API tools faq
paste
Advertisement
Guest User

OTL

a guest
Dec 21st, 2012
137
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 66.25 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2012-12-21 23:03:59 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\piotr\Downloads
  3. Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.7601.17514)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 1,87 Gb Total Physical Memory | 1,08 Gb Available Physical Memory | 57,83% Memory free
  8. 5,87 Gb Paging File | 5,12 Gb Available in Paging File | 87,23% Paging File free
  9. Paging file location(s): c:\pagefile.sys 2048 4096d:\pagef [Binary data over 200 bytes]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
  12. Drive C: | 116,34 Gb Total Space | 75,95 Gb Free Space | 65,28% Space Free | Partition Type: NTFS
  13. Drive D: | 116,44 Gb Total Space | 108,68 Gb Free Space | 93,34% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: TOSHIBA | User Name: piotr | Logged in as Administrator.
  16. Boot Mode: SafeMode | Scan Mode: Current user
  17. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2012-12-21 22:55:12 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\piotr\Downloads\OTL.exe
  22. PRC - [2010-11-20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
  23.  
  24.  
  25. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  26.  
  27.  
  28. [color=#E56717]========== Services (SafeList) ==========[/color]
  29.  
  30. SRV - File not found [On_Demand | Stopped] -- C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe -- (AVG Security Toolbar Service)
  31. SRV - [2012-11-09 11:21:24 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
  32. SRV - [2012-10-30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  33. SRV - [2012-01-04 13:32:36 | 000,718,888 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
  34. SRV - [2011-09-15 12:06:04 | 000,088,576 | ---- | M] () [Auto | Stopped] -- C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
  35. SRV - [2010-06-03 07:29:09 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
  36. SRV - [2010-01-25 08:22:56 | 000,245,760 | ---- | M] (Brother Industries, Ltd.) [On_Demand | Stopped] -- C:\Program Files\Browny02\BrYNSvc.exe -- (BrYNSvc)
  37. SRV - [2009-07-21 16:55:30 | 000,116,104 | ---- | M] (Toshiba Europe GmbH) [Auto | Stopped] -- C:\Program Files\Toshiba TEMPRO\TemproSvc.exe -- (TemproMonitoringService)
  38. SRV - [2009-07-14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
  39. SRV - [2009-07-14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  40. SRV - [2009-04-29 02:21:04 | 000,410,624 | ---- | M] (Conexant Systems, Inc.) [Auto | Stopped] -- C:\Windows\System32\XAudio32.dll -- (HsfXAudioService)
  41. SRV - [2008-04-24 17:35:46 | 000,073,728 | ---- | M] (Toshiba) [On_Demand | Stopped] -- C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatchSrv.exe -- (SmartFaceVWatchSrv)
  42. SRV - [2008-04-16 23:19:48 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto | Stopped] -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service)
  43. SRV - [2008-02-06 13:12:56 | 000,126,976 | ---- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe -- (TOSHIBA SMART Log Service)
  44. SRV - [2008-01-17 15:27:34 | 000,431,456 | ---- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe -- (TosCoSrv)
  45. SRV - [2007-12-18 11:48:40 | 000,196,704 | ---- | M] (OptionNV) [Auto | Stopped] -- C:\Program Files\ERA\GlobeTrotter Connect\GtDetectSc.exe -- (GtDetectSc)
  46.  
  47.  
  48. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  49.  
  50. DRV - [2012-10-30 23:51:58 | 000,738,504 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
  51. DRV - [2012-10-30 23:51:58 | 000,361,032 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
  52. DRV - [2012-10-30 23:51:58 | 000,054,232 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
  53. DRV - [2012-10-30 23:51:57 | 000,058,680 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
  54. DRV - [2012-10-30 23:51:56 | 000,021,256 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
  55. DRV - [2012-10-15 17:59:28 | 000,044,784 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr)
  56. DRV - [2011-11-01 10:07:26 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
  57. DRV - [2011-11-01 10:07:26 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
  58. DRV - [2011-11-01 10:07:26 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev)
  59. DRV - [2011-11-01 10:07:24 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc)
  60. DRV - [2010-11-20 11:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  61. DRV - [2010-11-20 10:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
  62. DRV - [2010-06-23 10:24:58 | 000,023,040 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\htcnprot.sys -- (htcnprot)
  63. DRV - [2009-10-26 23:54:24 | 000,025,088 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ANDROIDUSB.sys -- (HTCAND32)
  64. DRV - [2009-09-21 17:58:28 | 001,218,048 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athr.sys -- (athr)
  65. DRV - [2009-07-14 00:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
  66. DRV - [2009-07-13 23:13:48 | 001,035,776 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
  67. DRV - [2009-04-29 02:20:56 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\XAudio32.sys -- (XAudio)
  68. DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
  69. DRV - [2008-07-24 12:03:56 | 000,101,760 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
  70. DRV - [2008-07-15 18:59:06 | 000,017,960 | ---- | M] (Chicony Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\UVCFTR_S.SYS -- (UVCFTR)
  71. DRV - [2008-02-18 15:14:38 | 000,106,624 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Gt51Ip.sys -- (GT72NDISIPXP)
  72. DRV - [2008-02-08 11:00:22 | 000,059,648 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\gt72ubus.sys -- (GT72UBUS)
  73. DRV - [2007-11-09 13:00:52 | 000,023,640 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ)
  74. DRV - [2007-08-06 12:30:18 | 000,018,816 | ---- | M] (Bytemobile, Inc.) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\tcpipBM.sys -- (tcpipBM)
  75. DRV - [2007-03-30 11:38:14 | 000,008,064 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\gtptser.sys -- (GTPTSER)
  76. DRV - [2006-11-20 13:11:14 | 000,007,168 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\FwLnk.sys -- (FwLnk)
  77.  
  78.  
  79. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  80.  
  81.  
  82. [color=#E56717]========== Internet Explorer ==========[/color]
  83.  
  84. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000&barid={287029A7-5BE8-4F57-858C-55CA938A3135}
  85. IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
  86. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  87. IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  88. IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&q={searchTerms}&barid={287029A7-5BE8-4F57-858C-55CA938A3135}
  89.  
  90. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
  91. IE - HKCU\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
  92. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  93. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  94. IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  95. IE - HKCU\..\SearchScopes\{E2B55F36-0FC8-46A4-958D-A8632F3547FB}: "URL" = http://search.softonic.com/MON00085/tb_v1?q={searchTerms}&SearchSource=4&cc=
  96. IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&q={searchTerms}&barid={287029A7-5BE8-4F57-858C-55CA938A3135}
  97. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  98.  
  99.  
  100. [color=#E56717]========== FireFox ==========[/color]
  101.  
  102. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
  103. FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
  104. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  105. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
  106. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
  107. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
  108.  
  109. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{fa46cb24-1d5b-4048-911a-2857a0944395}: C:\Program Files\FVD Suite\addons\Firefox [2010-11-03 20:06:29 | 000,000,000 | ---D | M]
  110. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fe_9.0@nokia.com: C:\Program Files\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_9.0 [2012-01-21 21:46:33 | 000,000,000 | ---D | M]
  111. FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\te_9.0@nokia.com: C:\Program Files\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_9.0 [2012-01-21 21:46:36 | 000,000,000 | ---D | M]
  112.  
  113. [2012-05-15 18:32:54 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
  114.  
  115. [color=#E56717]========== Chrome ==========[/color]
  116.  
  117. CHR - homepage:
  118. CHR - default_search_provider: Google (Enabled)
  119. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
  120. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
  121. CHR - homepage:
  122. CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.97\gcswf32.dll
  123. CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
  124. CHR - plugin: Java Deployment Toolkit 6.0.170.4 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeploytk.dll
  125. CHR - plugin: Java(TM) Platform SE 6 U17 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
  126. CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
  127. CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.97\ppGoogleNaClPluginChrome.dll
  128. CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.97\pdf.dll
  129. CHR - plugin: AVG Internet Security (Enabled) = C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\10.0.0.1409_0\plugins/avgnpss.dll
  130. CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
  131. CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
  132. CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll
  133. CHR - plugin: Default Plug-in (Enabled) = default_plugin
  134. CHR - Extension: avast! WebRep = C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\
  135. CHR - Extension: SweetIM for Facebook = C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of
  136. CHR - Extension: SweetIM for Facebook = C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\
  137. CHR - Extension: Skype Click to Call = C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\
  138. CHR - Extension: avast! WebRep = C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\
  139. CHR - Extension: SweetIM for Facebook = C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of
  140. CHR - Extension: SweetIM for Facebook = C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\
  141. CHR - Extension: Skype Click to Call = C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\
  142.  
  143. O1 HOSTS File: ([2009-06-10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
  144. O2 - BHO: (Open FVD Suite Toolbar) - {2B171655-A69C-5c18-B693-6CB5DC269D44} - C:\Program Files\FVD Suite\addons\IE\FVDToolbar.dll (paulov.ru)
  145. O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  146. O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  147. O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll (Google Inc.)
  148. O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found.
  149. O3 - HKLM\..\Toolbar: (FVD Suite Toolbar) - {2B171655-A69C-5c18-B693-6CB5DC269D41} - C:\Program Files\FVD Suite\addons\IE\FVDToolbar.dll (paulov.ru)
  150. O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  151. O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
  152. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
  153. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
  154. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
  155. O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
  156. O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
  157. O4 - HKLM..\Run: [BrStsMon00] C:\Program Files\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
  158. O4 - HKLM..\Run: [cfFncEnabler.exe] cfFncEnabler.exe File not found
  159. O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
  160. O4 - HKLM..\Run: [DataCardMonitor] C:\Program Files\blueconnect\DataCardMonitor.exe (Huawei Technologies Co., Ltd.)
  161. O4 - HKLM..\Run: [HSON] C:\Program Files\TOSHIBA\TBS\HSON.exe (TOSHIBA Corporation)
  162. O4 - HKLM..\Run: [NDSTray.exe] NDSTray.exe File not found
  163. O4 - HKLM..\Run: [ROC_ROC_JULY_P1] "C:\Program Files\AVG Secure Search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1 File not found
  164. O4 - HKLM..\Run: [ROC_roc_ssl_v12] "C:\Program Files\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12 File not found
  165. O4 - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation)
  166. O4 - HKCU..\Run: [] File not found
  167. O4 - HKCU..\Run: [NokiaSuite.exe] C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe (Nokia)
  168. O4 - HKCU..\Run: [Updater shortcut] C:\Program Files\blueconnect\WTGU.exe ()
  169. O4 - HKCU..\Run: [Wynaavi] C:\Users\piotr\AppData\Roaming\Uvudw\keudu.exe ()
  170. O4 - HKLM..\RunOnce: [AvgUninstallURL] C:\Windows\System32\cmd.exe (Microsoft Corporation)
  171. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  172. O8 - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_70C5B381380DB17F.dll/cmsidewiki.html File not found
  173. O8 - Extra context menu item: FVDToolbar Add Page - C:\Program Files\FVD Suite\addons\IE\FVDToolbar.dll (paulov.ru)
  174. O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  175. O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  176. O13 - gopher Prefix: missing
  177. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
  178. O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
  179. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
  180. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  181. O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
  182. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.5.208.3 213.5.208.35
  183. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2A0BBB99-212B-4DD3-9346-E08A4D99061C}: DhcpNameServer = 213.5.208.3 213.5.208.35
  184. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3E868581-CAF1-4771-8B59-8EED2DC36E90}: DhcpNameServer = 192.168.42.129
  185. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{862393C0-D7ED-4028-B0DA-26B2E6997435}: DhcpNameServer = 213.158.199.1 213.158.199.5
  186. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  187. O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  188. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  189. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
  190. O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
  191. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  192. O32 - HKLM CDRom: AutoRun - 1
  193. O32 - AutoRun File - [2009-06-10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
  194. O33 - MountPoints2\{7e599089-1304-11df-abc3-001e33de8570}\Shell - "" = AutoRun
  195. O33 - MountPoints2\{7e599089-1304-11df-abc3-001e33de8570}\Shell\AutoRun\command - "" = F:\AutoRun.exe
  196. O33 - MountPoints2\{895a7d3f-c2ed-11de-95ec-001e33de8570}\Shell - "" = AutoRun
  197. O33 - MountPoints2\{895a7d3f-c2ed-11de-95ec-001e33de8570}\Shell\AutoRun\command - "" = F:\AutoRun.exe
  198. O33 - MountPoints2\{895a7d44-c2ed-11de-95ec-001e33de8570}\Shell - "" = AutoRun
  199. O33 - MountPoints2\{895a7d44-c2ed-11de-95ec-001e33de8570}\Shell\AutoRun\command - "" = F:\AutoRun.exe
  200. O33 - MountPoints2\{8bf7d35e-0519-11df-822b-001e33de8570}\Shell - "" = AutoRun
  201. O33 - MountPoints2\{8bf7d35e-0519-11df-822b-001e33de8570}\Shell\AutoRun\command - "" = F:\AutoRun.exe
  202. O33 - MountPoints2\{fc43d063-9f10-11df-ad30-001e33de8570}\Shell - "" = AutoRun
  203. O33 - MountPoints2\{fc43d063-9f10-11df-ad30-001e33de8570}\Shell\AutoRun\command - "" = F:\setup.exe AUTORUN=1
  204. O33 - MountPoints2\F\Shell - "" = AutoRun
  205. O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
  206. O34 - HKLM BootExecute: (autocheck autochk *)
  207. O35 - HKLM\..comfile [open] -- "%1" %*
  208. O35 - HKLM\..exefile [open] -- "%1" %*
  209. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  210. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  211. O37 - HKCU\...exe [@ = 787] -- "%1" %*
  212. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  213. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  214. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  215.  
  216. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  217.  
  218. [2012-12-21 22:43:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
  219. [2012-12-21 22:43:51 | 000,361,032 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
  220. [2012-12-21 22:43:51 | 000,021,256 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys
  221. [2012-12-21 22:43:47 | 000,044,784 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr2.sys
  222. [2012-12-21 22:43:45 | 000,054,232 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
  223. [2012-12-21 22:43:43 | 000,738,504 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
  224. [2012-12-21 22:43:41 | 000,058,680 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
  225. [2012-12-21 22:43:06 | 000,041,224 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
  226. [2012-12-21 22:43:05 | 000,227,648 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
  227. [2012-12-21 13:26:28 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3
  228. [2012-12-21 11:12:17 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
  229. [2012-12-21 11:12:16 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
  230. [2012-12-21 10:55:25 | 000,000,000 | ---D | C] -- C:\Users\piotr\AppData\Roaming\Xaowar
  231. [2012-12-21 10:55:25 | 000,000,000 | ---D | C] -- C:\Users\piotr\AppData\Roaming\Uvudw
  232. [2012-12-21 10:55:25 | 000,000,000 | ---D | C] -- C:\Users\piotr\AppData\Roaming\Uhhod
  233. [2012-12-12 10:19:02 | 002,345,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
  234. [2012-12-12 10:18:39 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
  235. [2012-12-12 10:18:38 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
  236. [2012-12-12 10:18:31 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
  237. [2012-12-12 10:18:30 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
  238. [2012-12-12 10:18:30 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
  239. [2012-12-12 10:18:30 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
  240. [2012-12-12 10:18:30 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
  241. [2012-12-12 10:18:30 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
  242. [2012-12-12 10:18:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
  243. [2012-12-12 10:18:29 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
  244. [2012-12-12 10:18:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
  245. [2012-12-12 10:18:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
  246. [2012-12-12 10:18:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
  247. [2012-12-12 10:18:29 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
  248. [2012-12-12 10:18:29 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
  249. [2012-12-12 10:18:28 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
  250. [2012-12-12 10:18:28 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
  251. [2012-12-12 10:18:28 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
  252. [2012-12-12 10:18:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
  253. [2012-12-12 10:18:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
  254. [2012-12-12 10:18:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
  255. [2012-12-12 10:18:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
  256. [2012-12-12 10:18:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
  257. [2012-12-12 10:18:26 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
  258. [2012-12-12 10:18:26 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
  259. [2012-12-12 10:18:26 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
  260. [2012-12-12 10:18:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
  261. [2012-12-12 10:18:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
  262. [2012-12-12 10:18:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
  263. [2012-12-12 10:18:26 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
  264. [2012-12-12 10:18:13 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnet.dll
  265. [2012-12-12 10:17:55 | 000,627,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
  266. [2012-12-12 10:17:54 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
  267. [2012-12-12 10:17:53 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
  268. [2012-12-12 10:17:53 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
  269. [2012-12-12 10:17:50 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
  270. [2012-12-12 10:17:41 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
  271. [2012-12-10 08:45:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  272. [2012-12-10 08:45:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
  273. [1 C:\Users\piotr\Documents\*.tmp files -> C:\Users\piotr\Documents\*.tmp -> ]
  274.  
  275. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  276.  
  277. [2012-12-21 23:00:30 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  278. [2012-12-21 23:00:24 | 1506,799,616 | -HS- | M] () -- C:\hiberfil.sys
  279. [2012-12-21 22:45:58 | 000,015,984 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  280. [2012-12-21 22:45:58 | 000,015,984 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  281. [2012-12-21 22:43:52 | 000,002,115 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
  282. [2012-12-21 22:43:41 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
  283. [2012-12-21 22:38:59 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  284. [2012-12-21 22:37:08 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  285. [2012-12-21 20:20:19 | 000,687,828 | ---- | M] () -- C:\Windows\System32\perfh015.dat
  286. [2012-12-21 20:20:19 | 000,607,190 | ---- | M] () -- C:\Windows\System32\perfh009.dat
  287. [2012-12-21 20:20:19 | 000,131,382 | ---- | M] () -- C:\Windows\System32\perfc015.dat
  288. [2012-12-21 20:20:19 | 000,103,568 | ---- | M] () -- C:\Windows\System32\perfc009.dat
  289. [2012-12-21 20:09:33 | 000,312,200 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
  290. [2012-12-21 20:07:42 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempMy1928.html
  291. [2012-12-21 20:07:42 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempeL1928.html
  292. [2012-12-21 13:26:29 | 000,001,116 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice.org 3.3.lnk
  293. [2012-12-21 00:01:30 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempfR4408.html
  294. [2012-12-21 00:01:30 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempSv4408.html
  295. [2012-12-19 23:05:44 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempHK5952.html
  296. [2012-12-19 23:05:44 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempOf5952.html
  297. [2012-12-19 11:08:01 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempDY5084.html
  298. [2012-12-19 11:08:01 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TemphS5084.html
  299. [2012-12-18 23:10:18 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TemprZ2632.html
  300. [2012-12-18 23:10:18 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempFK2632.html
  301. [2012-12-17 14:08:12 | 000,143,389 | ---- | M] () -- C:\Users\piotr\Desktop\HL600.jpg
  302. [2012-12-17 12:39:30 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempZJ4220.html
  303. [2012-12-17 12:39:30 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\Tempjo4220.html
  304. [2012-12-16 15:13:28 | 000,295,424 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
  305. [2012-12-16 15:13:20 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
  306. [2012-12-16 14:38:12 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempSo5444.html
  307. [2012-12-16 14:38:12 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempDI5444.html
  308. [2012-12-15 17:30:11 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\Tempdf3068.html
  309. [2012-12-15 17:30:11 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempfL3068.html
  310. [2012-12-15 13:07:31 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempBf4716.html
  311. [2012-12-15 13:07:31 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempsS4716.html
  312. [2012-12-15 01:34:11 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempGl5912.html
  313. [2012-12-15 01:34:11 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempGz5912.html
  314. [2012-12-13 23:31:59 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempOG5548.html
  315. [2012-12-13 23:31:59 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempoH5548.html
  316. [2012-12-13 20:20:05 | 000,002,324 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  317. [2012-12-13 10:50:27 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempSS5480.html
  318. [2012-12-13 10:50:27 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\Tempca5480.html
  319. [2012-12-13 00:41:12 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempdA3408.html
  320. [2012-12-13 00:41:12 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempJQ3408.html
  321. [2012-12-11 23:24:28 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempNt4248.html
  322. [2012-12-11 23:24:28 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempaI4248.html
  323. [2012-12-10 22:36:22 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\Tempsj4884.html
  324. [2012-12-10 22:36:22 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempMR4884.html
  325. [2012-12-10 10:29:27 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\Tempwj4796.html
  326. [2012-12-10 10:29:27 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempEX4796.html
  327. [2012-12-10 08:45:21 | 000,002,505 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
  328. [2012-12-09 22:50:34 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempuI4404.html
  329. [2012-12-09 22:50:34 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempHm4404.html
  330. [2012-12-07 22:50:00 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TemplS5772.html
  331. [2012-12-07 22:50:00 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempWm5772.html
  332. [2012-12-06 15:13:45 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempLr2040.html
  333. [2012-12-06 15:13:45 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempsD2040.html
  334. [2012-12-06 10:30:42 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\Tempfq5464.html
  335. [2012-12-06 10:30:42 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempIU5464.html
  336. [2012-12-05 23:13:27 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempHR4892.html
  337. [2012-12-05 23:13:27 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\Tempbm4892.html
  338. [2012-12-05 15:27:32 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\Templjs168.html
  339. [2012-12-05 15:27:32 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempPHH168.html
  340. [2012-12-05 10:51:48 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempZs2500.html
  341. [2012-12-05 10:51:48 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempmK2500.html
  342. [2012-12-04 22:02:19 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempKN4960.html
  343. [2012-12-04 22:02:19 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempwJ4960.html
  344. [2012-12-04 11:12:37 | 000,002,432 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempSD4972.html
  345. [2012-12-04 11:12:37 | 000,002,089 | ---- | M] () -- C:\Users\piotr\AppData\Local\TempWW4972.html
  346. [2012-11-30 19:20:36 | 000,758,617 | ---- | M] () -- C:\Users\piotr\Desktop\CCF20121130_00001.jpg
  347. [2012-11-30 19:08:06 | 001,050,038 | ---- | M] () -- C:\Users\piotr\Desktop\IMAG1192.jpg
  348. [2012-11-30 18:58:26 | 000,750,152 | ---- | M] () -- C:\Users\piotr\Desktop\CCF20121130_00000.jpg
  349. [2012-11-30 18:55:46 | 000,891,778 | ---- | M] () -- C:\Users\piotr\Desktop\IMAG1191.jpg
  350. [2012-11-22 03:56:02 | 002,345,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
  351. [1 C:\Users\piotr\Documents\*.tmp files -> C:\Users\piotr\Documents\*.tmp -> ]
  352.  
  353. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  354.  
  355. [2012-12-21 22:43:52 | 000,002,115 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
  356. [2012-12-21 19:48:46 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempMy1928.html
  357. [2012-12-21 19:48:46 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempeL1928.html
  358. [2012-12-21 13:26:29 | 000,001,116 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice.org 3.3.lnk
  359. [2012-12-20 15:54:16 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempfR4408.html
  360. [2012-12-20 15:54:16 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempSv4408.html
  361. [2012-12-19 13:26:36 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempHK5952.html
  362. [2012-12-19 13:26:36 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempOf5952.html
  363. [2012-12-19 08:57:28 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempDY5084.html
  364. [2012-12-19 08:57:28 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemphS5084.html
  365. [2012-12-18 16:56:05 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemprZ2632.html
  366. [2012-12-18 16:56:05 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempFK2632.html
  367. [2012-12-17 14:08:26 | 000,143,389 | ---- | C] () -- C:\Users\piotr\Desktop\HL600.jpg
  368. [2012-12-17 12:39:30 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempZJ4220.html
  369. [2012-12-17 12:39:30 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempjo4220.html
  370. [2012-12-16 14:38:12 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempSo5444.html
  371. [2012-12-16 14:38:12 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempDI5444.html
  372. [2012-12-15 17:30:11 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempdf3068.html
  373. [2012-12-15 17:30:11 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempfL3068.html
  374. [2012-12-15 12:58:10 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempBf4716.html
  375. [2012-12-15 12:58:10 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempsS4716.html
  376. [2012-12-14 22:29:25 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempGl5912.html
  377. [2012-12-14 22:29:25 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempGz5912.html
  378. [2012-12-13 14:25:27 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempOG5548.html
  379. [2012-12-13 14:25:27 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempoH5548.html
  380. [2012-12-13 09:27:19 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempSS5480.html
  381. [2012-12-13 09:27:19 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempca5480.html
  382. [2012-12-12 21:01:04 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempdA3408.html
  383. [2012-12-12 21:01:04 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempJQ3408.html
  384. [2012-12-11 13:14:25 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempNt4248.html
  385. [2012-12-11 13:14:25 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempaI4248.html
  386. [2012-12-10 12:53:12 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempsj4884.html
  387. [2012-12-10 12:53:12 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempMR4884.html
  388. [2012-12-10 08:50:00 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempwj4796.html
  389. [2012-12-10 08:50:00 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempEX4796.html
  390. [2012-12-09 15:01:17 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempuI4404.html
  391. [2012-12-09 15:01:17 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempHm4404.html
  392. [2012-12-07 08:54:47 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemplS5772.html
  393. [2012-12-07 08:54:47 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempWm5772.html
  394. [2012-12-06 15:13:13 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempLr2040.html
  395. [2012-12-06 15:13:13 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempsD2040.html
  396. [2012-12-06 08:54:52 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempfq5464.html
  397. [2012-12-06 08:54:52 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempIU5464.html
  398. [2012-12-05 21:29:06 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempHR4892.html
  399. [2012-12-05 21:29:06 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempbm4892.html
  400. [2012-12-05 15:16:57 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Templjs168.html
  401. [2012-12-05 15:16:57 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempPHH168.html
  402. [2012-12-05 08:27:54 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempZs2500.html
  403. [2012-12-05 08:27:54 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempmK2500.html
  404. [2012-12-04 13:23:11 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempKN4960.html
  405. [2012-12-04 13:23:11 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempwJ4960.html
  406. [2012-12-04 10:47:36 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempSD4972.html
  407. [2012-12-04 10:47:36 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempWW4972.html
  408. [2012-11-30 19:07:28 | 001,050,038 | ---- | C] () -- C:\Users\piotr\Desktop\IMAG1192.jpg
  409. [2012-11-30 19:07:28 | 000,891,778 | ---- | C] () -- C:\Users\piotr\Desktop\IMAG1191.jpg
  410. [2012-11-30 18:59:37 | 000,758,617 | ---- | C] () -- C:\Users\piotr\Desktop\CCF20121130_00001.jpg
  411. [2012-11-30 18:58:25 | 000,750,152 | ---- | C] () -- C:\Users\piotr\Desktop\CCF20121130_00000.jpg
  412. [2012-10-01 15:26:05 | 000,019,211 | ---- | C] () -- C:\Users\piotr\.recently-used.xbel
  413. [2012-02-20 19:11:16 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempCr2700.html
  414. [2012-01-07 07:34:35 | 000,009,294 | -HS- | C] () -- C:\Users\piotr\AppData\Local\kwy511of5fok3
  415. [2012-01-07 07:34:35 | 000,009,294 | -HS- | C] () -- C:\ProgramData\kwy511of5fok3
  416. [2012-01-05 13:56:28 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempIH5828.html
  417. [2012-01-05 13:56:16 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempjz5828.html
  418. [2012-01-04 22:33:20 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempDO4768.html
  419. [2012-01-04 22:33:20 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempYW4768.html
  420. [2012-01-04 22:32:59 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempeA4768.html
  421. [2012-01-03 19:26:25 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempTJ4980.html
  422. [2012-01-03 18:32:21 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempQP4980.html
  423. [2012-01-03 18:32:03 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempdx4980.html
  424. [2012-01-03 09:25:20 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemplL4128.html
  425. [2012-01-03 09:25:20 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempHL4128.html
  426. [2012-01-03 09:25:05 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempSB4128.html
  427. [2012-01-03 09:25:05 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempYz4128.html
  428. [2012-01-02 20:16:12 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempXK5676.html
  429. [2012-01-02 20:16:12 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempAi5676.html
  430. [2012-01-02 20:10:12 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempuH5676.html
  431. [2012-01-02 20:10:12 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempiR5676.html
  432. [2011-12-06 10:57:58 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempaG1844.html
  433. [2011-12-06 10:57:58 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemprX1844.html
  434. [2011-11-27 20:13:34 | 000,000,418 | ---- | C] () -- C:\Windows\ODBC.INI
  435. [2011-11-27 19:59:52 | 000,000,404 | ---- | C] () -- C:\Windows\BRWMARK.INI
  436. [2011-11-27 19:51:42 | 000,000,050 | ---- | C] () -- C:\Windows\System32\BRIDF10A.DAT
  437. [2011-10-29 18:46:25 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempqg7856.html
  438. [2011-10-29 18:46:25 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempCX7856.html
  439. [2011-05-12 17:54:41 | 000,000,000 | ---- | C] () -- C:\Users\piotr\AppData\Local\{91EFC851-9038-4207-B64F-6C751D23CCA5}
  440. [2011-04-26 17:05:22 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemprN4876.html
  441. [2011-04-26 17:05:22 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempQZ4876.html
  442. [2011-04-18 20:53:09 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempcL2828.html
  443. [2011-04-18 20:53:09 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempnB2828.html
  444. [2011-04-18 20:38:58 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempnB5356.html
  445. [2011-04-18 20:38:58 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempJB5356.html
  446. [2011-04-17 19:58:41 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempVX5128.html
  447. [2011-04-17 19:58:41 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempFa5128.html
  448. [2011-04-15 19:19:31 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempvN3496.html
  449. [2011-04-15 19:19:31 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempmC3496.html
  450. [2011-04-14 18:41:14 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempWSU192.html
  451. [2011-04-14 18:41:14 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempZAS192.html
  452. [2011-04-13 19:41:03 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempYD5628.html
  453. [2011-04-13 19:41:03 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempal5628.html
  454. [2011-04-12 21:23:02 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemphB5020.html
  455. [2011-04-12 21:23:02 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempVS5020.html
  456. [2011-04-12 19:51:15 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempHD5440.html
  457. [2011-04-12 19:51:15 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempnx5440.html
  458. [2011-04-11 20:23:42 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempKT3944.html
  459. [2011-04-11 20:23:42 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempXW3944.html
  460. [2011-04-11 19:27:25 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempnD5448.html
  461. [2011-04-11 19:27:25 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempUM5448.html
  462. [2011-04-10 19:52:02 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempDO5424.html
  463. [2011-04-10 19:52:02 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempxW5424.html
  464. [2011-04-10 18:59:28 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempBm4460.html
  465. [2011-04-10 18:59:28 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempCs4460.html
  466. [2011-04-10 16:48:02 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempqG6112.html
  467. [2011-04-10 16:48:02 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempon6112.html
  468. [2011-04-10 07:44:16 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempUt4836.html
  469. [2011-04-10 07:44:16 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempRR4836.html
  470. [2011-04-09 20:42:13 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempQp4088.html
  471. [2011-04-09 20:42:13 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempfn4088.html
  472. [2011-04-09 15:26:17 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemppM6004.html
  473. [2011-04-09 15:26:17 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempGg6004.html
  474. [2011-04-09 13:33:50 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempzD5280.html
  475. [2011-04-09 13:33:50 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempUj5280.html
  476. [2011-04-09 09:13:39 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempaK4928.html
  477. [2011-04-09 09:13:39 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempyB4928.html
  478. [2011-04-08 22:00:42 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempUN2880.html
  479. [2011-04-08 22:00:42 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempPE2880.html
  480. [2011-04-03 09:02:27 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempLKz356.html
  481. [2011-04-03 09:02:27 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemprCU356.html
  482. [2011-03-19 18:11:47 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempIU2524.html
  483. [2011-03-19 18:11:47 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempBS2524.html
  484. [2011-02-21 18:24:04 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempdE2636.html
  485. [2011-02-21 18:24:04 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempVq2636.html
  486. [2010-12-29 19:12:26 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempGVK960.html
  487. [2010-12-29 19:12:26 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempBnr960.html
  488. [2010-12-18 15:52:39 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempnD4528.html
  489. [2010-12-18 15:52:39 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempOv4528.html
  490. [2010-12-11 16:24:21 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempcJ4132.html
  491. [2010-12-11 16:24:21 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempEx4132.html
  492. [2010-11-21 13:07:25 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempZlK784.html
  493. [2010-11-21 13:07:25 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempNxM784.html
  494. [2010-10-31 11:13:14 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempIg6012.html
  495. [2010-10-31 11:13:14 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempQI6012.html
  496. [2010-10-30 19:48:55 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempKCT948.html
  497. [2010-10-30 19:48:55 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempews948.html
  498. [2010-10-27 22:05:45 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempuC5536.html
  499. [2010-10-27 22:05:45 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempYI5536.html
  500. [2010-10-24 13:25:56 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempxn3052.html
  501. [2010-10-24 13:25:56 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempPv3052.html
  502. [2010-10-17 11:17:39 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempHoF536.html
  503. [2010-10-17 11:17:39 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempMmY536.html
  504. [2010-10-04 21:30:01 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempkco864.html
  505. [2010-10-04 21:30:01 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempGEJ864.html
  506. [2010-10-03 13:39:14 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempgk5764.html
  507. [2010-10-03 13:39:14 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempDq5764.html
  508. [2010-09-27 06:33:24 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempvIR412.html
  509. [2010-09-27 06:33:24 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempgEP412.html
  510. [2010-09-26 08:19:13 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempZH6112.html
  511. [2010-09-26 08:19:13 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempmd6112.html
  512. [2010-09-23 19:53:02 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempCe1108.html
  513. [2010-09-23 19:53:02 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempxc1108.html
  514. [2010-09-19 19:58:15 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempsR4344.html
  515. [2010-09-19 19:58:15 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempRO4344.html
  516. [2010-09-16 19:08:25 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempfm2108.html
  517. [2010-09-16 19:08:25 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempyC2108.html
  518. [2010-09-14 17:52:05 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempBoj592.html
  519. [2010-09-14 17:52:05 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemppGo592.html
  520. [2010-09-13 18:13:44 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempbq5200.html
  521. [2010-09-13 18:13:44 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempwc5200.html
  522. [2010-09-12 19:58:09 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempnO5528.html
  523. [2010-09-12 19:58:09 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempVU5528.html
  524. [2010-09-12 18:24:25 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempTmu204.html
  525. [2010-09-12 18:24:25 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempZfP204.html
  526. [2010-09-12 10:17:07 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempTcw508.html
  527. [2010-09-12 10:17:07 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemptLD508.html
  528. [2010-09-11 20:31:55 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempXg4364.html
  529. [2010-09-11 20:31:55 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempun4364.html
  530. [2010-09-11 16:30:12 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Templt5440.html
  531. [2010-09-11 16:30:12 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempew5440.html
  532. [2010-09-11 14:39:00 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempiY1112.html
  533. [2010-09-11 14:39:00 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempsH1112.html
  534. [2010-09-11 14:23:10 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempkj5764.html
  535. [2010-09-11 14:23:10 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemprC5764.html
  536. [2010-09-11 01:17:31 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempfb5784.html
  537. [2010-09-11 01:17:31 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempxb5784.html
  538. [2010-09-10 19:19:53 | 000,009,216 | ---- | C] () -- C:\Users\piotr\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  539. [2010-09-09 16:54:33 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Temprl5516.html
  540. [2010-09-09 16:54:33 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempWL5516.html
  541. [2010-09-08 19:27:14 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempPV5928.html
  542. [2010-09-08 19:27:14 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempsM5928.html
  543. [2010-09-08 17:37:31 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemptS1708.html
  544. [2010-09-08 17:37:31 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempZu1708.html
  545. [2010-09-07 19:47:22 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempdq4396.html
  546. [2010-09-07 19:47:22 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Temphc4396.html
  547. [2010-09-07 19:04:55 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempDX6048.html
  548. [2010-09-07 19:04:55 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempnu6048.html
  549. [2010-09-06 19:16:13 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempWP2368.html
  550. [2010-09-06 19:16:13 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempEJ2368.html
  551. [2010-09-06 17:16:27 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempMY5972.html
  552. [2010-09-06 17:16:27 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempud5972.html
  553. [2010-09-05 21:01:28 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Temply5376.html
  554. [2010-09-05 21:01:28 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempJC5376.html
  555. [2010-09-02 18:12:40 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempfH3612.html
  556. [2010-09-02 18:12:40 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempAy3612.html
  557. [2010-09-01 19:11:11 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempJC5000.html
  558. [2010-09-01 19:11:11 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempzA5000.html
  559. [2010-08-31 19:36:41 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempfl5960.html
  560. [2010-08-31 19:36:41 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemppZ5960.html
  561. [2010-08-30 20:04:36 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Temphe4296.html
  562. [2010-08-30 20:04:36 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemprU4296.html
  563. [2010-08-30 15:15:12 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Templp4000.html
  564. [2010-08-30 15:15:12 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempDV4000.html
  565. [2010-08-29 20:48:07 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempnUM888.html
  566. [2010-08-29 20:48:07 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempxaQ888.html
  567. [2010-08-29 20:11:56 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempgvX884.html
  568. [2010-08-29 19:58:18 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempjR3924.html
  569. [2010-08-29 19:56:48 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempvAn368.html
  570. [2010-08-29 19:56:48 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempOCz368.html
  571. [2010-08-29 18:51:42 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemplO4200.html
  572. [2010-08-29 18:51:42 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempjG4200.html
  573. [2010-08-28 13:53:02 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempym3348.html
  574. [2010-08-28 13:53:02 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempdU3348.html
  575. [2010-08-10 14:43:09 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempAW3796.html
  576. [2010-08-10 14:43:09 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempnE3796.html
  577. [2010-07-11 17:44:17 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempKT2236.html
  578. [2010-07-11 17:44:17 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempNW2236.html
  579. [2010-07-11 14:15:19 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempzE4608.html
  580. [2010-07-11 14:15:19 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempep4608.html
  581. [2010-07-10 22:12:16 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempbHk148.html
  582. [2010-07-10 22:12:16 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempKwH148.html
  583. [2010-07-04 18:08:12 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempGz3552.html
  584. [2010-07-04 18:08:12 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempaS3552.html
  585. [2010-06-27 20:32:23 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempmx2988.html
  586. [2010-06-27 20:32:23 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempEl2988.html
  587. [2010-06-20 11:19:15 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempSq6196.html
  588. [2010-06-20 11:19:15 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempXH6196.html
  589. [2010-06-12 22:08:21 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempXn1508.html
  590. [2010-06-12 22:08:21 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Temppn1508.html
  591. [2010-06-10 18:01:42 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempqY3420.html
  592. [2010-06-10 18:01:42 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempDp3420.html
  593. [2010-06-09 20:23:55 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempsD3584.html
  594. [2010-06-09 20:23:55 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempXH3584.html
  595. [2010-06-09 20:21:08 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempJY3900.html
  596. [2010-06-09 20:21:08 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempnb3900.html
  597. [2010-06-09 19:24:34 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempLb3588.html
  598. [2010-06-09 19:24:34 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemplY3588.html
  599. [2010-06-09 16:46:01 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempdq3392.html
  600. [2010-06-09 16:46:01 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempgY3392.html
  601. [2010-06-08 17:57:17 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempCB3604.html
  602. [2010-06-08 17:57:17 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempJw3604.html
  603. [2010-06-07 18:58:55 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempon3836.html
  604. [2010-06-07 18:58:55 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempyT3836.html
  605. [2010-06-06 20:20:50 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempfZ3228.html
  606. [2010-06-06 20:20:50 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempAU3228.html
  607. [2010-06-06 07:15:17 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempxz3440.html
  608. [2010-06-06 07:15:17 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempLH3440.html
  609. [2010-06-05 16:21:14 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempTI3392.html
  610. [2010-06-05 16:21:14 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempdd3392.html
  611. [2010-06-05 07:02:32 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempEB3464.html
  612. [2010-06-05 07:02:32 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempoR3464.html
  613. [2010-06-04 14:17:51 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempaf3516.html
  614. [2010-06-04 14:17:51 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempCD3516.html
  615. [2010-06-04 06:53:43 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempwC3392.html
  616. [2010-06-04 06:53:42 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemprO3392.html
  617. [2010-06-03 20:39:10 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemprP3412.html
  618. [2010-06-03 20:39:10 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemplX3412.html
  619. [2010-06-03 19:40:06 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempSy3456.html
  620. [2010-06-03 19:40:06 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemppY3456.html
  621. [2010-06-03 16:35:56 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempCz3228.html
  622. [2010-06-03 16:35:56 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempaG3228.html
  623. [2010-06-03 14:39:06 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemptM3900.html
  624. [2010-06-03 14:39:06 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempqj3900.html
  625. [2010-06-03 10:48:31 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempND3436.html
  626. [2010-06-03 10:48:31 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempaP3436.html
  627. [2010-06-03 09:49:15 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempNH3440.html
  628. [2010-06-03 09:49:15 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempBa3440.html
  629. [2010-06-03 07:26:01 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempHS3432.html
  630. [2010-06-03 07:26:01 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempcJ3432.html
  631. [2010-06-02 16:07:34 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempbC3428.html
  632. [2010-06-02 16:07:34 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempvs3428.html
  633. [2010-06-01 19:24:39 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempby3492.html
  634. [2010-06-01 19:24:39 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TemptJ3492.html
  635. [2010-06-01 17:52:30 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempxN3540.html
  636. [2010-06-01 17:52:30 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempeo3540.html
  637. [2010-05-31 19:07:58 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempYU3712.html
  638. [2010-05-31 19:07:58 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempWL3712.html
  639. [2010-05-31 17:25:58 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempJP3552.html
  640. [2010-05-31 17:25:58 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempQY3552.html
  641. [2010-05-30 17:30:24 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempDZ3368.html
  642. [2010-05-30 17:30:24 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempwf3368.html
  643. [2010-05-30 09:29:54 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempjn1672.html
  644. [2010-05-30 09:29:54 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempyG1672.html
  645. [2010-05-30 07:11:51 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempsf3428.html
  646. [2010-05-30 07:11:51 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempio3428.html
  647. [2010-05-30 07:07:56 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempuE3948.html
  648. [2010-05-30 07:07:56 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempmx3948.html
  649. [2010-05-29 21:45:08 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempKs3548.html
  650. [2010-05-29 21:45:08 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempgI3548.html
  651. [2010-05-29 14:20:25 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempQZ3776.html
  652. [2010-05-29 14:20:25 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Tempfv3776.html
  653. [2010-05-29 12:35:39 | 000,002,432 | ---- | C] () -- C:\Users\piotr\AppData\Local\TempJU3692.html
  654. [2010-05-29 12:35:39 | 000,002,089 | ---- | C] () -- C:\Users\piotr\AppData\Local\Temprs3692.html
  655. [2010-01-28 17:04:09 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
  656. [2009-10-02 09:43:59 | 000,001,802 | ---- | C] () -- C:\Users\piotr\TOSHIBA Assist.lnk
  657.  
  658. [color=#E56717]========== ZeroAccess Check ==========[/color]
  659.  
  660. [2009-07-14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  661.  
  662. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  663.  
  664. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  665.  
  666. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  667. "" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
  668. "ThreadingModel" = Apartment
  669.  
  670. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  671. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  672. "ThreadingModel" = Free
  673.  
  674. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  675. "" = %systemroot%\system32\wbem\wbemess.dll -- [2009-07-14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
  676. "ThreadingModel" = Both
  677.  
  678. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!