OTL logfile created on: 2012-07-06 16:09:07 - Run 1 OTL by OldTimer - Version 3.2.53.1 Folder = D:\ Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,50 Gb Total Physical Memory | 2,88 Gb Available Physical Memory | 82,37% Memory free 7,00 Gb Paging File | 6,43 Gb Available in Paging File | 91,88% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 83,01 Gb Total Space | 3,63 Gb Free Space | 4,38% Space Free | Partition Type: NTFS Drive D: | 146,48 Gb Total Space | 7,38 Gb Free Space | 5,04% Space Free | Partition Type: NTFS Drive E: | 236,27 Gb Total Space | 0,79 Gb Free Space | 0,33% Space Free | Partition Type: NTFS Computer Name: RAFAŁ-KOMPUTER | User Name: Rafał | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-06 16:05:27 | 000,595,968 | ---- | M] (OldTimer Tools) -- D:\OTL.exe PRC - [2012-06-27 12:29:26 | 001,996,200 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe PRC - [2012-06-27 12:29:22 | 001,385,896 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe PRC - [2010-09-15 02:49:04 | 002,388,264 | ---- | M] (Apple Inc.) -- C:\Program Files\Safari\Safari.exe PRC - [2009-07-14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-09-18 13:43:08 | 006,277,280 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll MOD - [2011-03-21 17:30:06 | 001,241,888 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll MOD - [2011-03-21 17:30:06 | 000,324,896 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libtidy.dll MOD - [2010-08-10 00:01:06 | 000,067,872 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2010-01-30 02:41:12 | 004,254,560 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- C:\Users\RAFA~1\AppData\Local\Temp\014675~1.EXE -- (0146751340956316mcinstcleanup) McAfee Application Installer Cleanup (0146751340956316) SRV - [2012-06-27 12:29:22 | 001,385,896 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2012-06-21 13:29:36 | 000,163,536 | ---- | M] (F-Secure Corporation) [Auto | Stopped] -- C:\Program Files\F-Secure\fshoster32.exe -- (fshoster) SRV - [2012-06-19 17:32:30 | 003,048,136 | ---- | M] (Skype Technologies S.A.) [Auto | Stopped] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2012-05-24 20:08:34 | 003,417,376 | ---- | M] () [Auto | Stopped] -- c:\program files\common files\akamai/netsession_win_80c2ffa.dll -- (Akamai) SRV - [2012-05-03 08:31:10 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-03-15 18:00:44 | 000,213,672 | ---- | M] (F-Secure Corporation) [On_Demand | Stopped] -- C:\Program Files\F-Secure\apps\ComputerSecurity\Common\FSMA32.EXE -- (FSMA) SRV - [2012-03-15 18:00:38 | 000,610,472 | ---- | M] (F-Secure Corporation) [On_Demand | Stopped] -- C:\Program Files\F-Secure\apps\ComputerSecurity\FWES\program\fsdfwd.exe -- (FSDFWD) SRV - [2012-03-15 15:55:34 | 000,062,160 | ---- | M] (F-Secure Corporation) [Auto | Stopped] -- C:\Program Files\F-Secure\apps\CCF_Reputation\fsorsp.exe -- (FSORSPClient) SRV - [2012-03-14 17:38:14 | 000,913,752 | ---- | M] (IObit) [Auto | Stopped] -- C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe -- (AdvancedSystemCareService5) SRV - [2012-01-25 03:40:53 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2012-01-10 00:52:31 | 000,419,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2012-01-09 20:17:44 | 000,821,592 | ---- | M] (IObit) [Auto | Stopped] -- C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe -- (IMFservice) SRV - [2011-12-12 22:35:08 | 000,751,464 | ---- | M] (Tunngle.net GmbH) [On_Demand | Stopped] -- C:\Program Files\Tunngle\TnglCtrl.exe -- (TunngleService) SRV - [2011-10-15 10:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2011-10-15 01:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2011-06-30 16:16:25 | 000,072,704 | ---- | M] (Autodesk) [Auto | Stopped] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service) SRV - [2011-04-01 12:14:30 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE -- (BBSvc) SRV - [2011-03-28 12:21:16 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE -- (SeaPort) SRV - [2011-03-04 11:39:14 | 000,584,488 | ---- | M] (Nero AG) [Auto | Stopped] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2010-09-07 18:47:18 | 000,202,048 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe -- (MotoHelper) SRV - [2010-03-25 10:25:22 | 030,969,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- E:\office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service) SRV - [2009-12-02 22:23:52 | 000,209,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa) SRV - [2009-12-02 22:23:46 | 000,483,688 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist) SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2009-06-04 17:13:20 | 000,230,648 | ---- | M] (Stardock Corporation) [Auto | Stopped] -- C:\Program Files\Stardock\Object Desktop\WindowBlinds\VistaSrv.exe -- (WindowBlinds) SRV - [2007-04-19 15:43:42 | 000,537,520 | ---- | M] ( ) [Auto | Stopped] -- C:\Windows\System32\lxczcoms.exe -- (lxcz_device) SRV - [2007-04-02 14:15:40 | 000,061,440 | ---- | M] (Creative Technology Ltd) [Auto | Stopped] -- C:\Program Files\Creative\Shared Files\CTDevSrv.exe -- (CTDevice_Srv) SRV - [2006-09-29 12:48:06 | 000,065,536 | ---- | M] () [Auto | Stopped] -- D:\3d\mentalray\satellite\raysat_3dsmax9_32server.exe -- (mi-raysat_3dsmax9_32) mental ray 3.5 Satellite (32-bit) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleNT.sys -- (EagleNT) DRV - [2012-06-29 12:33:07 | 000,144,592 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys -- (F-Secure Gatekeeper) DRV - [2012-06-29 11:28:00 | 000,044,184 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\fsbts.sys -- (fsbts) DRV - [2012-06-29 11:26:24 | 000,072,976 | ---- | M] (F-Secure Corporation) [Kernel | System | Stopped] -- C:\Program Files\F-Secure\apps\ComputerSecurity\HIPS\drivers\fshs.sys -- (F-Secure HIPS) DRV - [2012-05-29 15:40:40 | 000,054,352 | ---- | M] (F-Secure Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\fsccsys.sys -- (fsccsys1340961806) DRV - [2012-04-08 22:34:59 | 000,428,088 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sptd.sys -- (sptd) DRV - [2012-03-15 18:00:38 | 000,073,640 | ---- | M] (F-Secure Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\fsdfw.sys -- (FSFW) DRV - [2012-03-15 18:00:38 | 000,038,024 | ---- | M] (F-Secure Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\fses.sys -- (FSES) DRV - [2012-03-15 18:00:28 | 000,014,504 | ---- | M] () [Kernel | System | Stopped] -- C:\Program Files\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys -- (fsvista) DRV - [2012-02-04 09:09:50 | 000,239,168 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV - [2011-10-15 10:53:00 | 010,327,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2011-07-31 19:26:40 | 000,281,760 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt) DRV - [2011-07-31 19:26:38 | 000,025,888 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt) DRV - [2011-05-25 01:40:10 | 000,032,768 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\taphss.sys -- (taphss) DRV - [2010-11-26 18:02:20 | 000,015,672 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\SmartDefragDriver.sys -- (SmartDefragDriver) DRV - [2010-11-01 06:08:46 | 000,014,416 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Program Files\IObit\Game Booster 3\Driver\WinRing0.sys -- (WinRing0_1_2_0) DRV - [2010-06-24 13:46:12 | 000,028,256 | ---- | M] (Applian Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\appliand.sys -- (appliandMP) DRV - [2010-06-18 15:09:48 | 000,023,936 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motmodem.sys -- (motmodem) DRV - [2010-06-18 14:41:34 | 000,019,968 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motccgp.sys -- (motccgp) DRV - [2010-04-01 14:31:50 | 000,023,424 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Motousbnet.sys -- (Motousbnet) DRV - [2010-01-25 19:56:44 | 000,009,472 | ---- | M] (Motorola Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motusbdevice.sys -- (motusbdevice) DRV - [2010-01-05 19:20:10 | 001,500,160 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athur.sys -- (athur) DRV - [2009-12-02 22:23:52 | 000,019,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Sftvollh.sys -- (Sftvol) DRV - [2009-12-02 22:23:50 | 000,021,864 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\Sftredirlh.sys -- (Sftredir) DRV - [2009-12-02 22:23:48 | 000,195,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Sftplaylh.sys -- (Sftplay) DRV - [2009-12-02 22:23:46 | 000,550,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Sftfslh.sys -- (Sftfs) DRV - [2009-09-16 08:02:40 | 000,027,136 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tap0901t.sys -- (tap0901t) TAP-Win32 Adapter V9 (Tunngle) DRV - [2009-07-14 03:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus) DRV - [2009-07-14 03:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV - [2009-07-14 03:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc) DRV - [2009-07-14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2009-07-14 01:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap) DRV - [2009-07-14 01:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2009-03-18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi) DRV - [2009-01-29 17:18:00 | 000,008,320 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motccgpfl.sys -- (motccgpfl) DRV - [2009-01-29 17:11:20 | 000,006,016 | ---- | M] (Motorola Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motfilt.sys -- (BTCFilterService) DRV - [2007-11-02 15:51:30 | 000,006,400 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motswch.sys -- (MotoSwitchService) DRV - [2007-10-25 18:31:08 | 000,616,064 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PFC027.SYS -- (PAC207) DRV - [2007-01-04 13:48:04 | 000,104,344 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e4usbaw.sys -- (e4usbaw) DRV - [2007-01-04 13:47:48 | 000,069,656 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\e4ldr.sys -- (E4LOADER) General Purpose USB Driver (e4ldr.sys) DRV - [2006-09-22 15:06:10 | 000,092,160 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mcdbus.sys -- (mcdbus) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000.10011&barid={C61D4FB3-B564-11E1-A67F-E5AB7F4EB574} IE - HKLM\..\URLSearchHook: {14f0d511-36a2-41ca-ae01-ba4f87282c97} - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll (AOL LLC) IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.) IE - HKLM\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {90b49673-5506-483e-b92b-ca0265bd9ca8} - C:\Program Files\IMVU_Inc\prxtbIMVU.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {94817c02-feac-4aa8-99d8-1cb47bf4d4c0} - C:\Program Files\Spesoft\prxtbSpe0.dll (Conduit Ltd.) IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{40439b93-f815-4122-8073-d03bed94c303}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-shoutcast-chromesbox-en-us IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1124670 IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10011&barid={C61D4FB3-B564-11E1-A67F-E5AB7F4EB574} IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20110426081211362&tb_oid=26-04-2011&tb_mrud=26-04-2011 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes] IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=112555&tt=280612_6_&babsrc=HP_ss&mntrId=5eca86e3000000000000f8d1110b2f6e IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\URLSearchHook: {14f0d511-36a2-41ca-ae01-ba4f87282c97} - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll (AOL LLC) IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.) IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.) IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\URLSearchHook: {90b49673-5506-483e-b92b-ca0265bd9ca8} - C:\Program Files\IMVU_Inc\prxtbIMVU.dll (Conduit Ltd.) IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\URLSearchHook: {94817c02-feac-4aa8-99d8-1cb47bf4d4c0} - C:\Program Files\Spesoft\prxtbSpe0.dll (Conduit Ltd.) IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847} IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=112555&tt=280612_6_&babsrc=SP_ss&mntrId=5eca86e3000000000000f8d1110b2f6e IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\SearchScopes\{40439b93-f815-4122-8073-d03bed94c303}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-shoutcast-chromesbox-en-us IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search?q={searchTerms} IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1124670 IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\SearchScopes\{c99fdc39-a1ae-4b24-8d71-e5274f8d7c54}: "URL" = http://search.hotspotshield.com/g/results.php?c=s&q={searchTerms} IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10011&barid={C61D4FB3-B564-11E1-A67F-E5AB7F4EB574} IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20110426081211362&tb_oid=26-04-2011&tb_mrud=26-04-2011 IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;127.0.0.1:9421; [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)" FF - prefs.js..browser.search.defaultthis.engineName: "IMVU Inc Customized Web Search" FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.search.order.1: "Search the web (Babylon)" FF - prefs.js..browser.search.selectedEngine: "" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?affID=112555&tt=280612_6_&babsrc=HP_ss&mntrId=5eca86e3000000000000f8d1110b2f6e" FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2612669&SearchSource=2&q=" FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "Search the web (Babylon)" FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2612669&SearchSource=3&q={searchTerms}" FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "Search the web (Babylon)" FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?babsrc=HP_Prot" FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "http://search.sweetim.com/search.asp?src=2&q=" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.110.0: C:\Program Files\Battlelog Web Plugins\1.110.0\npesnlaunch.dll File not found FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.118.0: C:\Program Files\Battlelog Web Plugins\1.118.0\npesnlaunch.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: E:\office\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: E:\office\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Rafał\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Rafał\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Rafał\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\litmus-ff@f-secure.com: C:\Program Files\F-Secure\apps\OnlineSafety\BPP\litmus-ff@f-secure.com\ [2012-06-29 11:23:23 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-11-19 10:24:41 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-09-18 13:43:08 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 8.0\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011-11-18 08:49:58 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 8.0\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2011-04-16 09:48:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Rafał\AppData\Roaming\mozilla\Extensions [2012-06-30 20:50:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Rafał\AppData\Roaming\mozilla\Firefox\Profiles\icwucnp1.default\extensions [2012-06-30 20:50:44 | 000,000,000 | ---D | M] ("Winamp Toolbar") -- C:\Users\Rafał\AppData\Roaming\mozilla\Firefox\Profiles\icwucnp1.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2011-04-26 10:17:02 | 000,000,000 | ---D | M] (SHOUTcast Radio Toolbar) -- C:\Users\Rafał\AppData\Roaming\mozilla\Firefox\Profiles\icwucnp1.default\extensions\{12e4c684-c03e-4e4d-85bc-0c065e7a9489} [2012-04-28 19:03:42 | 000,000,000 | ---D | M] (ChatZilla) -- C:\Users\Rafał\AppData\Roaming\mozilla\Firefox\Profiles\icwucnp1.default\extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2} [2012-06-30 20:50:30 | 000,000,000 | ---D | M] (BitTorrentBar Community Toolbar) -- C:\Users\Rafał\AppData\Roaming\mozilla\Firefox\Profiles\icwucnp1.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} [2012-06-30 20:50:32 | 000,000,000 | ---D | M] (IMVU Inc Community Toolbar) -- C:\Users\Rafał\AppData\Roaming\mozilla\Firefox\Profiles\icwucnp1.default\extensions\{90b49673-5506-483e-b92b-ca0265bd9ca8} [2012-06-26 16:43:11 | 000,000,000 | ---D | M] (Spesoft Community Toolbar) -- C:\Users\Rafał\AppData\Roaming\mozilla\Firefox\Profiles\icwucnp1.default\extensions\{94817c02-feac-4aa8-99d8-1cb47bf4d4c0} [2012-04-28 19:03:43 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Rafał\AppData\Roaming\mozilla\Firefox\Profiles\icwucnp1.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2012-01-16 12:07:08 | 000,000,000 | ---D | M] (Browser Companion Helper) -- C:\Users\Rafał\AppData\Roaming\mozilla\Firefox\Profiles\icwucnp1.default\extensions\bbrs_002@blabbers.com [2012-02-04 09:07:33 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Users\Rafał\AppData\Roaming\mozilla\Firefox\Profiles\icwucnp1.default\extensions\DTToolbar@toolbarnet.com [2012-01-22 01:08:45 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Rafał\AppData\Roaming\mozilla\Firefox\Profiles\icwucnp1.default\extensions\ffxtlbr@babylon.com [2012-03-03 16:36:07 | 000,000,000 | ---D | M] (TheBflix) -- C:\Users\Rafał\AppData\Roaming\mozilla\Firefox\Profiles\icwucnp1.default\extensions\info@bflix.info [2012-06-26 13:52:59 | 000,000,000 | ---D | M] (OneClickDownloader) -- C:\Users\Rafał\AppData\Roaming\mozilla\Firefox\Profiles\icwucnp1.default\extensions\OneClickDownload@OneClickDownload.com [2012-06-13 16:34:04 | 000,000,000 | ---D | M] (Yontoo) -- C:\Users\Rafał\AppData\Roaming\mozilla\Firefox\Profiles\icwucnp1.default\extensions\plugin@yontoo.com [2012-06-26 16:37:17 | 000,000,000 | ---D | M] ("Nero Toolbar") -- C:\Users\Rafał\AppData\Roaming\mozilla\Firefox\Profiles\icwucnp1.default\extensions\toolbar@ask.com [2011-04-26 11:35:03 | 000,002,354 | ---- | M] () -- C:\Users\Rafał\AppData\Roaming\Mozilla\Firefox\Profiles\icwucnp1.default\searchplugins\aol-web-search.xml [2011-05-25 16:15:24 | 000,000,919 | ---- | M] () -- C:\Users\Rafał\AppData\Roaming\Mozilla\Firefox\Profiles\icwucnp1.default\searchplugins\conduit.xml [2012-02-04 09:07:11 | 000,002,055 | ---- | M] () -- C:\Users\Rafał\AppData\Roaming\Mozilla\Firefox\Profiles\icwucnp1.default\searchplugins\daemon-search.xml [2012-06-26 16:45:38 | 000,004,113 | ---- | M] () -- C:\Users\Rafał\AppData\Roaming\Mozilla\Firefox\Profiles\icwucnp1.default\searchplugins\sweetim.xml [2012-06-29 10:55:01 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-06-22 01:53:16 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012-06-29 10:55:01 | 000,000,000 | ---D | M] (ArcaBit Ext.) -- C:\Program Files\Mozilla Firefox\extensions\arcabit@www.arcabit.pl File not found (No name found) -- C:\USERS\RAFAĹ‚\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ICWUCNP1.DEFAULT\EXTENSIONS\{0B38152B-1B20-484D-A11F-5E04A9B0661F} File not found (No name found) -- C:\USERS\RAFAĹ‚\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ICWUCNP1.DEFAULT\EXTENSIONS\{59C81DF5-4B7A-477B-912D-4E0FDF64E5F2} File not found (No name found) -- C:\USERS\RAFAĹ‚\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ICWUCNP1.DEFAULT\EXTENSIONS\{76063E7F-3558-4B68-8287-54EB6512ADC0}.XPI File not found (No name found) -- C:\USERS\RAFAĹ‚\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ICWUCNP1.DEFAULT\EXTENSIONS\{88C7F2AA-F93F-432C-8F0E-B7D85967A527} File not found (No name found) -- C:\USERS\RAFAĹ‚\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ICWUCNP1.DEFAULT\EXTENSIONS\{90B49673-5506-483E-B92B-CA0265BD9CA8} File not found (No name found) -- C:\USERS\RAFAĹ‚\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ICWUCNP1.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D} File not found (No name found) -- C:\USERS\RAFAĹ‚\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ICWUCNP1.DEFAULT\EXTENSIONS\{EEE6C361-6118-11DC-9C72-001320C79847}.XPI File not found (No name found) -- C:\USERS\RAFAĹ‚\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ICWUCNP1.DEFAULT\EXTENSIONS\FFXTLBR@BABYLON.COM File not found (No name found) -- C:\USERS\RAFAĹ‚\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ICWUCNP1.DEFAULT\EXTENSIONS\INFO@BFLIX.INFO File not found (No name found) -- C:\USERS\RAFAĹ‚\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ICWUCNP1.DEFAULT\EXTENSIONS\ONECLICKDOWNLOAD@ONECLICKDOWNLOAD.COM File not found (No name found) -- C:\USERS\RAFAĹ‚\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ICWUCNP1.DEFAULT\EXTENSIONS\ONECLICKDOWNLOADER@ONECLICKDOWNLOADER.COM.XPI File not found (No name found) -- C:\USERS\RAFAĹ‚\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ICWUCNP1.DEFAULT\EXTENSIONS\PLUGIN@YONTOO.COM File not found (No name found) -- C:\USERS\RAFAĹ‚\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ICWUCNP1.DEFAULT\EXTENSIONS\TOOLBAR@ASK.COM [2011-11-19 10:24:41 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011-05-02 23:11:36 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011-03-22 20:38:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll [2011-10-21 16:11:32 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-06-30 20:50:09 | 000,002,352 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml [2011-10-21 16:11:32 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-10-21 16:11:32 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-10-21 16:11:32 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-10-21 16:11:32 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-10-21 16:11:32 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Search the web (Babylon) (Enabled) CHR - default_search_provider: search_url = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=101246&mntrId=5eca86e300000000000000ff3679ab16 CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Rafa\u0142\AppData\Local\Google\Chrome\Application\19.0.1084.52\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Rafa\u0142\AppData\Local\Google\Chrome\Application\19.0.1084.52\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Rafa\u0142\AppData\Local\Google\Chrome\Application\19.0.1084.52\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Babylon ToolBar (Enabled) = C:\Users\Rafa\u0142\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.6_0\BabylonChromeToolBar.dll CHR - plugin: McAfee SiteAdvisor (Enabled) = C:\Users\Rafa\u0142\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.41.123.2_0\McChPlg.dll CHR - plugin: McAfee SiteAdvisor (Enabled) = C:\Program Files\McAfee\SiteAdvisor\npmcffplg32.dll CHR - plugin: (Enabled) = C:\Users\Rafa\u0142\AppData\Local\Google\Chrome\User Data\Default\Extensions\clbfjfbnelcflpgpklppgplejolacbej\1.0.5_0\chromeNPAPI.dll CHR - plugin: Skype Click to Call (Enabled) = C:\Users\Rafa\u0142\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.10.0.9560_0\npSkypeChromePlugin.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Java Deployment Toolkit 6.0.250.6 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U25 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: downloadUpdater (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdnu.dll CHR - plugin: downloadUpdater2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdnupdater2.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npwachk.dll CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files\Battlelog Web Plugins\1.118.0\npesnlaunch.dll CHR - plugin: ESN Sonar API (Enabled) = C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Unity Player (Enabled) = C:\Users\Rafa\u0142\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll CHR - plugin: Google Update (Enabled) = C:\Users\Rafa\u0142\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Microsoft Office 2010 (Enabled) = E:\office\Office14\NPAUTHZ.DLL CHR - plugin: Microsoft Office 2010 (Enabled) = E:\office\Office14\NPSPWRAP.DLL CHR - Extension: Browser Companion Helper = C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\clbfjfbnelcflpgpklppgplejolacbej\1.0.5_0\ CHR - Extension: Babylon Toolbar = C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.6_0\ CHR - Extension: SiteAdvisor = C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.41.123.2_0\ CHR - Extension: Skype Click to Call = C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.10.0.9560_0\ CHR - Extension: Spesoft = C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\opjkhengjjbmdokikpljnbckmgigndeg\2.3.4.2_0\ CHR - Extension: TheBflix = C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\opnkkfjdnhgkjefnnohgfackfninikjo\5.0_0\ CHR - Extension: Browser Companion Helper = C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\clbfjfbnelcflpgpklppgplejolacbej\1.0.5_0\ CHR - Extension: Babylon Toolbar = C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.6_0\ CHR - Extension: SiteAdvisor = C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.41.123.2_0\ CHR - Extension: Skype Click to Call = C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.10.0.9560_0\ CHR - Extension: Spesoft = C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\opjkhengjjbmdokikpljnbckmgigndeg\2.3.4.2_0\ CHR - Extension: TheBflix = C:\Users\Rafał\AppData\Local\Google\Chrome\User Data\Default\Extensions\opnkkfjdnhgkjefnnohgfackfninikjo\5.0_0\ O1 HOSTS File: ([2009-06-10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (Chatvibes Browser Helper) - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files\BrowserCompanion\jsloader.dll ( ) O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.) O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO) O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O2 - BHO: (TheBflix Class) - {610025E5-234F-4415-960F-1DA8F231DDF7} - C:\ProgramData\TheBflix\bhoclass.dll (Injector) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - E:\office\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.) O2 - BHO: (IMVU Inc Toolbar) - {90b49673-5506-483e-b92b-ca0265bd9ca8} - C:\Program Files\IMVU_Inc\prxtbIMVU.dll (Conduit Ltd.) O2 - BHO: (Spesoft Toolbar) - {94817c02-feac-4aa8-99d8-1cb47bf4d4c0} - C:\Program Files\Spesoft\prxtbSpe0.dll (Conduit Ltd.) O2 - BHO: (Chatvibes Browser Helper Verifier) - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files\BrowserCompanion\updatebhoWin32.dll ( ) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - E:\office\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Browsing Protection Class) - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} - C:\Program Files\F-Secure\apps\OnlineSafety\BPP\iescript\BaseLitmus.dll (F-Secure Corporation) O2 - BHO: (SHOUTcast Loader) - {ccec60fc-2608-4e58-9659-3ffc159e8ea9} - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll (AOL LLC) O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O2 - BHO: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O2 - BHO: (Yontoo) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo\YontooIEClient.dll (Yontoo LLC) O3 - HKLM\..\Toolbar: (SHOUTcast Radio Toolbar) - {0457331d-8ca6-4f97-9c26-6a9ef2b2dba8} - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll (AOL LLC) O3 - HKLM\..\Toolbar: (Browsing Protection Toolbar) - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - C:\Program Files\F-Secure\apps\OnlineSafety\BPP\iescript\BaseLitmus.dll (F-Secure Corporation) O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O3 - HKLM\..\Toolbar: (IMVU Inc Toolbar) - {90b49673-5506-483e-b92b-ca0265bd9ca8} - C:\Program Files\IMVU_Inc\prxtbIMVU.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Spesoft Toolbar) - {94817c02-feac-4aa8-99d8-1cb47bf4d4c0} - C:\Program Files\Spesoft\prxtbSpe0.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM\..\Toolbar: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.) O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\Toolbar\WebBrowser: (SHOUTcast Radio Toolbar) - {0457331D-8CA6-4F97-9C26-6A9EF2B2DBA8} - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll (AOL LLC) O3 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\Toolbar\WebBrowser: (BitTorrentBar Toolbar) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\Toolbar\WebBrowser: (IMVU Inc Toolbar) - {90B49673-5506-483E-B92B-CA0265BD9CA8} - C:\Program Files\IMVU_Inc\prxtbIMVU.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\Toolbar\WebBrowser: (Spesoft Toolbar) - {94817C02-FEAC-4AA8-99D8-1CB47BF4D4C0} - C:\Program Files\Spesoft\prxtbSpe0.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\Toolbar\WebBrowser: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.) O3 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..\Toolbar\WebBrowser: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask) O4 - HKLM..\Run: [BCSSync] E:\office\Office14\BCSSync.exe (Microsoft Corporation) O4 - HKLM..\Run: [Browser companion helper] C:\Program Files\BrowserCompanion\BCHelper.exe (Blabbers Communications LTD) O4 - HKLM..\Run: [F-Secure Hoster (666)] C:\Program Files\F-Secure\fshoster32.exe (F-Secure Corporation) O4 - HKLM..\Run: [F-Secure Manager] C:\Program Files\F-Secure\apps\ComputerSecurity\Common\FSM32.EXE (F-Secure Corporation) O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) O4 - HKLM..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe (PixArt Imaging Incorporation) O4 - HKLM..\Run: [PAC207_Monitor] C:\Windows\PixArt\PAC207\Monitor.exe (PixArt Imaging Incorporation) O4 - HKLM..\Run: [PowerGramo] C:\Program Files\Monsters\PowerGramo\PowerGramo.exe (Freebird) O4 - HKLM..\Run: [simpdata] C:\Users\Rafał\AppData\Local\Microsoft\Windows\2582\simpdata.exe () O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.) O4 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000..\Run: [AdobeBridge] File not found O4 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000..\Run: [Advanced SystemCare 5] C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe (IObit) O4 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000..\Run: [Akamai NetSession Interface] C:\Users\Rafał\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc) O4 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000..\Run: [CTZDetec.exe] C:\Program Files\Creative\Creative Media Lite\CTZDetec.exe (Creative Technology Ltd.) O4 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000..\Run: [divxupdater] %TEMP%\rvfktc.exe File not found O4 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000..\Run: [dnb system restore] %TEMP%\sgvtbs.exe File not found O4 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000..\Run: [Media Streamer] %TEMP%\tgbssm.exe File not found O4 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000..\Run: [MX Skype Recorder] "C:\ProgramData\MXSkypeRecorder\MXSkypeRecorder.exe" /autorun File not found O4 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000..\Run: [RGSC] E:\Grand theft auto IV\Rockstar Games Social Club\RGSCLauncher.exe (Take-Two Interactive Software, Inc.) O4 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000..\Run: [Spol] http://www.toya.net.pl/~spol/site/index.htm File not found O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - Startup: C:\Users\Rafał\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe (MagicISO, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O8 - Extra context menu item: &SHOUTcast Search - C:\ProgramData\SHOUTcast Radio Toolbar\ieToolbar\resources\en-US\local\search.html () O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - E:\office\Office14\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Wyślij &do programu OneNote - E:\office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - C:\Program Files\ArcaBit\WebExtensions\ie\ArcaIEExt.dll File not found O9 - Extra 'Tools' menuitem : ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - C:\Program Files\ArcaBit\WebExtensions\ie\ArcaIEExt.dll File not found O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - E:\office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - E:\office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\Rafał\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk () O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O15 - HKU\.DEFAULT\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites) O15 - HKU\.DEFAULT\..Trusted Domains: freerealms.com ([]* in Trusted sites) O15 - HKU\.DEFAULT\..Trusted Domains: soe.com ([]* in Trusted sites) O15 - HKU\.DEFAULT\..Trusted Domains: sony.com ([]* in Trusted sites) O15 - HKU\S-1-5-18\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites) O15 - HKU\S-1-5-18\..Trusted Domains: freerealms.com ([]* in Trusted sites) O15 - HKU\S-1-5-18\..Trusted Domains: soe.com ([]* in Trusted sites) O15 - HKU\S-1-5-18\..Trusted Domains: sony.com ([]* in Trusted sites) O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in ) O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in ) O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in ) O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in ) O15 - HKU\S-1-5-20\..Trusted Domains: clonewarsadventures.com ([]* in ) O15 - HKU\S-1-5-20\..Trusted Domains: freerealms.com ([]* in ) O15 - HKU\S-1-5-20\..Trusted Domains: soe.com ([]* in ) O15 - HKU\S-1-5-20\..Trusted Domains: sony.com ([]* in ) O15 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites) O15 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..Trusted Domains: freerealms.com ([]* in Trusted sites) O15 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..Trusted Domains: soe.com ([]* in Trusted sites) O15 - HKU\S-1-5-21-3691077182-3707542728-1493853906-1000\..Trusted Domains: sony.com ([]* in Trusted sites) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A7CC3D70-4190-47BD-8010-66171340718E}: DhcpNameServer = 192.168.1.1 192.168.1.1 O18 - Protocol\Handler\base64 {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd) O18 - Protocol\Handler\chrome {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd) O18 - Protocol\Handler\prox {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (c:\windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - E:\office\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2011-06-18 20:43:22 | 000,000,000 | ---D | M] - D:\AUTODESK.3DSMAX.V9.0.DVD-ISO -- [ NTFS ] O32 - AutoRun File - [2011-04-15 23:20:01 | 000,000,000 | -H-- | M] () - D:\Autodesk_3ds_Max_2012_English_Win_32-64bit.exe.part -- [ NTFS ] O33 - MountPoints2\{1fa9186b-4eff-11e1-a209-df239a9b3f79}\Shell - "" = AutoRun O33 - MountPoints2\{1fa9186b-4eff-11e1-a209-df239a9b3f79}\Shell\AutoRun\command - "" = G:\setup.exe O33 - MountPoints2\{7e73ec79-9e30-11e0-800b-00241d2e23b9}\Shell - "" = AutoRun O33 - MountPoints2\{7e73ec79-9e30-11e0-800b-00241d2e23b9}\Shell\AutoRun\command - "" = L:\SetupPuma.exe O33 - MountPoints2\{7e73ec79-9e30-11e0-800b-00241d2e23b9}\Shell\menu1\command - "" = L:\SetupPuma.exe O33 - MountPoints2\{92aaf01b-81a0-11e1-aafc-8f32a7611e91}\Shell - "" = AutoRun O33 - MountPoints2\{92aaf01b-81a0-11e1-aafc-8f32a7611e91}\Shell\AutoRun\command - "" = H:\AutoRunMorrowind.exe O33 - MountPoints2\{92aaf01b-81a0-11e1-aafc-8f32a7611e91}\Shell\install\command - "" = H:\Setup.exe O33 - MountPoints2\{bab1b1b1-e3a4-11e0-acc8-00241d2e23b9}\Shell - "" = AutoRun O33 - MountPoints2\{bab1b1b1-e3a4-11e0-acc8-00241d2e23b9}\Shell\AutoRun\command - "" = I:\setup.exe -a O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-06 15:52:24 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Roaming\hellomoto [2012-07-06 09:59:31 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{CC6C8439-3C81-43F5-9CAA-C857C24D9EB1} [2012-07-06 09:59:07 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{7D13B323-A9D9-40C7-B5D8-40B088301F5C} [2012-07-05 21:34:32 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{EC4F3E3A-6FCC-4EFD-B00F-A24D7B511FEE} [2012-07-05 09:33:48 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{40873755-502F-4308-857A-3485F849F898} [2012-07-05 09:33:01 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{4932B634-AAF6-4C52-B261-99C58E4D0B73} [2012-07-04 20:39:39 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{FC258CA6-8045-4DF0-814E-55782FB4C090} [2012-07-04 20:39:16 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{F91D85FF-A03C-4774-87D6-C442AECB4AE9} [2012-07-04 08:38:47 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{B1D03033-D86B-433D-A244-820DD8FA305F} [2012-07-04 08:38:26 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{1C77EADB-8336-4108-843D-005C94FF5150} [2012-07-03 20:37:52 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{AB9E34FF-EBBF-4DF6-9A7F-C29D08568707} [2012-07-03 20:37:29 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{AA6CAEE1-0474-45E3-B452-C8926E02C498} [2012-07-03 08:36:44 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{6B3EA066-3CFF-4501-9B6C-DB0661212E0B} [2012-07-03 08:36:28 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{DE0CE725-ADA5-49B3-907E-8E8BED79294F} [2012-07-02 21:48:31 | 000,000,000 | ---D | C] -- C:\Users\Rafał\Desktop\Nowy folder (2) [2012-07-02 21:44:43 | 000,000,000 | ---D | C] -- C:\Users\Rafał\Documents\textures [2012-07-02 21:44:43 | 000,000,000 | ---D | C] -- C:\Users\Rafał\Documents\scripts [2012-07-02 20:22:39 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{468BC27A-C63B-4E0F-BCA6-54B2C2C42F9A} [2012-07-02 20:22:28 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{B5BA2828-0B44-4095-ABEA-5EBCADCD8417} [2012-07-02 14:05:13 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{5485FAEE-89B3-4B4C-85D7-8C961420F7F8} [2012-07-02 08:17:14 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{8B09A643-A814-444B-9497-0712FC5C6FF0} [2012-07-01 11:01:25 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{62DED119-9D9D-475C-A5E3-54F1F7ABC9DD} [2012-07-01 11:00:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi [2012-07-01 11:00:47 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi [2012-07-01 11:00:16 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{E79A2D32-3C0C-4069-BC0D-58CBC2F6F39D} [2012-06-30 20:49:36 | 009,873,328 | ---- | C] (http://yourfiledownloader.com) -- C:\Users\Rafał\Documents\skyrim_patch_1.5_razor1911.rar_downloader_224a.exe [2012-06-30 09:33:58 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{2279317A-C6D1-4EA9-A1F2-31D29D065B7B} [2012-06-30 09:32:30 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{6CF75023-0FAE-47CD-B410-2F16B718FC0F} [2012-06-29 14:02:54 | 000,000,000 | ---D | C] -- C:\Users\Rafał\Documents\FIFA 12 [2012-06-29 11:23:26 | 000,054,352 | ---- | C] (F-Secure Corporation) -- C:\Windows\System32\drivers\fsccsys.sys [2012-06-29 11:22:28 | 000,038,024 | ---- | C] (F-Secure Corporation) -- C:\Windows\System32\drivers\fses.sys [2012-06-29 11:22:26 | 000,073,640 | ---- | C] (F-Secure Corporation) -- C:\Windows\System32\drivers\fsdfw.sys [2012-06-29 11:17:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\F-Secure [2012-06-29 11:16:48 | 000,000,000 | ---D | C] -- C:\Program Files\F-Secure [2012-06-29 11:13:11 | 000,000,000 | ---D | C] -- C:\ProgramData\F-Secure [2012-06-29 10:52:07 | 000,000,000 | ---D | C] -- C:\ProgramData\ArcaBit [2012-06-29 09:03:40 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{8A92E82A-096F-4EC3-A8C8-681920E1170B} [2012-06-28 21:03:01 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{ECDD8888-7B8F-47F7-831E-68F86AB48D15} [2012-06-28 09:02:22 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{084651FB-CFB9-4258-99D7-5FD978EA22B5} [2012-06-28 09:01:58 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{52EA4F27-F71F-4A1B-BEE3-3323408D1D62} [2012-06-27 08:37:27 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{C78ED925-CEEB-4970-AD14-AC00551030D3} [2012-06-27 08:37:13 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{76C69609-47A2-4B38-813A-0C0B3C5FC962} [2012-06-27 08:30:17 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{99A4F503-9746-41CB-AC9F-E9CBC81DF37B} [2012-06-27 01:40:24 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{23C01FCA-C939-44AB-A137-92369E9E6F17} [2012-06-26 13:39:56 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{A028E60D-6EBC-494F-A256-86F612A3968E} [2012-06-26 13:39:33 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{28574CFD-E923-44FA-A7FE-04041017F8EA} [2012-06-25 11:56:53 | 000,000,000 | ---D | C] -- C:\Program Files\Grand Theft Auto Vice City [2012-06-25 10:57:40 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{C8439083-AB95-4941-AE72-7400A6F3CF41} [2012-06-25 10:57:13 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{B675CFF8-EC6C-4F43-AE9B-1776336B94F7} [2012-06-24 16:07:24 | 000,000,000 | ---D | C] -- C:\Users\Rafał\Documents\GTA Vice City User Files [2012-06-24 09:59:19 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{1804CEE4-C679-4E37-90CB-70F98FDCCCBF} [2012-06-24 09:58:45 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{0DDE2183-F11C-4E74-ABF5-DFAFAB2F3344} [2012-06-23 23:00:19 | 000,000,000 | ---D | C] -- C:\Users\Rafał\Desktop\np [2012-06-23 09:15:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MegaDev [2012-06-23 09:15:12 | 000,000,000 | ---D | C] -- C:\Program Files\MegaDev [2012-06-22 08:32:04 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{7C439103-A687-43AC-A14C-14C32EA43B60} [2012-06-22 08:31:37 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{324A30D5-0507-4587-B86E-987F68EB46A0} [2012-06-21 07:50:50 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{A66BC5BB-18A2-49C8-A0A9-0160828447B4} [2012-06-21 07:50:38 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{E893B439-6A40-4DE8-ACAB-6B56DA00AE81} [2012-06-20 13:26:45 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{781B7912-3BC4-41F8-AF3C-49610F69D1FD} [2012-06-20 13:26:33 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{3B022E92-EEA1-44CF-AFE1-0C8C37174686} [2012-06-20 07:07:42 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{BF8AEE63-5D6B-41AF-8AD5-0A90CD2B0B4F} [2012-06-19 10:40:36 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{101BD708-D1CC-438B-92D0-51613EAC1086} [2012-06-19 10:40:15 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{FA9FC2E0-339D-468E-89A8-4F608D7723BB} [2012-06-18 15:30:42 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{11D08DD6-78A9-40F5-83A1-3A8681A137CB} [2012-06-16 23:26:15 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{3D1193BE-9B5D-42E6-BDE4-E79E92793554} [2012-06-16 17:47:08 | 000,000,000 | ---D | C] -- C:\Crash [2012-06-16 17:38:07 | 000,347,208 | ---- | C] (Softonic) -- C:\Users\Rafał\Documents\SoftonicDownloader_for_dc-universe-online.exe [2012-06-16 08:09:20 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{3627BC34-5287-4A50-9EF5-F87E8BCA1004} [2012-06-15 15:20:55 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{852F159C-C740-45D8-9C18-6A949114BF61} [2012-06-13 19:16:40 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Roaming\SecondLife [2012-06-13 19:16:40 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\SecondLife [2012-06-13 19:16:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Second Life Viewer [2012-06-13 19:16:23 | 000,000,000 | ---D | C] -- C:\Program Files\SecondLifeViewer [2012-06-13 16:34:04 | 000,000,000 | ---D | C] -- C:\Program Files\Yontoo [2012-06-13 16:34:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Tarma Installer [2012-06-13 16:33:42 | 000,000,000 | ---D | C] -- C:\ProgramData\SweetIM [2012-06-13 16:33:42 | 000,000,000 | ---D | C] -- C:\Program Files\SweetIM [2012-06-13 16:33:03 | 000,000,000 | ---D | C] -- C:\Program Files\1ClickDownload [2012-06-13 15:28:26 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{8D50CE97-54C6-4FE1-9029-2F6490942176} [2012-06-13 15:28:01 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{21373EB0-FE01-437C-881B-26F9AF92C44C} [2012-06-12 15:41:31 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{428C12C6-39B0-4D08-AEAE-B2631E37A27E} [2012-06-12 15:41:00 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{176C82EE-8CA2-4994-95D8-C7A562B0768C} [2012-06-11 17:23:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Creative Assembly [2012-06-11 16:58:24 | 000,000,000 | ---D | C] -- C:\Users\Rafał\Desktop\savy empire [2012-06-11 15:28:40 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{56454FB5-D942-46C0-A388-92860EA2EA1B} [2012-06-11 15:28:28 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{0938C405-50CC-481F-94EB-07E6531EA193} [2012-06-08 23:57:23 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Napoleon Total Factions [2012-06-08 09:37:07 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{8A4B2DDD-1D19-469C-BF1E-E0CB6A96BEDB} [2012-06-07 21:36:29 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{1D9F9D34-C974-45EC-AA9D-E3907562654E} [2012-06-07 09:35:38 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{80858190-B633-4DAD-B17D-99C6B7C12DE2} [2012-06-07 09:35:26 | 000,000,000 | ---D | C] -- C:\Users\Rafał\AppData\Local\{03793E1E-B0F4-4FD9-8279-C2B27119869C} [2006-11-20 09:01:08 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Program Files\Common Files\AMCap.exe [26 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-06 16:01:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-07-06 16:01:43 | 2817,384,448 | -HS- | M] () -- C:\hiberfil.sys [2012-07-06 15:11:01 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3691077182-3707542728-1493853906-1000UA.job [2012-07-06 10:04:36 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-07-06 10:04:36 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-07-06 02:11:04 | 000,001,006 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3691077182-3707542728-1493853906-1000Core.job [2012-07-05 23:42:19 | 000,740,302 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2012-07-05 23:42:19 | 000,654,510 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012-07-05 23:42:19 | 000,155,330 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2012-07-05 23:42:19 | 000,121,782 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012-07-04 09:21:53 | 000,000,411 | ---- | M] () -- C:\Users\Public\Desktop\Morrowind.lnk [2012-07-02 21:47:07 | 022,423,201 | ---- | M] () -- C:\Users\Rafał\Documents\Buildable_Home_v1_71-18480-1-71.rar [2012-07-02 21:42:20 | 013,152,691 | ---- | M] () -- C:\Users\Rafał\Documents\Bandolier_-_Bags_and_Pouches_v1dot1-16438-1-101.zip [2012-07-02 21:37:50 | 000,974,010 | ---- | M] () -- C:\Users\Rafał\Documents\FollowerWander6-3-9504-6-3.zip [2012-07-02 21:14:35 | 000,002,363 | ---- | M] () -- C:\Users\Rafał\Desktop\Google Chrome.lnk [2012-06-30 20:50:17 | 000,000,993 | ---- | M] () -- C:\user.js [2012-06-30 20:49:59 | 000,001,925 | ---- | M] () -- C:\Users\Public\Desktop\YourFile Downloader.lnk [2012-06-30 20:49:49 | 009,873,328 | ---- | M] (http://yourfiledownloader.com) -- C:\Users\Rafał\Documents\skyrim_patch_1.5_razor1911.rar_downloader_224a.exe [2012-06-29 14:00:48 | 000,000,720 | ---- | M] () -- C:\Users\Public\Desktop\FIFA 12.lnk [2012-06-29 11:28:00 | 000,044,184 | ---- | M] () -- C:\Windows\System32\drivers\fsbts.sys [2012-06-29 11:22:28 | 000,019,569 | ---- | M] () -- C:\Windows\prodsett_copy.ini [2012-06-29 11:17:10 | 000,001,930 | ---- | M] () -- C:\Users\Public\Desktop\F-Secure Launch pad.lnk [2012-06-29 11:02:07 | 004,029,448 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2012-06-29 09:57:34 | 000,157,416 | -H-- | M] () -- C:\Windows\System32\mlfcache.dat [2012-06-28 11:36:10 | 000,000,023 | ---- | M] () -- C:\Windows\BlendSettings.ini [2012-06-27 15:33:42 | 000,000,198 | ---- | M] () -- C:\Users\Rafał\Desktop\Champions Online Free For All.url [2012-06-26 14:02:41 | 000,274,168 | ---- | M] () -- C:\Users\Rafał\Documents\Iron_Man_2_lektor_PL.exe [2012-06-26 13:59:43 | 000,014,580 | ---- | M] () -- C:\Users\Rafał\Documents\Iron Man 2 Lektor PL.torrent [2012-06-26 13:56:28 | 000,056,515 | ---- | M] () -- C:\Users\Rafał\Documents\IRON MAN 2 - 2010 DVDRip Lektor PL meti-FILMY-mega.avi.torrent [2012-06-26 13:55:09 | 000,274,088 | ---- | M] () -- C:\Users\Rafał\Documents\Iron_Man_2__2010__[DVDRip.XviD-EM0C0RE]_[Lektor_PL].exe [2012-06-26 13:52:52 | 000,001,921 | ---- | M] () -- C:\Users\Rafał\Desktop\Download Iron_Man_2_(2010)_DVDRip_XviD-MAXSPEED.lnk [2012-06-26 13:52:42 | 000,274,064 | ---- | M] () -- C:\Users\Rafał\Documents\Iron_Man_2_(2010)_DVDRip_XviD-MAXSPEED.exe [2012-06-23 23:04:43 | 000,020,751 | ---- | M] () -- C:\Users\Rafał\Documents\The_Avengers_2012_TS_XviD_AC3-ADTRG.torrent [2012-06-23 19:03:10 | 000,140,800 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2012-06-23 19:03:00 | 000,283,304 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr [2012-06-23 19:02:45 | 000,280,904 | ---- | M] () -- C:\Windows\System32\PnkBstrB.ex0 [2012-06-23 09:15:16 | 000,002,144 | ---- | M] () -- C:\Users\Rafał\Desktop\MegaTrainer eXperience.lnk [2012-06-23 09:15:16 | 000,002,111 | ---- | M] () -- C:\Users\Rafał\Desktop\MT-X - Guide.lnk [2012-06-20 17:08:06 | 000,075,118 | ---- | M] () -- C:\Users\Rafał\Documents\Dr_Bandolier.esp [2012-06-20 07:05:39 | 339,102,898 | ---- | M] () -- C:\Windows\MEMORY.DMP [2012-06-19 21:12:33 | 003,878,112 | ---- | M] () -- C:\Users\Rafał\Documents\battlelog-web-plugins-1.122.0-retail-prod.exe [2012-06-19 01:16:40 | 000,000,707 | ---- | M] () -- C:\Users\Rafał\Desktop\DC Universe Online Live.lnk [2012-06-16 17:39:05 | 017,117,624 | ---- | M] () -- C:\Users\Rafał\Documents\DCUO_setup.exe [2012-06-16 17:38:08 | 000,347,208 | ---- | M] (Softonic) -- C:\Users\Rafał\Documents\SoftonicDownloader_for_dc-universe-online.exe [2012-06-13 19:16:38 | 000,001,087 | ---- | M] () -- C:\Users\Public\Desktop\Second Life Viewer.lnk [2012-06-13 16:33:36 | 000,000,218 | ---- | M] () -- C:\Users\Rafał\Desktop\SweetPcFix.url [2012-06-13 16:33:10 | 000,001,886 | ---- | M] () -- C:\Users\Rafał\Desktop\Download The_Elder_Scrolls_III___Morrowind.lnk [2012-06-13 16:32:04 | 011,854,463 | ---- | M] () -- C:\Users\Rafał\Documents\sa-mp-0.3e-install.zip [2012-06-13 16:25:53 | 010,877,829 | ---- | M] () -- C:\Users\Rafał\Documents\sa-mp-0.3d-install.zip [2012-06-11 17:23:39 | 000,000,731 | ---- | M] () -- C:\Users\Rafał\Desktop\Empire Total War™.lnk [2012-06-09 00:16:32 | 000,000,664 | ---- | M] () -- C:\Users\Rafał\Desktop\NTF.lnk [26 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-04 09:21:53 | 000,000,411 | ---- | C] () -- C:\Users\Public\Desktop\Morrowind.lnk [2012-07-02 21:45:46 | 022,423,201 | ---- | C] () -- C:\Users\Rafał\Documents\Buildable_Home_v1_71-18480-1-71.rar [2012-07-02 21:44:43 | 000,075,118 | ---- | C] () -- C:\Users\Rafał\Documents\Dr_Bandolier.esp [2012-07-02 21:40:07 | 013,152,691 | ---- | C] () -- C:\Users\Rafał\Documents\Bandolier_-_Bags_and_Pouches_v1dot1-16438-1-101.zip [2012-07-02 21:37:58 | 001,156,430 | ---- | C] () -- C:\Users\Rafał\Documents\FollowerWander2.bsa [2012-07-02 21:37:58 | 000,050,862 | ---- | C] () -- C:\Users\Rafał\Documents\FollowerWander2.esp [2012-07-02 21:37:41 | 000,974,010 | ---- | C] () -- C:\Users\Rafał\Documents\FollowerWander6-3-9504-6-3.zip [2012-06-29 14:00:48 | 000,000,720 | ---- | C] () -- C:\Users\Public\Desktop\FIFA 12.lnk [2012-06-29 14:00:48 | 000,000,720 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 12.lnk [2012-06-29 11:22:57 | 000,044,184 | ---- | C] () -- C:\Windows\System32\drivers\fsbts.sys [2012-06-29 11:22:28 | 000,019,569 | ---- | C] () -- C:\Windows\prodsett_copy.ini [2012-06-29 11:17:10 | 000,001,930 | ---- | C] () -- C:\Users\Public\Desktop\F-Secure Launch pad.lnk [2012-06-27 15:33:42 | 000,000,198 | ---- | C] () -- C:\Users\Rafał\Desktop\Champions Online Free For All.url [2012-06-26 14:02:41 | 000,274,168 | ---- | C] () -- C:\Users\Rafał\Documents\Iron_Man_2_lektor_PL.exe [2012-06-26 13:59:43 | 000,014,580 | ---- | C] () -- C:\Users\Rafał\Documents\Iron Man 2 Lektor PL.torrent [2012-06-26 13:56:28 | 000,056,515 | ---- | C] () -- C:\Users\Rafał\Documents\IRON MAN 2 - 2010 DVDRip Lektor PL meti-FILMY-mega.avi.torrent [2012-06-26 13:55:09 | 000,274,088 | ---- | C] () -- C:\Users\Rafał\Documents\Iron_Man_2__2010__[DVDRip.XviD-EM0C0RE]_[Lektor_PL].exe [2012-06-26 13:52:52 | 000,001,921 | ---- | C] () -- C:\Users\Rafał\Desktop\Download Iron_Man_2_(2010)_DVDRip_XviD-MAXSPEED.lnk [2012-06-26 13:52:42 | 000,274,064 | ---- | C] () -- C:\Users\Rafał\Documents\Iron_Man_2_(2010)_DVDRip_XviD-MAXSPEED.exe [2012-06-25 14:25:32 | 000,338,432 | R--- | C] () -- C:\Users\Rafał\Desktop\Mss32.dll [2012-06-23 23:04:43 | 000,020,751 | ---- | C] () -- C:\Users\Rafał\Documents\The_Avengers_2012_TS_XviD_AC3-ADTRG.torrent [2012-06-23 09:15:16 | 000,002,144 | ---- | C] () -- C:\Users\Rafał\Desktop\MegaTrainer eXperience.lnk [2012-06-23 09:15:16 | 000,002,111 | ---- | C] () -- C:\Users\Rafał\Desktop\MT-X - Guide.lnk [2012-06-20 07:05:39 | 339,102,898 | ---- | C] () -- C:\Windows\MEMORY.DMP [2012-06-19 21:12:27 | 003,878,112 | ---- | C] () -- C:\Users\Rafał\Documents\battlelog-web-plugins-1.122.0-retail-prod.exe [2012-06-16 17:46:40 | 000,000,707 | ---- | C] () -- C:\Users\Rafał\Desktop\DC Universe Online Live.lnk [2012-06-16 17:38:20 | 017,117,624 | ---- | C] () -- C:\Users\Rafał\Documents\DCUO_setup.exe [2012-06-13 19:16:38 | 000,001,087 | ---- | C] () -- C:\Users\Public\Desktop\Second Life Viewer.lnk [2012-06-13 16:33:36 | 000,000,218 | ---- | C] () -- C:\Users\Rafał\Desktop\SweetPcFix.url [2012-06-13 16:33:10 | 000,001,886 | ---- | C] () -- C:\Users\Rafał\Desktop\Download The_Elder_Scrolls_III___Morrowind.lnk [2012-06-13 16:32:12 | 011,869,040 | ---- | C] () -- C:\Users\Rafał\Documents\sa-mp-0.3e-install.exe [2012-06-13 16:32:12 | 000,000,052 | ---- | C] () -- C:\Users\Rafał\Documents\GTAMultiplayer.pl.URL [2012-06-13 16:31:47 | 011,854,463 | ---- | C] () -- C:\Users\Rafał\Documents\sa-mp-0.3e-install.zip [2012-06-13 16:26:04 | 010,892,559 | ---- | C] () -- C:\Users\Rafał\Documents\sa-mp-0.3d-install.exe [2012-06-13 16:26:04 | 000,000,052 | ---- | C] () -- C:\Users\Rafał\Documents\GTAMultiplayer.URL [2012-06-13 16:25:39 | 010,877,829 | ---- | C] () -- C:\Users\Rafał\Documents\sa-mp-0.3d-install.zip [2012-06-11 17:23:39 | 000,000,731 | ---- | C] () -- C:\Users\Rafał\Desktop\Empire Total War™.lnk [2012-06-08 23:57:23 | 000,000,664 | ---- | C] () -- C:\Users\Rafał\Desktop\NTF.lnk [2012-05-11 18:01:42 | 000,000,034 | ---- | C] () -- C:\Windows\cdplayer.ini [2012-05-07 17:21:59 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2012-05-06 22:46:45 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempSL5816.html [2012-04-08 22:49:56 | 000,000,036 | ---- | C] () -- C:\Windows\DTLite.INI [2012-03-30 15:39:25 | 000,015,672 | ---- | C] () -- C:\Windows\System32\drivers\SmartDefragDriver.sys [2012-03-27 11:58:58 | 000,002,719 | ---- | C] () -- C:\Users\Rafał\.recently-used.xbel [2012-03-15 19:47:59 | 055,636,781 | ---- | C] () -- C:\Users\Rafał\AppData\Roaming\.minecraft.rar [2012-03-08 16:27:50 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempAr2224.html [2012-03-07 19:21:58 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempER1720.html [2012-03-06 19:48:36 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempaQ5264.html [2012-03-06 14:21:05 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempuv1748.html [2012-03-04 19:36:15 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempHY3520.html [2012-03-04 15:27:55 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempqv4668.html [2012-03-04 13:32:24 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Temphi5020.html [2012-02-17 13:07:01 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempww2972.html [2012-02-05 03:15:06 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempGr5236.html [2012-02-05 03:12:26 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemphI1604.html [2012-02-04 09:28:38 | 000,000,023 | ---- | C] () -- C:\Windows\BlendSettings.ini [2012-01-29 23:22:53 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempgD5864.html [2012-01-25 21:38:54 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempUm3672.html [2012-01-25 21:38:54 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIB3672.html [2012-01-25 14:37:35 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempcK9300.html [2012-01-18 13:16:21 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempOL5080.html [2012-01-15 20:03:12 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempKf3444.html [2012-01-15 16:05:17 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempqR3940.html [2012-01-12 22:45:28 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempCf5592.html [2012-01-11 15:23:58 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempWs1048.html [2012-01-05 19:26:41 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempVe5228.html [2012-01-05 00:06:05 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempPO3980.html [2012-01-04 19:37:12 | 000,795,510 | ---- | C] () -- C:\Users\Rafał\sa-mp-377.png [2012-01-04 19:37:12 | 000,784,933 | ---- | C] () -- C:\Users\Rafał\sa-mp-378.png [2012-01-04 19:37:12 | 000,780,590 | ---- | C] () -- C:\Users\Rafał\sa-mp-376.png [2012-01-04 16:59:16 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempRkd764.html [2012-01-03 21:53:10 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempLp4692.html [2012-01-03 14:16:06 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempJL5104.html [2012-01-03 10:32:50 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempta3000.html [2012-01-01 17:11:40 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempgH6988.html [2011-12-29 01:54:26 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempsP5236.html [2011-12-27 11:10:28 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempck3656.html [2011-12-25 11:58:30 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempMd5752.html [2011-12-23 11:20:24 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempqw2800.html [2011-12-23 01:14:12 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempdj6716.html [2011-12-22 11:34:53 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIp2556.html [2011-12-20 16:50:32 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempTK4272.html [2011-12-18 19:47:48 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempSl3288.html [2011-12-18 14:17:51 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempcq3308.html [2011-12-18 00:31:13 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempLu1892.html [2011-12-16 22:09:02 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempwY7456.html [2011-12-16 22:09:02 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempPU7456.html [2011-12-13 16:55:24 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempBm4324.html [2011-12-13 00:32:59 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempcf3016.html [2011-12-09 23:03:02 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempfI3384.html [2011-12-08 22:50:36 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempBs5532.html [2011-12-07 20:53:38 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempks8160.html [2011-12-06 23:27:02 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempnq4736.html [2011-12-06 23:27:02 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempZJ4736.html [2011-12-06 14:23:54 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempSw4764.html [2011-12-04 22:41:47 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempHbO640.html [2011-12-04 22:41:47 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempbjj640.html [2011-11-28 23:11:29 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempjJ6132.html [2011-11-27 23:30:17 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempsK4112.html [2011-11-22 22:40:06 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempjQ4196.html [2011-11-18 20:51:58 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempGZ5708.html [2011-11-17 15:03:19 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempER5668.html [2011-11-13 23:57:49 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempfr5724.html [2011-11-09 20:19:07 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempxi3864.html [2011-11-07 23:18:58 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempQF5712.html [2011-11-07 09:33:19 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempWd2584.html [2011-11-01 09:23:17 | 000,057,904 | ---- | C] () -- C:\Windows\System32\wbload.dll [2011-10-28 23:54:11 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempxc1588.html [2011-10-18 22:24:41 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempqr4560.html [2011-10-18 14:10:08 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempmR3164.html [2011-10-15 22:50:48 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempfm5276.html [2011-10-15 01:54:52 | 000,321,856 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe [2011-10-14 11:50:29 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempwk3168.html [2011-10-13 22:10:48 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempbl5300.html [2011-10-12 19:30:09 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempKU5028.html [2011-10-12 13:12:41 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempKl3784.html [2011-10-11 10:21:31 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempgo5192.html [2011-10-10 20:41:18 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempiq5004.html [2011-10-07 17:28:10 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempVv4644.html [2011-10-06 17:31:10 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempta3720.html [2011-10-05 17:37:05 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempQT4856.html [2011-10-04 17:53:55 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempaW4684.html [2011-10-03 19:55:44 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempvw5452.html [2011-10-01 23:23:55 | 000,000,017 | ---- | C] () -- C:\Windows\System32\shortcut_ex.dat [2011-10-01 20:00:16 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempmG4020.html [2011-10-01 10:09:43 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempSe9100.html [2011-09-28 17:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat [2011-09-23 23:38:13 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempnw1036.html [2011-09-23 23:38:13 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempMb1036.html [2011-09-22 19:11:34 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempkGu192.html [2011-09-22 19:11:34 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempGrE192.html [2011-09-21 20:20:05 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIA1388.html [2011-09-21 19:05:13 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempBJ4252.html [2011-09-21 19:05:13 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempxl4252.html [2011-09-21 15:39:04 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempZn4348.html [2011-09-19 20:52:45 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempTY1084.html [2011-09-18 13:46:10 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempou5952.html [2011-09-18 13:40:48 | 000,017,408 | ---- | C] () -- C:\Users\Rafał\AppData\Local\WebpageIcons.db [2011-09-18 13:10:09 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempwy4192.html [2011-09-17 22:27:58 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIS4628.html [2011-09-17 17:39:56 | 000,000,000 | ---- | C] () -- C:\Windows\System32\Access.dat [2011-09-16 10:10:09 | 000,043,520 | ---- | C] () -- C:\Windows\System32\CmdLineExt03.dll [2011-09-11 21:33:58 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempNt6080.html [2011-09-10 14:36:26 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempAd5060.html [2011-09-10 12:55:21 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempTwh620.html [2011-09-10 12:55:21 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempsUq620.html [2011-09-10 01:06:11 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempJN2460.html [2011-09-10 01:06:11 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemplY2460.html [2011-09-09 22:24:26 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempxM2468.html [2011-09-09 22:24:26 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempee2468.html [2011-09-08 20:53:14 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempDf4644.html [2011-09-08 15:53:09 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempWU4536.html [2011-09-06 22:05:20 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempJG5316.html [2011-09-06 22:05:20 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempJo5316.html [2011-09-05 20:53:40 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempUG3080.html [2011-09-03 19:45:15 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempAA5316.html [2011-09-03 11:37:20 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempiS5796.html [2011-09-03 11:35:50 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempMv5796.html [2011-09-01 20:51:51 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempCF2396.html [2011-09-01 16:21:15 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempvX4540.html [2011-08-31 21:01:51 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempKuL656.html [2011-08-31 16:56:21 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIm4220.html [2011-08-30 21:15:04 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempSY3372.html [2011-08-27 11:10:36 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempcU5884.html [2011-08-26 20:58:08 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempiUC560.html [2011-08-26 20:58:01 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempitd560.html [2011-08-26 17:33:49 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempeZ4088.html [2011-08-25 16:43:36 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempKm3432.html [2011-08-25 10:26:03 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempXD2800.html [2011-08-24 19:12:38 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempnJ3796.html [2011-08-24 18:22:19 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempnx1364.html [2011-08-22 16:40:00 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempzq1108.html [2011-08-21 11:28:13 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempok2196.html [2011-08-14 09:50:09 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempzB4976.html [2011-08-12 21:22:39 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempdF3196.html [2011-08-12 10:58:34 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Temptc4264.html [2011-08-11 19:29:24 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempez2728.html [2011-08-11 09:42:20 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempuw4924.html [2011-08-10 20:53:22 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempKp5352.html [2011-08-10 12:10:12 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempJx5844.html [2011-08-09 20:02:26 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempGK4588.html [2011-08-09 10:27:04 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempCh4256.html [2011-08-09 00:09:18 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempzt5916.html [2011-08-09 00:09:18 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempFl5916.html [2011-08-08 21:55:48 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempXhZ736.html [2011-08-08 21:55:48 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempshY736.html [2011-08-08 09:48:43 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemplI4696.html [2011-08-07 22:22:54 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempQk2572.html [2011-08-07 22:22:54 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempui2572.html [2011-08-07 22:22:37 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Temprh2572.html [2011-08-07 21:26:42 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempyC1216.html [2011-08-07 21:26:42 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempac1216.html [2011-08-07 17:34:39 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempWQm148.html [2011-08-07 15:17:14 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempbf6032.html [2011-08-07 14:10:42 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempbT3312.html [2011-08-06 18:34:30 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIB5832.html [2011-08-04 09:18:35 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempKD4760.html [2011-08-03 15:07:02 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempne2520.html [2011-08-02 10:32:40 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempfQ1072.html [2011-08-01 17:04:51 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempQq3016.html [2011-08-01 17:01:59 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIQ3016.html [2011-08-01 10:41:27 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempnE3548.html [2011-07-31 19:26:40 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys [2011-07-31 19:26:38 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys [2011-07-31 15:14:51 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempih5336.html [2011-07-31 12:17:31 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempBf4516.html [2011-07-31 10:14:56 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempUN3928.html [2011-07-31 10:14:39 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempCB3928.html [2011-07-30 19:23:16 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempcp2328.html [2011-07-30 09:54:40 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempPf4100.html [2011-07-30 08:33:38 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempGp2416.html [2011-07-29 22:03:00 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempAw5660.html [2011-07-29 19:32:51 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempYf4800.html [2011-07-29 15:47:41 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempte4088.html [2011-07-29 11:01:16 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempfI1044.html [2011-07-29 09:02:47 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempZb2424.html [2011-07-29 00:02:04 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempFU4204.html [2011-07-28 10:27:00 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempje2196.html [2011-07-27 21:27:42 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempEng296.html [2011-07-27 16:42:56 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempefX192.html [2011-07-27 06:50:42 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempcE2440.html [2011-07-27 06:50:42 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempSM2440.html [2011-07-26 20:51:19 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempBq4768.html [2011-07-26 19:00:24 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempTf2364.html [2011-07-26 13:51:17 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempYz4140.html [2011-07-26 13:51:17 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempFn4140.html [2011-07-25 22:24:33 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempRL5756.html [2011-07-25 22:17:51 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempKX4296.html [2011-07-25 17:47:44 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempaM3732.html [2011-07-25 00:17:42 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempDQ3872.html [2011-07-24 00:17:47 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempmw6124.html [2011-07-23 13:01:19 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempJT5620.html [2011-07-23 12:27:12 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempqw4156.html [2011-07-22 22:17:03 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempJt4608.html [2011-07-22 19:38:34 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIz2484.html [2011-07-22 13:42:02 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempoC3024.html [2011-07-22 12:50:33 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempNw1076.html [2011-07-21 18:59:30 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempzX3696.html [2011-07-21 15:25:53 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempZE2812.html [2011-07-21 14:10:31 | 000,138,056 | ---- | C] () -- C:\Users\Rafał\AppData\Roaming\PnkBstrK.sys [2011-07-21 14:10:10 | 000,840,264 | ---- | C] () -- C:\Windows\System32\pbsvc.exe [2011-07-20 18:59:24 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempacK556.html [2011-07-20 18:59:24 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempdAd556.html [2011-07-20 17:06:42 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempTD3200.html [2011-07-20 14:38:41 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempyV1580.html [2011-07-20 14:38:41 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempWi1580.html [2011-07-20 09:25:24 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempVw2312.html [2011-07-19 23:10:08 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempZC5668.html [2011-07-19 19:37:15 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempKw1996.html [2011-07-19 09:56:20 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempnS2564.html [2011-07-16 19:28:30 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempSK2868.html [2011-07-16 16:59:06 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Temphk3368.html [2011-07-16 13:14:55 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempxK1412.html [2011-07-16 00:28:19 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIt4844.html [2011-07-15 22:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempmZ2676.html [2011-07-15 14:55:16 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempPM4032.html [2011-07-14 21:55:41 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempMz2520.html [2011-07-14 19:35:11 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempsR3656.html [2011-07-14 16:50:38 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempkQ4948.html [2011-07-13 22:44:57 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempUW4956.html [2011-07-13 13:17:22 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempxZ3112.html [2011-07-12 16:57:09 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempQo3452.html [2011-07-12 12:37:23 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Temprb1156.html [2011-07-12 09:47:08 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempND2504.html [2011-07-11 21:42:39 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempPPr788.html [2011-07-11 15:34:04 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempAa4536.html [2011-07-11 09:42:36 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempMf3328.html [2011-07-10 18:41:07 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempeJ5080.html [2011-07-09 23:33:35 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempyE1716.html [2011-07-09 18:39:14 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempqd4204.html [2011-07-09 12:03:52 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempdR5604.html [2011-07-09 12:03:52 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempsM5604.html [2011-07-08 22:51:19 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempBY5032.html [2011-07-08 22:51:15 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempJg5032.html [2011-07-08 16:32:39 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempXn5820.html [2011-07-07 23:33:21 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemphX2344.html [2011-07-07 17:21:43 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemptU5668.html [2011-07-06 20:14:20 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Temprn1048.html [2011-07-06 18:48:30 | 000,140,800 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2011-07-06 18:42:48 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempEL3036.html [2011-07-06 14:14:57 | 000,283,304 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe [2011-07-06 14:14:53 | 000,076,888 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe [2011-07-06 12:57:57 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempQs5852.html [2011-07-05 23:56:37 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempBE3140.html [2011-07-05 19:38:37 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempdC2988.html [2011-07-05 16:34:42 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempZH2604.html [2011-07-05 12:43:17 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempuV3116.html [2011-07-04 19:55:28 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempYr4708.html [2011-07-04 14:10:35 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempxi3424.html [2011-07-04 12:51:31 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIm2408.html [2011-07-04 10:55:00 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempLp5992.html [2011-07-04 08:23:01 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempXG3640.html [2011-07-03 20:06:42 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempyN2228.html [2011-07-03 14:59:50 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempUY3028.html [2011-07-03 12:24:02 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemppeF200.html [2011-07-03 10:33:46 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempuv1172.html [2011-07-02 22:00:10 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Temppx2880.html [2011-07-02 17:16:50 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempnF1988.html [2011-07-02 14:50:22 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempLG3412.html [2011-07-02 13:00:58 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempQH4552.html [2011-07-01 17:48:04 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemplH2328.html [2011-07-01 10:53:31 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempXW3316.html [2011-07-01 00:37:51 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempww5360.html [2011-06-30 15:13:04 | 000,000,000 | ---- | C] () -- C:\Users\Rafał\AppData\Roaming\.NANotifyHere [2011-06-30 13:50:09 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempkt1056.html [2011-06-30 13:17:33 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempuP1244.html [2011-06-30 09:22:02 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempJJ1812.html [2011-06-30 09:18:50 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempmk1812.html [2011-06-30 00:13:44 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemptL1344.html [2011-06-29 21:48:49 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempOV3140.html [2011-06-29 15:36:11 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempyr4700.html [2011-06-29 12:06:05 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempei4448.html [2011-06-28 18:20:22 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempOb3756.html [2011-06-28 14:08:56 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempxw3100.html [2011-06-28 14:08:43 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempmH3100.html [2011-06-28 12:39:44 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempGm5020.html [2011-06-28 12:39:44 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempSR5020.html [2011-06-28 12:39:30 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempQT5020.html [2011-06-28 09:11:59 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempwy2320.html [2011-06-28 09:11:59 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempCi2320.html [2011-06-27 14:24:21 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempig5572.html [2011-06-26 21:49:37 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempJU2888.html [2011-06-26 17:28:31 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempca2264.html [2011-06-26 14:07:03 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempWU5460.html [2011-06-26 00:33:44 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIf3932.html [2011-06-25 16:49:28 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempBRx996.html [2011-06-25 13:23:25 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempgf4516.html [2011-06-25 13:08:10 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempFN4112.html [2011-06-25 13:08:10 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Templw4112.html [2011-06-25 11:53:41 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempmo2996.html [2011-06-25 11:53:41 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempyQ2996.html [2011-06-25 09:44:23 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIz5016.html [2011-06-24 13:36:19 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempsr3844.html [2011-06-24 00:13:34 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempicz612.html [2011-06-24 00:13:34 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempffQ612.html [2011-06-23 21:14:34 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempxu3672.html [2011-06-23 14:39:48 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemptY1416.html [2011-06-23 10:09:42 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempJo2968.html [2011-06-23 10:08:27 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempHK2968.html [2011-06-22 19:17:23 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempgH4816.html [2011-06-22 18:52:13 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempAm5780.html [2011-06-22 13:59:15 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempvO5604.html [2011-06-21 15:56:46 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempCR1360.html [2011-06-20 15:47:35 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemphU2972.html [2011-06-19 20:38:00 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempnr4080.html [2011-06-19 16:37:21 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemplRu380.html [2011-06-19 12:48:41 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempCn1396.html [2011-06-18 18:05:51 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemptjF684.html [2011-06-18 09:44:47 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempJf4356.html [2011-06-16 23:09:21 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempHs2204.html [2011-06-16 23:09:21 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemphF2204.html [2011-06-16 20:49:11 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempAR2724.html [2011-06-16 17:42:48 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemptI3424.html [2011-06-16 15:30:39 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempij1788.html [2011-06-15 16:38:07 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempWY5096.html [2011-06-14 19:10:54 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempnZ2056.html [2011-06-13 19:34:45 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempwt1956.html [2011-06-13 19:34:45 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempPa1956.html [2011-06-13 13:57:50 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempKU3272.html [2011-06-12 15:07:34 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Temphf3960.html [2011-06-12 15:07:34 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempUB3960.html [2011-06-11 16:59:08 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempfG3504.html [2011-06-11 12:12:15 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempTQ1068.html [2011-06-11 12:10:34 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIm1068.html [2011-06-11 12:06:59 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempgB1068.html [2011-06-10 18:52:40 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempNo2512.html [2011-06-09 18:42:30 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempyG2368.html [2011-06-09 17:41:26 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempXR1552.html [2011-06-09 17:41:26 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemptF1552.html [2011-06-08 17:56:28 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemppM2684.html [2011-06-08 17:07:53 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempkg2492.html [2011-06-08 17:07:53 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempoU2492.html [2011-06-07 21:16:54 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempbEC612.html [2011-06-07 18:13:56 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempaB1412.html [2011-06-07 17:53:47 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Templk2412.html [2011-06-07 17:53:10 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempzs2412.html [2011-06-06 17:16:50 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempnc3448.html [2011-06-06 13:46:43 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempeX2112.html [2011-06-06 10:27:03 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemplD1668.html [2011-06-06 10:27:03 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempUj1668.html [2011-06-05 16:40:35 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempOx4104.html [2011-06-05 10:28:50 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemppXm764.html [2011-06-04 11:42:11 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIz4060.html [2011-06-03 18:56:10 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempgM3776.html [2011-06-03 18:55:52 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempMu3776.html [2011-06-02 17:54:12 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemppZX692.html [2011-05-29 18:17:53 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempgrh552.html [2011-05-29 18:17:53 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempACt552.html [2011-05-29 15:21:31 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIe5648.html [2011-05-28 23:04:01 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempnY4032.html [2011-05-27 17:17:54 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemptX3060.html [2011-05-27 15:04:02 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempbw3284.html [2011-05-26 21:09:21 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempwB5164.html [2011-05-26 17:21:31 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempeQ2368.html [2011-05-25 20:28:04 | 000,000,108 | ---- | C] () -- C:\Windows\Lexstat.ini [2011-05-25 20:26:54 | 001,224,704 | ---- | C] ( ) -- C:\Windows\System32\lxczserv.dll [2011-05-25 20:26:54 | 000,991,232 | ---- | C] ( ) -- C:\Windows\System32\lxczusb1.dll [2011-05-25 20:26:54 | 000,696,320 | ---- | C] ( ) -- C:\Windows\System32\lxczhbn3.dll [2011-05-25 20:26:54 | 000,684,032 | ---- | C] ( ) -- C:\Windows\System32\lxczcomc.dll [2011-05-25 20:26:54 | 000,643,072 | ---- | C] ( ) -- C:\Windows\System32\lxczpmui.dll [2011-05-25 20:26:54 | 000,585,728 | ---- | C] ( ) -- C:\Windows\System32\lxczlmpm.dll [2011-05-25 20:26:54 | 000,537,520 | ---- | C] ( ) -- C:\Windows\System32\lxczcoms.exe [2011-05-25 20:26:54 | 000,421,888 | ---- | C] ( ) -- C:\Windows\System32\lxczcomm.dll [2011-05-25 20:26:54 | 000,413,696 | ---- | C] () -- C:\Windows\System32\lxczutil.dll [2011-05-25 20:26:54 | 000,413,696 | ---- | C] ( ) -- C:\Windows\System32\lxczinpa.dll [2011-05-25 20:26:54 | 000,397,312 | ---- | C] ( ) -- C:\Windows\System32\lxcziesc.dll [2011-05-25 20:26:54 | 000,385,968 | ---- | C] ( ) -- C:\Windows\System32\lxczih.exe [2011-05-25 20:26:54 | 000,381,872 | ---- | C] ( ) -- C:\Windows\System32\lxczcfg.exe [2011-05-25 20:26:54 | 000,323,584 | ---- | C] ( ) -- C:\Windows\System32\LXCZhcp.dll [2011-05-25 20:26:54 | 000,274,432 | ---- | C] () -- C:\Windows\System32\LXCZinst.dll [2011-05-25 20:26:54 | 000,163,840 | ---- | C] ( ) -- C:\Windows\System32\lxczprox.dll [2011-05-25 20:26:54 | 000,094,208 | ---- | C] ( ) -- C:\Windows\System32\lxczpplc.dll [2011-05-20 18:55:46 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempqnM608.html [2011-05-18 20:18:34 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempCB3164.html [2011-05-17 20:58:16 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempg11920.html [2011-05-15 20:06:42 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempLw3412.html [2011-05-14 13:28:55 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemppD2444.html [2011-05-14 13:28:24 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempSo2444.html [2011-05-13 23:31:32 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempiI3584.html [2011-05-12 14:43:26 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Temphj3064.html [2011-05-11 16:51:16 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempEl3644.html [2011-05-10 21:50:31 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempTm1564.html [2011-05-10 21:50:31 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempsx1564.html [2011-05-10 19:50:39 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempqJc576.html [2011-05-10 17:37:42 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempbn1160.html [2011-05-10 15:08:19 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempjA3696.html [2011-05-09 20:26:15 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempBR4068.html [2011-05-09 16:51:41 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat [2011-05-09 13:48:02 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempKG2056.html [2011-05-08 18:36:17 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempfM3712.html [2011-05-08 17:15:32 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempWh3184.html [2011-05-08 14:19:20 | 000,157,416 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat [2011-05-08 13:18:22 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempXp3264.html [2011-05-08 13:18:21 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempZh3264.html [2011-05-08 01:19:49 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempHI2588.html [2011-05-07 15:20:56 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempxH3836.html [2011-05-07 11:20:52 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIm1980.html [2011-05-07 00:06:43 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempja2424.html [2011-05-07 00:06:43 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempdQ2424.html [2011-05-06 15:59:49 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempif1268.html [2011-05-06 15:18:02 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempJN2748.html [2011-05-06 15:18:01 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempzL2748.html [2011-05-06 13:05:13 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempgY3424.html [2011-05-06 13:05:12 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempqS3424.html [2011-05-06 10:53:20 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempvG2320.html [2011-05-05 20:25:06 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempgZ2812.html [2011-05-05 17:06:46 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempgq3192.html [2011-05-05 17:06:41 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempvn3192.html [2011-05-05 16:57:45 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempZX3352.html [2011-05-05 13:49:27 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempuI3812.html [2011-05-05 13:49:27 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Templv3812.html [2011-05-05 10:44:24 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempuD3660.html [2011-05-05 00:35:37 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempke2484.html [2011-05-05 00:35:37 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempUg2484.html [2011-05-04 21:07:22 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Temprl2484.html [2011-05-04 16:52:39 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempeh2312.html [2011-05-04 16:52:29 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempdH2312.html [2011-05-04 13:32:07 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIj3856.html [2011-05-04 13:13:27 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempOy3856.html [2011-05-03 22:33:27 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempjon372.html [2011-05-03 22:33:27 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempVKW372.html [2011-05-03 11:25:11 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Temptj3208.html [2011-05-02 20:18:58 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempxl2416.html [2011-05-02 20:18:58 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempZq2416.html [2011-05-02 13:48:24 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempxy2420.html [2011-05-01 20:18:41 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempPN2288.html [2011-05-01 14:21:07 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempQi2420.html [2011-04-30 23:09:09 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempAR3112.html [2011-04-30 19:31:07 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempii3348.html [2011-04-30 11:12:38 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemplV2292.html [2011-04-29 18:53:36 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempYh1000.html [2011-04-29 18:53:36 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempft1000.html [2011-04-28 22:37:32 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempfQ2536.html [2011-04-27 21:15:23 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempEx3212.html [2011-04-27 20:57:23 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempZL3212.html [2011-04-27 18:44:14 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempSU1872.html [2011-04-27 15:08:54 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempaT3984.html [2011-04-26 18:50:13 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempOua588.html [2011-04-26 12:26:28 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempJl3072.html [2011-04-26 09:34:41 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempfu1456.html [2011-04-25 21:41:40 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempYe1112.html [2011-04-25 21:41:40 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempEv1112.html [2011-04-25 19:23:58 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempsq2468.html [2011-04-25 19:23:58 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempZy2468.html [2011-04-25 13:36:11 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempes2540.html [2011-04-25 10:14:56 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempjG3660.html [2011-04-24 23:05:01 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempAq2704.html [2011-04-24 10:54:08 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempPO3856.html [2011-04-24 08:14:16 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempVrY664.html [2011-04-23 19:14:27 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempdr3776.html [2011-04-23 15:14:52 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempXJ3732.html [2011-04-23 13:32:16 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempnR3892.html [2011-04-22 22:26:12 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempaT2232.html [2011-04-22 18:55:29 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempon2352.html [2011-04-22 10:07:27 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempmr3316.html [2011-04-22 00:56:36 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempgm3628.html [2011-04-22 00:56:36 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempoe3628.html [2011-04-21 18:37:38 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIdq192.html [2011-04-21 13:20:57 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempYS3828.html [2011-04-21 08:22:10 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempNj2552.html [2011-04-20 20:50:15 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempDx2844.html [2011-04-20 12:56:39 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempKu3276.html [2011-04-20 09:29:56 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempEi1504.html [2011-04-19 15:39:29 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempcE3944.html [2011-04-19 12:30:26 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempvi2628.html [2011-04-18 21:28:27 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempCK3148.html [2011-04-18 10:52:17 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempag2960.html [2011-04-17 19:11:09 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempTpX172.html [2011-04-17 14:04:53 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempsZ3728.html [2011-04-17 10:35:01 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TemptY1252.html [2011-04-16 18:07:17 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempJm2528.html [2011-04-16 14:23:58 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempKN1516.html [2011-04-16 09:10:40 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempUG3708.html [2011-04-16 07:42:43 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempIF2344.html [2011-04-15 17:02:46 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempMq3660.html [2011-04-15 17:02:46 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempHN3660.html [2011-04-15 15:16:13 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempik2592.html [2011-04-15 13:40:37 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempsw3508.html [2011-04-14 21:31:03 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempyY3096.html [2011-04-14 15:55:29 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\Tempoq3120.html [2011-04-13 19:30:14 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempnF1228.html [2011-04-13 16:44:59 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempjV1228.html [2011-04-12 21:38:00 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempLw3212.html [2011-04-12 18:08:40 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempGS3092.html [2011-04-11 22:00:28 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempGe1100.html [2011-04-11 21:16:53 | 000,002,432 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempHE1952.html [2011-04-11 21:16:53 | 000,002,089 | ---- | C] () -- C:\Users\Rafał\AppData\Local\TempHD1952.html [2011-04-11 19:46:40 | 000,000,168 | ---- | C] () -- C:\Windows\adidsl.ini [2011-04-11 19:46:40 | 000,000,021 | ---- | C] () -- C:\Windows\Fast800.ini [2011-04-11 19:46:34 | 000,253,008 | ---- | C] () -- C:\Windows\adirasx64.exe [2011-04-11 19:46:34 | 000,194,128 | ---- | C] () -- C:\Windows\adiras.exe [2011-04-11 19:46:34 | 000,127,456 | ---- | C] () -- C:\Windows\System32\IPDETECT.EXE [2011-04-11 19:46:34 | 000,001,094 | ---- | C] () -- C:\Windows\adiras.ini [2011-04-11 19:46:33 | 000,152,132 | ---- | C] () -- C:\Windows\System32\drivers\L1E4P2.BIN [2011-04-11 19:46:33 | 000,152,132 | ---- | C] () -- C:\Windows\System32\drivers\L1E4P1.BIN [2011-04-11 19:46:33 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9P2.BIN [2011-04-11 19:46:33 | 000,046,892 | ---- | C] () -- C:\Windows\System32\ADADIX16.DLL [2011-04-11 19:46:33 | 000,024,576 | ---- | C] () -- C:\Windows\enddisk32.exe [2011-04-11 19:46:32 | 000,152,220 | ---- | C] () -- C:\Windows\System32\drivers\L1E4I2.BIN [2011-04-11 19:46:32 | 000,152,220 | ---- | C] () -- C:\Windows\System32\drivers\L1E4I1.BIN [2011-04-11 19:46:32 | 000,152,220 | ---- | C] () -- C:\Windows\System32\drivers\L1E4I0.BIN [2011-04-11 19:46:32 | 000,152,132 | ---- | C] () -- C:\Windows\System32\drivers\L1E4P0.BIN [2011-04-11 19:46:32 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9P1.BIN [2011-04-11 19:46:32 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9P0.BIN [2011-04-11 19:46:32 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9I2.BIN [2011-04-11 19:46:32 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9I1.BIN [2011-04-11 19:46:32 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9I0.BIN [2011-04-11 19:46:32 | 000,152,036 | ---- | C] () -- C:\Windows\System32\drivers\L1E4D2.BIN [2011-04-11 19:46:32 | 000,152,034 | ---- | C] () -- C:\Windows\System32\drivers\L1E4D1.BIN [2011-04-11 19:46:32 | 000,152,034 | ---- | C] () -- C:\Windows\System32\drivers\L1E4D0.BIN [2011-04-11 19:46:32 | 000,022,395 | ---- | C] () -- C:\Windows\System32\drivers\fpga.bin [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 816 bytes -> C:\Users\Rafał\Desktop\Call of Duty: Modern Warfare 3.lnk @Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:05EE1EEF < End of report >