2011-01-26 11:45:48 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempJF1452.html
[2011-01-26 11:45:48 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempyN1452.html
[2011-01-20 17:42:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempFG3800.html
[2011-01-20 17:42:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempiU3800.html
[2011-01-19 16:27:54 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempcg1556.html
[2011-01-19 16:27:54 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempdg1556.html
[2011-01-18 18:23:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempiTD528.html
[2011-01-18 18:23:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempwSy528.html
[2011-01-17 11:07:27 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempjG1452.html
[2011-01-17 11:07:27 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempGM1452.html
[2011-01-15 17:45:06 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempQGl356.html
[2011-01-12 22:06:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempuR2140.html
[2011-01-12 22:06:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempfk2140.html
[2011-01-12 16:45:12 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempcQ2076.html
[2011-01-12 16:45:12 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempDo2076.html
[2011-01-03 19:47:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbr3120.html
[2011-01-03 19:47:50 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempuO3120.html
[2010-12-28 13:11:37 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempiSA548.html
[2010-12-28 13:11:37 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempCjm548.html
[2010-12-27 14:05:31 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemplI2512.html
[2010-12-27 14:05:31 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempPT2512.html
[2010-12-26 12:38:09 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempOXA124.html
[2010-12-26 12:38:09 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempUhX124.html
[2010-12-24 13:04:19 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempXB3244.html
[2010-12-24 13:04:19 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempfn3244.html
[2010-12-16 14:42:12 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempOz1620.html
[2010-12-16 14:42:12 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempYs1620.html
[2010-12-14 18:15:07 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempva1424.html
[2010-12-14 18:15:07 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempJl1424.html
[2010-12-13 21:25:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempuf3916.html
[2010-12-13 21:25:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempzR3916.html
[2010-12-11 11:21:28 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempcs3184.html
[2010-12-09 18:39:05 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempWn1164.html
[2010-12-09 18:39:05 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempVt1164.html
[2010-12-08 21:09:30 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempbS3864.html
[2010-12-08 21:09:30 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempPA3864.html
[2010-12-07 21:14:16 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempVM3496.html
[2010-12-07 21:14:16 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempEZ3496.html
[2010-12-06 20:37:00 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempox1408.html
[2010-12-06 20:37:00 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempdm1408.html
[2010-12-04 16:32:46 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempRM2524.html
[2010-12-02 19:45:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempXh3616.html
[2010-12-02 19:45:32 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempUT3616.html
[2010-12-01 21:09:25 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempaL1324.html
[2010-12-01 21:09:25 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempnW1324.html
[2010-11-30 20:04:20 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemplYp288.html
[2010-11-30 20:04:20 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTXB288.html
[2010-11-29 21:18:17 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemppPU828.html
[2010-11-29 21:18:17 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempReq828.html
[2010-11-28 21:45:35 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempak1360.html
[2010-11-28 21:45:35 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempUH1360.html
[2010-11-28 15:37:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPn1372.html
[2010-11-28 15:37:08 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTf1372.html
[2010-11-27 19:26:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempYw1548.html
[2010-11-27 19:26:39 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempsb1548.html
[2010-11-26 16:08:45 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAK1612.html
[2010-11-26 16:08:45 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempHL1612.html
[2010-11-25 21:29:51 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPE3272.html
[2010-11-25 21:29:51 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempyi3272.html
[2010-11-25 17:49:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempku1496.html
[2010-11-25 17:49:50 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempSS1496.html
[2010-11-25 11:01:46 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemprJ1504.html
[2010-11-25 11:01:46 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempjD1504.html
[2010-11-24 21:49:10 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempRVK172.html
[2010-11-24 21:49:10 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempikn172.html
[2010-11-23 21:12:35 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemphB1444.html
[2010-11-23 21:12:35 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempGu1444.html
[2010-11-22 20:30:51 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempGT1456.html
[2010-11-22 20:30:51 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempaP1456.html
[2010-11-21 19:11:35 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPI3740.html
[2010-11-21 19:11:35 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempIN3740.html
[2010-11-19 21:17:44 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempGl1536.html
[2010-11-19 21:17:44 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempaM1536.html
[2010-11-18 19:28:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAF1816.html
[2010-11-18 19:28:32 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempWU1816.html
[2010-11-18 11:47:58 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemphA1592.html
[2010-11-18 11:47:58 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempjd1592.html
[2010-11-17 21:04:02 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempwV3804.html
[2010-11-17 21:04:02 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemppZ3804.html
[2010-11-17 17:00:41 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbx1460.html
[2010-11-17 17:00:41 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Temprd1460.html
[2010-11-16 16:08:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempxM2876.html
[2010-11-16 16:08:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbn2876.html
[2010-11-14 11:11:12 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEn3848.html
[2010-11-14 11:09:02 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempUz1228.html
[2010-11-14 11:09:02 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempXV1228.html
[2010-11-09 19:37:49 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempto5052.html
[2010-11-09 19:37:49 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempMq5052.html
[2010-11-08 21:45:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAG5968.html
[2010-11-08 21:45:08 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempZS5968.html
[2010-11-04 17:12:55 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Templk3820.html
[2010-11-04 17:12:55 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbg3820.html
[2010-11-03 18:45:38 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempzl1652.html
[2010-11-03 18:45:38 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempXm1652.html
[2010-11-02 12:57:06 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempzY2580.html
[2010-11-02 12:57:06 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemphV2580.html
[2010-11-01 13:30:12 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempVS1448.html
[2010-10-30 20:27:44 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAw5824.html
[2010-10-30 15:23:26 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempRE5224.html
[2010-10-29 09:44:24 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempgQ5112.html
[2010-10-29 09:44:24 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempNb5112.html
[2010-10-28 21:18:02 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEk1104.html
[2010-10-28 21:18:02 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempmW1104.html
[2010-10-27 16:20:16 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempxq1496.html
[2010-10-27 16:20:16 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTS1496.html
[2010-10-27 11:38:05 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemplB1496.html
[2010-10-27 11:38:05 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempIY1496.html
[2010-10-23 11:43:14 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempGi1396.html
[2010-10-23 11:43:14 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempVN1396.html
[2010-10-21 20:51:03 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemppR2268.html
[2010-10-21 20:51:03 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTf2268.html
[2010-10-21 15:48:23 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempQa2488.html
[2010-10-21 15:48:23 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempzc2488.html
[2010-10-20 13:41:21 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempWR1700.html
[2010-10-20 13:41:21 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempoY1700.html
[2010-10-13 19:11:10 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempwW2476.html
[2010-10-13 19:11:10 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempec2476.html
[2010-10-12 16:14:58 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempmv1516.html
[2010-10-12 16:14:58 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempCC1516.html
[2010-10-12 16:14:56 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempbO1516.html
[2010-10-12 16:14:56 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempaA1516.html
[2010-10-11 21:34:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempsT1376.html
[2010-10-11 21:34:08 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemprB1376.html
[2010-10-11 21:34:06 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempun1376.html
[2010-10-11 21:34:06 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempBs1376.html
[2010-10-11 16:51:26 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Temphn3800.html
[2010-10-11 16:51:26 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempSm3800.html
[2010-10-11 16:51:24 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempbS3800.html
[2010-10-11 16:51:24 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempxd3800.html
[2010-10-10 16:48:30 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempMS1000.html
[2010-10-10 16:48:30 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempMx1000.html
[2010-10-10 16:48:29 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempws1000.html
[2010-10-10 16:48:29 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempSk1000.html
[2010-10-09 17:04:46 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempZyg476.html
[2010-10-09 17:04:46 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempjKb476.html
[2010-10-09 17:04:45 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempHJL476.html
[2010-10-09 17:04:45 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempmwJ476.html
[2010-10-08 16:19:34 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempNJ3660.html
[2010-10-08 16:19:34 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempFD3660.html
[2010-10-08 16:19:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Temppr3660.html
[2010-10-08 16:19:32 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempDX3660.html
[2010-10-07 15:03:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Temptg1360.html
[2010-10-07 15:03:42 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempSz1360.html
[2010-10-07 15:03:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempYa1360.html
[2010-10-07 15:03:39 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempwA1360.html
[2010-10-06 20:01:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempet1484.html
[2010-10-06 20:01:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTi1484.html
[2010-10-06 14:12:04 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempKu4344.html
[2010-10-06 14:12:04 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempDA4344.html
[2010-10-06 14:12:04 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempxK4344.html
[2010-10-06 14:12:04 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempCK4344.html
[2010-10-06 13:24:14 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbo1412.html
[2010-10-06 13:24:14 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempud1412.html
[2010-10-06 13:24:13 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempVw1412.html
[2010-10-06 13:24:13 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempCU1412.html
[2010-10-06 11:35:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbt3860.html
[2010-10-06 11:35:42 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempmP3860.html
[2010-10-05 20:45:17 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempyj5100.html
[2010-10-05 20:45:17 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbs5100.html
[2010-10-05 20:02:06 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempWx1508.html
[2010-10-05 20:02:06 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTz1508.html
[2010-10-04 20:50:36 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempSB1480.html
[2010-10-04 20:50:36 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempQw1480.html
[2010-10-04 19:33:25 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempst1804.html
[2010-10-04 19:33:25 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempri1804.html
[2010-10-04 12:43:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempaZ1872.html
[2010-10-04 12:43:42 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempgx1872.html
[2010-10-04 09:16:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempWB1408.html
[2010-10-04 09:16:42 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempYt1408.html
[2010-10-03 15:40:48 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempba1432.html
[2010-10-03 15:40:48 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempLE1432.html
[2010-10-03 14:08:35 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempZBa552.html
[2010-10-03 14:08:35 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemptLA552.html
[2010-10-03 08:37:41 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEj1484.html
[2010-10-03 08:37:41 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempeg1484.html
[2010-10-02 14:27:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempRO1368.html
[2010-10-02 14:27:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempnT1368.html
[2010-10-01 18:06:12 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempVBg988.html
[2010-10-01 18:06:12 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempUdJ988.html
[2010-10-01 12:43:52 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempIt1440.html
[2010-10-01 12:43:52 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempfz1440.html
[2010-09-30 19:09:06 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemplRB708.html
[2010-09-30 19:09:06 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemppQm708.html
[2010-09-30 12:00:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Temppn1312.html
[2010-09-30 12:00:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempzX1312.html
[2010-09-30 10:57:05 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempvDc908.html
[2010-09-30 10:57:04 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempsyQ908.html
[2010-09-29 11:13:56 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempVs3644.html
[2010-09-29 11:13:56 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTi3644.html
[2010-09-28 20:10:31 | 000,000,000 | ---- | C] () -- C:\Users\user\AppData\Local\TempNR1860.html
[2010-09-28 20:10:31 | 000,000,000 | ---- | C] () -- C:\Users\user\AppData\Local\TempaI1860.html
[2010-09-28 14:59:31 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemprC1328.html
[2010-09-28 14:59:31 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempVj1328.html
[2010-09-28 11:00:28 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEY1408.html
[2010-09-27 12:54:01 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempfk1200.html
[2010-09-27 12:54:01 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempOj1200.html
[2010-09-26 19:15:22 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempWS1132.html
[2010-09-26 19:15:22 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempap1132.html
[2010-09-24 16:14:38 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbb1276.html
[2010-09-24 16:14:38 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempJu1276.html
[2010-09-23 15:50:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempLx1276.html
[2010-09-23 15:50:32 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempvE1276.html
[2010-09-23 08:27:28 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempsF1428.html
[2010-09-23 08:27:28 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempvZ1428.html
[2010-09-22 14:12:52 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempep1392.html
[2010-09-22 14:12:52 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempLm1392.html
[2010-09-21 20:23:57 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempkFv560.html
[2010-09-21 20:23:57 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempOAo560.html
[2010-09-21 16:58:22 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempNt1404.html
[2010-09-21 16:58:22 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempfG1404.html
[2010-09-21 14:15:23 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempFz1408.html
[2010-09-21 14:15:23 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempqD1408.html
[2010-09-21 08:11:51 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempEs1472.html
[2010-09-21 08:11:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempYC1472.html
[2010-09-20 20:05:54 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempSU1464.html
[2010-09-20 20:05:54 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTc1464.html
[2010-09-20 16:06:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Temprn1444.html
[2010-09-20 16:06:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempJO1444.html
[2010-09-20 08:27:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempvz1516.html
[2010-09-20 08:27:32 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempLu1516.html
[2010-09-19 20:12:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempLsR440.html
[2010-09-19 20:12:08 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempebA440.html
[2010-09-19 13:40:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempmY1488.html
[2010-09-19 13:40:50 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempGp1488.html
[2010-09-18 15:40:53 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempZE1472.html
[2010-09-17 15:00:53 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempXX1232.html
[2010-09-17 15:00:53 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempwU1232.html
[2010-09-16 20:38:20 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempmRl456.html
[2010-09-16 20:38:20 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbtj456.html
[2010-09-16 15:54:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempqe1508.html
[2010-09-16 15:54:32 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempfW1508.html
[2010-09-16 15:32:23 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempJw1236.html
[2010-09-16 15:32:23 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempQX1236.html
[2010-09-15 18:28:23 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempNc1384.html
[2010-09-15 18:28:23 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempka1384.html
[2010-09-14 18:14:35 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempeb1120.html
[2010-09-14 18:14:35 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbj1120.html
[2010-09-13 20:50:37 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempgC1752.html
[2010-09-13 20:50:37 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempeA1752.html
[2010-09-13 08:02:17 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempkB1640.html
[2010-09-13 08:02:17 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempSX1640.html
[2010-09-12 14:48:29 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEN1540.html
[2010-09-12 14:48:29 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempiw1540.html
[2010-09-12 13:13:20 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempkr1248.html
[2010-09-12 13:13:20 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempRN1248.html
[2010-09-11 20:55:30 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempdQ1400.html
[2010-09-11 20:55:30 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Temppq1400.html
[2010-09-11 14:35:18 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempet1188.html
[2010-09-11 14:35:18 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempEF1188.html
[2010-09-11 09:12:28 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPQ1552.html
[2010-09-11 09:12:28 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempLg1552.html
[2010-09-10 18:15:34 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempJF1416.html
[2010-09-10 18:15:34 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempLS1416.html
[2010-09-10 06:19:24 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempKr1436.html
[2010-09-10 06:19:24 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempix1436.html
[2010-09-09 20:53:12 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Templs1292.html
[2010-09-09 20:53:12 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempWL1292.html
[2010-09-09 20:48:33 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempoy1524.html
[2010-09-09 20:48:33 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempvH1524.html
[2010-09-08 19:18:47 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAA1236.html
[2010-09-08 19:18:47 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempbK1236.html
[2010-09-08 13:32:48 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempeW3764.html
[2010-09-07 13:21:28 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempYg1396.html
[2010-09-07 13:21:28 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempkp1396.html
[2010-09-07 09:12:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempfAW912.html
[2010-09-07 09:12:32 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempEfQ912.html
[2010-09-06 08:36:37 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempzgM848.html
[2010-09-06 08:36:37 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempeDb848.html
[2010-09-05 19:27:13 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempBe1152.html
[2010-09-05 13:19:27 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempMD1312.html
[2010-09-04 20:29:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Templd1884.html
[2010-09-02 20:27:18 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempuP1208.html
[2010-09-02 20:27:18 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemptF1208.html
[2010-09-02 14:40:57 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempsv1428.html
[2010-09-02 14:40:57 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempLW1428.html
[2010-09-01 20:47:23 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempElJA12.html
[2010-09-01 20:47:23 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempouCy12.html
[2010-09-01 16:02:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempkj3636.html
[2010-09-01 16:02:39 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempwV3636.html
[2010-08-31 21:33:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempzL2372.html
[2010-08-31 16:40:53 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempeG3212.html
[2010-08-31 16:40:53 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempQn3212.html
[2010-08-30 19:03:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAmI916.html
[2010-08-29 21:31:40 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempGP1868.html
[2010-08-29 14:54:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempHz2664.html
[2010-08-28 19:16:37 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempkRl848.html
[2010-08-28 14:38:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempCN2620.html
[2010-08-28 11:36:57 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempqG1396.html
[2010-08-27 17:31:33 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempVv1348.html
[2010-08-27 17:05:34 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempnm1260.html
[2010-08-27 17:05:34 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempXu1260.html
[2010-08-27 10:51:52 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempxn3456.html
[2010-08-27 10:51:52 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempsW3456.html
[2010-08-26 19:34:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempHtu464.html
[2010-08-26 19:34:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempZgN464.html
[2010-08-26 00:17:38 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAt1904.html
[2010-08-26 00:17:38 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempOZ1904.html
[2010-08-22 14:49:13 | 000,098,304 | ---- | C] () -- C:\Windows\System32\redmonnt.dll
[2010-08-16 09:33:05 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPK1524.html
[2010-08-16 09:33:05 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempRP1524.html
[2010-08-15 22:21:20 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempQq1068.html
[2010-08-15 22:21:20 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemphF1068.html
[2010-08-15 18:12:22 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempMh1096.html
[2010-08-15 18:12:22 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempvR1096.html
[2010-08-15 11:58:15 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Temptj1264.html
[2010-08-15 11:58:15 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempgR1264.html
[2010-08-14 17:05:38 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Temphm1364.html
[2010-08-14 17:05:38 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempzk1364.html
[2010-08-10 13:56:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempKN1524.html
[2010-08-10 13:56:08 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempuG1524.html
[2010-08-08 16:50:57 | 000,007,592 | ---- | C] () -- C:\Users\user\AppData\Local\d3d9caps.dat
[2010-08-08 07:34:13 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempINA512.html
[2010-08-08 07:34:13 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempzsw512.html
[2010-08-07 21:44:10 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempUWq436.html
[2010-08-07 21:44:10 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempHTZ436.html
[2010-08-07 17:53:27 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempqx3056.html
[2010-08-07 17:53:27 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempSo3056.html
[2010-08-07 11:40:53 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempLZm540.html
[2010-08-07 11:40:53 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempzLW540.html
[2010-08-06 17:28:23 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemphM3224.html
[2010-08-06 17:28:23 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempfR3224.html
[2010-08-04 15:01:44 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempDX3116.html
[2010-08-04 15:01:44 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempwy3116.html
[2010-07-28 11:20:56 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempkd3092.html
[2010-07-28 11:20:56 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempqE3092.html
[2010-07-28 07:51:15 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempLYS336.html
[2010-07-28 07:51:15 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempZXe336.html
[2010-07-27 13:17:09 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Temphfe712.html
[2010-07-27 13:17:09 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempFZT712.html
[2010-07-27 08:31:58 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempMd1472.html
[2010-07-27 08:31:58 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempYl1472.html
[2010-07-26 18:23:44 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempoB3136.html
[2010-07-26 18:23:44 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempij3136.html
[2010-07-26 17:48:56 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempJu3096.html
[2010-07-26 10:26:13 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempuP3088.html
[2010-07-26 10:26:13 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempvp3088.html
[2010-07-25 19:48:49 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempyb4488.html
[2010-07-25 19:48:49 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempJg4488.html
[2010-07-22 20:45:26 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempmD2360.html
[2010-07-22 20:45:26 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempVI2360.html
[2010-07-22 08:27:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempaT1416.html
[2010-07-21 13:57:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempGSv336.html
[2010-07-18 09:50:21 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempyo5140.html
[2010-07-18 09:46:00 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempsD4916.html
[2010-07-18 09:34:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempJs5256.html
[2010-07-18 09:34:39 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempOA5256.html
[2010-07-15 09:16:27 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempqpL568.html
[2010-07-15 09:16:27 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempYgK568.html
[2010-07-10 12:17:01 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempXkx988.html
[2010-07-10 12:17:01 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempxyU988.html
[2010-07-10 12:13:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempRSW484.html
[2010-07-10 12:13:50 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempukw484.html
[2010-07-09 09:08:36 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempiOWT12.html
[2010-07-08 07:38:29 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPfX700.html
[2010-07-04 10:43:15 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempnP3844.html
[2010-07-04 10:39:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempIYy860.html
[2010-07-04 10:39:50 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempXgU860.html
[2010-07-01 13:33:01 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempTf5140.html
[2010-07-01 13:33:01 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempUF5140.html
[2010-06-29 08:36:09 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempfPM520.html
[2010-06-29 08:36:09 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbik520.html
[2010-06-28 11:16:01 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempcOL428.html
[2010-06-28 11:16:01 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempOLn428.html
[2010-06-27 16:02:54 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempIia568.html
[2010-06-25 14:14:28 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempaVB428.html
[2010-06-24 18:35:27 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempwzm464.html
[2010-06-24 18:35:27 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempItd464.html
[2010-06-23 18:02:03 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempboxj12.html
[2010-06-23 18:02:03 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempIbYP12.html
[2010-06-23 14:20:49 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemptE1580.html
[2010-06-23 14:20:49 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempAV1580.html
[2010-06-23 13:08:36 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempnXp404.html
[2010-06-23 13:08:36 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempMmH404.html
[2010-06-23 05:59:48 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempTgi420.html
[2010-06-23 05:59:48 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempiDi420.html
[2010-06-22 12:51:45 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempoi3160.html
[2010-06-21 16:16:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempUJN560.html
[2010-06-21 13:16:10 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempiOj444.html
[2010-06-21 13:16:10 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempxXX444.html
[2010-06-21 09:12:28 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempBm3204.html
[2010-06-21 09:12:28 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempLz3204.html
[2010-06-20 16:03:07 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempRa3468.html
[2010-06-20 16:03:07 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempyP3468.html
[2010-06-19 21:59:17 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempmiP756.html
[2010-06-19 21:59:17 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemptbI756.html
[2010-06-18 21:37:36 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAkA384.html
[2010-06-18 18:27:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempqH3176.html
[2010-06-18 18:27:42 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempZr3176.html
[2010-06-17 20:02:44 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempePP256.html
[2010-06-17 11:28:15 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempSZK780.html
[2010-06-17 11:28:15 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempdOW780.html
[2010-06-16 22:04:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempBZf772.html
[2010-06-16 22:04:50 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempvjh772.html
[2010-06-16 19:40:21 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempQC2320.html
[2010-06-16 19:40:21 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempQk2320.html
[2010-06-16 14:54:26 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempfVG764.html
[2010-06-16 14:54:26 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempigS764.html
[2010-06-15 20:46:44 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempZN3164.html
[2010-06-15 20:46:44 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTQ3164.html
[2010-06-15 14:33:21 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempyVEu12.html
[2010-06-15 14:33:21 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempGykH12.html
[2010-06-14 20:58:07 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempubWc12.html
[2010-06-14 20:58:07 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempBMrO12.html
[2010-06-13 14:44:56 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempNh3144.html
[2010-06-13 09:13:53 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempRcMX12.html
[2010-06-13 09:13:53 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempKJEh12.html
[2010-06-08 17:35:26 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempUd3716.html
[2010-06-08 17:35:26 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempiD3716.html
[2010-06-07 20:14:24 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempMw1616.html
[2010-06-07 20:14:24 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempiQ1616.html
[2010-06-06 12:34:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempoeN736.html
[2010-06-06 12:34:39 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempVba736.html
[2010-05-29 20:35:45 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEIl520.html
[2010-05-29 20:35:45 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempCJh520.html
[2010-05-29 10:25:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempdmP524.html
[2010-05-28 17:41:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempjQL424.html
[2010-05-28 17:41:08 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempVFz424.html
[2010-05-28 10:56:13 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempQOq560.html
[2010-05-27 11:22:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempXJ2360.html
[2010-05-27 11:22:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempur2360.html
[2010-05-21 13:09:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempyE3088.html
[2010-05-15 12:17:35 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempmw3140.html
[2010-05-03 16:58:09 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEz1456.html
[2010-05-02 18:34:16 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempYW3240.html
[2010-05-01 09:48:27 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempail724.html
[2010-04-26 16:42:00 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempKg5292.html
[2010-04-26 16:42:00 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempzQ5292.html
[2010-04-25 14:20:46 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempGZ1284.html
[2010-04-20 12:25:17 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempHy3584.html
[2010-04-20 12:25:17 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempsQ3584.html
[2010-04-18 13:32:34 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPH3676.html
[2010-04-18 13:32:34 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempEy3676.html
[2010-04-18 08:58:52 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempUS1068.html
[2010-04-18 08:58:52 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempQd1068.html
[2010-04-16 18:32:55 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempKaH828.html
[2010-04-16 18:32:55 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempVYB828.html
[2010-04-14 19:33:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempZc1560.html
[2010-04-14 19:33:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempuS1560.html
[2010-04-12 19:12:27 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempwB5124.html
[2010-04-12 19:12:27 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempFV5124.html
[2010-04-11 11:22:54 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemptL1700.html
[2010-04-11 11:22:54 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempXc1700.html
[2010-04-09 16:33:52 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempyi2704.html
[2010-04-09 16:33:52 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempgV2704.html
[2010-04-05 19:27:18 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempjW1360.html
[2010-04-05 19:27:18 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempJu1360.html
[2010-03-31 16:02:56 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempSXP844.html
[2010-03-30 19:12:05 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbl1628.html
[2010-03-30 19:12:05 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempqI1628.html
[2010-03-29 10:46:16 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempUO1452.html
[2010-03-29 10:46:16 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempOQ1452.html
[2010-03-28 18:27:06 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempuX1488.html
[2010-03-28 18:27:06 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempmx1488.html
[2010-03-23 20:24:41 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempfE1460.html
[2010-03-23 20:24:41 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempYf1460.html
[2010-03-22 19:51:35 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempJI4128.html
[2010-03-22 19:51:35 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Temphh4128.html
[2010-03-19 20:35:01 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempBV1000.html
[2010-03-17 19:20:05 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbk5976.html
[2010-03-17 19:20:05 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempiS5976.html
[2010-03-16 21:27:09 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempehR908.html
[2010-03-16 21:27:09 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempdGR908.html
[2010-03-16 11:50:41 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemptRP824.html
[2010-03-16 11:50:41 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempoMc824.html
[2010-03-13 20:06:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempMJ1532.html
[2010-03-13 20:06:32 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempcC1532.html
[2010-03-12 20:00:37 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempuJ2256.html
[2010-03-12 17:29:19 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempHi1492.html
[2010-03-12 17:29:19 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Templk1492.html
[2010-03-11 21:45:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempeF1396.html
[2010-03-11 21:45:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempGw1396.html
[2010-03-09 18:58:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempCF3788.html
[2010-03-09 18:58:08 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemptG3788.html
[2010-02-23 17:38:23 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempKA1424.html
[2010-02-23 17:38:23 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempQq1424.html
[2010-02-22 10:57:47 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempdN1432.html
[2010-02-22 10:57:47 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempNy1432.html
[2010-02-21 13:41:21 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempUS1248.html
[2010-02-21 13:41:21 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempUG1248.html
[2008-05-23 19:12:31 | 000,027,872 | ---- | C] () -- C:\Users\user\AppData\Roaming\UserTile.png
[2007-11-16 18:48:13 | 000,013,312 | ---- | C] () -- C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[color=#E56717]========== LOP Check ==========[/color]

[2010-07-21 20:19:08 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\BearShare
[2010-02-23 19:27:43 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Foxit Software
[2007-11-10 16:31:50 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Gadu-Gadu
[2012-05-02 11:05:08 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Gadu-Gadu 10
[2012-02-03 12:07:19 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\gtk-2.0
[2010-07-10 17:35:30 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\ipla
[2010-02-14 21:07:55 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Leadertech
[2010-03-05 20:00:10 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\LG Electronics
[2009-07-03 07:55:45 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\MusicNet
[2010-05-08 17:56:53 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Nowe Gadu-Gadu
[2010-08-21 15:14:10 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\OpenFM
[2010-05-27 13:47:37 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\PeerNetworking
[2012-04-17 21:04:07 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\PhotoScape
[2010-07-10 19:34:19 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Plus Internet
[2011-02-01 18:08:09 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\RDRM
[2009-10-03 21:48:53 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\uTorrent
[2012-07-24 13:31:19 | 000,032,586 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %systemdrive%\*.* >[/color]
[2006-12-06 10:23:32 | 000,000,015 | ---- | M] () -- C:\appinst.cmd
[2006-09-18 23:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
[2007-01-05 13:29:34 | 000,000,030 | ---- | M] () -- C:\batch.wtc
[2006-11-02 11:53:57 | 000,438,840 | RHS- | M] () -- C:\bootmgr
[2007-06-16 16:19:35 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK
[2006-09-18 23:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys
[2007-01-03 10:19:24 | 000,000,000 | ---- | M] () -- C:\DVD.TAG
[2012-07-24 18:45:09 | 2145,837,056 | -HS- | M] () -- C:\hiberfil.sys
[2006-11-20 15:59:34 | 000,000,066 | ---- | M] () -- C:\ins.cmd
[2010-05-23 18:15:41 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010-05-23 18:15:41 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2012-07-24 18:45:07 | 2459,762,688 | -HS- | M] () -- C:\pagefile.sys
[2007-06-16 22:46:32 | 000,015,622 | ---- | M] () -- C:\Prodlog.txt
[2006-11-09 16:05:25 | 000,000,042 | ---- | M] () -- C:\sort-d.txt
[2010-03-06 16:56:39 | 000,000,000 | ---- | M] () -- C:\Tech_Vista.log
[2006-11-14 09:42:32 | 000,000,015 | ---- | M] () -- C:\vtype.cmd
[1 C:\*.tmp files -> C:\*.tmp -> ]

[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2006-11-02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\drivers\AGP440.sys
[2006-11-02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2006-11-02 11:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
[2008-02-14 13:53:19 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\drivers\atapi.sys
[2008-02-14 13:53:19 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys
[2008-02-14 13:53:19 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys
[2008-02-14 13:53:18 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2006-11-02 10:51:03 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=AC3DD1708B22761EBD7CBE14DCC3B5D7 -- C:\Windows\System32\drivers\beep.sys
[2006-11-02 10:51:03 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=AC3DD1708B22761EBD7CBE14DCC3B5D7 -- C:\Windows\winsxs\x86_microsoft-windows-beepsys_31bf3856ad364e35_6.0.6000.16386_none_c1e9df570ab23787\beep.sys

[color=#A23BEC]< MD5 for: CDROM.SYS >[/color]
[2006-11-02 10:51:44 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=8D1866E61AF096AE8B582454F5E4D303 -- C:\Windows\System32\drivers\cdrom.sys
[2006-11-02 10:51:44 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=8D1866E61AF096AE8B582454F5E4D303 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_e487f727\cdrom.sys

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2006-11-02 11:51:42 | 000,500,840 | ---- | M] (Microsoft Corporation) MD5=227C11E1E7CF6EF8AFB2A238D209760C -- C:\Windows\System32\drivers\ndis.sys
[2006-11-02 11:51:42 | 000,500,840 | ---- | M] (Microsoft Corporation) MD5=227C11E1E7CF6EF8AFB2A238D209760C -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.0.6000.16386_none_a59069cb1f23fc44\ndis.sys

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2006-11-02 11:45:57 | 000,308,224 | ---- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD -- C:\Windows\System32\winlogon.exe
[2006-11-02 11:45:57 | 000,308,224 | ---- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6000.16386_none_6d8c3f1ad8066b21\winlogon.exe

[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2012-01-30 19:58:59 | 000,000,678 | ---- | C] ()(C:\Users\user\Documents\??????? ?????.ppt — skrót.lnk) -- C:\Users\user\Documents\Русский балет.ppt — skrót.lnk
[2012-01-30 19:46:48 | 000,000,678 | ---- | M] ()(C:\Users\user\Documents\??????? ?????.ppt — skrót.lnk) -- C:\Users\user\Documents\Русский балет.ppt — skrót.lnk
[2011-12-07 13:33:01 | 000,092,160 | ---- | C] ()(C:\Users\user\Documents\A?????? 2008.doc) -- C:\Users\user\Documents\Aдмирал 2008.doc
[2011-12-01 12:36:08 | 000,092,160 | ---- | M] ()(C:\Users\user\Documents\A?????? 2008.doc) -- C:\Users\user\Documents\Aдмирал 2008.doc
[2011-11-18 20:11:41 | 005,785,088 | ---- | C] ()(C:\Users\user\Documents\??????? ?????.ppt) -- C:\Users\user\Documents\Русский балет.ppt
[2011-11-17 11:16:22 | 005,785,088 | ---- | M] ()(C:\Users\user\Documents\??????? ?????.ppt) -- C:\Users\user\Documents\Русский балет.ppt
[2011-11-13 18:26:49 | 028,275,712 | ---- | C] ()(C:\Users\user\Documents\????????.ppt1.ppt) -- C:\Users\user\Documents\Петергоф.ppt1.ppt
[2011-11-13 18:26:43 | 003,630,080 | ---- | C] ()(C:\Users\user\Documents\?????.ppt) -- C:\Users\user\Documents\Углич.ppt
[2011-11-10 00:40:43 | 000,137,216 | ---- | C] ()(C:\Users\user\Documents\??????.doc) -- C:\Users\user\Documents\музыка.doc
[2011-11-09 23:04:57 | 000,137,216 | ---- | M] ()(C:\Users\user\Documents\??????.doc) -- C:\Users\user\Documents\музыка.doc
[2011-01-16 19:23:17 | 003,630,080 | ---- | M] ()(C:\Users\user\Documents\?????.ppt) -- C:\Users\user\Documents\Углич.ppt
[2011-01-13 18:50:30 | 000,038,930 | ---- | M] ()(C:\Users\user\Documents\?????.docx) -- C:\Users\user\Documents\Углич.docx
[2011-01-13 18:50:28 | 000,038,930 | ---- | C] ()(C:\Users\user\Documents\?????.docx) -- C:\Users\user\Documents\Углич.docx
[2011-01-12 17:58:29 | 000,120,832 | ---- | M] ()(C:\Users\user\Documents\??????? ?????????.doc) -- C:\Users\user\Documents\Евгений Гришковец.doc
[2011-01-12 17:58:28 | 000,120,832 | ---- | C] ()(C:\Users\user\Documents\??????? ?????????.doc) -- C:\Users\user\Documents\Евгений Гришковец.doc
[2010-10-30 22:08:26 | 000,205,824 | ---- | C] ()(C:\Users\user\Documents\?????´?? ?????´????? ???????´?????.doc) -- C:\Users\user\Documents\Людми́ла Стефа́новна Петруше́вская.doc
[2010-10-05 16:54:54 | 000,356,352 | ---- | M] ()(C:\Users\user\Documents\??????????????? ???? ??????.doc) -- C:\Users\user\Documents\Государственный герб России.doc
[2010-10-05 16:54:51 | 000,356,352 | ---- | C] ()(C:\Users\user\Documents\??????????????? ???? ??????.doc) -- C:\Users\user\Documents\Государственный герб России.doc
[2010-06-18 19:42:03 | 000,013,961 | ---- | M] ()(C:\Users\user\Documents\???.docx) -- C:\Users\user\Documents\ФЕТ.docx
[2010-06-18 19:41:21 | 000,015,716 | ---- | M] ()(C:\Users\user\Documents\????? ???????????.docx) -- C:\Users\user\Documents\Театр Островского.docx
[2010-06-18 19:40:47 | 000,442,972 | ---- | M] ()(C:\Users\user\Documents\???????? ???.docx) -- C:\Users\user\Documents\ВИШНЕВЫЙ САД.docx
[2010-06-17 19:16:38 | 000,147,177 | ---- | M] ()(C:\Users\user\Documents\???????????? ???????.docx) -- C:\Users\user\Documents\ОБЫКНОВЕННАЯ ПОВЕСТЬ.docx
[2010-06-17 19:16:31 | 000,147,177 | ---- | C] ()(C:\Users\user\Documents\???????????? ???????.docx) -- C:\Users\user\Documents\ОБЫКНОВЕННАЯ ПОВЕСТЬ.docx
[2010-05-29 15:56:17 | 000,442,972 | ---- | C] ()(C:\Users\user\Documents\???????? ???.docx) -- C:\Users\user\Documents\ВИШНЕВЫЙ САД.docx
[2010-05-26 20:53:56 | 000,000,162 | -H-- | M] ()(C:\Users\user\Desktop\~$???´?? ?????´????? ???????´?????.doc) -- C:\Users\user\Desktop\~$дми́ла Стефа́новна Петруше́вская.doc
[2010-05-26 20:53:56 | 000,000,162 | -H-- | C] ()(C:\Users\user\Desktop\~$???´?? ?????´????? ???????´?????.doc) -- C:\Users\user\Desktop\~$дми́ла Стефа́новна Петруше́вская.doc
[2010-05-26 20:46:56 | 000,205,824 | ---- | M] ()(C:\Users\user\Documents\?????´?? ?????´????? ???????´?????.doc) -- C:\Users\user\Documents\Людми́ла Стефа́новна Петруше́вская.doc
[2010-05-26 20:46:41 | 000,022,436 | ---- | M] ()(C:\Users\user\Documents\??????????? ??????? ?????.docx) -- C:\Users\user\Documents\Современная русская проза.docx
[2010-05-26 20:46:39 | 000,022,436 | ---- | C] ()(C:\Users\user\Documents\??????????? ??????? ?????.docx) -- C:\Users\user\Documents\Современная русская проза.docx
[2010-05-24 18:18:31 | 000,290,830 | ---- | M] ()(C:\Users\user\Documents\????? ?????.docx) -- C:\Users\user\Documents\Антон Чехов.docx
[2010-05-18 19:35:25 | 000,290,830 | ---- | C] ()(C:\Users\user\Documents\????? ?????.docx) -- C:\Users\user\Documents\Антон Чехов.docx
[2010-04-26 19:51:25 | 002,578,498 | ---- | M] ()(C:\Users\user\Documents\??????????? ?????? ?????.docx) -- C:\Users\user\Documents\Воскрешение дочери Иаира.docx
[2010-04-24 12:17:32 | 002,578,498 | ---- | C] ()(C:\Users\user\Documents\??????????? ?????? ?????.docx) -- C:\Users\user\Documents\Воскрешение дочери Иаира.docx
[2010-04-21 17:48:41 | 000,058,939 | ---- | C] ()(C:\Users\user\Documents\???????´? właściwy.docx) -- C:\Users\user\Documents\Петерго́ф właściwy.docx
[2010-04-21 15:42:44 | 000,295,936 | ---- | M] ()(C:\Users\user\Documents\????????? ????????????? ??????.doc) -- C:\Users\user\Documents\Александр Александрович Фадеев.doc
[2010-04-21 14:45:04 | 000,295,936 | ---- | C] ()(C:\Users\user\Documents\????????? ????????????? ??????.doc) -- C:\Users\user\Documents\Александр Александрович Фадеев.doc
[2010-04-10 16:57:35 | 000,000,000 | ---D | M](C:\Users\user\Documents\????????? ? ????????????? ????) -- C:\Users\user\Documents\Интонация в диалогической речи
[2010-04-10 16:56:30 | 000,000,000 | ---D | C](C:\Users\user\Documents\????????? ? ????????????? ????) -- C:\Users\user\Documents\Интонация в диалогической речи
[2010-03-18 14:31:01 | 001,548,288 | ---- | M] ()(C:\Users\user\Documents\???????????? ??????????? ?????????????? ????????.doc) -- C:\Users\user\Documents\Товарищество Передвижных Художественных Выставок.doc
[2010-03-18 14:17:04 | 000,058,939 | ---- | M] ()(C:\Users\user\Documents\???????´? właściwy.docx) -- C:\Users\user\Documents\Петерго́ф właściwy.docx
[2010-03-18 12:23:51 | 028,275,712 | ---- | M] ()(C:\Users\user\Documents\????????.ppt1.ppt) -- C:\Users\user\Documents\Петергоф.ppt1.ppt
[2010-03-17 18:33:01 | 001,548,288 | ---- | C] ()(C:\Users\user\Documents\???????????? ??????????? ?????????????? ????????.doc) -- C:\Users\user\Documents\Товарищество Передвижных Художественных Выставок.doc
[2010-02-21 14:07:45 | 000,017,155 | ---- | M] ()(C:\Users\user\Documents\?? ?????.docx) -- C:\Users\user\Documents\До оконч.docx
[2010-01-21 16:36:48 | 000,017,155 | ---- | C] ()(C:\Users\user\Documents\?? ?????.docx) -- C:\Users\user\Documents\До оконч.docx
[2009-12-24 13:36:46 | 000,074,752 | ---- | M] ()(C:\Users\user\Documents\????? ???.doc) -- C:\Users\user\Documents\Тихий Дон.doc
[2009-12-22 16:09:28 | 000,028,416 | ---- | M] ()(C:\Users\user\Documents\?????? ? ?????????.docx) -- C:\Users\user\Documents\Мастер и Маргарита.docx
[2009-12-22 16:09:27 | 000,028,416 | ---- | C] ()(C:\Users\user\Documents\?????? ? ?????????.docx) -- C:\Users\user\Documents\Мастер и Маргарита.docx
[2009-12-07 19:49:55 | 000,074,752 | ---- | C] ()(C:\Users\user\Documents\????? ???.doc) -- C:\Users\user\Documents\Тихий Дон.doc
[2009-11-22 17:38:14 | 000,395,882 | ---- | M] ()(C:\Users\user\Documents\????????? ???????????.docx) -- C:\Users\user\Documents\Александр Серафимович.docx
[2009-11-18 21:15:38 | 000,395,882 | ---- | C] ()(C:\Users\user\Documents\????????? ???????????.docx) -- C:\Users\user\Documents\Александр Серафимович.docx
[2009-11-03 13:14:25 | 000,087,040 | ---- | M] ()(C:\Users\user\Documents\????????.doc) -- C:\Users\user\Documents\Футуризм.doc
[2009-10-22 20:30:33 | 000,043,008 | ---- | M] ()(C:\Users\user\Documents\?????´??.doc) -- C:\Users\user\Documents\Акмеи́зм.doc
[2009-10-17 18:31:34 | 000,087,040 | ---- | C] ()(C:\Users\user\Documents\????????.doc) -- C:\Users\user\Documents\Футуризм.doc
[2009-10-17 18:26:00 | 000,043,008 | ---- | C] ()(C:\Users\user\Documents\?????´??.doc) -- C:\Users\user\Documents\Акмеи́зм.doc
[2009-02-12 13:20:11 | 000,015,716 | ---- | C] ()(C:\Users\user\Documents\????? ???????????.docx) -- C:\Users\user\Documents\Театр Островского.docx
[2008-12-22 18:03:55 | 000,013,961 | ---- | C] ()(C:\Users\user\Documents\???.docx) -- C:\Users\user\Documents\ФЕТ.docx

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:2F943019

< End of report >

[/log]

Wolverine1871
komentarz
komentarz

Ten skurwiel staje się coraz lepszy, ja niedawno jak przedwczoraj miałem z nim ten sam problem co M@RIO96 z tym, że mi wyskoczył podczas przeglądania stron, żadna walka wg sposobów pokazanych na necie nie pomogła, dopiero format kompa coś dał. Nawet jaśnie wielomożny pan antywirus avast go nie wykrył, także zastanawiam się nad zmianą oprogramowania antywirusowego.

Gość
komentarz
komentarz

Wywaliłeś wpis w msconfig i nie mam jak wywalic tego wpisu.

1. Uruchom OTL i w okno [b]Własne opcje skanowania /skrypt[/b]

Wklej

[code]
:OTL
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.c...ferrer:source?}
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.condui...&ctid=CT2417076
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incre...541377313324536
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\URLSearchHook: {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: "URL" = http://search.bearsh...q={searchTerms}
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.condui...&ctid=CT2417076
IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incre...541377313324536
FF - prefs.js..browser.search.defaultenginename: "MyStart Search"
FF - prefs.js..browser.startup.homepage: "http://mystart.incredimail.com/mb68?u=92541377313324536"
FF - prefs.js..keyword.URL: "http://mystart.incredimail.com/mb68/?loc=ff_address_bar&u=92541377313324536&search="
O2 - BHO: (UrlHelper Class) - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareIEHelper.dll ()
O2 - BHO: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll (BearShare)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC)
O3 - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\Toolbar\WebBrowser: (gry Toolbar) - {8532A8B7-C06A-41BB-936A-8CE73E4711ED} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\Toolbar\WebBrowser: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll (BearShare)
O3 - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC)
O33 - MountPoints2\{6b522c5b-7300-11df-9ee0-00030d6fe73d}\Shell\AutoRun\command - "" = F:\12gn6id2.exe
O33 - MountPoints2\{6b522c5b-7300-11df-9ee0-00030d6fe73d}\Shell\open\Command - "" = F:\12gn6id2.exe
O33 - MountPoints2\{a465b05f-858f-11e1-b710-97155b4ce97b}\Shell - "" = AutoRun
:Files
C:\Users\user\AppData\Local\*.html
C:\ProgramData\tvhezzqffmikhut
C:\Users\user\ms.exe
C:\ProgramData\yinariix.exe
C:\ProgramData\ardzseokbdrpcvb
:Commands
[EMPTYTEMP]
[/code]

Kliknij [b]Wykonaj skrypt[/b]

2.Po restarcie kliknij [b]Sprzątanie[/b]


3.Zainstaluj ccleaner-a i w zakładce narzędzia przejdż do autostart i zaznacz ten szkodliwy wpis i kliknij na usun wpis.


4.Użyj adwcleaner-a

http://general-changelog-team.fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner


opcja [b]Delete[/b]

5.Przeskanuj system skanerem [b]MALWAREBYTES Anti-Malware[/b](odrzuć ofertę testową)

Jeżeli coś znajdzie przedstaw raport

Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!

Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.

×
×
  • Dodaj nową pozycję...

Powiadomienie o plikach cookie

Strona wykorzystuje pliki cookies w celu prawidłowego świadczenia usług i wygody użytkowników. Warunki przechowywania i dostępu do plików cookies możesz zmienić w ustawieniach przeglądarki.