trophy250 utworzono 24 lipca 2012 utworzono 24 lipca 2012 (edytowane) Witam. ale nie jest mi do śmiechu :/ chodzi mianowicie o to że chciałem zarejestrować program avast po przez znaleziony klucz licencji w sieci. i nagle wyskoczyła mi wiadomość żę jest blokada ukash i że trzeba płącić 500zł lub 200zł ;/ wszedłem więc w tryb awaryjny odinstalowałem avast-a i jak teraz uruchamiam komputer w trybie normalnym to nie wyskakuje mi blokada ale się boję że jakieś pozostałości po tym mogą zostać w systemie. daje wam log z mojego komputera a wy jak możecie to sprawdźcie i podajcie mi dobry log który by to całkiem usunął oraz jak są inne problemy z systemem to też. Pozdrawiam i z góry dziękuję [log]OTL logfile created on: 2012-07-24 19:01:54 - Run 1 OTL by OldTimer - Version 3.2.54.1 Folder = D:\ Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation Internet Explorer (Version = 7.0.6000.16982) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,27 Gb Available Physical Memory | 63,69% Memory free 4,20 Gb Paging File | 3,49 Gb Available in Paging File | 83,11% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 91,45 Gb Total Space | 1,72 Gb Free Space | 1,89% Space Free | Partition Type: NTFS Drive D: | 45,72 Gb Total Space | 8,29 Gb Free Space | 18,12% Space Free | Partition Type: NTFS Drive F: | 11,67 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: USER-PC | User Name: user | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (All) ==========[/color] PRC - [2012-07-24 18:59:51 | 000,596,480 | ---- | M] (OldTimer Tools) -- D:\OTL.exe PRC - [2012-07-05 18:41:46 | 003,048,136 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe PRC - [2012-05-19 18:51:23 | 000,924,600 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2012-05-19 18:51:15 | 000,016,824 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe PRC - [2012-02-10 11:28:06 | 000,240,408 | ---- | M] (Microsoft Corporation.) -- C:\Program Files\Microsoft\BingBar\7.1.361.0\SeaPort.EXE PRC - [2012-02-10 11:28:06 | 000,193,816 | ---- | M] (Microsoft Corporation.) -- C:\Program Files\Microsoft\BingBar\7.1.361.0\BBSvc.EXE PRC - [2011-07-04 19:58:02 | 003,302,720 | ---- | M] () -- C:\Program Files\Plus Internet\Plus Internet.exe PRC - [2010-07-10 20:43:33 | 001,535,176 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe PRC - [2010-06-01 11:16:01 | 000,116,648 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\GoogleUpdate.exe PRC - [2009-06-15 15:10:12 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsass.exe PRC - [2008-10-29 08:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2008-02-20 17:33:47 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\servicing\TrustedInstaller.exe PRC - [2007-11-10 18:08:29 | 002,605,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SLsvc.exe PRC - [2007-04-11 21:52:46 | 000,593,920 | ---- | M] (ATI Technologies Inc.) -- C:\Windows\System32\Ati2evxx.exe PRC - [2006-12-08 19:52:04 | 000,204,800 | ---- | M] (Fujitsu Siemens Computers) -- C:\FirstSteps\OnlineDiagnostic\TestManager\TestHandler.exe PRC - [2006-11-02 14:36:04 | 000,895,488 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnetwk.exe PRC - [2006-11-02 14:36:04 | 000,201,728 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnscfg.exe PRC - [2006-11-02 14:35:32 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehtray.exe PRC - [2006-11-02 14:35:32 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehmsas.exe PRC - [2006-11-02 11:45:57 | 000,308,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winlogon.exe PRC - [2006-11-02 11:45:57 | 000,095,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininit.exe PRC - [2006-11-02 11:45:48 | 000,166,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskeng.exe PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2006-11-02 11:45:47 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch] PRC - [2006-11-02 11:45:46 | 000,124,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spoolsv.exe PRC - [2006-11-02 11:45:45 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\smss.exe PRC - [2006-11-02 11:45:40 | 000,279,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\services.exe PRC - [2006-11-02 11:45:21 | 000,210,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsm.exe PRC - [2006-11-02 11:45:04 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe PRC - [2006-11-02 11:45:00 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrss.exe PRC - [2006-11-02 11:44:59 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe [color=#E56717]========== Modules (All) ==========[/color] MOD - [2012-07-24 18:59:51 | 000,596,480 | ---- | M] (OldTimer Tools) -- D:\OTL.exe MOD - [2012-05-19 18:51:25 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browsercomps.dll MOD - [2012-05-19 18:51:23 | 000,924,600 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe MOD - [2012-05-19 18:51:23 | 000,269,240 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\freebl3.dll MOD - [2012-05-19 18:51:22 | 001,952,696 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2012-05-19 18:51:22 | 000,043,960 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\mozglue.dll MOD - [2012-05-19 18:51:22 | 000,016,312 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\mozalloc.dll MOD - [2012-05-19 18:51:21 | 000,838,584 | ---- | M] (sqlite.org) -- C:\Program Files\Mozilla Firefox\mozsqlite3.dll MOD - [2012-05-19 18:51:20 | 000,187,320 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nspr4.dll MOD - [2012-05-19 18:51:19 | 000,646,072 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nss3.dll MOD - [2012-05-19 18:51:19 | 000,371,640 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nssckbi.dll MOD - [2012-05-19 18:51:19 | 000,109,496 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nssdbm3.dll MOD - [2012-05-19 18:51:19 | 000,105,400 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nssutil3.dll MOD - [2012-05-19 18:51:15 | 000,170,936 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\softokn3.dll MOD - [2012-05-19 18:51:15 | 000,158,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\ssl3.dll MOD - [2012-05-19 18:51:15 | 000,105,400 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\smime3.dll MOD - [2012-05-19 18:51:15 | 000,022,456 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\plc4.dll MOD - [2012-05-19 18:51:15 | 000,020,920 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\plds4.dll MOD - [2012-05-19 18:51:15 | 000,016,824 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe MOD - [2012-05-19 18:51:14 | 015,743,928 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\xul.dll MOD - [2012-05-19 18:51:14 | 000,019,896 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\xpcom.dll MOD - [2012-01-26 11:45:01 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll MOD - [2012-01-26 11:45:01 | 000,554,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcp80.dll MOD - [2012-01-26 11:44:58 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421de\ATL80.dll MOD - [2011-07-27 06:14:02 | 000,967,008 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveUtil.dll MOD - [2011-07-04 19:58:02 | 003,302,720 | ---- | M] () -- C:\Program Files\Plus Internet\Plus Internet.exe MOD - [2011-07-04 19:57:58 | 001,097,728 | ---- | M] () -- C:\Program Files\Plus Internet\NDISAPI.dll MOD - [2010-07-10 20:43:33 | 001,535,176 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe MOD - [2010-07-10 20:43:32 | 009,459,912 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_3_300_262.dll MOD - [2009-12-23 14:45:43 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wintrust.dll MOD - [2009-12-18 14:52:36 | 000,832,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininet.dll MOD - [2009-12-18 14:52:27 | 001,168,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\urlmon.dll MOD - [2009-12-18 14:48:23 | 000,268,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iertutil.dll MOD - [2009-12-18 14:48:22 | 006,067,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieframe.dll MOD - [2009-10-23 19:54:58 | 000,713,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl MOD - [2009-10-19 16:42:37 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll MOD - [2009-10-19 16:39:09 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpk.dll MOD - [2009-09-10 19:38:29 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msv1_0.dll MOD - [2009-09-04 14:38:11 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msasn1.dll MOD - [2009-08-29 05:40:25 | 000,537,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\AppPatch\AcLayers.dll MOD - [2009-08-24 14:47:07 | 000,378,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winhttp.dll MOD - [2009-08-10 15:05:23 | 001,260,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml3.dll MOD - [2009-07-17 16:52:41 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\atl.dll MOD - [2009-07-11 21:32:57 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanapi.dll MOD - [2009-06-15 17:28:58 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secur32.dll MOD - [2009-06-15 17:28:56 | 000,272,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schannel.dll MOD - [2009-04-23 15:01:43 | 000,788,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpcrt4.dll MOD - [2009-02-27 15:48:36 | 001,008,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\1045\GrooveIntlResource.dll MOD - [2009-02-26 19:37:02 | 000,178,040 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll MOD - [2009-02-26 19:36:54 | 002,217,832 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll MOD - [2009-02-26 19:36:48 | 000,021,856 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveNew.dll MOD - [2009-02-26 19:36:46 | 001,560,912 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMisc.dll MOD - [2009-02-13 09:26:37 | 000,875,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kernel32.dll MOD - [2008-11-27 06:35:51 | 001,744,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6000.16782_none_9ea1072ec96e0be7\GdiPlus.dll MOD - [2008-11-06 14:57:06 | 011,315,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shell32.dll MOD - [2008-10-29 08:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe MOD - [2008-10-22 05:43:51 | 000,241,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll MOD - [2008-10-22 05:43:51 | 000,160,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceTypes.dll MOD - [2008-10-21 07:16:20 | 000,297,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gdi32.dll MOD - [2008-10-16 06:40:36 | 000,425,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netapi32.dll MOD - [2008-08-28 05:24:51 | 000,712,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecs.dll MOD - [2008-06-26 05:22:33 | 001,523,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0000.dll MOD - [2008-06-26 05:22:33 | 000,797,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NaturalLanguage6.dll MOD - [2008-04-19 10:13:07 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\es.dll MOD - [2008-02-29 08:39:13 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srclient.dll MOD - [2008-02-20 17:33:48 | 001,585,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupapi.dll MOD - [2008-02-20 17:33:48 | 000,558,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleaut32.dll MOD - [2007-12-16 13:42:18 | 000,162,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnsapi.dll MOD - [2007-11-15 08:48:56 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wtsapi32.dll MOD - [2007-11-10 18:11:32 | 000,392,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FirewallAPI.dll MOD - [2007-11-10 18:08:31 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SLC.dll MOD - [2007-11-10 18:07:30 | 001,984,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authui.dll MOD - [2007-11-10 18:07:30 | 000,204,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc.dll MOD - [2007-11-10 18:07:30 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll MOD - [2007-06-16 15:41:11 | 000,974,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\crypt32.dll MOD - [2007-06-16 15:40:33 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imagehlp.dll MOD - [2007-06-16 15:39:24 | 000,090,296 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MpOAV.dll MOD - [2007-06-16 15:35:12 | 000,229,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msshsq.dll MOD - [2007-06-16 15:31:15 | 000,633,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\user32.dll MOD - [2007-04-11 21:54:20 | 000,159,744 | ---- | M] () -- C:\Windows\System32\atitmmxx.dll MOD - [2007-04-11 21:54:10 | 000,253,952 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\System32\atipdlxx.dll MOD - [2007-04-11 21:42:24 | 002,792,448 | ---- | M] (ATI Technologies Inc. ) -- C:\Windows\System32\atiumdag.dll MOD - [2007-04-11 21:30:14 | 002,802,176 | ---- | M] (ATI Technologies Inc. ) -- C:\Windows\System32\atiumdva.dll MOD - [2007-03-02 20:44:34 | 000,073,728 | ---- | M] () -- c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll MOD - [2006-11-02 14:36:19 | 000,208,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uDWM.dll MOD - [2006-11-02 14:36:16 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spp.dll MOD - [2006-11-02 14:36:04 | 000,201,728 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnscfg.exe MOD - [2006-11-02 14:36:04 | 000,194,560 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnssci.dll MOD - [2006-11-02 14:36:03 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\HotStartUserAgent.dll MOD - [2006-11-02 14:35:58 | 000,131,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WPDShServiceObj.dll MOD - [2006-11-02 14:35:52 | 000,099,328 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpband.dll MOD - [2006-11-02 14:35:38 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnrpnsp.dll MOD - [2006-11-02 14:35:34 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wpc.dll MOD - [2006-11-02 14:35:33 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehProxy.dll MOD - [2006-11-02 14:35:32 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehtray.exe MOD - [2006-11-02 14:35:32 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehmsas.exe MOD - [2006-11-02 14:35:30 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehSSO.dll MOD - [2006-11-02 14:35:09 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll MOD - [2006-11-02 14:34:50 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AltTab.dll MOD - [2006-11-02 14:34:48 | 002,205,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncCenter.dll MOD - [2006-11-02 14:34:48 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\linkinfo.dll MOD - [2006-11-02 14:34:47 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscntfy.dll MOD - [2006-11-02 14:34:35 | 001,298,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TMM.dll MOD - [2006-11-02 14:34:33 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IconCodecService.dll MOD - [2006-11-02 14:34:32 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\davclnt.dll MOD - [2006-11-02 11:47:26 | 001,162,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntdll.dll MOD - [2006-11-02 11:47:18 | 000,228,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rsaenh.dll MOD - [2006-11-02 11:46:16 | 000,126,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xmllite.dll MOD - [2006-11-02 11:46:14 | 000,288,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wldap32.dll MOD - [2006-11-02 11:46:14 | 000,193,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winmm.dll MOD - [2006-11-02 11:46:14 | 000,178,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ws2_32.dll MOD - [2006-11-02 11:46:14 | 000,134,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winsta.dll MOD - [2006-11-02 11:46:14 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSCard.dll MOD - [2006-11-02 11:46:14 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrnr.dll MOD - [2006-11-02 11:46:14 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winnsi.dll MOD - [2006-11-02 11:46:14 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsock32.dll MOD - [2006-11-02 11:46:14 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSHTCPIP.DLL MOD - [2006-11-02 11:46:14 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wship6.dll MOD - [2006-11-02 11:46:14 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanutil.dll MOD - [2006-11-02 11:46:13 | 001,064,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shdocvw.dll MOD - [2006-11-02 11:46:13 | 000,994,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vssapi.dll MOD - [2006-11-02 11:46:13 | 000,869,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winbrand.dll MOD - [2006-11-02 11:46:13 | 000,586,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\stobject.dll MOD - [2006-11-02 11:46:13 | 000,502,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usp10.dll MOD - [2006-11-02 11:46:13 | 000,339,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shlwapi.dll MOD - [2006-11-02 11:46:13 | 000,247,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll MOD - [2006-11-02 11:46:13 | 000,244,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wevtapi.dll MOD - [2006-11-02 11:46:13 | 000,240,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uxtheme.dll MOD - [2006-11-02 11:46:13 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\webcheck.dll MOD - [2006-11-02 11:46:13 | 000,191,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapi32.dll MOD - [2006-11-02 11:46:13 | 000,185,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SndVolSSO.dll MOD - [2006-11-02 11:46:13 | 000,111,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shimeng.dll MOD - [2006-11-02 11:46:13 | 000,107,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\userenv.dll MOD - [2006-11-02 11:46:13 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shacct.dll MOD - [2006-11-02 11:46:13 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vsstrace.dll MOD - [2006-11-02 11:46:13 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\thumbcache.dll MOD - [2006-11-02 11:46:13 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\version.dll MOD - [2006-11-02 11:46:13 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSChannel.dll MOD - [2006-11-02 11:46:13 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\slwga.dll MOD - [2006-11-02 11:46:12 | 001,822,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnidui.dll MOD - [2006-11-02 11:46:12 | 001,314,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ole32.dll MOD - [2006-11-02 11:46:12 | 000,733,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\propsys.dll MOD - [2006-11-02 11:46:12 | 000,296,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntshrui.dll MOD - [2006-11-02 11:46:12 | 000,280,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasapi32.dll MOD - [2006-11-02 11:46:12 | 000,214,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleacc.dll MOD - [2006-11-02 11:46:12 | 000,163,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QAGENT.DLL MOD - [2006-11-02 11:46:12 | 000,162,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\onex.dll MOD - [2006-11-02 11:46:12 | 000,120,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntmarta.dll MOD - [2006-11-02 11:46:12 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powrprof.dll MOD - [2006-11-02 11:46:12 | 000,088,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olepro32.dll MOD - [2006-11-02 11:46:12 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntdsapi.dll MOD - [2006-11-02 11:46:12 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QUTIL.DLL MOD - [2006-11-02 11:46:12 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasman.dll MOD - [2006-11-02 11:46:12 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntlanman.dll MOD - [2006-11-02 11:46:12 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samlib.dll MOD - [2006-11-02 11:46:12 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pautoenr.dll MOD - [2006-11-02 11:46:12 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll MOD - [2006-11-02 11:46:12 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PlaySndSrv.dll MOD - [2006-11-02 11:46:12 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\npmproxy.dll MOD - [2006-11-02 11:46:12 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psapi.dll MOD - [2006-11-02 11:46:12 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasadhlp.dll MOD - [2006-11-02 11:46:12 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nsi.dll MOD - [2006-11-02 11:46:11 | 003,174,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netshell.dll MOD - [2006-11-02 11:46:11 | 000,193,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll MOD - [2006-11-02 11:46:11 | 000,180,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\newdev.dll MOD - [2006-11-02 11:46:11 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NapiNSP.dll MOD - [2006-11-02 11:46:11 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlaapi.dll MOD - [2006-11-02 11:46:10 | 000,681,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcrt.dll MOD - [2006-11-02 11:46:10 | 000,227,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mswsock.dll MOD - [2006-11-02 11:46:10 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msutb.dll MOD - [2006-11-02 11:46:07 | 002,095,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msi.dll MOD - [2006-11-02 11:46:07 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msiltcfg.dll MOD - [2006-11-02 11:46:07 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msimg32.dll MOD - [2006-11-02 11:46:06 | 000,805,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msctf.dll MOD - [2006-11-02 11:46:06 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscms.dll MOD - [2006-11-02 11:46:06 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm32.dll MOD - [2006-11-02 11:46:06 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsCtfMonitor.dll MOD - [2006-11-02 11:46:05 | 002,014,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\milcore.dll MOD - [2006-11-02 11:46:05 | 000,543,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL MOD - [2006-11-02 11:46:05 | 000,316,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imapi2.dll MOD - [2006-11-02 11:46:05 | 000,213,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icm32.dll MOD - [2006-11-02 11:46:05 | 000,187,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mlang.dll MOD - [2006-11-02 11:46:05 | 000,146,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MMDevAPI.dll MOD - [2006-11-02 11:46:05 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imm32.dll MOD - [2006-11-02 11:46:05 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IPHLPAPI.DLL MOD - [2006-11-02 11:46:05 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpapi.dll MOD - [2006-11-02 11:46:05 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mpr.dll MOD - [2006-11-02 11:46:05 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hid.dll MOD - [2006-11-02 11:46:05 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\midimap.dll MOD - [2006-11-02 11:46:05 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksuser.dll MOD - [2006-11-02 11:46:04 | 000,445,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsound.dll MOD - [2006-11-02 11:46:04 | 000,183,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\duser.dll MOD - [2006-11-02 11:46:04 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eappcfg.dll MOD - [2006-11-02 11:46:04 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fundisc.dll MOD - [2006-11-02 11:46:04 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmredir.dll MOD - [2006-11-02 11:46:04 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\feclient.dll MOD - [2006-11-02 11:46:04 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eappprxy.dll MOD - [2006-11-02 11:46:04 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmapi.dll MOD - [2006-11-02 11:46:04 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdProxy.dll MOD - [2006-11-02 11:46:04 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll MOD - [2006-11-02 11:46:04 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drprov.dll MOD - [2006-11-02 11:46:03 | 001,788,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d9.dll MOD - [2006-11-02 11:46:03 | 000,798,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dbghelp.dll MOD - [2006-11-02 11:46:03 | 000,454,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comdlg32.dll MOD - [2006-11-02 11:46:03 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptdll.dll MOD - [2006-11-02 11:46:03 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dimsjob.dll MOD - [2006-11-02 11:46:03 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscapi.dll MOD - [2006-11-02 11:46:03 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\credssp.dll MOD - [2006-11-02 11:46:03 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d8thk.dll MOD - [2006-11-02 11:46:02 | 001,321,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\browseui.dll MOD - [2006-11-02 11:46:02 | 001,105,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll MOD - [2006-11-02 11:46:02 | 000,770,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\advapi32.dll MOD - [2006-11-02 11:46:02 | 000,737,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\batmeter.dll MOD - [2006-11-02 11:46:02 | 000,523,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clbcatq.dll MOD - [2006-11-02 11:46:02 | 000,398,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AudioEng.dll MOD - [2006-11-02 11:46:02 | 000,327,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\actxprxy.dll MOD - [2006-11-02 11:46:02 | 000,320,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certcli.dll MOD - [2006-11-02 11:46:02 | 000,265,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcrypt.dll MOD - [2006-11-02 11:46:02 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apphelp.dll MOD - [2006-11-02 11:46:02 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AudioSes.dll MOD - [2006-11-02 11:46:02 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authz.dll MOD - [2006-11-02 11:46:02 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cabinet.dll MOD - [2006-11-02 11:46:02 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avrt.dll MOD - [2006-11-02 11:45:48 | 000,166,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskeng.exe MOD - [2006-11-02 11:45:04 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe MOD - [2006-11-02 11:44:59 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe MOD - [2006-11-02 11:44:49 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx MOD - [2006-11-02 11:44:42 | 000,989,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthprops.cpl MOD - [2006-11-02 11:44:42 | 000,255,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winspool.drv MOD - [2006-11-02 11:44:42 | 000,168,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdmaud.drv MOD - [2006-11-02 11:44:42 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm32.drv MOD - [2006-11-02 11:38:57 | 001,648,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll MOD - [2006-11-02 11:38:56 | 000,537,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6000.16386_none_87e0cb09378714f1\comctl32.dll MOD - [2006-11-02 10:33:06 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\normaliz.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2012-07-05 18:41:46 | 003,048,136 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2012-05-19 18:51:22 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-05-03 08:31:10 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-02-10 11:28:06 | 000,240,408 | ---- | M] (Microsoft Corporation.) [On_Demand | Running] -- C:\Program Files\Microsoft\BingBar\7.1.361.0\SeaPort.EXE -- (BBUpdate) SRV - [2012-02-10 11:28:06 | 000,193,816 | ---- | M] (Microsoft Corporation.) [Auto | Running] -- C:\Program Files\Microsoft\BingBar\7.1.361.0\BBSvc.EXE -- (BBSvc) SRV - [2010-02-03 18:35:34 | 005,730,304 | ---- | M] () [Auto | Stopped] -- C:\Program Files\MySql\MySqlServer\bin\mysqld-nt.exe -- (MySql) SRV - [2009-08-24 14:47:07 | 000,378,368 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc) SRV - [2007-06-16 15:39:23 | 000,265,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2006-12-08 19:52:04 | 000,204,800 | ---- | M] (Fujitsu Siemens Computers) [Auto | Running] -- C:\FirstSteps\OnlineDiagnostic\TestManager\TestHandler.exe -- (TestHandler) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive) DRV - [2011-07-04 19:58:18 | 000,072,576 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ew_jubusenum.sys -- (huawei_enumerator) DRV - [2011-07-04 19:58:16 | 000,116,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ewusbnet.sys -- (ewusbnet) DRV - [2011-07-04 19:58:16 | 000,106,880 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard) DRV - [2011-07-04 19:58:16 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev) DRV - [2011-07-04 19:58:16 | 000,011,136 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ew_usbenumfilter.sys -- (ew_usbenumfilter) DRV - [2007-07-11 16:51:48 | 000,019,840 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbdiag.sys -- (UsbDiag) DRV - [2007-07-11 11:45:00 | 000,021,632 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbmodem.sys -- (USBModem) DRV - [2007-07-11 11:40:18 | 000,012,416 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbbus.sys -- (usbbus) DRV - [2007-04-11 22:03:22 | 002,589,696 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) DRV - [2007-04-04 05:57:00 | 000,046,592 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\itecir.sys -- (itecir) DRV - [2007-02-25 06:14:00 | 002,216,448 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw4v32.sys -- (NETw4v32) DRV - [2006-11-22 18:35:00 | 000,982,272 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\smserial.sys -- (smserial) DRV - [2006-11-02 09:30:56 | 000,044,544 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169) DRV - [2006-11-02 09:30:54 | 001,781,760 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32) DRV - [2006-07-14 14:55:34 | 000,105,088 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\nvatabus.sys -- (nvatabus) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\..\URLSearchHook: {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.) IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = [url="http://search.live.com/results.aspx?q=%7BsearchTerms%7D&src=%7Breferrer:source?%7D"]http://search.live.c...ferrer:source?}[/url] IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = [url="http://search.conduit.com/ResultsExt.aspx?q=%7BsearchTerms%7D&SearchSource=4&ctid=CT2417076"]http://search.condui...&ctid=CT2417076[/url] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = [url="http://www.google.com/ie"]http://www.google.com/ie[/url] IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = [url="http://www.google.com/ie"]http://www.google.com/ie[/url] IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = [url="http://www.google.com"]http://www.google.com[/url] IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [url="http://mystart.incredimail.com/mb68?u=92541377313324536"]http://mystart.incre...541377313324536[/url] IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = [url="http://www.google.com/ie"]http://www.google.com/ie[/url] IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = [url="http://www.google.com/ie"]http://www.google.com/ie[/url] IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\URLSearchHook: {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.) IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = [url="http://www.bing.com/search?FORM=VIATDF&PC=VIATDF&q=%7BsearchTerms%7D&src=IE-SearchBox"]http://www.bing.com/...rc=IE-SearchBox[/url] IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{3666ACE4-6933-485B-B072-6B899C319C93}: "URL" = [url="http://www.google.com/search?q=%7BsearchTerms%7D&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"]http://www.google.co...ie=utf8&oe=utf8[/url] IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = [url="http://www.google.com/search?q=%7Bsear"]http://www.google.com/search?q={sear[/url] IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: "URL" = [url="http://search.bearshare.com/webResults.html?src=ieb&q=%7BsearchTerms%7D"]http://search.bearsh...q={searchTerms}[/url] IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = [url="http://search.conduit.com/ResultsExt.aspx?q=%7BsearchTerms%7D&SearchSource=4&ctid=CT2417076"]http://search.condui...&ctid=CT2417076[/url] IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = [url="http://mystart.incredimail.com/mb68/?search=%7BsearchTerms%7D&loc=search_box&u=92541377313324536"]http://mystart.incre...541377313324536[/url] IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "MyStart Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://mystart.incredimail.com/mb68?u=92541377313324536" FF - prefs.js..keyword.URL: "http://mystart.incredimail.com/mb68/?loc=ff_address_bar&u=92541377313324536&search=" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll () FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2571: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1739: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-05-19 18:51:27 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-05-19 18:51:27 | 000,000,000 | ---D | M] [2010-02-22 15:22:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\mozilla\Extensions [2012-05-19 19:58:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\f22kkhei.default\extensions [2010-02-28 15:41:36 | 000,000,572 | ---- | M] () -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f22kkhei.default\searchplugins\bing.xml [2010-08-22 14:48:55 | 000,002,207 | ---- | M] () -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f22kkhei.default\searchplugins\MyStart Search.xml [2010-07-14 19:02:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2010-07-14 19:02:05 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012-05-19 18:51:25 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2004-01-07 11:33:20 | 001,499,214 | ---- | M] (LizardTech) -- C:\Program Files\mozilla firefox\plugins\npdjvu.dll [2012-05-19 18:51:15 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-05-19 18:51:15 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-05-19 18:51:15 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-05-19 18:51:15 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-05-19 18:51:15 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-05-19 18:51:15 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: [url="http://www.google.com"]http://www.google.com[/url] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms} CHR - homepage: [url="http://www.google.com"]http://www.google.com[/url] CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\20.0.1132.47\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\20.0.1132.47\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\20.0.1132.47\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Java™ Platform SE 6 U12 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdeploytk.dll CHR - plugin: LizardTech DjVu (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdjvu.dll CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll CHR - plugin: QuickTime Plug-in 7.3.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.3.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.3.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.3.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.3.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.3.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.3.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll O1 HOSTS File: ([2004-09-19 14:18:40 | 000,000,001 | ---- | M]) - C:\Windows\System32\drivers\etc\HOSTS O2 - BHO: (Winamp Toolbar BHO) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC) O2 - BHO: (UrlHelper Class) - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareIEHelper.dll () O2 - BHO: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.) O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found O3 - HKLM\..\Toolbar: (&Tłumaczenie) - {2F7DB8D7-9BE7-4666-901E-F380555BCAC7} - D:\Russkij Translator\InternetTranslatorRusPol.dll (Techland) O3 - HKLM\..\Toolbar: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.) O3 - HKLM\..\Toolbar: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll (BearShare) O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC) O3 - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\Toolbar\WebBrowser: (gry Toolbar) - {8532A8B7-C06A-41BB-936A-8CE73E4711ED} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\Toolbar\WebBrowser: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll (BearShare) O3 - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC) O4 - HKLM..\Run: [MSConfig] C:\Windows\System32\msconfig.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O7 - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: &Winamp Toolbar Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html () O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : @D:\Russkij Translator\InternetTranslatorRusPol.dll,-103 - {94C70A96-012C-4171-98FC-C1971511F20D} - D:\Russkij Translator\InternetTranslatorRusPol.dll (Techland) O13 - gopher Prefix: missing O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} [url="http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab"]http://fpdownload2.m...ash/swflash.cab[/url] (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.2.96.54 212.2.96.52 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2C434B99-9E13-4DFB-A5C3-D7A44E3A02DA}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{32554CE4-5A72-4519-8850-DD4ED6D58C11}: DhcpNameServer = 212.2.96.53 212.2.96.51 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{54232790-5603-4CAC-895B-7F7C4F2CCCDF}: DhcpNameServer = 212.2.96.54 212.2.96.52 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8748D998-C05C-40ED-9C50-1E29919DCC41}: DhcpNameServer = 95.160.170.92 88.156.222.92 82.139.8.40 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\user\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\user\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2011-07-04 14:36:26 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.) - F:\AutoRun.exe -- [ CDFS ] O32 - AutoRun File - [2011-06-22 13:01:37 | 000,000,044 | R--- | M] () - F:\AUTORUN.INF -- [ CDFS ] O33 - MountPoints2\{36349cbc-1fdf-11df-86a7-00030d6fe73d}\Shell\AutoRun\command - "" = SYSTEM\S-1-5-21-1482476501-1644491937-682003330-1013\system32.exe O33 - MountPoints2\{36349cbc-1fdf-11df-86a7-00030d6fe73d}\Shell\open\command - "" = SYSTEM\S-1-5-21-1482476501-1644491937-682003330-1013\system32.exe O33 - MountPoints2\{6b522c5b-7300-11df-9ee0-00030d6fe73d}\Shell\AutoRun\command - "" = F:\12gn6id2.exe O33 - MountPoints2\{6b522c5b-7300-11df-9ee0-00030d6fe73d}\Shell\open\Command - "" = F:\12gn6id2.exe O33 - MountPoints2\{a465b05f-858f-11e1-b710-97155b4ce97b}\Shell - "" = AutoRun O33 - MountPoints2\{a465b05f-858f-11e1-b710-97155b4ce97b}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2011-07-04 14:36:26 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.) O33 - MountPoints2\{a465b0ed-858f-11e1-b710-9b783aa66222}\Shell - "" = AutoRun O33 - MountPoints2\{a465b0ed-858f-11e1-b710-9b783aa66222}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2011-07-04 14:36:26 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.) O33 - MountPoints2\{bfa2284c-9c57-11dd-af55-806e6f6e6963}\Shell\AutoRun\command - "" = RESTORE\k-1-3542-4232123213-7676767-8888886\BLUE.exe O33 - MountPoints2\{bfa2284c-9c57-11dd-af55-806e6f6e6963}\Shell\open\command - "" = RESTORE\k-1-3542-4232123213-7676767-8888886\BLUE.exe O33 - MountPoints2\{d28627b7-17cd-11df-b6ba-00030d6fe73d}\Shell - "" = AutoRun O33 - MountPoints2\{d28627b7-17cd-11df-b6ba-00030d6fe73d}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a O33 - MountPoints2\{dbc4adeb-886c-11e1-9ce1-aaa476b8d490}\Shell - "" = AutoRun O33 - MountPoints2\{dbc4adeb-886c-11e1-9ce1-aaa476b8d490}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2011-07-04 14:36:26 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.) O33 - MountPoints2\{fd24fc5b-9759-11e1-a383-bf3ea5eed0c4}\Shell - "" = AutoRun O33 - MountPoints2\{fd24fc5b-9759-11e1-a383-bf3ea5eed0c4}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2011-07-04 14:36:26 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.) O33 - MountPoints2\F\Shell - "" = AutoRun O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2011-07-04 14:36:26 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.) O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation) NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk - - File not found MsConfig - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) MsConfig - StartUpReg: [b]avast![/b] - hkey= - key= - File not found MsConfig - StartUpReg: [b]BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}[/b] - hkey= - key= - C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG) MsConfig - StartUpReg: [b]ChomikBox[/b] - hkey= - key= - C:\Program Files\ChomikBox\chomikbox.exe () MsConfig - StartUpReg: [b]EA Core[/b] - hkey= - key= - C:\Program Files\Electronic Arts\EADM\Core.exe (Electronic Arts) MsConfig - StartUpReg: [b]GoD[/b] - hkey= - key= - File not found MsConfig - StartUpReg: [b]GrooveMonitor[/b] - hkey= - key= - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation) MsConfig - StartUpReg: [b]IPLA![/b] - hkey= - key= - C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.) MsConfig - StartUpReg: [b]NeroFilterCheck[/b] - hkey= - key= - C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) MsConfig - StartUpReg: [b]Nowe Gadu-Gadu[/b] - hkey= - key= - C:\Program Files\Nowe Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) MsConfig - StartUpReg: [b]Orb[/b] - hkey= - key= - C:\Program Files\Winamp Remote\bin\OrbTray.exe (Orb Networks) MsConfig - StartUpReg: [b]Plus Internet[/b] - hkey= - key= - C:\Program Files\Plus Internet\PlusInternetChecker.exe () MsConfig - StartUpReg: [b]QuickTime Task[/b] - hkey= - key= - C:\Program Files\QuickTime\QTTask.exe (Apple Inc.) MsConfig - StartUpReg: [b]RtHDVCpl[/b] - hkey= - key= - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) MsConfig - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.) MsConfig - StartUpReg: [b]SMSERIAL[/b] - hkey= - key= - C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.) MsConfig - StartUpReg: [b]StartCCC[/b] - hkey= - key= - c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe () MsConfig - StartUpReg: [b]Windows Defender[/b] - hkey= - key= - File not found MsConfig - StartUpReg: [b]yinariixfrtlwyu[/b] - hkey= - key= - C:\ProgramData\yinariix.exe () MsConfig - State: "startup" - 2 MsConfig - State: "services" - 2 SafeBootMin: AppMgmt - Service SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: NTDS - File not found SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: AppMgmt - Service SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: NTDS - File not found SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-24 18:22:41 | 000,000,000 | ---D | C] -- C:\ProgramData\tvhezzqffmikhut [2012-07-23 08:59:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Fashion Solitaire 1.2 [2012-07-23 08:57:44 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fashion Solitaire [2012-07-23 08:57:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fashion Solitaire [2012-07-23 08:57:44 | 000,000,000 | ---D | C] -- C:\Program Files\Fashion Solitaire [2012-07-23 08:53:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Big Fish Games [2012-07-23 08:53:06 | 000,000,000 | ---D | C] -- C:\Program Files\bfgclient [2012-07-23 08:49:40 | 000,000,000 | ---D | C] -- C:\BigFishGamesCache [1 C:\*.tmp files -> C:\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-24 18:51:03 | 000,613,046 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012-07-24 18:51:03 | 000,538,916 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2012-07-24 18:51:03 | 000,104,768 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012-07-24 18:51:03 | 000,087,672 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2012-07-24 18:45:30 | 000,003,472 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2012-07-24 18:45:29 | 000,003,472 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2012-07-24 18:45:28 | 000,001,028 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012-07-24 18:45:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-07-24 18:45:09 | 2145,837,056 | -HS- | M] () -- C:\hiberfil.sys [2012-07-24 18:22:47 | 000,000,051 | ---- | M] () -- C:\ProgramData\ardzseokbdrpcvb [2012-07-24 18:22:30 | 000,057,344 | ---- | M] () -- C:\ProgramData\yinariix.exe [2012-07-24 18:22:30 | 000,057,344 | ---- | M] () -- C:\Users\user\ms.exe [2012-07-24 18:17:01 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012-07-23 18:51:32 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt [1 C:\*.tmp files -> C:\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-24 18:45:09 | 2145,837,056 | -HS- | C] () -- C:\hiberfil.sys [2012-07-24 18:22:47 | 000,057,344 | ---- | C] () -- C:\ProgramData\yinariix.exe [2012-07-24 18:22:32 | 000,000,051 | ---- | C] () -- C:\ProgramData\ardzseokbdrpcvb [2012-07-24 18:22:30 | 000,057,344 | ---- | C] () -- C:\Users\user\ms.exe [2012-07-23 08:53:21 | 000,001,718 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Manager.lnk [2012-07-23 08:53:21 | 000,001,542 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\More Great Games.lnk [2012-05-03 08:22:08 | 000,000,914 | ---- | C] () -- C:\Users\user\.recently-used.xbel [2012-04-30 15:07:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempOA3428.html [2012-04-30 09:25:30 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempdzc764.html [2012-04-27 18:51:50 | 000,000,495 | ---- | C] () -- C:\Windows\PWN_LIT_SZTUK.ini [2012-04-14 11:41:55 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempKQO836.html [2012-04-13 19:41:57 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempER1404.html [2012-04-13 19:41:57 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempCs1404.html [2012-02-19 10:45:59 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPL1428.html [2012-02-03 11:21:54 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempNbs908.html [2012-02-01 21:01:15 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempid1528.html [2012-01-22 11:32:41 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempYx1964.html [2012-01-11 23:20:46 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempeK1412.html [2012-01-11 23:20:46 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempjG1412.html [2012-01-07 12:05:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEhh844.html [2012-01-07 12:05:50 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempCNA844.html [2012-01-06 21:11:52 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempXq3844.html [2012-01-06 21:11:52 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempQG3844.html [2012-01-05 15:03:28 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempuvt780.html [2012-01-05 15:03:28 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTkh780.html [2012-01-04 14:55:13 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempove836.html [2012-01-04 14:55:13 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempoxC836.html [2012-01-03 15:04:56 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempnO1468.html [2012-01-03 15:04:56 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempoh1468.html [2012-01-01 13:47:47 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempaD1460.html [2011-12-31 11:51:53 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemppV1228.html [2011-12-26 20:33:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPJ1604.html [2011-12-24 16:11:59 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempTy1072.html [2011-12-24 16:11:59 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempBt1072.html [2011-12-22 12:27:38 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempiL1056.html [2011-12-22 12:27:38 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempLK1056.html [2011-12-22 12:14:38 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEF1428.html [2011-12-22 12:14:38 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempgj1428.html [2011-12-21 16:14:52 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempXZ1428.html [2011-12-21 16:14:52 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempnI1428.html [2011-12-19 21:47:16 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempXp5288.html [2011-12-19 21:47:16 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempwD5288.html [2011-12-19 18:47:15 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempbN1480.html [2011-12-19 18:47:15 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempAf1480.html [2011-12-16 18:58:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempnW1228.html [2011-12-11 12:33:18 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempyD1216.html [2011-12-11 12:33:18 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempei1216.html [2011-12-11 11:10:05 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempjo1420.html [2011-12-11 11:10:05 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTV1420.html [2011-12-10 17:04:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempbX1400.html [2011-12-10 17:04:39 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempSu1400.html [2011-11-30 12:43:57 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempCo1256.html [2011-11-30 12:43:57 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemptC1256.html [2011-11-24 18:03:34 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempxR1460.html [2011-11-24 18:03:34 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempkh1460.html [2011-11-24 12:19:52 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempqpH808.html [2011-11-24 12:19:52 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempqDQ808.html [2011-11-23 20:14:19 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempxW3216.html [2011-11-23 20:14:19 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemplK3216.html [2011-11-23 16:25:36 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempcgw404.html [2011-11-23 16:25:36 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempnTj404.html [2011-11-20 13:47:45 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEC1540.html [2011-11-20 13:47:45 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempJF1540.html [2011-11-19 11:40:24 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempqL1740.html [2011-11-19 11:40:24 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempXt1740.html [2011-11-18 18:34:49 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempvl1684.html [2011-11-18 18:34:49 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempjq1684.html [2011-11-13 10:19:05 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempYK1384.html [2011-11-13 10:19:05 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Temphn1384.html [2011-11-11 15:34:48 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempSJ3168.html [2011-11-01 17:03:19 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempOz1436.html [2011-11-01 11:10:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempqY1260.html [2011-10-31 11:33:19 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempCO1380.html [2011-10-30 19:01:51 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempWd1496.html [2011-10-30 19:01:51 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempVj1496.html [2011-10-30 14:41:20 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempka2744.html [2011-10-30 14:38:19 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempxu1504.html [2011-10-30 14:38:19 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempMm1504.html [2011-01-30 20:44:43 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAq3740.html [2011-01-28 12:47:21 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempnM1412.html [2011-01-26 21:13:30 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempnB2040.html [2011-01-26 21:13:30 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempix2040.html [2011-01-26 11:45:48 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempJF1452.html [2011-01-26 11:45:48 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempyN1452.html [2011-01-20 17:42:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempFG3800.html [2011-01-20 17:42:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempiU3800.html [2011-01-19 16:27:54 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempcg1556.html [2011-01-19 16:27:54 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempdg1556.html [2011-01-18 18:23:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempiTD528.html [2011-01-18 18:23:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempwSy528.html [2011-01-17 11:07:27 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempjG1452.html [2011-01-17 11:07:27 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempGM1452.html [2011-01-15 17:45:06 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempQGl356.html [2011-01-12 22:06:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempuR2140.html [2011-01-12 22:06:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempfk2140.html [2011-01-12 16:45:12 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempcQ2076.html [2011-01-12 16:45:12 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempDo2076.html [2011-01-03 19:47:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbr3120.html [2011-01-03 19:47:50 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempuO3120.html [2010-12-28 13:11:37 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempiSA548.html [2010-12-28 13:11:37 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempCjm548.html [2010-12-27 14:05:31 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemplI2512.html [2010-12-27 14:05:31 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempPT2512.html [2010-12-26 12:38:09 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempOXA124.html [2010-12-26 12:38:09 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempUhX124.html [2010-12-24 13:04:19 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempXB3244.html [2010-12-24 13:04:19 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempfn3244.html [2010-12-16 14:42:12 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempOz1620.html [2010-12-16 14:42:12 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempYs1620.html [2010-12-14 18:15:07 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempva1424.html [2010-12-14 18:15:07 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempJl1424.html [2010-12-13 21:25:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempuf3916.html [2010-12-13 21:25:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempzR3916.html [2010-12-11 11:21:28 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempcs3184.html [2010-12-09 18:39:05 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempWn1164.html [2010-12-09 18:39:05 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempVt1164.html [2010-12-08 21:09:30 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempbS3864.html [2010-12-08 21:09:30 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempPA3864.html [2010-12-07 21:14:16 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempVM3496.html [2010-12-07 21:14:16 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempEZ3496.html [2010-12-06 20:37:00 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempox1408.html [2010-12-06 20:37:00 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempdm1408.html [2010-12-04 16:32:46 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempRM2524.html [2010-12-02 19:45:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempXh3616.html [2010-12-02 19:45:32 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempUT3616.html [2010-12-01 21:09:25 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempaL1324.html [2010-12-01 21:09:25 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempnW1324.html [2010-11-30 20:04:20 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemplYp288.html [2010-11-30 20:04:20 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTXB288.html [2010-11-29 21:18:17 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemppPU828.html [2010-11-29 21:18:17 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempReq828.html [2010-11-28 21:45:35 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempak1360.html [2010-11-28 21:45:35 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempUH1360.html [2010-11-28 15:37:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPn1372.html [2010-11-28 15:37:08 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTf1372.html [2010-11-27 19:26:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempYw1548.html [2010-11-27 19:26:39 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempsb1548.html [2010-11-26 16:08:45 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAK1612.html [2010-11-26 16:08:45 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempHL1612.html [2010-11-25 21:29:51 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPE3272.html [2010-11-25 21:29:51 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempyi3272.html [2010-11-25 17:49:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempku1496.html [2010-11-25 17:49:50 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempSS1496.html [2010-11-25 11:01:46 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemprJ1504.html [2010-11-25 11:01:46 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempjD1504.html [2010-11-24 21:49:10 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempRVK172.html [2010-11-24 21:49:10 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempikn172.html [2010-11-23 21:12:35 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemphB1444.html [2010-11-23 21:12:35 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempGu1444.html [2010-11-22 20:30:51 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempGT1456.html [2010-11-22 20:30:51 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempaP1456.html [2010-11-21 19:11:35 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPI3740.html [2010-11-21 19:11:35 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempIN3740.html [2010-11-19 21:17:44 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempGl1536.html [2010-11-19 21:17:44 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempaM1536.html [2010-11-18 19:28:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAF1816.html [2010-11-18 19:28:32 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempWU1816.html [2010-11-18 11:47:58 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemphA1592.html [2010-11-18 11:47:58 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempjd1592.html [2010-11-17 21:04:02 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempwV3804.html [2010-11-17 21:04:02 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemppZ3804.html [2010-11-17 17:00:41 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbx1460.html [2010-11-17 17:00:41 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Temprd1460.html [2010-11-16 16:08:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempxM2876.html [2010-11-16 16:08:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbn2876.html [2010-11-14 11:11:12 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEn3848.html [2010-11-14 11:09:02 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempUz1228.html [2010-11-14 11:09:02 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempXV1228.html [2010-11-09 19:37:49 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempto5052.html [2010-11-09 19:37:49 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempMq5052.html [2010-11-08 21:45:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAG5968.html [2010-11-08 21:45:08 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempZS5968.html [2010-11-04 17:12:55 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Templk3820.html [2010-11-04 17:12:55 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbg3820.html [2010-11-03 18:45:38 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempzl1652.html [2010-11-03 18:45:38 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempXm1652.html [2010-11-02 12:57:06 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempzY2580.html [2010-11-02 12:57:06 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemphV2580.html [2010-11-01 13:30:12 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempVS1448.html [2010-10-30 20:27:44 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAw5824.html [2010-10-30 15:23:26 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempRE5224.html [2010-10-29 09:44:24 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempgQ5112.html [2010-10-29 09:44:24 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempNb5112.html [2010-10-28 21:18:02 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEk1104.html [2010-10-28 21:18:02 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempmW1104.html [2010-10-27 16:20:16 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempxq1496.html [2010-10-27 16:20:16 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTS1496.html [2010-10-27 11:38:05 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemplB1496.html [2010-10-27 11:38:05 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempIY1496.html [2010-10-23 11:43:14 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempGi1396.html [2010-10-23 11:43:14 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempVN1396.html [2010-10-21 20:51:03 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemppR2268.html [2010-10-21 20:51:03 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTf2268.html [2010-10-21 15:48:23 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempQa2488.html [2010-10-21 15:48:23 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempzc2488.html [2010-10-20 13:41:21 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempWR1700.html [2010-10-20 13:41:21 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempoY1700.html [2010-10-13 19:11:10 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempwW2476.html [2010-10-13 19:11:10 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempec2476.html [2010-10-12 16:14:58 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempmv1516.html [2010-10-12 16:14:58 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempCC1516.html [2010-10-12 16:14:56 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempbO1516.html [2010-10-12 16:14:56 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempaA1516.html [2010-10-11 21:34:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempsT1376.html [2010-10-11 21:34:08 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemprB1376.html [2010-10-11 21:34:06 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempun1376.html [2010-10-11 21:34:06 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempBs1376.html [2010-10-11 16:51:26 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Temphn3800.html [2010-10-11 16:51:26 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempSm3800.html [2010-10-11 16:51:24 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempbS3800.html [2010-10-11 16:51:24 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempxd3800.html [2010-10-10 16:48:30 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempMS1000.html [2010-10-10 16:48:30 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempMx1000.html [2010-10-10 16:48:29 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempws1000.html [2010-10-10 16:48:29 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempSk1000.html [2010-10-09 17:04:46 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempZyg476.html [2010-10-09 17:04:46 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempjKb476.html [2010-10-09 17:04:45 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempHJL476.html [2010-10-09 17:04:45 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempmwJ476.html [2010-10-08 16:19:34 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempNJ3660.html [2010-10-08 16:19:34 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempFD3660.html [2010-10-08 16:19:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Temppr3660.html [2010-10-08 16:19:32 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempDX3660.html [2010-10-07 15:03:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Temptg1360.html [2010-10-07 15:03:42 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempSz1360.html [2010-10-07 15:03:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempYa1360.html [2010-10-07 15:03:39 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempwA1360.html [2010-10-06 20:01:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempet1484.html [2010-10-06 20:01:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTi1484.html [2010-10-06 14:12:04 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempKu4344.html [2010-10-06 14:12:04 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempDA4344.html [2010-10-06 14:12:04 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempxK4344.html [2010-10-06 14:12:04 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempCK4344.html [2010-10-06 13:24:14 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbo1412.html [2010-10-06 13:24:14 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempud1412.html [2010-10-06 13:24:13 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempVw1412.html [2010-10-06 13:24:13 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempCU1412.html [2010-10-06 11:35:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbt3860.html [2010-10-06 11:35:42 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempmP3860.html [2010-10-05 20:45:17 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempyj5100.html [2010-10-05 20:45:17 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbs5100.html [2010-10-05 20:02:06 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempWx1508.html [2010-10-05 20:02:06 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTz1508.html [2010-10-04 20:50:36 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempSB1480.html [2010-10-04 20:50:36 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempQw1480.html [2010-10-04 19:33:25 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempst1804.html [2010-10-04 19:33:25 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempri1804.html [2010-10-04 12:43:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempaZ1872.html [2010-10-04 12:43:42 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempgx1872.html [2010-10-04 09:16:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempWB1408.html [2010-10-04 09:16:42 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempYt1408.html [2010-10-03 15:40:48 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempba1432.html [2010-10-03 15:40:48 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempLE1432.html [2010-10-03 14:08:35 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempZBa552.html [2010-10-03 14:08:35 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemptLA552.html [2010-10-03 08:37:41 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEj1484.html [2010-10-03 08:37:41 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempeg1484.html [2010-10-02 14:27:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempRO1368.html [2010-10-02 14:27:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempnT1368.html [2010-10-01 18:06:12 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempVBg988.html [2010-10-01 18:06:12 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempUdJ988.html [2010-10-01 12:43:52 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempIt1440.html [2010-10-01 12:43:52 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempfz1440.html [2010-09-30 19:09:06 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemplRB708.html [2010-09-30 19:09:06 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemppQm708.html [2010-09-30 12:00:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Temppn1312.html [2010-09-30 12:00:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempzX1312.html [2010-09-30 10:57:05 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempvDc908.html [2010-09-30 10:57:04 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempsyQ908.html [2010-09-29 11:13:56 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempVs3644.html [2010-09-29 11:13:56 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTi3644.html [2010-09-28 20:10:31 | 000,000,000 | ---- | C] () -- C:\Users\user\AppData\Local\TempNR1860.html [2010-09-28 20:10:31 | 000,000,000 | ---- | C] () -- C:\Users\user\AppData\Local\TempaI1860.html [2010-09-28 14:59:31 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemprC1328.html [2010-09-28 14:59:31 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempVj1328.html [2010-09-28 11:00:28 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEY1408.html [2010-09-27 12:54:01 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempfk1200.html [2010-09-27 12:54:01 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempOj1200.html [2010-09-26 19:15:22 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempWS1132.html [2010-09-26 19:15:22 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempap1132.html [2010-09-24 16:14:38 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbb1276.html [2010-09-24 16:14:38 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempJu1276.html [2010-09-23 15:50:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempLx1276.html [2010-09-23 15:50:32 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempvE1276.html [2010-09-23 08:27:28 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempsF1428.html [2010-09-23 08:27:28 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempvZ1428.html [2010-09-22 14:12:52 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempep1392.html [2010-09-22 14:12:52 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempLm1392.html [2010-09-21 20:23:57 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempkFv560.html [2010-09-21 20:23:57 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempOAo560.html [2010-09-21 16:58:22 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempNt1404.html [2010-09-21 16:58:22 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempfG1404.html [2010-09-21 14:15:23 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempFz1408.html [2010-09-21 14:15:23 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempqD1408.html [2010-09-21 08:11:51 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempEs1472.html [2010-09-21 08:11:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempYC1472.html [2010-09-20 20:05:54 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempSU1464.html [2010-09-20 20:05:54 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTc1464.html [2010-09-20 16:06:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Temprn1444.html [2010-09-20 16:06:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempJO1444.html [2010-09-20 08:27:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempvz1516.html [2010-09-20 08:27:32 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempLu1516.html [2010-09-19 20:12:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempLsR440.html [2010-09-19 20:12:08 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempebA440.html [2010-09-19 13:40:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempmY1488.html [2010-09-19 13:40:50 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempGp1488.html [2010-09-18 15:40:53 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempZE1472.html [2010-09-17 15:00:53 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempXX1232.html [2010-09-17 15:00:53 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempwU1232.html [2010-09-16 20:38:20 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempmRl456.html [2010-09-16 20:38:20 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbtj456.html [2010-09-16 15:54:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempqe1508.html [2010-09-16 15:54:32 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempfW1508.html [2010-09-16 15:32:23 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempJw1236.html [2010-09-16 15:32:23 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempQX1236.html [2010-09-15 18:28:23 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempNc1384.html [2010-09-15 18:28:23 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempka1384.html [2010-09-14 18:14:35 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempeb1120.html [2010-09-14 18:14:35 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbj1120.html [2010-09-13 20:50:37 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempgC1752.html [2010-09-13 20:50:37 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempeA1752.html [2010-09-13 08:02:17 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempkB1640.html [2010-09-13 08:02:17 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempSX1640.html [2010-09-12 14:48:29 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEN1540.html [2010-09-12 14:48:29 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempiw1540.html [2010-09-12 13:13:20 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempkr1248.html [2010-09-12 13:13:20 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempRN1248.html [2010-09-11 20:55:30 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempdQ1400.html [2010-09-11 20:55:30 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Temppq1400.html [2010-09-11 14:35:18 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempet1188.html [2010-09-11 14:35:18 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempEF1188.html [2010-09-11 09:12:28 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPQ1552.html [2010-09-11 09:12:28 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempLg1552.html [2010-09-10 18:15:34 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempJF1416.html [2010-09-10 18:15:34 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempLS1416.html [2010-09-10 06:19:24 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempKr1436.html [2010-09-10 06:19:24 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempix1436.html [2010-09-09 20:53:12 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Templs1292.html [2010-09-09 20:53:12 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempWL1292.html [2010-09-09 20:48:33 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempoy1524.html [2010-09-09 20:48:33 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempvH1524.html [2010-09-08 19:18:47 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAA1236.html [2010-09-08 19:18:47 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempbK1236.html [2010-09-08 13:32:48 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempeW3764.html [2010-09-07 13:21:28 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempYg1396.html [2010-09-07 13:21:28 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempkp1396.html [2010-09-07 09:12:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempfAW912.html [2010-09-07 09:12:32 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempEfQ912.html [2010-09-06 08:36:37 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempzgM848.html [2010-09-06 08:36:37 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempeDb848.html [2010-09-05 19:27:13 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempBe1152.html [2010-09-05 13:19:27 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempMD1312.html [2010-09-04 20:29:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Templd1884.html [2010-09-02 20:27:18 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempuP1208.html [2010-09-02 20:27:18 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemptF1208.html [2010-09-02 14:40:57 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempsv1428.html [2010-09-02 14:40:57 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempLW1428.html [2010-09-01 20:47:23 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempElJA12.html [2010-09-01 20:47:23 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempouCy12.html [2010-09-01 16:02:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempkj3636.html [2010-09-01 16:02:39 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempwV3636.html [2010-08-31 21:33:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempzL2372.html [2010-08-31 16:40:53 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempeG3212.html [2010-08-31 16:40:53 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempQn3212.html [2010-08-30 19:03:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAmI916.html [2010-08-29 21:31:40 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempGP1868.html [2010-08-29 14:54:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempHz2664.html [2010-08-28 19:16:37 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempkRl848.html [2010-08-28 14:38:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempCN2620.html [2010-08-28 11:36:57 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempqG1396.html [2010-08-27 17:31:33 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempVv1348.html [2010-08-27 17:05:34 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempnm1260.html [2010-08-27 17:05:34 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempXu1260.html [2010-08-27 10:51:52 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempxn3456.html [2010-08-27 10:51:52 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempsW3456.html [2010-08-26 19:34:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempHtu464.html [2010-08-26 19:34:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempZgN464.html [2010-08-26 00:17:38 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAt1904.html [2010-08-26 00:17:38 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempOZ1904.html [2010-08-22 14:49:13 | 000,098,304 | ---- | C] () -- C:\Windows\System32\redmonnt.dll [2010-08-16 09:33:05 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPK1524.html [2010-08-16 09:33:05 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempRP1524.html [2010-08-15 22:21:20 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempQq1068.html [2010-08-15 22:21:20 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemphF1068.html [2010-08-15 18:12:22 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempMh1096.html [2010-08-15 18:12:22 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempvR1096.html [2010-08-15 11:58:15 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Temptj1264.html [2010-08-15 11:58:15 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempgR1264.html [2010-08-14 17:05:38 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Temphm1364.html [2010-08-14 17:05:38 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempzk1364.html [2010-08-10 13:56:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempKN1524.html [2010-08-10 13:56:08 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempuG1524.html [2010-08-08 16:50:57 | 000,007,592 | ---- | C] () -- C:\Users\user\AppData\Local\d3d9caps.dat [2010-08-08 07:34:13 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempINA512.html [2010-08-08 07:34:13 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempzsw512.html [2010-08-07 21:44:10 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempUWq436.html [2010-08-07 21:44:10 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempHTZ436.html [2010-08-07 17:53:27 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempqx3056.html [2010-08-07 17:53:27 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempSo3056.html [2010-08-07 11:40:53 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempLZm540.html [2010-08-07 11:40:53 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempzLW540.html [2010-08-06 17:28:23 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemphM3224.html [2010-08-06 17:28:23 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempfR3224.html [2010-08-04 15:01:44 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempDX3116.html [2010-08-04 15:01:44 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempwy3116.html [2010-07-28 11:20:56 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempkd3092.html [2010-07-28 11:20:56 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempqE3092.html [2010-07-28 07:51:15 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempLYS336.html [2010-07-28 07:51:15 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempZXe336.html [2010-07-27 13:17:09 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Temphfe712.html [2010-07-27 13:17:09 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempFZT712.html [2010-07-27 08:31:58 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempMd1472.html [2010-07-27 08:31:58 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempYl1472.html [2010-07-26 18:23:44 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempoB3136.html [2010-07-26 18:23:44 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempij3136.html [2010-07-26 17:48:56 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempJu3096.html [2010-07-26 10:26:13 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempuP3088.html [2010-07-26 10:26:13 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempvp3088.html [2010-07-25 19:48:49 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempyb4488.html [2010-07-25 19:48:49 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempJg4488.html [2010-07-22 20:45:26 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempmD2360.html [2010-07-22 20:45:26 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempVI2360.html [2010-07-22 08:27:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempaT1416.html [2010-07-21 13:57:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempGSv336.html [2010-07-18 09:50:21 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempyo5140.html [2010-07-18 09:46:00 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempsD4916.html [2010-07-18 09:34:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempJs5256.html [2010-07-18 09:34:39 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempOA5256.html [2010-07-15 09:16:27 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempqpL568.html [2010-07-15 09:16:27 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempYgK568.html [2010-07-10 12:17:01 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempXkx988.html [2010-07-10 12:17:01 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempxyU988.html [2010-07-10 12:13:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempRSW484.html [2010-07-10 12:13:50 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempukw484.html [2010-07-09 09:08:36 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempiOWT12.html [2010-07-08 07:38:29 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPfX700.html [2010-07-04 10:43:15 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempnP3844.html [2010-07-04 10:39:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempIYy860.html [2010-07-04 10:39:50 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempXgU860.html [2010-07-01 13:33:01 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempTf5140.html [2010-07-01 13:33:01 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempUF5140.html [2010-06-29 08:36:09 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempfPM520.html [2010-06-29 08:36:09 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbik520.html [2010-06-28 11:16:01 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempcOL428.html [2010-06-28 11:16:01 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempOLn428.html [2010-06-27 16:02:54 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempIia568.html [2010-06-25 14:14:28 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempaVB428.html [2010-06-24 18:35:27 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempwzm464.html [2010-06-24 18:35:27 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempItd464.html [2010-06-23 18:02:03 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempboxj12.html [2010-06-23 18:02:03 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempIbYP12.html [2010-06-23 14:20:49 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemptE1580.html [2010-06-23 14:20:49 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempAV1580.html [2010-06-23 13:08:36 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempnXp404.html [2010-06-23 13:08:36 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempMmH404.html [2010-06-23 05:59:48 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempTgi420.html [2010-06-23 05:59:48 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempiDi420.html [2010-06-22 12:51:45 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempoi3160.html [2010-06-21 16:16:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempUJN560.html [2010-06-21 13:16:10 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempiOj444.html [2010-06-21 13:16:10 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempxXX444.html [2010-06-21 09:12:28 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempBm3204.html [2010-06-21 09:12:28 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempLz3204.html [2010-06-20 16:03:07 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempRa3468.html [2010-06-20 16:03:07 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempyP3468.html [2010-06-19 21:59:17 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempmiP756.html [2010-06-19 21:59:17 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemptbI756.html [2010-06-18 21:37:36 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempAkA384.html [2010-06-18 18:27:42 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempqH3176.html [2010-06-18 18:27:42 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempZr3176.html [2010-06-17 20:02:44 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempePP256.html [2010-06-17 11:28:15 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempSZK780.html [2010-06-17 11:28:15 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempdOW780.html [2010-06-16 22:04:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempBZf772.html [2010-06-16 22:04:50 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempvjh772.html [2010-06-16 19:40:21 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempQC2320.html [2010-06-16 19:40:21 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempQk2320.html [2010-06-16 14:54:26 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempfVG764.html [2010-06-16 14:54:26 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempigS764.html [2010-06-15 20:46:44 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempZN3164.html [2010-06-15 20:46:44 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempTQ3164.html [2010-06-15 14:33:21 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempyVEu12.html [2010-06-15 14:33:21 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempGykH12.html [2010-06-14 20:58:07 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempubWc12.html [2010-06-14 20:58:07 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempBMrO12.html [2010-06-13 14:44:56 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempNh3144.html [2010-06-13 09:13:53 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempRcMX12.html [2010-06-13 09:13:53 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempKJEh12.html [2010-06-08 17:35:26 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempUd3716.html [2010-06-08 17:35:26 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempiD3716.html [2010-06-07 20:14:24 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempMw1616.html [2010-06-07 20:14:24 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempiQ1616.html [2010-06-06 12:34:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempoeN736.html [2010-06-06 12:34:39 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempVba736.html [2010-05-29 20:35:45 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEIl520.html [2010-05-29 20:35:45 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempCJh520.html [2010-05-29 10:25:50 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempdmP524.html [2010-05-28 17:41:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempjQL424.html [2010-05-28 17:41:08 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempVFz424.html [2010-05-28 10:56:13 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempQOq560.html [2010-05-27 11:22:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempXJ2360.html [2010-05-27 11:22:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempur2360.html [2010-05-21 13:09:39 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempyE3088.html [2010-05-15 12:17:35 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempmw3140.html [2010-05-03 16:58:09 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEz1456.html [2010-05-02 18:34:16 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempYW3240.html [2010-05-01 09:48:27 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempail724.html [2010-04-26 16:42:00 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempKg5292.html [2010-04-26 16:42:00 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempzQ5292.html [2010-04-25 14:20:46 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempGZ1284.html [2010-04-20 12:25:17 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempHy3584.html [2010-04-20 12:25:17 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempsQ3584.html [2010-04-18 13:32:34 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempPH3676.html [2010-04-18 13:32:34 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempEy3676.html [2010-04-18 08:58:52 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempUS1068.html [2010-04-18 08:58:52 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempQd1068.html [2010-04-16 18:32:55 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempKaH828.html [2010-04-16 18:32:55 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempVYB828.html [2010-04-14 19:33:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempZc1560.html [2010-04-14 19:33:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempuS1560.html [2010-04-12 19:12:27 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempwB5124.html [2010-04-12 19:12:27 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempFV5124.html [2010-04-11 11:22:54 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemptL1700.html [2010-04-11 11:22:54 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempXc1700.html [2010-04-09 16:33:52 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempyi2704.html [2010-04-09 16:33:52 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempgV2704.html [2010-04-05 19:27:18 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempjW1360.html [2010-04-05 19:27:18 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempJu1360.html [2010-03-31 16:02:56 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempSXP844.html [2010-03-30 19:12:05 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbl1628.html [2010-03-30 19:12:05 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempqI1628.html [2010-03-29 10:46:16 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempUO1452.html [2010-03-29 10:46:16 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempOQ1452.html [2010-03-28 18:27:06 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempuX1488.html [2010-03-28 18:27:06 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Tempmx1488.html [2010-03-23 20:24:41 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempfE1460.html [2010-03-23 20:24:41 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempYf1460.html [2010-03-22 19:51:35 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempJI4128.html [2010-03-22 19:51:35 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Temphh4128.html [2010-03-19 20:35:01 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempBV1000.html [2010-03-17 19:20:05 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempbk5976.html [2010-03-17 19:20:05 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempiS5976.html [2010-03-16 21:27:09 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempehR908.html [2010-03-16 21:27:09 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempdGR908.html [2010-03-16 11:50:41 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TemptRP824.html [2010-03-16 11:50:41 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempoMc824.html [2010-03-13 20:06:32 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempMJ1532.html [2010-03-13 20:06:32 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempcC1532.html [2010-03-12 20:00:37 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempuJ2256.html [2010-03-12 17:29:19 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempHi1492.html [2010-03-12 17:29:19 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\Templk1492.html [2010-03-11 21:45:11 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempeF1396.html [2010-03-11 21:45:11 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempGw1396.html [2010-03-09 18:58:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempCF3788.html [2010-03-09 18:58:08 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TemptG3788.html [2010-02-23 17:38:23 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempKA1424.html [2010-02-23 17:38:23 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempQq1424.html [2010-02-22 10:57:47 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempdN1432.html [2010-02-22 10:57:47 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempNy1432.html [2010-02-21 13:41:21 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempUS1248.html [2010-02-21 13:41:21 | 000,002,089 | ---- | C] () -- C:\Users\user\AppData\Local\TempUG1248.html [2008-05-23 19:12:31 | 000,027,872 | ---- | C] () -- C:\Users\user\AppData\Roaming\UserTile.png [2007-11-16 18:48:13 | 000,013,312 | ---- | C] () -- C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [color=#E56717]========== LOP Check ==========[/color] [2010-07-21 20:19:08 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\BearShare [2010-02-23 19:27:43 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Foxit Software [2007-11-10 16:31:50 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Gadu-Gadu [2012-05-02 11:05:08 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Gadu-Gadu 10 [2012-02-03 12:07:19 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\gtk-2.0 [2010-07-10 17:35:30 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\ipla [2010-02-14 21:07:55 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Leadertech [2010-03-05 20:00:10 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\LG Electronics [2009-07-03 07:55:45 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\MusicNet [2010-05-08 17:56:53 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Nowe Gadu-Gadu [2010-08-21 15:14:10 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\OpenFM [2010-05-27 13:47:37 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\PeerNetworking [2012-04-17 21:04:07 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\PhotoScape [2010-07-10 19:34:19 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Plus Internet [2011-02-01 18:08:09 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\RDRM [2009-10-03 21:48:53 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\uTorrent [2012-07-24 13:31:19 | 000,032,586 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%\*.* >[/color] [2006-12-06 10:23:32 | 000,000,015 | ---- | M] () -- C:\appinst.cmd [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat [2007-01-05 13:29:34 | 000,000,030 | ---- | M] () -- C:\batch.wtc [2006-11-02 11:53:57 | 000,438,840 | RHS- | M] () -- C:\bootmgr [2007-06-16 16:19:35 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK [2006-09-18 23:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys [2007-01-03 10:19:24 | 000,000,000 | ---- | M] () -- C:\DVD.TAG [2012-07-24 18:45:09 | 2145,837,056 | -HS- | M] () -- C:\hiberfil.sys [2006-11-20 15:59:34 | 000,000,066 | ---- | M] () -- C:\ins.cmd [2010-05-23 18:15:41 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2010-05-23 18:15:41 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2012-07-24 18:45:07 | 2459,762,688 | -HS- | M] () -- C:\pagefile.sys [2007-06-16 22:46:32 | 000,015,622 | ---- | M] () -- C:\Prodlog.txt [2006-11-09 16:05:25 | 000,000,042 | ---- | M] () -- C:\sort-d.txt [2010-03-06 16:56:39 | 000,000,000 | ---- | M] () -- C:\Tech_Vista.log [2006-11-14 09:42:32 | 000,000,015 | ---- | M] () -- C:\vtype.cmd [1 C:\*.tmp files -> C:\*.tmp -> ] [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2006-11-02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\drivers\AGP440.sys [2006-11-02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2006-11-02 11:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys [2008-02-14 13:53:19 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\drivers\atapi.sys [2008-02-14 13:53:19 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys [2008-02-14 13:53:19 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys [2008-02-14 13:53:18 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2006-11-02 10:51:03 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=AC3DD1708B22761EBD7CBE14DCC3B5D7 -- C:\Windows\System32\drivers\beep.sys [2006-11-02 10:51:03 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=AC3DD1708B22761EBD7CBE14DCC3B5D7 -- C:\Windows\winsxs\x86_microsoft-windows-beepsys_31bf3856ad364e35_6.0.6000.16386_none_c1e9df570ab23787\beep.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2006-11-02 10:51:44 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=8D1866E61AF096AE8B582454F5E4D303 -- C:\Windows\System32\drivers\cdrom.sys [2006-11-02 10:51:44 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=8D1866E61AF096AE8B582454F5E4D303 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_e487f727\cdrom.sys [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2006-11-02 11:51:42 | 000,500,840 | ---- | M] (Microsoft Corporation) MD5=227C11E1E7CF6EF8AFB2A238D209760C -- C:\Windows\System32\drivers\ndis.sys [2006-11-02 11:51:42 | 000,500,840 | ---- | M] (Microsoft Corporation) MD5=227C11E1E7CF6EF8AFB2A238D209760C -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.0.6000.16386_none_a59069cb1f23fc44\ndis.sys [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2006-11-02 11:45:57 | 000,308,224 | ---- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD -- C:\Windows\System32\winlogon.exe [2006-11-02 11:45:57 | 000,308,224 | ---- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6000.16386_none_6d8c3f1ad8066b21\winlogon.exe [color=#E56717]========== Files - Unicode (All) ==========[/color] [2012-01-30 19:58:59 | 000,000,678 | ---- | C] ()(C:\Users\user\Documents\??????? ?????.ppt — skrót.lnk) -- C:\Users\user\Documents\Русский балет.ppt — skrót.lnk [2012-01-30 19:46:48 | 000,000,678 | ---- | M] ()(C:\Users\user\Documents\??????? ?????.ppt — skrót.lnk) -- C:\Users\user\Documents\Русский балет.ppt — skrót.lnk [2011-12-07 13:33:01 | 000,092,160 | ---- | C] ()(C:\Users\user\Documents\A?????? 2008.doc) -- C:\Users\user\Documents\Aдмирал 2008.doc [2011-12-01 12:36:08 | 000,092,160 | ---- | M] ()(C:\Users\user\Documents\A?????? 2008.doc) -- C:\Users\user\Documents\Aдмирал 2008.doc [2011-11-18 20:11:41 | 005,785,088 | ---- | C] ()(C:\Users\user\Documents\??????? ?????.ppt) -- C:\Users\user\Documents\Русский балет.ppt [2011-11-17 11:16:22 | 005,785,088 | ---- | M] ()(C:\Users\user\Documents\??????? ?????.ppt) -- C:\Users\user\Documents\Русский балет.ppt [2011-11-13 18:26:49 | 028,275,712 | ---- | C] ()(C:\Users\user\Documents\????????.ppt1.ppt) -- C:\Users\user\Documents\Петергоф.ppt1.ppt [2011-11-13 18:26:43 | 003,630,080 | ---- | C] ()(C:\Users\user\Documents\?????.ppt) -- C:\Users\user\Documents\Углич.ppt [2011-11-10 00:40:43 | 000,137,216 | ---- | C] ()(C:\Users\user\Documents\??????.doc) -- C:\Users\user\Documents\музыка.doc [2011-11-09 23:04:57 | 000,137,216 | ---- | M] ()(C:\Users\user\Documents\??????.doc) -- C:\Users\user\Documents\музыка.doc [2011-01-16 19:23:17 | 003,630,080 | ---- | M] ()(C:\Users\user\Documents\?????.ppt) -- C:\Users\user\Documents\Углич.ppt [2011-01-13 18:50:30 | 000,038,930 | ---- | M] ()(C:\Users\user\Documents\?????.docx) -- C:\Users\user\Documents\Углич.docx [2011-01-13 18:50:28 | 000,038,930 | ---- | C] ()(C:\Users\user\Documents\?????.docx) -- C:\Users\user\Documents\Углич.docx [2011-01-12 17:58:29 | 000,120,832 | ---- | M] ()(C:\Users\user\Documents\??????? ?????????.doc) -- C:\Users\user\Documents\Евгений Гришковец.doc [2011-01-12 17:58:28 | 000,120,832 | ---- | C] ()(C:\Users\user\Documents\??????? ?????????.doc) -- C:\Users\user\Documents\Евгений Гришковец.doc [2010-10-30 22:08:26 | 000,205,824 | ---- | C] ()(C:\Users\user\Documents\?????´?? ?????´????? ???????´?????.doc) -- C:\Users\user\Documents\Людми́ла Стефа́новна Петруше́вская.doc [2010-10-05 16:54:54 | 000,356,352 | ---- | M] ()(C:\Users\user\Documents\??????????????? ???? ??????.doc) -- C:\Users\user\Documents\Государственный герб России.doc [2010-10-05 16:54:51 | 000,356,352 | ---- | C] ()(C:\Users\user\Documents\??????????????? ???? ??????.doc) -- C:\Users\user\Documents\Государственный герб России.doc [2010-06-18 19:42:03 | 000,013,961 | ---- | M] ()(C:\Users\user\Documents\???.docx) -- C:\Users\user\Documents\ФЕТ.docx [2010-06-18 19:41:21 | 000,015,716 | ---- | M] ()(C:\Users\user\Documents\????? ???????????.docx) -- C:\Users\user\Documents\Театр Островского.docx [2010-06-18 19:40:47 | 000,442,972 | ---- | M] ()(C:\Users\user\Documents\???????? ???.docx) -- C:\Users\user\Documents\ВИШНЕВЫЙ САД.docx [2010-06-17 19:16:38 | 000,147,177 | ---- | M] ()(C:\Users\user\Documents\???????????? ???????.docx) -- C:\Users\user\Documents\ОБЫКНОВЕННАЯ ПОВЕСТЬ.docx [2010-06-17 19:16:31 | 000,147,177 | ---- | C] ()(C:\Users\user\Documents\???????????? ???????.docx) -- C:\Users\user\Documents\ОБЫКНОВЕННАЯ ПОВЕСТЬ.docx [2010-05-29 15:56:17 | 000,442,972 | ---- | C] ()(C:\Users\user\Documents\???????? ???.docx) -- C:\Users\user\Documents\ВИШНЕВЫЙ САД.docx [2010-05-26 20:53:56 | 000,000,162 | -H-- | M] ()(C:\Users\user\Desktop\~$???´?? ?????´????? ???????´?????.doc) -- C:\Users\user\Desktop\~$дми́ла Стефа́новна Петруше́вская.doc [2010-05-26 20:53:56 | 000,000,162 | -H-- | C] ()(C:\Users\user\Desktop\~$???´?? ?????´????? ???????´?????.doc) -- C:\Users\user\Desktop\~$дми́ла Стефа́новна Петруше́вская.doc [2010-05-26 20:46:56 | 000,205,824 | ---- | M] ()(C:\Users\user\Documents\?????´?? ?????´????? ???????´?????.doc) -- C:\Users\user\Documents\Людми́ла Стефа́новна Петруше́вская.doc [2010-05-26 20:46:41 | 000,022,436 | ---- | M] ()(C:\Users\user\Documents\??????????? ??????? ?????.docx) -- C:\Users\user\Documents\Современная русская проза.docx [2010-05-26 20:46:39 | 000,022,436 | ---- | C] ()(C:\Users\user\Documents\??????????? ??????? ?????.docx) -- C:\Users\user\Documents\Современная русская проза.docx [2010-05-24 18:18:31 | 000,290,830 | ---- | M] ()(C:\Users\user\Documents\????? ?????.docx) -- C:\Users\user\Documents\Антон Чехов.docx [2010-05-18 19:35:25 | 000,290,830 | ---- | C] ()(C:\Users\user\Documents\????? ?????.docx) -- C:\Users\user\Documents\Антон Чехов.docx [2010-04-26 19:51:25 | 002,578,498 | ---- | M] ()(C:\Users\user\Documents\??????????? ?????? ?????.docx) -- C:\Users\user\Documents\Воскрешение дочери Иаира.docx [2010-04-24 12:17:32 | 002,578,498 | ---- | C] ()(C:\Users\user\Documents\??????????? ?????? ?????.docx) -- C:\Users\user\Documents\Воскрешение дочери Иаира.docx [2010-04-21 17:48:41 | 000,058,939 | ---- | C] ()(C:\Users\user\Documents\???????´? właściwy.docx) -- C:\Users\user\Documents\Петерго́ф właściwy.docx [2010-04-21 15:42:44 | 000,295,936 | ---- | M] ()(C:\Users\user\Documents\????????? ????????????? ??????.doc) -- C:\Users\user\Documents\Александр Александрович Фадеев.doc [2010-04-21 14:45:04 | 000,295,936 | ---- | C] ()(C:\Users\user\Documents\????????? ????????????? ??????.doc) -- C:\Users\user\Documents\Александр Александрович Фадеев.doc [2010-04-10 16:57:35 | 000,000,000 | ---D | M](C:\Users\user\Documents\????????? ? ????????????? ????) -- C:\Users\user\Documents\Интонация в диалогической речи [2010-04-10 16:56:30 | 000,000,000 | ---D | C](C:\Users\user\Documents\????????? ? ????????????? ????) -- C:\Users\user\Documents\Интонация в диалогической речи [2010-03-18 14:31:01 | 001,548,288 | ---- | M] ()(C:\Users\user\Documents\???????????? ??????????? ?????????????? ????????.doc) -- C:\Users\user\Documents\Товарищество Передвижных Художественных Выставок.doc [2010-03-18 14:17:04 | 000,058,939 | ---- | M] ()(C:\Users\user\Documents\???????´? właściwy.docx) -- C:\Users\user\Documents\Петерго́ф właściwy.docx [2010-03-18 12:23:51 | 028,275,712 | ---- | M] ()(C:\Users\user\Documents\????????.ppt1.ppt) -- C:\Users\user\Documents\Петергоф.ppt1.ppt [2010-03-17 18:33:01 | 001,548,288 | ---- | C] ()(C:\Users\user\Documents\???????????? ??????????? ?????????????? ????????.doc) -- C:\Users\user\Documents\Товарищество Передвижных Художественных Выставок.doc [2010-02-21 14:07:45 | 000,017,155 | ---- | M] ()(C:\Users\user\Documents\?? ?????.docx) -- C:\Users\user\Documents\До оконч.docx [2010-01-21 16:36:48 | 000,017,155 | ---- | C] ()(C:\Users\user\Documents\?? ?????.docx) -- C:\Users\user\Documents\До оконч.docx [2009-12-24 13:36:46 | 000,074,752 | ---- | M] ()(C:\Users\user\Documents\????? ???.doc) -- C:\Users\user\Documents\Тихий Дон.doc [2009-12-22 16:09:28 | 000,028,416 | ---- | M] ()(C:\Users\user\Documents\?????? ? ?????????.docx) -- C:\Users\user\Documents\Мастер и Маргарита.docx [2009-12-22 16:09:27 | 000,028,416 | ---- | C] ()(C:\Users\user\Documents\?????? ? ?????????.docx) -- C:\Users\user\Documents\Мастер и Маргарита.docx [2009-12-07 19:49:55 | 000,074,752 | ---- | C] ()(C:\Users\user\Documents\????? ???.doc) -- C:\Users\user\Documents\Тихий Дон.doc [2009-11-22 17:38:14 | 000,395,882 | ---- | M] ()(C:\Users\user\Documents\????????? ???????????.docx) -- C:\Users\user\Documents\Александр Серафимович.docx [2009-11-18 21:15:38 | 000,395,882 | ---- | C] ()(C:\Users\user\Documents\????????? ???????????.docx) -- C:\Users\user\Documents\Александр Серафимович.docx [2009-11-03 13:14:25 | 000,087,040 | ---- | M] ()(C:\Users\user\Documents\????????.doc) -- C:\Users\user\Documents\Футуризм.doc [2009-10-22 20:30:33 | 000,043,008 | ---- | M] ()(C:\Users\user\Documents\?????´??.doc) -- C:\Users\user\Documents\Акмеи́зм.doc [2009-10-17 18:31:34 | 000,087,040 | ---- | C] ()(C:\Users\user\Documents\????????.doc) -- C:\Users\user\Documents\Футуризм.doc [2009-10-17 18:26:00 | 000,043,008 | ---- | C] ()(C:\Users\user\Documents\?????´??.doc) -- C:\Users\user\Documents\Акмеи́зм.doc [2009-02-12 13:20:11 | 000,015,716 | ---- | C] ()(C:\Users\user\Documents\????? ???????????.docx) -- C:\Users\user\Documents\Театр Островского.docx [2008-12-22 18:03:55 | 000,013,961 | ---- | C] ()(C:\Users\user\Documents\???.docx) -- C:\Users\user\Documents\ФЕТ.docx [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:2F943019 < End of report > [/log]
Wolverine1871 komentarz 25 lipca 2012 komentarz 25 lipca 2012 Ten skurwiel staje się coraz lepszy, ja niedawno jak przedwczoraj miałem z nim ten sam problem co M@RIO96 z tym, że mi wyskoczył podczas przeglądania stron, żadna walka wg sposobów pokazanych na necie nie pomogła, dopiero format kompa coś dał. Nawet jaśnie wielomożny pan antywirus avast go nie wykrył, także zastanawiam się nad zmianą oprogramowania antywirusowego.
Gość komentarz 25 lipca 2012 komentarz 25 lipca 2012 Wywaliłeś wpis w msconfig i nie mam jak wywalic tego wpisu. 1. Uruchom OTL i w okno [b]Własne opcje skanowania /skrypt[/b] Wklej [code] :OTL IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.c...ferrer:source?} IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.condui...&ctid=CT2417076 IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incre...541377313324536 IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\URLSearchHook: {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.) IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: "URL" = http://search.bearsh...q={searchTerms} IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.condui...&ctid=CT2417076 IE - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incre...541377313324536 FF - prefs.js..browser.search.defaultenginename: "MyStart Search" FF - prefs.js..browser.startup.homepage: "http://mystart.incredimail.com/mb68?u=92541377313324536" FF - prefs.js..keyword.URL: "http://mystart.incredimail.com/mb68/?loc=ff_address_bar&u=92541377313324536&search=" O2 - BHO: (UrlHelper Class) - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareIEHelper.dll () O2 - BHO: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll (BearShare) O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC) O3 - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\Toolbar\WebBrowser: (gry Toolbar) - {8532A8B7-C06A-41BB-936A-8CE73E4711ED} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\Toolbar\WebBrowser: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll (BearShare) O3 - HKU\S-1-5-21-2792322207-2359299117-85221316-1000\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC) O33 - MountPoints2\{6b522c5b-7300-11df-9ee0-00030d6fe73d}\Shell\AutoRun\command - "" = F:\12gn6id2.exe O33 - MountPoints2\{6b522c5b-7300-11df-9ee0-00030d6fe73d}\Shell\open\Command - "" = F:\12gn6id2.exe O33 - MountPoints2\{a465b05f-858f-11e1-b710-97155b4ce97b}\Shell - "" = AutoRun :Files C:\Users\user\AppData\Local\*.html C:\ProgramData\tvhezzqffmikhut C:\Users\user\ms.exe C:\ProgramData\yinariix.exe C:\ProgramData\ardzseokbdrpcvb :Commands [EMPTYTEMP] [/code] Kliknij [b]Wykonaj skrypt[/b] 2.Po restarcie kliknij [b]Sprzątanie[/b] 3.Zainstaluj ccleaner-a i w zakładce narzędzia przejdż do autostart i zaznacz ten szkodliwy wpis i kliknij na usun wpis. 4.Użyj adwcleaner-a http://general-changelog-team.fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner opcja [b]Delete[/b] 5.Przeskanuj system skanerem [b]MALWAREBYTES Anti-Malware[/b](odrzuć ofertę testową) Jeżeli coś znajdzie przedstaw raport
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.