OTL logfile created on: 6/19/2012 12:25:50 AM - Run 3 OTL by OldTimer - Version 3.2.49.0 Folder = C:\Users\Maria\Downloads Starter Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1014.27 Mb Total Physical Memory | 198.50 Mb Available Physical Memory | 19.57% Memory free 1.99 Gb Paging File | 1.00 Gb Available in Paging File | 49.99% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files Drive C: | 102.02 Gb Total Space | 13.06 Gb Free Space | 12.80% Space Free | Partition Type: NTFS Drive D: | 175.78 Gb Total Space | 73.01 Gb Free Space | 41.53% Space Free | Partition Type: NTFS Drive E: | 3.72 Gb Total Space | 3.35 Gb Free Space | 90.08% Space Free | Partition Type: FAT32 Drive F: | 97.66 Gb Total Space | 1.18 Gb Free Space | 1.21% Space Free | Partition Type: NTFS Drive G: | 192.20 Gb Total Space | 102.53 Gb Free Space | 53.34% Space Free | Partition Type: NTFS Drive H: | 931.51 Gb Total Space | 587.42 Gb Free Space | 63.06% Space Free | Partition Type: NTFS Computer Name: MARIA-NOKIA | User Name: Maria | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012/06/18 22:43:08 | 000,302,592 | ---- | M] () -- C:\Users\Maria\Downloads\x0vy946w.exe PRC - [2012/06/18 22:42:15 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Maria\Downloads\OTL.exe PRC - [2011/12/23 14:48:53 | 000,941,936 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe PRC - [2011/02/26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2010/07/12 18:32:48 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Winamp\winampa.exe PRC - [2010/02/04 00:56:52 | 000,011,776 | ---- | M] () -- C:\Windows\System32\prldrsrv.exe PRC - [2009/12/24 21:13:54 | 000,180,224 | ---- | M] () -- C:\Windows\System32\HDPSrv.exe PRC - [2009/12/24 01:48:22 | 000,488,816 | ---- | M] (Nokia) -- C:\Program Files\Power Management\NpwrMngr.exe PRC - [2009/12/22 23:25:08 | 001,607,024 | ---- | M] (COMPAL ELECTRONIC INC.) -- C:\Program Files\HotKey\CeEKey.exe PRC - [2009/09/11 00:39:10 | 000,111,488 | ---- | M] (CSR, plc) -- C:\Program Files\CSR\Bluetooth Feature Pack 5.0\VFPRadioSupportService.exe PRC - [2009/09/11 00:38:50 | 000,504,160 | ---- | M] (CSR, plc) -- C:\Program Files\CSR\Bluetooth Feature Pack 5.0\ConMgr.exe PRC - [2009/07/14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2009/07/14 03:14:24 | 000,157,184 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Windows Defender\MpCmdRun.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012/06/18 22:43:08 | 000,302,592 | ---- | M] () -- C:\Users\Maria\Downloads\x0vy946w.exe MOD - [2009/12/24 21:13:54 | 000,180,224 | ---- | M] () -- C:\Windows\System32\HDPSrv.exe MOD - [2009/06/03 22:14:26 | 000,024,576 | ---- | M] () -- C:\Windows\System32\EKECioCtl.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2012/01/24 11:25:20 | 000,078,336 | ---- | M] (Dassault Systèmes) [On_Demand | Stopped] -- C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe -- (DraftSight API Service) SRV - [2011/04/24 23:15:02 | 000,202,296 | ---- | M] (Kaspersky Lab ZAO) [On_Demand | Stopped] -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe -- (AVP) SRV - [2010/02/04 00:56:52 | 000,011,776 | ---- | M] () [Auto | Running] -- C:\Windows\System32\prldrsrv.exe -- (PrLdrSrv) SRV - [2009/12/24 21:13:54 | 000,180,224 | ---- | M] () [Auto | Running] -- C:\Windows\System32\HDPSrv.exe -- (HDPSrv) SRV - [2009/09/11 00:39:10 | 000,111,488 | ---- | M] (CSR, plc) [Auto | Running] -- C:\Program Files\CSR\Bluetooth Feature Pack 5.0\VFPRadioSupportService.exe -- (VFPRadioSupportService) SRV - [2009/07/14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Running] -- C:\Users\Maria\AppData\Local\Temp\kwddypob.sys -- (kwddypob) DRV - [2012/06/18 18:18:52 | 000,570,160 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\System32\drivers\klif.sys -- (KLIF) DRV - [2011/03/10 18:36:18 | 000,023,856 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\klim6.sys -- (KLIM6) DRV - [2011/03/04 13:23:20 | 000,011,352 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\kl2.sys -- (kl2) DRV - [2011/03/04 13:23:14 | 000,133,208 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\kl1.sys -- (KL1) DRV - [2009/11/02 20:27:16 | 000,019,984 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klmouflt.sys -- (klmouflt) DRV - [2009/10/21 23:48:04 | 000,159,232 | ---- | M] (Option N.V.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\gtuhs62.sys -- (GTNDIS62) DRV - [2009/10/05 22:05:14 | 000,067,840 | ---- | M] (Option N.V.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\gtuhsbus.sys -- (GTUHSBUS) DRV - [2009/10/05 22:04:14 | 000,008,064 | ---- | M] (Option N.V.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\gtuhsser.sys -- (GTUHSSER) DRV - [2009/09/11 00:38:54 | 000,028,000 | ---- | M] (CSR, plc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BthAvrcp.sys -- (BthAvrcp) DRV - [2009/08/20 07:48:59 | 001,178,112 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr) DRV - [2009/07/14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2009/07/10 00:44:52 | 000,122,880 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcHdmi.sys -- (IntcHdmiAddService) Intel(R) DRV - [2009/07/04 02:01:14 | 000,020,848 | ---- | M] (COMPAL ELECTRONIC INC.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\HDFilter.sys -- (HDFilter) DRV - [2009/07/03 05:01:24 | 000,036,208 | ---- | M] (COMPAL ELECTRONIC INC.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\LPCFilter.sys -- (LPCFilter) DRV - [2009/06/25 03:15:00 | 000,019,824 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\EvMngr.sys -- (EMSC) DRV - [2007/10/16 12:40:50 | 000,097,408 | ---- | M] (Mobile Connector) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\cmusbser.sys -- (qcusbser) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.) IE - HKLM\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.) IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253 IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20111223123416627&tb_oid=23-12-2011&tb_mrud=23-12-2011 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank IE - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.) IE - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.) IE - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\..\URLSearchHook: {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - No CLSID value found IE - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b} IE - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=108713&babsrc=SP_ss&mntrId=568a3921000000000000000000000000 IE - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\..\SearchScopes\{2C6E9138-947C-4DC0-978C-1BDD91156153}: "URL" = http://start.funmoods.com/results.php?f=4&a=ironto&q={searchTerms} IE - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\..\SearchScopes\{647DEAE1-0BE3-4959-8A3A-DDA790896E6A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253 IE - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20111223123416627&tb_oid=23-12-2011&tb_mrud=23-12-2011 IE - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)" FF - prefs.js..browser.search.defaultthis.engineName: "uTorrentControl2 Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.order.1: "Search the web (Babylon)" FF - prefs.js..browser.search.selectedEngine: "Search the web (Babylon)" FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?babsrc=HP_Prot" FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q=" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.709: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.709: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.7: C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\linkfilter@kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\FFExt\linkfilter@kaspersky.ru [2012/06/18 19:16:39 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtualKeyboard@kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\FFExt\virtualKeyboard@kaspersky.ru [2012/06/18 19:16:43 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/05/12 17:26:32 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/12/25 02:55:26 | 000,000,000 | ---D | M] [2011/12/23 08:03:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Maria\AppData\Roaming\mozilla\Extensions [2012/06/12 06:26:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Maria\AppData\Roaming\mozilla\Firefox\Profiles\ijpyb56r.default\extensions [2012/05/19 16:11:00 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Users\Maria\AppData\Roaming\mozilla\Firefox\Profiles\ijpyb56r.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2012/06/07 15:22:06 | 000,000,000 | ---D | M] (uTorrentControl2 Community Toolbar) -- C:\Users\Maria\AppData\Roaming\mozilla\Firefox\Profiles\ijpyb56r.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03} [2012/06/07 15:22:09 | 000,000,000 | ---D | M] (Ashampoo PO Community Toolbar) -- C:\Users\Maria\AppData\Roaming\mozilla\Firefox\Profiles\ijpyb56r.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab} [2012/05/19 16:14:57 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Maria\AppData\Roaming\mozilla\Firefox\Profiles\ijpyb56r.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2012/06/12 06:26:55 | 000,000,000 | ---D | M] (Ant Video Downloader) -- C:\Users\Maria\AppData\Roaming\mozilla\Firefox\Profiles\ijpyb56r.default\extensions\anttoolbar@ant.com [2012/01/10 01:56:35 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Maria\AppData\Roaming\mozilla\Firefox\Profiles\ijpyb56r.default\extensions\ffxtlbr@babylon.com [2012/01/16 15:46:15 | 000,000,000 | ---D | M] (Funmoods.com) -- C:\Users\Maria\AppData\Roaming\mozilla\Firefox\Profiles\ijpyb56r.default\extensions\ffxtlbr@funmoods.com [2012/01/12 02:09:00 | 000,000,935 | ---- | M] () -- C:\Users\Maria\AppData\Roaming\Mozilla\Firefox\Profiles\ijpyb56r.default\searchplugins\conduit.xml [2012/01/14 20:30:07 | 000,001,800 | ---- | M] () -- C:\Users\Maria\AppData\Roaming\Mozilla\Firefox\Profiles\ijpyb56r.default\searchplugins\funmoods.xml [2012/05/12 17:26:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012/05/12 17:26:31 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011/12/23 16:11:15 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2010/07/12 18:33:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll [2012/05/12 17:26:25 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012/01/10 02:00:16 | 000,002,310 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml [2012/05/12 17:26:25 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012/05/12 17:26:25 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012/05/12 17:26:25 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012/05/12 17:26:25 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012/05/12 17:26:25 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - Extension: YouTube = C:\Users\Maria\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\ CHR - Extension: Szukaj w Google = C:\Users\Maria\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\ CHR - Extension: Funmoods = C:\Users\Maria\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdloijijlkoblmigdofommgnheckmaki\1.4.5_0\ CHR - Extension: Gmail = C:\Users\Maria\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\ O1 HOSTS File: ([2009/06/10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.) O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO) O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\ievkbd.dll (Kaspersky Lab ZAO) O2 - BHO: (uTorrentControl2 Toolbar) - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.) O2 - BHO: (Funmoods Helper Object) - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} - C:\Program Files\Funmoods\funmoods\1.5.11.1\bh\funmoods.dll (Funmoods BHO) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtbbho.dll (Kaspersky Lab ZAO) O3 - HKLM\..\Toolbar: (uTorrentControl2 Toolbar) - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM\..\Toolbar: (Funmoods Toolbar) - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - C:\Program Files\Funmoods\funmoods\1.5.11.1\funmoodsTlbr.dll (Funmoods) O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.) O3 - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\..\Toolbar\WebBrowser: (uTorrentControl2 Toolbar) - {687578B9-7132-4A7A-80E4-30EE31099E03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [CeEKEY] C:\Program Files\HotKey\CeEKey.exe (COMPAL ELECTRONIC INC.) O4 - HKLM..\Run: [ConMgr] C:\Program Files\CSR\Bluetooth Feature Pack 5.0\ConMgr.exe (CSR, plc) O4 - HKLM..\Run: [CSRSkype] C:\Program Files\CSR\Bluetooth Feature Pack 5.0\CSRSkype.exe (CSR, plc) O4 - HKLM..\Run: [e-Kiosk] C:\Program Files\e-Kiosk Reader\eGazetaST.exe (e-Kiosk S.A.) O4 - HKLM..\Run: [HDPSrv] C:\windows\System32\HDPSrv.exe () O4 - HKLM..\Run: [NpwrMngr] C:\Program Files\Power Management\NpwrMngr.exe (Nokia) O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.) O4 - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000..\Run: [IPLA!] C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.) O4 - HKLM..\RunOnce: [] File not found O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3 O7 - HKU\S-1-5-21-1890436885-4213763473-3846588077-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O9 - Extra Button: &Klawiatura wirtualna - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\ievkbd.dll (Kaspersky Lab ZAO) O9 - Extra Button: &Sprawdzanie adresów internetowych - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtbbho.dll (Kaspersky Lab ZAO) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{82BCEE91-B8F9-45AC-BADE-8E29B539B891}: NameServer = 212.2.96.53 212.2.96.51 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A12590EE-FBA3-4863-8FB4-A298FFB2DC28}: DhcpNameServer = 192.168.0.1 O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - Winlogon\Notify\klogon: DllName - (C:\windows\system32\klogon.dll) - C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{af8719e9-4418-11e1-a4a5-fc38c0b787b4}\Shell - "" = AutoRun O33 - MountPoints2\{af8719e9-4418-11e1-a4a5-fc38c0b787b4}\Shell\AutoRun\command - "" = D:\autorun.exe O33 - MountPoints2\{af871a02-4418-11e1-a4a5-fc38c0b787b4}\Shell - "" = AutoRun O33 - MountPoints2\{af871a02-4418-11e1-a4a5-fc38c0b787b4}\Shell\AutoRun\command - "" = D:\autorun.exe O33 - MountPoints2\D\Shell - "" = AutoRun O33 - MountPoints2\D\Shell\AutoRun\command - "" = D:\autorun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012/06/18 23:20:08 | 000,000,000 | ---D | C] -- C:\UsbFix [2012/06/18 18:30:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus 2012 [2012/06/18 18:21:00 | 000,000,000 | ---D | C] -- C:\Program Files\Kaspersky Lab [2012/06/18 18:20:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2012/06/18 18:18:52 | 000,570,160 | ---- | C] (Kaspersky Lab) -- C:\windows\System32\drivers\klif.sys [2012/06/14 03:14:00 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtml.tlb [2012/06/14 03:13:56 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieui.dll [2012/06/14 03:13:56 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieUnatt.exe [2012/06/14 03:13:56 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jsproxy.dll [2012/06/14 03:13:53 | 001,800,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jscript9.dll [2012/06/14 03:13:53 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\url.dll [2012/06/14 03:13:50 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\inetcpl.cpl [2012/06/13 19:35:27 | 002,342,400 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\win32k.sys [2012/06/13 19:35:24 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpcorekmts.dll [2012/06/13 19:35:24 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdpwsx.dll [2012/06/13 19:35:24 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rdrmemptylst.exe [2012/06/12 19:21:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight [2012/06/12 19:21:08 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight [2012/05/22 23:12:05 | 000,000,000 | ---D | C] -- C:\ProgramData\NokiaInstallerCache [2012/05/20 18:51:09 | 000,000,000 | ---D | C] -- C:\Program Files\PlayReady [2012/03/03 23:13:08 | 002,371,152 | ---- | C] (DownVision ) -- C:\Users\Maria\AppData\Local\setup.exe [1 C:\windows\*.tmp files -> C:\windows\*.tmp -> ] [1 C:\Users\Maria\Desktop\*.tmp files -> C:\Users\Maria\Desktop\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012/06/19 00:10:20 | 000,001,034 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job [2012/06/18 23:48:37 | 000,703,876 | ---- | M] () -- C:\windows\System32\perfh015.dat [2012/06/18 23:48:37 | 000,621,528 | ---- | M] () -- C:\windows\System32\perfh009.dat [2012/06/18 23:48:37 | 000,137,460 | ---- | M] () -- C:\windows\System32\perfc015.dat [2012/06/18 23:48:37 | 000,108,446 | ---- | M] () -- C:\windows\System32\perfc009.dat [2012/06/18 22:49:18 | 000,009,696 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012/06/18 22:49:18 | 000,009,696 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012/06/18 22:30:48 | 000,001,030 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job [2012/06/18 22:29:25 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat [2012/06/18 22:28:10 | 797,655,040 | -HS- | M] () -- C:\hiberfil.sys [2012/06/18 20:35:37 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempDq2380.html [2012/06/18 18:35:54 | 000,017,408 | ---- | M] () -- C:\Users\Maria\AppData\Local\WebpageIcons.db [2012/06/18 18:31:02 | 000,115,369 | ---- | M] () -- C:\windows\System32\drivers\klin.dat [2012/06/18 18:31:01 | 000,097,961 | ---- | M] () -- C:\windows\System32\drivers\klick.dat [2012/06/18 18:18:52 | 000,570,160 | ---- | M] (Kaspersky Lab) -- C:\windows\System32\drivers\klif.sys [2012/06/18 00:10:04 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempOv3176.html [2012/06/17 20:29:35 | 003,647,180 | ---- | M] () -- C:\Users\Maria\Documents\DSC01053.JPG [2012/06/17 00:43:38 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\Temptd3192.html [2012/06/17 00:43:38 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempnK3192.html [2012/06/14 23:44:14 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempmS2852.html [2012/06/14 04:02:38 | 000,297,264 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT [2012/06/14 03:58:19 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempRt1096.html [2012/06/14 03:58:19 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempgA1096.html [2012/06/12 04:52:12 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempUy8016.html [2012/06/12 04:52:12 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempUK8016.html [2012/06/11 23:18:01 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TemprI7852.html [2012/06/11 11:44:11 | 001,325,178 | ---- | M] () -- C:\Users\Maria\Desktop\praca druk.pdf [2012/06/11 01:11:37 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TemprF1904.html [2012/06/11 01:11:37 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\Tempiz1904.html [2012/06/10 17:21:48 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\Tempms3232.html [2012/06/10 17:21:48 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\Tempxi3232.html [2012/06/10 09:34:17 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\Tempqi3296.html [2012/06/10 09:34:17 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\Tempjz3296.html [2012/06/09 13:36:00 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempzA4716.html [2012/06/09 13:36:00 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempRz4716.html [2012/06/08 17:50:53 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempVr3660.html [2012/06/07 22:01:55 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempDM1096.html [2012/06/07 18:07:41 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempTt1032.html [2012/06/07 18:07:41 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempQp1032.html [2012/06/06 14:34:59 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempWp3968.html [2012/06/06 01:57:04 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempSvx976.html [2012/06/05 13:44:39 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\Tempum2592.html [2012/06/05 13:44:39 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempFK2592.html [2012/06/04 22:11:59 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\Tempmi3076.html [2012/06/04 22:11:59 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\Temphz3076.html [2012/06/03 23:46:24 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempYA3604.html [2012/06/03 23:46:24 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempvB3604.html [2012/06/03 14:52:00 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempQj2140.html [2012/06/02 12:29:35 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\Temppd4192.html [2012/06/02 12:29:35 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempEX4192.html [2012/06/02 00:30:08 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempGM2184.html [2012/06/01 07:21:22 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TemppU1016.html [2012/06/01 07:21:22 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\TemptD1016.html [2012/06/01 00:03:49 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempkL1696.html [2012/06/01 00:03:49 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempgD1696.html [2012/05/31 09:38:59 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempFge292.html [2012/05/27 11:14:34 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\Tempfo4028.html [2012/05/26 19:03:15 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempfV2248.html [2012/05/26 06:21:01 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\Tempvy3312.html [2012/05/26 06:21:01 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\Tempqz3312.html [2012/05/25 08:54:20 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\Tempdf2676.html [2012/05/24 13:18:13 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\Tempoq3496.html [2012/05/24 00:34:26 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempZZ1744.html [2012/05/24 00:34:25 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempYo1744.html [2012/05/23 15:44:35 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempAU2056.html [2012/05/23 13:50:00 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempKC2072.html [2012/05/23 02:58:05 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\Tempug3944.html [2012/05/22 16:28:19 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempRR2404.html [2012/05/21 23:11:36 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempmL2408.html [2012/05/21 23:11:36 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempqE2408.html [2012/05/21 19:41:18 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempEh1588.html [2012/05/21 15:39:37 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempGB1932.html [2012/05/21 10:36:50 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempQa2400.html [2012/05/21 10:36:50 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempPZ2400.html [2012/05/21 01:30:12 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempaM3152.html [2012/05/21 01:30:12 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempFa3152.html [2012/05/20 22:20:04 | 000,045,354 | ---- | M] () -- C:\Users\Maria\Documents\DSC94335.jpg(1).jpg [2012/05/20 22:19:25 | 000,018,990 | ---- | M] () -- C:\Users\Maria\Documents\DSC192256.jpg.jpg [2012/05/20 22:19:24 | 000,000,000 | ---- | M] () -- C:\Users\Maria\Documents\DSC94335.jpg.jpg [2012/05/20 22:09:46 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempiC6992.html [2012/05/20 22:09:46 | 000,002,089 | ---- | M] () -- C:\Users\Maria\AppData\Local\Tempdy6992.html [2012/05/20 17:34:42 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempJX3336.html [2012/05/20 01:26:42 | 000,002,432 | ---- | M] () -- C:\Users\Maria\AppData\Local\TempyJ3000.html [1 C:\windows\*.tmp files -> C:\windows\*.tmp -> ] [1 C:\Users\Maria\Desktop\*.tmp files -> C:\Users\Maria\Desktop\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012/06/18 18:35:37 | 000,017,408 | ---- | C] () -- C:\Users\Maria\AppData\Local\WebpageIcons.db [2012/06/18 18:31:02 | 000,115,369 | ---- | C] () -- C:\windows\System32\drivers\klin.dat [2012/06/18 18:31:01 | 000,097,961 | ---- | C] () -- C:\windows\System32\drivers\klick.dat [2012/06/18 12:20:55 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempDq2380.html [2012/06/17 20:27:10 | 003,647,180 | ---- | C] () -- C:\Users\Maria\Documents\DSC01053.JPG [2012/06/17 19:43:08 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempOv3176.html [2012/06/17 00:37:11 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Temptd3192.html [2012/06/17 00:37:11 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempnK3192.html [2012/06/14 14:02:09 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempmS2852.html [2012/06/13 16:25:38 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempRt1096.html [2012/06/13 16:25:38 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempgA1096.html [2012/06/12 04:52:12 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempUy8016.html [2012/06/12 04:52:12 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempUK8016.html [2012/06/11 19:52:32 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemprI7852.html [2012/06/11 11:35:40 | 001,325,178 | ---- | C] () -- C:\Users\Maria\Desktop\praca druk.pdf [2012/06/10 23:08:34 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemprF1904.html [2012/06/10 23:08:34 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempiz1904.html [2012/06/10 17:21:48 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempms3232.html [2012/06/10 17:21:48 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempxi3232.html [2012/06/10 09:34:17 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempqi3296.html [2012/06/10 09:34:17 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempjz3296.html [2012/06/09 13:33:56 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempzA4716.html [2012/06/09 13:33:56 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempRz4716.html [2012/06/08 13:05:01 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempVr3660.html [2012/06/07 19:42:38 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempDM1096.html [2012/06/07 09:43:00 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempTt1032.html [2012/06/07 09:43:00 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempQp1032.html [2012/06/06 10:27:30 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempWp3968.html [2012/06/05 21:36:42 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempSvx976.html [2012/06/05 13:44:39 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempum2592.html [2012/06/05 13:44:39 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempFK2592.html [2012/06/04 20:53:23 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempmi3076.html [2012/06/04 20:53:23 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Temphz3076.html [2012/06/03 14:57:05 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempYA3604.html [2012/06/03 14:57:05 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempvB3604.html [2012/06/03 14:50:46 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempQj2140.html [2012/06/02 11:22:52 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Temppd4192.html [2012/06/02 11:22:52 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempEX4192.html [2012/06/01 16:24:00 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempGM2184.html [2012/06/01 07:21:22 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemppU1016.html [2012/06/01 07:21:22 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemptD1016.html [2012/05/31 23:56:41 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempkL1696.html [2012/05/31 23:56:41 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempgD1696.html [2012/05/31 09:36:45 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempFge292.html [2012/05/27 10:24:06 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempfo4028.html [2012/05/26 12:06:17 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempfV2248.html [2012/05/26 06:10:33 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempvy3312.html [2012/05/26 06:10:33 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempqz3312.html [2012/05/25 08:51:55 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempdf2676.html [2012/05/24 10:26:05 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempoq3496.html [2012/05/23 20:49:23 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempYo1744.html [2012/05/23 20:49:23 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempZZ1744.html [2012/05/23 15:34:37 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempAU2056.html [2012/05/23 08:58:36 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempKC2072.html [2012/05/22 19:02:35 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempug3944.html [2012/05/22 11:37:46 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempRR2404.html [2012/05/21 20:48:13 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempmL2408.html [2012/05/21 20:48:13 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempqE2408.html [2012/05/21 17:01:45 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempEh1588.html [2012/05/21 12:16:32 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempGB1932.html [2012/05/21 10:36:50 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempQa2400.html [2012/05/21 10:36:50 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempPZ2400.html [2012/05/20 23:35:14 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempaM3152.html [2012/05/20 23:35:14 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempFa3152.html [2012/05/20 22:20:03 | 000,045,354 | ---- | C] () -- C:\Users\Maria\Documents\DSC94335.jpg(1).jpg [2012/05/20 22:19:24 | 000,000,000 | ---- | C] () -- C:\Users\Maria\Documents\DSC94335.jpg.jpg [2012/05/20 22:19:23 | 000,018,990 | ---- | C] () -- C:\Users\Maria\Documents\DSC192256.jpg.jpg [2012/05/20 22:09:46 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempiC6992.html [2012/05/20 22:09:46 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempdy6992.html [2012/05/20 12:16:14 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempJX3336.html [2012/05/19 19:29:06 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempyJ3000.html [2012/05/19 16:36:46 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempIH1984.html [2012/05/19 13:14:15 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempyS3004.html [2012/05/19 13:14:15 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempAU3004.html [2012/05/18 23:50:19 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempWm2664.html [2012/05/18 09:54:52 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempQo2496.html [2012/05/18 09:54:52 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempyE2496.html [2012/05/17 19:16:59 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempJU2772.html [2012/05/17 12:08:03 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempjb2596.html [2012/05/16 21:37:42 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempeI3128.html [2012/05/16 21:37:42 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Temprl3128.html [2012/05/16 12:19:14 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempwA2168.html [2012/05/16 12:19:14 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempYf2168.html [2012/05/16 08:55:20 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempEA3624.html [2012/05/16 08:55:20 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempyL3624.html [2012/05/15 22:48:10 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempHu2280.html [2012/05/15 12:57:56 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempjnK888.html [2012/05/14 19:06:05 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempfo1144.html [2012/05/14 19:06:05 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempta1144.html [2012/05/14 15:17:16 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempPI3000.html [2012/05/14 11:13:42 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemprS1804.html [2012/05/13 23:09:03 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempNV2836.html [2012/05/13 22:49:23 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Temptk3768.html [2012/05/13 18:20:16 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempxR2372.html [2012/05/13 18:20:16 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempIc2372.html [2012/05/12 23:15:00 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempPc2796.html [2012/05/12 23:15:00 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempnO2796.html [2012/05/12 09:43:39 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempNn5624.html [2012/05/11 23:46:40 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempvRB624.html [2012/05/10 23:31:31 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempVq2116.html [2012/05/10 23:31:31 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempaO2116.html [2012/05/10 08:54:55 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempkD1644.html [2012/05/09 11:12:57 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempfV2688.html [2012/05/09 11:12:57 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempvw2688.html [2012/05/08 19:27:36 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempby2272.html [2012/05/08 19:27:36 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemppN2272.html [2012/05/08 09:23:23 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempIv2724.html [2012/05/07 21:41:55 | 000,000,024 | -H-- | C] () -- C:\windows\System32\wilsa.dll [2012/05/07 21:41:54 | 000,000,032 | -H-- | C] () -- C:\Program Files\qolfer.dll [2012/05/07 11:39:12 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempFc3556.html [2012/05/06 13:08:00 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempLC2456.html [2012/05/05 10:50:55 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempdb2256.html [2012/05/04 21:05:20 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempUn3300.html [2012/05/04 21:05:20 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempmU3300.html [2012/05/04 17:02:38 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Templv4008.html [2012/05/04 17:02:38 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempiD4008.html [2012/05/03 23:38:22 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempNy2164.html [2012/05/02 22:37:30 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempqC2072.html [2012/04/30 18:33:23 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Temps10164.html [2012/04/30 01:46:05 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempDp3788.html [2012/04/28 15:34:19 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempev1632.html [2012/04/28 15:34:19 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempce1632.html [2012/04/28 01:05:19 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempHA2512.html [2012/04/28 01:05:19 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempzY2512.html [2012/04/26 20:33:47 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempnh2844.html [2012/04/25 21:46:48 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempzk3568.html [2012/04/25 21:46:48 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempoe3568.html [2012/04/24 15:11:33 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempuE2216.html [2012/04/24 10:56:07 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemphL1176.html [2012/04/23 22:37:37 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempvj3968.html [2012/04/23 17:57:49 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempnO3760.html [2012/04/22 22:05:02 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempLn2372.html [2012/04/22 16:39:29 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempeb2432.html [2012/04/22 16:39:29 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempbD2432.html [2012/04/21 18:21:55 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempMq2852.html [2012/04/21 09:41:00 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempSV3572.html [2012/04/21 09:41:00 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempgc3572.html [2012/04/20 22:38:31 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempFj3312.html [2012/04/20 22:38:31 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempKa3312.html [2012/04/20 21:59:31 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempHm2584.html [2012/04/20 21:59:31 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempqr2584.html [2012/04/20 17:04:11 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempow2716.html [2012/04/20 08:12:34 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempQA2704.html [2012/04/20 08:12:34 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempMX2704.html [2012/04/19 14:06:50 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempZr3664.html [2012/04/19 14:06:50 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempOi3664.html [2012/04/19 01:20:22 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempcK3000.html [2012/04/18 06:50:05 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempXd3556.html [2012/04/17 21:01:43 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempgsZ576.html [2012/04/17 21:01:43 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempbxV576.html [2012/04/16 20:41:29 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempwn2056.html [2012/04/16 20:41:29 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempLm2056.html [2012/04/16 18:06:22 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempZt2644.html [2012/04/16 18:06:22 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempEQ2644.html [2012/04/16 10:31:55 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempXC2232.html [2012/04/16 09:47:00 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempUk3776.html [2012/04/15 18:01:08 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Temptj1052.html [2012/04/15 11:31:19 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempCv4056.html [2012/04/14 15:15:42 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempmK3776.html [2012/04/14 15:15:42 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempKm3776.html [2012/04/14 09:52:03 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempxa3256.html [2012/04/14 09:52:03 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempko3256.html [2012/04/13 21:50:10 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Temppt5612.html [2012/04/13 21:50:10 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempvv5612.html [2012/04/12 13:05:23 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Temppt3328.html [2012/04/12 13:05:23 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempLM3328.html [2012/04/11 11:20:55 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempgu3840.html [2012/04/11 09:15:02 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempSN1248.html [2012/04/11 09:15:02 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempUR1248.html [2012/04/10 21:46:26 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempmR1496.html [2012/04/10 21:46:23 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempfV1496.html [2012/04/10 16:00:49 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempqn3820.html [2012/04/10 16:00:49 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempeZ3820.html [2012/04/10 16:00:43 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempFC3820.html [2012/04/10 12:52:20 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempva3236.html [2012/04/10 12:52:20 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempTL3236.html [2012/04/10 12:52:17 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempTQ3236.html [2012/04/09 21:50:36 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempYM2332.html [2012/04/09 21:50:32 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempvN2332.html [2012/04/07 01:21:14 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemprQ3816.html [2012/04/07 01:21:11 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempWx3816.html [2012/04/05 22:16:58 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempZu2784.html [2012/04/05 22:16:56 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempnp2784.html [2012/04/05 00:40:33 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempyv2932.html [2012/04/05 00:40:31 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempAn2932.html [2012/04/02 23:10:15 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempxq3688.html [2012/04/02 23:10:12 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempHW3688.html [2012/04/01 20:34:53 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempVU3024.html [2012/04/01 20:34:50 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Temptb3024.html [2012/03/31 19:11:40 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemphL2108.html [2012/03/31 09:36:48 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemphK3392.html [2012/03/31 09:36:48 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempmO3392.html [2012/03/31 09:36:44 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempcO3392.html [2012/03/31 09:36:44 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempnc3392.html [2012/03/30 23:28:17 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempXN2928.html [2012/03/30 23:28:17 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempSP2928.html [2012/03/30 23:28:14 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempHY2928.html [2012/03/30 19:00:39 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempek3672.html [2012/03/30 19:00:37 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempga3672.html [2012/03/29 18:37:35 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempha2728.html [2012/03/29 18:37:29 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempVp2728.html [2012/03/29 12:32:45 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempNw3720.html [2012/03/29 12:32:43 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempEt3720.html [2012/03/28 11:55:37 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempXH3448.html [2012/03/28 11:55:35 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempuM3448.html [2012/03/27 20:42:40 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempfn1852.html [2012/03/27 20:42:38 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempzV1852.html [2012/03/26 16:55:43 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempTi2092.html [2012/03/26 16:55:41 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempgW2092.html [2012/03/24 23:39:28 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempce2324.html [2012/03/24 23:39:26 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemptG2324.html [2012/03/23 09:07:43 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempnv5196.html [2012/03/23 09:07:43 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempEQ5196.html [2012/03/23 09:07:41 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempiP5196.html [2012/03/22 16:04:57 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempPV3928.html [2012/03/22 16:04:55 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempPa3928.html [2012/03/21 23:06:17 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempmt3992.html [2012/03/21 23:06:15 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempQA3992.html [2012/03/21 11:04:18 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempLk1168.html [2012/03/21 11:04:16 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempgo1168.html [2012/03/20 20:42:35 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempHG1888.html [2012/03/20 20:42:32 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempmE1888.html [2012/03/20 10:34:09 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempzor676.html [2012/03/20 10:34:07 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempVZC676.html [2012/03/19 21:09:19 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempOS3944.html [2012/03/19 21:09:19 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempkX3944.html [2012/03/19 21:09:10 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempqJ3944.html [2012/03/18 17:27:02 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempks3832.html [2012/03/18 17:26:59 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempyz3832.html [2012/03/17 16:30:02 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempGa5084.html [2012/03/17 16:29:58 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempGB5084.html [2012/03/17 13:48:22 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempzV5976.html [2012/03/17 13:48:20 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempGg5976.html [2012/03/16 21:32:30 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempiB4012.html [2012/03/16 21:32:25 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempUH4012.html [2012/03/16 00:06:30 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempKS2676.html [2012/03/16 00:06:24 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempjH2676.html [2012/03/15 15:43:25 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempqj2092.html [2012/03/15 15:43:22 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempYm2092.html [2012/03/14 23:29:17 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempAV3912.html [2012/03/14 23:29:16 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Temppq3912.html [2012/03/14 08:15:23 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempTP8916.html [2012/03/14 08:15:20 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempnj8916.html [2012/03/13 22:58:34 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempBd2796.html [2012/03/13 22:58:32 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempTX2796.html [2012/03/13 21:14:44 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempYh2856.html [2012/03/13 21:14:37 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempFq2856.html [2012/03/13 00:24:49 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Temppg3832.html [2012/03/13 00:24:42 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempgP3832.html [2012/03/12 18:37:33 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempwd3412.html [2012/03/12 18:37:31 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempbA3412.html [2012/03/12 14:10:19 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempTq2140.html [2012/03/12 14:10:17 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Temppm2140.html [2012/03/12 00:48:41 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempIdS664.html [2012/03/12 00:48:39 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempzhZ664.html [2012/03/11 15:44:02 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempbn3776.html [2012/03/11 15:43:59 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempMl3776.html [2012/03/10 23:11:12 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempHS4048.html [2012/03/10 23:11:10 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempht4048.html [2012/03/10 13:01:39 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempdek764.html [2012/03/10 13:01:36 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempVgH764.html [2012/03/10 11:01:18 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempCx3960.html [2012/03/10 11:01:14 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempxC3960.html [2012/03/09 18:18:09 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempiS2080.html [2012/03/09 18:18:06 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemphH2080.html [2012/03/09 09:11:43 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempww1552.html [2012/03/09 09:11:41 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempMO1552.html [2012/03/09 00:41:31 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempIx3872.html [2012/03/09 00:41:24 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempIA3872.html [2012/03/08 14:57:34 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempes2148.html [2012/03/08 14:57:34 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempTv2148.html [2012/03/08 14:57:30 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempKd2148.html [2012/03/08 14:57:30 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempYh2148.html [2012/03/07 23:15:15 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempQe2472.html [2012/03/07 23:15:13 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempKh2472.html [2012/03/07 21:06:15 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempVM3748.html [2012/03/07 21:06:12 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempDG3748.html [2012/03/07 14:01:36 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempiw3688.html [2012/03/07 14:01:36 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempuu3688.html [2012/03/07 14:01:35 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempxV3688.html [2012/03/07 14:01:35 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempsi3688.html [2012/03/06 20:17:53 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempaE2256.html [2012/03/06 20:17:53 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempGj2256.html [2012/03/06 20:17:51 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempRb2256.html [2012/03/06 20:17:51 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempEf2256.html [2012/03/06 16:31:49 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempKI3152.html [2012/03/06 16:31:47 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempYL3152.html [2012/03/06 12:19:45 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempWF3484.html [2012/03/06 12:19:45 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempSg3484.html [2012/03/06 12:19:42 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempmb3484.html [2012/03/06 12:19:42 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempOG3484.html [2012/03/06 07:02:08 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempVp3584.html [2012/03/06 07:02:06 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempHV3584.html [2012/03/05 22:31:07 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempJCx632.html [2012/03/05 22:31:04 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempndR632.html [2012/03/05 19:18:26 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempwS2948.html [2012/03/05 19:18:24 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempmk2948.html [2012/03/05 17:38:27 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempOz2492.html [2012/03/05 17:38:24 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempEB2492.html [2012/03/05 12:26:15 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempSfv484.html [2012/03/05 12:26:15 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempSoJ484.html [2012/03/05 12:26:13 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempuSL484.html [2012/03/05 12:26:13 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempFGl484.html [2012/03/04 18:09:18 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemptD3712.html [2012/03/04 18:09:13 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempQA3712.html [2012/03/03 19:43:51 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempAm1888.html [2012/03/03 19:43:49 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempiR1888.html [2012/03/02 18:33:30 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempMG2612.html [2012/03/02 18:33:27 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempSJ2612.html [2012/03/01 16:52:11 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempgb3148.html [2012/03/01 16:52:09 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempIe3148.html [2012/03/01 16:52:09 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempGF3148.html [2012/02/29 23:37:29 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempch2088.html [2012/02/29 23:37:29 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Templr2088.html [2012/02/29 23:37:27 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempMq2088.html [2012/02/29 23:37:27 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempzK2088.html [2012/02/29 20:45:18 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempIK2408.html [2012/02/29 20:45:18 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempDJ2408.html [2012/02/29 20:45:15 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempQn2408.html [2012/02/29 20:45:15 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempZG2408.html [2012/02/29 19:51:44 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempuq3052.html [2012/02/29 19:51:44 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempui3052.html [2012/02/29 19:51:42 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempJm3052.html [2012/02/29 19:51:42 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempPO3052.html [2012/02/29 10:29:59 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempAo2856.html [2012/02/29 10:29:59 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempXx2856.html [2012/02/29 10:29:58 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemptY2856.html [2012/02/29 10:29:57 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempcZ2856.html [2012/02/28 22:34:16 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempaU3804.html [2012/02/28 18:41:18 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempXu3804.html [2012/02/28 18:41:15 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempBl3804.html [2012/02/27 21:19:20 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempyB1752.html [2012/02/27 21:19:17 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempKt1752.html [2012/02/27 18:18:57 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempCG2748.html [2012/02/27 18:18:54 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempci2748.html [2012/02/27 00:58:16 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempYm4968.html [2012/02/27 00:58:15 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempLB4968.html [2012/02/27 00:17:49 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempNDX496.html [2012/02/26 22:37:27 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempzCI496.html [2012/02/26 13:45:33 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempoUA192.html [2012/02/26 13:45:33 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempgAV192.html [2012/02/25 18:14:45 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempqp3280.html [2012/02/25 18:14:45 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempPj3280.html [2012/02/25 14:40:35 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempPi1348.html [2012/02/24 22:02:23 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempKe3708.html [2012/02/23 21:48:29 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempma3680.html [2012/02/22 18:17:38 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempgu1880.html [2012/02/21 18:29:46 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempFx2308.html [2012/02/21 10:20:33 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempPb3920.html [2012/02/21 10:20:33 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempTe3920.html [2012/02/20 22:22:50 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempJa1692.html [2012/02/20 17:32:42 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempjB2468.html [2012/02/19 16:36:23 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempJT1492.html [2012/02/19 16:36:23 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempXB1492.html [2012/02/18 23:13:58 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempRN1916.html [2012/02/18 18:20:50 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempua1828.html [2012/02/18 14:00:08 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempZL2100.html [2012/02/18 14:00:08 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempyc2100.html [2012/02/17 22:10:37 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempmD3940.html [2012/02/17 13:36:22 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempQz3536.html [2012/02/16 22:25:10 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempoX1604.html [2012/02/16 16:27:45 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempwe2152.html [2012/02/16 16:27:45 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempFP2152.html [2012/02/16 09:50:03 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempIH3244.html [2012/02/16 09:50:03 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempcw3244.html [2012/02/16 02:14:03 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempnG3892.html [2012/02/16 01:22:24 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempCr2412.html [2012/02/15 13:43:22 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempSEP688.html [2012/02/15 13:43:22 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempKhE688.html [2012/02/15 08:16:56 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempLd2220.html [2012/02/15 08:16:56 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempWY2220.html [2012/02/15 02:57:19 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempJX2792.html [2012/02/14 21:52:29 | 000,044,544 | ---- | C] () -- C:\windows\System32\Gif89.dll [2012/02/14 21:05:55 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempsP2180.html [2012/02/13 17:44:59 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempCS2312.html [2012/02/13 12:08:48 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempYe2864.html [2012/02/12 20:47:16 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempuM1596.html [2012/02/12 20:47:16 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempRU1596.html [2012/02/11 16:55:06 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempiI2704.html [2012/02/11 12:44:48 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempHY3952.html [2012/02/11 12:44:48 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempjG3952.html [2012/02/10 23:31:16 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempwt3056.html [2012/02/10 13:31:34 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempJk3168.html [2012/02/10 13:31:34 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempPL3168.html [2012/02/09 23:14:26 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempGs3208.html [2012/02/09 23:14:26 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempoc3208.html [2012/02/09 18:58:05 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempmi3008.html [2012/02/09 09:50:46 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempBo3468.html [2012/02/09 09:50:46 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempXy3468.html [2012/02/07 20:51:10 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempGh3328.html [2012/02/07 13:08:29 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempwf6052.html [2012/02/07 13:08:29 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempAP6052.html [2012/02/06 16:33:13 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Temprb3412.html [2012/02/06 14:16:01 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemprI2564.html [2012/02/06 14:16:01 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempfT2564.html [2012/02/03 22:17:41 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempqs3780.html [2012/02/03 22:17:41 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempqH3780.html [2012/02/03 16:27:50 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempMv1000.html [2012/02/03 16:27:50 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempVW1000.html [2012/02/03 02:51:19 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempKg5784.html [2012/02/03 02:51:19 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempEY5784.html [2012/01/31 22:01:52 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempad3200.html [2012/01/31 17:30:05 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempOi2924.html [2012/01/30 17:00:36 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempEw1040.html [2012/01/29 09:02:55 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempuU3348.html [2012/01/29 09:02:55 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempNT3348.html [2012/01/28 11:49:04 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempeA4300.html [2012/01/28 11:49:04 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemplN4300.html [2012/01/27 19:49:40 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempeb3060.html [2012/01/27 19:49:40 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempSK3060.html [2012/01/26 18:53:47 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempKR3852.html [2012/01/26 18:53:47 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempbs3852.html [2012/01/26 14:57:34 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempzI4620.html [2012/01/26 14:57:34 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempXN4620.html [2012/01/25 21:33:49 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempDi2436.html [2012/01/25 14:04:59 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempAn2836.html [2012/01/24 23:39:02 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempWAl620.html [2012/01/24 23:39:02 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempioZ620.html [2012/01/24 22:07:41 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemptM1432.html [2012/01/24 12:05:46 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemplS3308.html [2012/01/23 20:50:01 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempazG316.html [2012/01/23 09:35:15 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempav4756.html [2012/01/22 17:27:09 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempWX3912.html [2012/01/22 15:34:09 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempVm3024.html [2012/01/22 15:34:09 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempMN3024.html [2012/01/21 12:20:09 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempxCV480.html [2012/01/20 23:12:44 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempaA3728.html [2012/01/19 23:05:10 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempxem192.html [2012/01/19 17:30:51 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempKA2716.html [2012/01/19 14:09:57 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempoU1772.html [2012/01/18 21:11:45 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempWc5140.html [2012/01/18 11:16:19 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempdl1196.html [2012/01/18 11:16:19 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempIx1196.html [2012/01/17 18:36:04 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempLR1836.html [2012/01/17 17:12:52 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempyG6000.html [2012/01/17 10:40:13 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempTM4376.html [2012/01/16 15:42:17 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempuz5132.html [2012/01/15 22:13:08 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempUgS656.html [2012/01/15 22:13:08 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempHdI656.html [2012/01/15 15:46:20 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempXY3912.html [2012/01/15 10:37:29 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempAkM780.html [2012/01/15 01:02:17 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempvy1184.html [2012/01/14 16:05:30 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempfL7812.html [2012/01/14 01:56:44 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempmm3408.html [2012/01/13 00:56:48 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempXlw672.html [2012/01/12 20:52:24 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempkk1188.html [2012/01/12 20:01:51 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempFXJ980.html [2012/01/11 20:31:25 | 000,434,176 | ---- | C] () -- C:\windows\System32\ZSHP1018.EXE [2012/01/11 10:47:50 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempMY1716.html [2012/01/11 00:29:02 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempNk2128.html [2012/01/10 22:25:17 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemprD2072.html [2012/01/10 22:25:17 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempZr2072.html [2012/01/10 19:14:33 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemppC2720.html [2012/01/10 01:51:00 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempjr2168.html [2012/01/09 15:40:14 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempdW2392.html [2012/01/08 21:11:19 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempif1228.html [2012/01/07 16:11:54 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempCv2724.html [2012/01/06 22:22:36 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempFK5704.html [2012/01/06 22:22:36 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempnQ5704.html [2012/01/06 19:48:43 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempzo3012.html [2012/01/06 19:48:43 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempKR3012.html [2012/01/06 17:10:09 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempwW2176.html [2012/01/05 23:18:45 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempZr2632.html [2012/01/05 23:18:45 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempYG2632.html [2012/01/05 15:35:41 | 000,047,104 | ---- | C] () -- C:\windows\System32\Mutrn15.dll [2012/01/05 15:35:40 | 000,135,168 | ---- | C] () -- C:\windows\System32\MUadminr.dll [2012/01/05 15:32:05 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempur2964.html [2012/01/04 22:48:26 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempZY2768.html [2012/01/04 22:48:26 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempfE2768.html [2012/01/04 22:10:50 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempnz1412.html [2012/01/04 22:10:50 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempOX1412.html [2012/01/04 18:48:02 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempgA1760.html [2012/01/03 23:22:40 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempGU2152.html [2012/01/03 23:22:40 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempWP2152.html [2012/01/03 12:43:59 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Temprh4800.html [2012/01/02 18:36:22 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempIa3376.html [2012/01/02 17:45:01 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempnF1044.html [2012/01/01 22:33:51 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempSo6084.html [2012/01/01 18:00:03 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempjy8116.html [2012/01/01 13:41:14 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempQg6052.html [2011/12/31 19:13:14 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempag4908.html [2011/12/31 19:13:14 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempZP4908.html [2011/12/30 20:45:46 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempRL1264.html [2011/12/30 19:22:45 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempFj3400.html [2011/12/30 11:42:02 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempRW4272.html [2011/12/30 11:42:02 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempnl4272.html [2011/12/29 21:20:52 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TemproJ580.html [2011/12/29 21:20:52 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempzHQ580.html [2011/12/29 16:28:02 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempeK5092.html [2011/12/29 16:28:02 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempUR5092.html [2011/12/27 20:00:19 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempifd644.html [2011/12/26 17:44:39 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempyq1068.html [2011/12/26 17:44:39 | 000,002,089 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempjR1068.html [2011/12/25 20:14:56 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\TempYKz932.html [2011/12/23 16:53:18 | 000,000,000 | ---- | C] () -- C:\ProgramData\HDPSetting.ini [2011/12/23 16:23:49 | 000,002,432 | ---- | C] () -- C:\Users\Maria\AppData\Local\Tempbo2036.html [2011/12/23 14:52:10 | 000,165,376 | ---- | C] () -- C:\windows\System32\unrar.dll [2011/12/23 14:51:40 | 000,000,038 | ---- | C] () -- C:\windows\avisplitter.ini [2011/12/23 14:47:02 | 000,085,504 | ---- | C] () -- C:\windows\System32\ff_vfw.dll [2011/03/11 12:43:54 | 000,029,763 | ---- | C] () -- C:\windows\System32\drivers\klopp.dat [color=#E56717]========== LOP Check ==========[/color] [2012/05/07 21:42:15 | 000,000,000 | ---D | M] -- C:\Users\Maria\AppData\Roaming\AgroServer [2012/01/10 01:53:40 | 000,000,000 | ---D | M] -- C:\Users\Maria\AppData\Roaming\Babylon [2012/04/30 10:26:31 | 000,000,000 | ---D | M] -- C:\Users\Maria\AppData\Roaming\bdec [2012/01/14 22:23:41 | 000,000,000 | ---D | M] -- C:\Users\Maria\AppData\Roaming\Canon [2012/05/08 16:33:12 | 000,000,000 | ---D | M] -- C:\Users\Maria\AppData\Roaming\DraftSight [2012/04/30 10:04:07 | 000,000,000 | ---D | M] -- C:\Users\Maria\AppData\Roaming\e-Kiosk Reader [2012/04/10 21:47:54 | 000,000,000 | ---D | M] -- C:\Users\Maria\AppData\Roaming\Gadu-Gadu 10 [2012/06/18 22:32:57 | 000,000,000 | ---D | M] -- C:\Users\Maria\AppData\Roaming\ipla [2011/12/30 18:48:58 | 000,000,000 | ---D | M] -- C:\Users\Maria\AppData\Roaming\Opera [2012/02/15 09:56:46 | 000,000,000 | ---D | M] -- C:\Users\Maria\AppData\Roaming\PhotoScape [2011/12/23 15:21:38 | 000,000,000 | ---D | M] -- C:\Users\Maria\AppData\Roaming\RDRM [2011/12/24 23:15:07 | 000,000,000 | ---D | M] -- C:\Users\Maria\AppData\Roaming\Thinstall [2012/05/26 23:34:31 | 000,000,000 | ---D | M] -- C:\Users\Maria\AppData\Roaming\uTorrent [2012/05/07 21:43:28 | 000,000,000 | ---D | M] -- C:\Users\Maria\AppData\Roaming\Zootechnik 2007 [2012/05/01 09:43:24 | 000,032,608 | ---- | M] () -- C:\windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 129 bytes -> C:\ProgramData\temp:63238B95 < End of report >