Scan result of Farbar Recovery Scan Tool (FRST written by Farbar) Version: 08-07-2012 01 Ran by SYSTEM at 11-07-2012 09:21:53 Running from H:\Progsy\bezpieczenstwo\Farbar recover scan tool Windows Vista (TM) Home Premium (X86) OS Language: English(US) The current controlset is ControlSet001 ========================== Registry (Whitelisted) ============= HKLM\...\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide [1008184 2008-01-20] (Microsoft Corporation) HKLM\...\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [61440 2008-08-29] (Advanced Micro Devices, Inc.) HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6707744 2009-01-06] (Realtek Semiconductor) HKLM\...\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [81000 2009-11-24] (ALWIL Software) HKLM\...\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon [652624 2007-10-25] (CANON INC.) HKLM\...\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon [1603152 2007-09-13] (CANON INC.) HKLM\...\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [36272 2010-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [843712 2012-01-03] (Adobe Systems Incorporated) HKLM\...\Run: [SSDMonitor] C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe [104408 2010-08-05] (PC Tools) HKLM\...\Run: [DATAMNGR] C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\DATAMN~1.EXE [1114040 2011-02-08] (MusicLab, LLC) HKLM\...\Run: [facemoods] "C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe" /md I [362200 2011-09-05] (facemoods.com) HKLM\...\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [254696 2012-01-18] (Sun Microsystems, Inc.) HKLM\...\Run: [Windows Login access] C:\Users\Ela\AppData\Roaming\web2net.exe [19968 2012-07-05] () HKLM\...\Run: [taskmsr] C:\Users\Ela\AppData\Roaming\taskmsr\taskmsr.exe [97792 2012-06-27] () HKU\Ela\...\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe [125952 2008-01-20] (Microsoft Corporation) HKU\Ela\...\Run: [taskmsr] C:\Users\Ela\AppData\Roaming\taskmsr\taskmsr.exe [97792 2012-06-27] () HKU\Wiktoria\...\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray [2127296 2009-12-04] (Gadu-Gadu S.A.) HKU\Wiktoria\...\Run: [Google Update] "C:\Users\Wiktoria\AppData\Local\Google\Update\GoogleUpdate.exe" /c [135664 2010-01-18] (Google Inc.) HKU\Wiktoria\...\Run: [Gadu-Gadu 10] "C:\Program Files\Gadu-Gadu 10\gg.exe" [11792992 2010-03-11] (GG Network S.A.) HKU\Wiktoria\...\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe [125952 2008-01-20] (Microsoft Corporation) HKU\Wiktoria\...\Run: [ALLUpdate] "C:\Program Files\ALLPlayer\ALLUpdate.exe" "sleep" [1379840 2011-08-16] () HKU\Wiktoria\...\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c [366024 2011-11-13] (IncrediMail, Ltd.) HKU\Wiktoria\...\Run: [taskmsr] C:\Users\Wiktoria\AppData\Roaming\taskmsr\taskmsr.exe [97792 2012-06-27] () HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Users\Wiktoria\AppData\Roaming\taskmsr\taskmsr.exe,C:\Users\Ela\AppData\Roaming\taskmsr\taskmsr.exe, [97792 2012-06-27] () AppInit_DLLs: C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\datamngr.dll C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll ================================ Services (Whitelisted) ================== 2 aswUpdSv; "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe" [18752 2009-11-24] (ALWIL Software) 2 avast! Antivirus; "C:\Program Files\Alwil Software\Avast4\ashServ.exe" [138680 2009-11-24] (ALWIL Software) 3 avast! Mail Scanner; "C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service [254040 2009-11-24] (ALWIL Software) 3 avast! Web Scanner; "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service [352920 2009-11-24] (ALWIL Software) 2 Eventlog; C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [21504 2008-01-20] (Microsoft Corporation) 2 PCToolsSSDMonitorSvc; C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe [583640 2010-08-05] (PC Tools) ========================== Drivers (Whitelisted) ============= 2 aswFsBlk; C:\Windows\System32\DRIVERS\aswFsBlk.sys [20560 2009-11-24] (ALWIL Software) 2 aswMonFlt; C:\Windows\System32\DRIVERS\aswMonFlt.sys [53328 2009-11-24] (ALWIL Software) 1 aswRdr; C:\Windows\System32\Drivers\aswRdr.sys [23120 2009-11-24] (ALWIL Software) 1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [114768 2009-11-24] (ALWIL Software) 1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [48560 2009-11-24] (ALWIL Software) 3 hwdatacard; C:\Windows\System32\DRIVERS\ewusbmdm.sys [101760 2008-09-26] (Huawei Technologies Co., Ltd.) 1 RtlProt; C:\Windows\System32\DRIVERS\rtlprot.sys [25896 2007-04-23] (Windows (R) Codename Longhorn DDK provider) 3 IpInIp; C:\Windows\System32\DRIVERS\ipinip.sys [x] 3 NwlnkFlt; C:\Windows\System32\DRIVERS\nwlnkflt.sys [x] 3 NwlnkFwd; C:\Windows\System32\DRIVERS\nwlnkfwd.sys [x] 3 RTL8187; C:\Windows\System32\DRIVERS\RTL8187.sys [x] ========================== NetSvcs (Whitelisted) =========== ============ One Month Created Files and Folders ============== 2012-07-11 09:15 - 2012-07-11 09:15 - 01678610 ____A C:\OTL.Txt 2012-07-05 12:44 - 2012-07-05 12:45 - 00000000 ____D C:\baniek 2012-07-05 12:39 - 2012-07-05 12:25 - 22806528 ____A C:\Windows\System32\config\System.bartbackup2 2012-07-05 12:39 - 2012-07-05 12:25 - 00262144 ____A C:\Windows\System32\config\Security.bartbackup2 2012-07-05 12:39 - 2012-07-05 10:03 - 39845888 ____A C:\Windows\System32\config\Software.bartbackup2 2012-07-05 12:39 - 2012-07-05 09:53 - 00262144 ____A C:\Windows\System32\config\Default.bartbackup2 2012-07-05 12:39 - 2012-07-05 09:39 - 00262144 ____A C:\Windows\System32\config\Sam.bartbackup2 2012-07-05 12:18 - 2012-07-05 10:03 - 39845888 ____A C:\Windows\System32\config\Software.bartbackup1 2012-07-05 12:18 - 2012-07-05 10:03 - 23068672 ____A C:\Windows\System32\config\System.bartbackup1 2012-07-05 12:18 - 2012-07-05 09:53 - 00262144 ____A C:\Windows\System32\config\Security.bartbackup1 2012-07-05 12:18 - 2012-07-05 09:53 - 00262144 ____A C:\Windows\System32\config\Default.bartbackup1 2012-07-05 12:18 - 2012-07-05 09:39 - 00262144 ____A C:\Windows\System32\config\Sam.bartbackup1 2012-07-01 06:02 - 2012-07-01 06:04 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempYY2860.html 2012-07-01 06:02 - 2012-07-01 06:04 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHf2860.html 2012-06-29 09:28 - 2012-06-29 09:38 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemptB3344.html 2012-06-29 09:28 - 2012-06-29 09:38 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemptW3344.html 2012-06-28 11:21 - 2012-06-28 11:25 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempAY2612.html 2012-06-28 11:21 - 2012-06-28 11:25 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempff2612.html 2012-06-28 09:18 - 2012-06-28 09:18 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempgQ3400.html 2012-06-28 09:18 - 2012-06-28 09:18 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempYW3400.html 2012-06-28 04:14 - 2012-06-28 04:15 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempZE2868.html 2012-06-28 04:14 - 2012-06-28 04:15 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempYL2868.html 2012-06-27 17:17 - 2012-06-27 17:21 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempdK2864.html 2012-06-27 17:17 - 2012-06-27 17:21 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempVo2864.html 2012-06-27 17:13 - 2012-07-05 09:36 - 00019968 ___SH C:\Users\Ela\AppData\Roaming\web2net.exe 2012-06-27 17:13 - 2012-07-05 09:36 - 00000000 _RSHD C:\Users\Ela\AppData\Roaming\taskmsr 2012-06-27 17:10 - 2012-06-27 17:10 - 00000000 ____A C:\Users\Wiktoria\AppData\Local\TempMu3108.html 2012-06-27 17:10 - 2012-06-27 17:10 - 00000000 ____A C:\Users\Wiktoria\AppData\Local\Temphd3108.html 2012-06-27 17:08 - 2012-06-27 17:08 - 00000000 ____A C:\Users\Wiktoria\AppData\Local\TempIb2780.html 2012-06-27 17:08 - 2012-06-27 17:08 - 00000000 ____A C:\Users\Wiktoria\AppData\Local\TempBP2780.html 2012-06-27 17:05 - 2012-07-03 03:47 - 00000000 _RSHD C:\Users\Wiktoria\AppData\Roaming\taskmsr 2012-06-27 12:53 - 2012-07-05 09:26 - 00019968 ___SH C:\Users\Wiktoria\AppData\Roaming\web2net.exe 2012-06-27 09:05 - 2012-06-27 09:05 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempQs3652.html 2012-06-27 09:05 - 2012-06-27 09:05 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempfz3652.html 2012-06-27 02:54 - 2012-06-27 06:46 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempcA5064.html 2012-06-27 02:54 - 2012-06-27 06:46 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempJe5064.html 2012-06-26 17:18 - 2012-07-02 14:43 - 00000000 ___AH C:\Users\Wiktoria\AppData\Roaming\msnsvconfig.txt 2012-06-26 17:18 - 2012-06-26 17:18 - 00000000 ____D C:\Users\Wiktoria\P-7-78-8964-9648-3874 2012-06-26 09:48 - 2012-06-26 17:21 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempxZ2548.html 2012-06-26 09:48 - 2012-06-26 17:21 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHC2548.html 2012-06-26 03:54 - 2012-06-26 06:14 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemptZ2568.html 2012-06-26 03:54 - 2012-06-26 06:14 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempdL2568.html 2012-06-25 09:06 - 2012-06-25 18:25 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempIo2196.html 2012-06-25 09:06 - 2012-06-25 18:25 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Temput2196.html 2012-06-25 02:23 - 2012-06-25 02:23 - 00002057 ____A C:\Users\Wiktoria\Desktop\Google Chrome (2).lnk 2012-06-25 02:18 - 2012-06-25 02:18 - 00000000 ____D C:\Users\Wiktoria\Documents\BearShare 2012-06-25 02:14 - 2012-06-25 09:04 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempvQ3788.html 2012-06-25 02:14 - 2012-06-25 09:04 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempJz3788.html 2012-06-24 16:16 - 2012-06-24 16:20 - 00000000 ____D C:\Users\Wiktoria\Gala 2012 Zory 2012-06-24 06:32 - 2012-06-24 17:58 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempvq2288.html 2012-06-24 06:32 - 2012-06-24 17:58 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempXJ2288.html 2012-06-24 06:27 - 2012-06-24 06:27 - 00000000 ____A C:\Users\Wiktoria\AppData\Local\TempRM2600.html 2012-06-24 06:27 - 2012-06-24 06:27 - 00000000 ____A C:\Users\Wiktoria\AppData\Local\Tempcv2600.html 2012-06-23 16:34 - 2012-06-23 18:11 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempzU8036.html 2012-06-23 16:34 - 2012-06-23 18:11 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempGi8036.html 2012-06-23 04:33 - 2012-06-23 06:09 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempqy2144.html 2012-06-23 04:33 - 2012-06-23 06:09 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempSk2144.html 2012-06-22 07:17 - 2012-06-22 07:17 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempWw3616.html 2012-06-22 07:17 - 2012-06-22 07:17 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempde3616.html 2012-06-21 16:10 - 2012-06-21 17:29 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempNe6864.html 2012-06-21 16:10 - 2012-06-21 17:29 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempjt6864.html 2012-06-21 09:32 - 2012-06-02 18:19 - 01933848 ____A (Microsoft Corporation) C:\Windows\System32\wuaueng.dll 2012-06-21 09:32 - 2012-06-02 18:19 - 00053784 ____A (Microsoft Corporation) C:\Windows\System32\wuauclt.exe 2012-06-21 09:32 - 2012-06-02 18:19 - 00045080 ____A (Microsoft Corporation) C:\Windows\System32\wups2.dll 2012-06-21 09:32 - 2012-06-02 18:12 - 02422272 ____A (Microsoft Corporation) C:\Windows\System32\wucltux.dll 2012-06-21 09:31 - 2012-06-02 18:19 - 00577048 ____A (Microsoft Corporation) C:\Windows\System32\wuapi.dll 2012-06-21 09:31 - 2012-06-02 18:19 - 00035864 ____A (Microsoft Corporation) C:\Windows\System32\wups.dll 2012-06-21 09:31 - 2012-06-02 18:12 - 00088576 ____A (Microsoft Corporation) C:\Windows\System32\wudriver.dll 2012-06-21 09:31 - 2012-06-02 09:19 - 00171904 ____A (Microsoft Corporation) C:\Windows\System32\wuwebv.dll 2012-06-21 09:31 - 2012-06-02 09:12 - 00033792 ____A (Microsoft Corporation) C:\Windows\System32\wuapp.exe 2012-06-21 09:28 - 2012-06-21 16:10 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempar2544.html 2012-06-21 04:08 - 2012-06-21 04:08 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempiV2648.html 2012-06-21 04:08 - 2012-06-21 04:08 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempcR2648.html 2012-06-21 02:29 - 2012-06-21 03:34 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempSR1756.html 2012-06-21 02:29 - 2012-06-21 03:34 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempdw1756.html 2012-06-20 15:42 - 2012-06-20 17:43 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempJp3240.html 2012-06-20 15:42 - 2012-06-20 17:43 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemprF3240.html 2012-06-20 10:17 - 2012-06-20 15:25 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempTD2572.html 2012-06-20 10:17 - 2012-06-20 15:25 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempoC2572.html 2012-06-19 09:48 - 2012-06-19 18:09 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempDc2256.html 2012-06-19 09:48 - 2012-06-19 18:09 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Temper2256.html 2012-06-19 08:07 - 2012-06-19 08:19 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempyi2668.html 2012-06-19 08:07 - 2012-06-19 08:19 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempSq2668.html 2012-06-19 02:01 - 2012-06-19 02:02 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempvV2652.html 2012-06-19 02:01 - 2012-06-19 02:02 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempPE2652.html 2012-06-18 12:11 - 2012-06-18 17:38 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempLC2576.html 2012-06-18 12:11 - 2012-06-18 17:38 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempkD2576.html 2012-06-18 10:42 - 2012-06-18 10:44 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempCi2524.html 2012-06-18 10:42 - 2012-06-18 10:44 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempIE2524.html 2012-06-18 06:15 - 2012-06-18 06:50 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempCf2348.html 2012-06-18 06:15 - 2012-06-18 06:50 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Temptp2348.html 2012-06-18 02:20 - 2012-06-18 04:20 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempFh2568.html 2012-06-18 02:20 - 2012-06-18 04:20 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempOF2568.html 2012-06-17 15:10 - 2012-06-17 17:18 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempRH2264.html 2012-06-17 15:10 - 2012-06-17 17:18 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempLG2264.html 2012-06-17 13:31 - 2012-06-17 13:37 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempys3544.html 2012-06-17 13:31 - 2012-06-17 13:37 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemprC3544.html 2012-06-17 03:05 - 2012-06-17 05:07 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempim2624.html 2012-06-17 03:05 - 2012-06-17 05:07 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempJn2624.html 2012-06-16 15:47 - 2012-06-16 19:59 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempwD3956.html 2012-06-16 15:47 - 2012-06-16 19:59 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempks3956.html 2012-06-16 10:21 - 2012-06-16 10:33 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempDm3292.html 2012-06-16 10:21 - 2012-06-16 10:33 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempGB3292.html 2012-06-16 09:22 - 2012-06-19 15:17 - 00000000 ____D C:\Users\Wiktoria\Bibka u Ruci 2012-06-16 07:35 - 2012-06-16 10:00 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempAO2644.html 2012-06-16 07:35 - 2012-06-16 10:00 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempnR2644.html 2012-06-16 03:58 - 2012-06-16 07:02 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temptg2156.html 2012-06-16 03:58 - 2012-06-16 07:02 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempcX2156.html 2012-06-15 09:58 - 2012-06-15 17:54 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempGf3904.html 2012-06-15 09:58 - 2012-06-15 17:54 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHz3904.html 2012-06-15 07:33 - 2012-06-15 09:05 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempca2520.html 2012-06-15 07:33 - 2012-06-15 09:05 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempzK2520.html 2012-06-15 02:03 - 2012-05-17 19:11 - 12314624 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2012-06-15 02:03 - 2012-05-17 18:48 - 09737728 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2012-06-15 02:03 - 2012-05-17 18:45 - 01800192 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2012-06-15 02:03 - 2012-05-17 18:36 - 01103872 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2012-06-15 02:03 - 2012-05-17 18:35 - 01427968 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2012-06-15 02:03 - 2012-05-17 18:35 - 01129472 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2012-06-15 02:03 - 2012-05-17 18:33 - 00231936 ____A (Microsoft Corporation) C:\Windows\System32\url.dll 2012-06-15 02:03 - 2012-05-17 18:31 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2012-06-15 02:03 - 2012-05-17 18:29 - 00716800 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2012-06-15 02:03 - 2012-05-17 18:29 - 00142848 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2012-06-15 02:03 - 2012-05-17 18:27 - 01793024 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2012-06-15 02:03 - 2012-05-17 18:25 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2012-06-15 02:03 - 2012-05-17 18:24 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2012-06-15 02:03 - 2012-05-17 18:20 - 00176640 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2012-06-15 01:58 - 2012-06-15 02:29 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempEj2600.html 2012-06-15 01:58 - 2012-06-15 02:29 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempOp2600.html 2012-06-14 08:47 - 2012-06-14 17:40 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempdb2244.html 2012-06-14 08:47 - 2012-06-14 17:40 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempAJ2244.html 2012-06-14 02:28 - 2012-04-23 12:00 - 00984064 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll 2012-06-14 02:28 - 2012-04-23 12:00 - 00133120 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll 2012-06-14 02:28 - 2012-04-23 12:00 - 00098304 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll 2012-06-14 02:27 - 2012-05-15 15:51 - 02045440 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys 2012-06-14 02:27 - 2012-05-01 10:03 - 00180736 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys 2012-06-14 02:17 - 2012-06-14 04:56 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempOC2288.html 2012-06-14 02:17 - 2012-06-14 04:56 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempKp2288.html 2012-06-13 09:54 - 2012-06-13 19:02 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempqj2492.html 2012-06-13 09:54 - 2012-06-13 19:02 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempay2492.html 2012-06-13 05:34 - 2012-06-13 06:38 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempvs2672.html 2012-06-13 05:34 - 2012-06-13 06:38 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempyv2672.html 2012-06-13 02:52 - 2012-06-13 05:11 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempOV3620.html 2012-06-13 02:52 - 2012-06-13 05:11 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempVL3620.html 2012-06-12 16:40 - 2012-06-12 18:40 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempTE2656.html 2012-06-12 16:40 - 2012-06-12 18:40 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempPQ2656.html 2012-06-12 05:22 - 2012-06-12 14:55 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempKZ2640.html 2012-06-12 05:22 - 2012-06-12 14:55 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempUn2640.html 2012-06-12 02:19 - 2012-06-12 02:19 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempvD2652.html 2012-06-12 02:19 - 2012-06-12 02:19 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempCL2652.html 2012-06-11 09:44 - 2012-06-11 16:56 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempOT2680.html 2012-06-11 09:44 - 2012-06-11 16:56 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempjr2680.html 2012-06-11 06:59 - 2012-06-11 08:00 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempPg2432.html 2012-06-11 06:59 - 2012-06-11 08:00 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempzH2432.html 2012-06-11 03:24 - 2012-06-11 06:10 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempEr2572.html 2012-06-11 03:24 - 2012-06-11 06:10 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempOr2572.html 2012-06-11 01:08 - 2012-06-11 01:20 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempKT2580.html 2012-06-11 01:08 - 2012-06-11 01:20 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempny2580.html ============ 3 Months Modified Files ======================== 2012-07-11 09:15 - 2012-07-11 09:15 - 01678610 ____A C:\OTL.Txt 2012-07-05 12:25 - 2012-07-05 12:39 - 22806528 ____A C:\Windows\System32\config\System.bartbackup2 2012-07-05 12:25 - 2012-07-05 12:39 - 00262144 ____A C:\Windows\System32\config\Security.bartbackup2 2012-07-05 10:03 - 2012-07-05 12:39 - 39845888 ____A C:\Windows\System32\config\Software.bartbackup2 2012-07-05 10:03 - 2012-07-05 12:18 - 39845888 ____A C:\Windows\System32\config\Software.bartbackup1 2012-07-05 10:03 - 2012-07-05 12:18 - 23068672 ____A C:\Windows\System32\config\System.bartbackup1 2012-07-05 09:59 - 2011-09-16 05:23 - 01661931 ____A C:\Windows\WindowsUpdate.log 2012-07-05 09:53 - 2012-07-05 12:39 - 00262144 ____A C:\Windows\System32\config\Default.bartbackup2 2012-07-05 09:53 - 2012-07-05 12:18 - 00262144 ____A C:\Windows\System32\config\Security.bartbackup1 2012-07-05 09:53 - 2012-07-05 12:18 - 00262144 ____A C:\Windows\System32\config\Default.bartbackup1 2012-07-05 09:39 - 2012-07-05 12:39 - 00262144 ____A C:\Windows\System32\config\Sam.bartbackup2 2012-07-05 09:39 - 2012-07-05 12:18 - 00262144 ____A C:\Windows\System32\config\Sam.bartbackup1 2012-07-05 09:38 - 2006-11-02 09:01 - 00032562 ____A C:\Windows\Tasks\SCHEDLGU.TXT 2012-07-05 09:38 - 2006-11-02 09:01 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2012-07-05 09:38 - 2006-11-02 08:47 - 00003216 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2012-07-05 09:38 - 2006-11-02 08:47 - 00003216 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2012-07-05 09:36 - 2012-06-27 17:13 - 00019968 ___SH C:\Users\Ela\AppData\Roaming\web2net.exe 2012-07-05 09:26 - 2012-06-27 12:53 - 00019968 ___SH C:\Users\Wiktoria\AppData\Roaming\web2net.exe 2012-07-05 09:09 - 2012-05-07 03:56 - 00000034 ____A C:\Windows\setupact.log 2012-07-02 14:43 - 2012-06-26 17:18 - 00000000 ___AH C:\Users\Wiktoria\AppData\Roaming\msnsvconfig.txt 2012-07-01 06:04 - 2012-07-01 06:02 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempYY2860.html 2012-07-01 06:04 - 2012-07-01 06:02 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHf2860.html 2012-06-29 09:38 - 2012-06-29 09:28 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemptB3344.html 2012-06-29 09:38 - 2012-06-29 09:28 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemptW3344.html 2012-06-28 11:25 - 2012-06-28 11:21 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempAY2612.html 2012-06-28 11:25 - 2012-06-28 11:21 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempff2612.html 2012-06-28 09:18 - 2012-06-28 09:18 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempgQ3400.html 2012-06-28 09:18 - 2012-06-28 09:18 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempYW3400.html 2012-06-28 04:15 - 2012-06-28 04:14 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempZE2868.html 2012-06-28 04:15 - 2012-06-28 04:14 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempYL2868.html 2012-06-27 17:21 - 2012-06-27 17:17 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempdK2864.html 2012-06-27 17:21 - 2012-06-27 17:17 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempVo2864.html 2012-06-27 17:10 - 2012-06-27 17:10 - 00000000 ____A C:\Users\Wiktoria\AppData\Local\TempMu3108.html 2012-06-27 17:10 - 2012-06-27 17:10 - 00000000 ____A C:\Users\Wiktoria\AppData\Local\Temphd3108.html 2012-06-27 17:08 - 2012-06-27 17:08 - 00000000 ____A C:\Users\Wiktoria\AppData\Local\TempIb2780.html 2012-06-27 17:08 - 2012-06-27 17:08 - 00000000 ____A C:\Users\Wiktoria\AppData\Local\TempBP2780.html 2012-06-27 17:08 - 2010-01-18 15:07 - 00001070 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1482840391-1338088677-2117901375-1002UA.job 2012-06-27 15:08 - 2010-01-18 15:07 - 00001018 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1482840391-1338088677-2117901375-1002Core.job 2012-06-27 13:15 - 2010-12-30 10:47 - 00000260 ____A C:\Windows\Tasks\RMSchedule.job 2012-06-27 09:05 - 2012-06-27 09:05 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempQs3652.html 2012-06-27 09:05 - 2012-06-27 09:05 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempfz3652.html 2012-06-27 06:48 - 2010-05-29 05:13 - 00002625 ____A C:\Users\Ela\Desktop\Microsoft Office Word 2007 (3).lnk 2012-06-27 06:46 - 2012-06-27 02:54 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempcA5064.html 2012-06-27 06:46 - 2012-06-27 02:54 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempJe5064.html 2012-06-26 17:21 - 2012-06-26 09:48 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempxZ2548.html 2012-06-26 17:21 - 2012-06-26 09:48 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHC2548.html 2012-06-26 06:14 - 2012-06-26 03:54 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemptZ2568.html 2012-06-26 06:14 - 2012-06-26 03:54 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempdL2568.html 2012-06-25 18:25 - 2012-06-25 09:06 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempIo2196.html 2012-06-25 18:25 - 2012-06-25 09:06 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Temput2196.html 2012-06-25 09:04 - 2012-06-25 02:14 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempvQ3788.html 2012-06-25 09:04 - 2012-06-25 02:14 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempJz3788.html 2012-06-25 09:04 - 2010-02-24 14:30 - 00000480 ___AH C:\Windows\Tasks\Norton Security Scan for Wiktoria.job 2012-06-25 02:23 - 2012-06-25 02:23 - 00002057 ____A C:\Users\Wiktoria\Desktop\Google Chrome (2).lnk 2012-06-24 17:58 - 2012-06-24 06:32 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempvq2288.html 2012-06-24 17:58 - 2012-06-24 06:32 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempXJ2288.html 2012-06-24 06:27 - 2012-06-24 06:27 - 00000000 ____A C:\Users\Wiktoria\AppData\Local\TempRM2600.html 2012-06-24 06:27 - 2012-06-24 06:27 - 00000000 ____A C:\Users\Wiktoria\AppData\Local\Tempcv2600.html 2012-06-23 18:11 - 2012-06-23 16:34 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempzU8036.html 2012-06-23 18:11 - 2012-06-23 16:34 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempGi8036.html 2012-06-23 06:09 - 2012-06-23 04:33 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempqy2144.html 2012-06-23 06:09 - 2012-06-23 04:33 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempSk2144.html 2012-06-22 07:17 - 2012-06-22 07:17 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempWw3616.html 2012-06-22 07:17 - 2012-06-22 07:17 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempde3616.html 2012-06-21 17:29 - 2012-06-21 16:10 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempNe6864.html 2012-06-21 17:29 - 2012-06-21 16:10 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempjt6864.html 2012-06-21 16:10 - 2012-06-21 09:28 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempar2544.html 2012-06-21 04:08 - 2012-06-21 04:08 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempiV2648.html 2012-06-21 04:08 - 2012-06-21 04:08 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempcR2648.html 2012-06-21 03:34 - 2012-06-21 02:29 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempSR1756.html 2012-06-21 03:34 - 2012-06-21 02:29 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempdw1756.html 2012-06-20 17:43 - 2012-06-20 15:42 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempJp3240.html 2012-06-20 17:43 - 2012-06-20 15:42 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemprF3240.html 2012-06-20 15:25 - 2012-06-20 10:17 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempTD2572.html 2012-06-20 15:25 - 2012-06-20 10:17 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempoC2572.html 2012-06-19 18:09 - 2012-06-19 09:48 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempDc2256.html 2012-06-19 18:09 - 2012-06-19 09:48 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Temper2256.html 2012-06-19 08:19 - 2012-06-19 08:07 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempyi2668.html 2012-06-19 08:19 - 2012-06-19 08:07 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempSq2668.html 2012-06-19 02:02 - 2012-06-19 02:01 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempvV2652.html 2012-06-19 02:02 - 2012-06-19 02:01 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempPE2652.html 2012-06-18 17:38 - 2012-06-18 12:11 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempLC2576.html 2012-06-18 17:38 - 2012-06-18 12:11 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempkD2576.html 2012-06-18 10:44 - 2012-06-18 10:42 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempCi2524.html 2012-06-18 10:44 - 2012-06-18 10:42 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempIE2524.html 2012-06-18 06:50 - 2012-06-18 06:15 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempCf2348.html 2012-06-18 06:50 - 2012-06-18 06:15 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Temptp2348.html 2012-06-18 04:20 - 2012-06-18 02:20 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempFh2568.html 2012-06-18 04:20 - 2012-06-18 02:20 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempOF2568.html 2012-06-17 17:18 - 2012-06-17 15:10 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempRH2264.html 2012-06-17 17:18 - 2012-06-17 15:10 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempLG2264.html 2012-06-17 13:37 - 2012-06-17 13:31 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempys3544.html 2012-06-17 13:37 - 2012-06-17 13:31 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemprC3544.html 2012-06-17 05:07 - 2012-06-17 03:05 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempim2624.html 2012-06-17 05:07 - 2012-06-17 03:05 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempJn2624.html 2012-06-16 19:59 - 2012-06-16 15:47 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempwD3956.html 2012-06-16 19:59 - 2012-06-16 15:47 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempks3956.html 2012-06-16 10:33 - 2012-06-16 10:21 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempDm3292.html 2012-06-16 10:33 - 2012-06-16 10:21 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempGB3292.html 2012-06-16 10:00 - 2012-06-16 07:35 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempAO2644.html 2012-06-16 10:00 - 2012-06-16 07:35 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempnR2644.html 2012-06-16 07:02 - 2012-06-16 03:58 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temptg2156.html 2012-06-16 07:02 - 2012-06-16 03:58 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempcX2156.html 2012-06-15 17:54 - 2012-06-15 09:58 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempGf3904.html 2012-06-15 17:54 - 2012-06-15 09:58 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHz3904.html 2012-06-15 09:05 - 2012-06-15 07:33 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempca2520.html 2012-06-15 09:05 - 2012-06-15 07:33 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempzK2520.html 2012-06-15 02:31 - 2006-11-02 08:47 - 00373408 ____A C:\Windows\System32\FNTCACHE.DAT 2012-06-15 02:29 - 2012-06-15 01:58 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempEj2600.html 2012-06-15 02:29 - 2012-06-15 01:58 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempOp2600.html 2012-06-14 17:40 - 2012-06-14 08:47 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempdb2244.html 2012-06-14 17:40 - 2012-06-14 08:47 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempAJ2244.html 2012-06-14 04:56 - 2012-06-14 02:17 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempOC2288.html 2012-06-14 04:56 - 2012-06-14 02:17 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempKp2288.html 2012-06-14 02:30 - 2008-10-01 10:15 - 01524616 ____A C:\Windows\System32\PerfStringBackup.INI 2012-06-14 02:30 - 2008-01-21 02:24 - 00675250 ____A C:\Windows\System32\perfh015.dat 2012-06-14 02:30 - 2008-01-21 02:24 - 00131566 ____A C:\Windows\System32\perfc015.dat 2012-06-14 02:28 - 2006-11-02 06:24 - 56731752 ____A (Microsoft Corporation) C:\Windows\System32\mrt.exe 2012-06-13 19:02 - 2012-06-13 09:54 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempqj2492.html 2012-06-13 19:02 - 2012-06-13 09:54 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempay2492.html 2012-06-13 06:38 - 2012-06-13 05:34 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempvs2672.html 2012-06-13 06:38 - 2012-06-13 05:34 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempyv2672.html 2012-06-13 05:11 - 2012-06-13 02:52 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempOV3620.html 2012-06-13 05:11 - 2012-06-13 02:52 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempVL3620.html 2012-06-12 18:40 - 2012-06-12 16:40 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempTE2656.html 2012-06-12 18:40 - 2012-06-12 16:40 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempPQ2656.html 2012-06-12 14:55 - 2012-06-12 05:22 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempKZ2640.html 2012-06-12 14:55 - 2012-06-12 05:22 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempUn2640.html 2012-06-12 03:10 - 2010-01-18 15:10 - 00002057 ____A C:\Users\Wiktoria\Desktop\Google Chrome.lnk 2012-06-12 02:19 - 2012-06-12 02:19 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempvD2652.html 2012-06-12 02:19 - 2012-06-12 02:19 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempCL2652.html 2012-06-11 16:56 - 2012-06-11 09:44 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempOT2680.html 2012-06-11 16:56 - 2012-06-11 09:44 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempjr2680.html 2012-06-11 08:00 - 2012-06-11 06:59 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempPg2432.html 2012-06-11 08:00 - 2012-06-11 06:59 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempzH2432.html 2012-06-11 06:10 - 2012-06-11 03:24 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempEr2572.html 2012-06-11 06:10 - 2012-06-11 03:24 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempOr2572.html 2012-06-11 01:20 - 2012-06-11 01:08 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempKT2580.html 2012-06-11 01:20 - 2012-06-11 01:08 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempny2580.html 2012-06-10 16:51 - 2012-06-10 06:47 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempcn5304.html 2012-06-10 16:51 - 2012-06-10 06:47 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Temphl5304.html 2012-06-10 05:46 - 2012-06-10 05:46 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempdN2704.html 2012-06-10 05:46 - 2012-06-10 05:46 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempDJ2704.html 2012-06-09 20:03 - 2012-06-09 06:20 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempaa4924.html 2012-06-09 20:03 - 2012-06-09 06:20 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempdT4924.html 2012-06-09 06:13 - 2012-06-09 06:12 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemprA1296.html 2012-06-09 06:13 - 2012-06-09 06:12 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempzH1296.html 2012-06-08 18:39 - 2012-06-08 05:36 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempLi2660.html 2012-06-08 18:39 - 2012-06-08 05:36 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Temptp2660.html 2012-06-07 19:15 - 2012-06-07 07:06 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempXx2508.html 2012-06-07 19:15 - 2012-06-07 07:06 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempDZ2508.html 2012-06-06 19:36 - 2012-06-06 12:44 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempMk3476.html 2012-06-06 19:36 - 2012-06-06 12:44 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Temptk3476.html 2012-06-06 12:17 - 2012-06-06 09:57 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempss3968.html 2012-06-06 12:17 - 2012-06-06 09:57 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempPR3968.html 2012-06-06 09:52 - 2012-06-06 06:32 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempLr4068.html 2012-06-06 09:52 - 2012-06-06 06:32 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempOf4068.html 2012-06-05 17:07 - 2012-06-05 11:05 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempmx3612.html 2012-06-05 17:07 - 2012-06-05 11:05 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempMD3612.html 2012-06-04 16:54 - 2012-06-04 10:51 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempge4844.html 2012-06-04 16:54 - 2012-06-04 10:51 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempgm4844.html 2012-06-04 03:59 - 2012-06-04 02:34 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempIZ3020.html 2012-06-04 03:59 - 2012-06-04 02:34 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempMn3020.html 2012-06-03 17:38 - 2012-06-03 05:20 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Templc2528.html 2012-06-03 17:38 - 2012-06-03 05:20 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempwJ2528.html 2012-06-02 18:19 - 2012-06-21 09:32 - 01933848 ____A (Microsoft Corporation) C:\Windows\System32\wuaueng.dll 2012-06-02 18:19 - 2012-06-21 09:32 - 00053784 ____A (Microsoft Corporation) C:\Windows\System32\wuauclt.exe 2012-06-02 18:19 - 2012-06-21 09:32 - 00045080 ____A (Microsoft Corporation) C:\Windows\System32\wups2.dll 2012-06-02 18:19 - 2012-06-21 09:31 - 00577048 ____A (Microsoft Corporation) C:\Windows\System32\wuapi.dll 2012-06-02 18:19 - 2012-06-21 09:31 - 00035864 ____A (Microsoft Corporation) C:\Windows\System32\wups.dll 2012-06-02 18:12 - 2012-06-21 09:32 - 02422272 ____A (Microsoft Corporation) C:\Windows\System32\wucltux.dll 2012-06-02 18:12 - 2012-06-21 09:31 - 00088576 ____A (Microsoft Corporation) C:\Windows\System32\wudriver.dll 2012-06-02 17:50 - 2012-06-02 06:22 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temphc2588.html 2012-06-02 17:50 - 2012-06-02 06:22 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempwm2588.html 2012-06-02 09:19 - 2012-06-21 09:31 - 00171904 ____A (Microsoft Corporation) C:\Windows\System32\wuwebv.dll 2012-06-02 09:12 - 2012-06-21 09:31 - 00033792 ____A (Microsoft Corporation) C:\Windows\System32\wuapp.exe 2012-06-01 20:02 - 2012-06-01 05:18 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempTn3696.html 2012-06-01 20:02 - 2012-06-01 05:18 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempaq3696.html 2012-06-01 04:25 - 2012-06-01 03:14 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempSQ3116.html 2012-06-01 04:25 - 2012-06-01 03:14 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempwK3116.html 2012-05-31 15:32 - 2012-05-31 12:33 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempUj2472.html 2012-05-31 15:32 - 2012-05-31 12:33 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempPn2472.html 2012-05-31 09:48 - 2012-05-31 06:00 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempQv3364.html 2012-05-31 09:48 - 2012-05-31 06:00 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempMM3364.html 2012-05-31 02:57 - 2012-05-31 01:53 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempXQ2420.html 2012-05-31 02:57 - 2012-05-31 01:53 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempIh2420.html 2012-05-31 01:16 - 2012-05-31 01:14 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempSm3684.html 2012-05-31 01:16 - 2012-05-31 01:14 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempxm3684.html 2012-05-30 16:56 - 2012-05-30 09:03 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempJi2704.html 2012-05-30 16:56 - 2012-05-30 09:03 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempUy2704.html 2012-05-30 07:33 - 2012-05-30 06:36 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempFr2656.html 2012-05-30 07:33 - 2012-05-30 06:36 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempqC2656.html 2012-05-30 04:51 - 2012-05-30 02:19 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempMK2596.html 2012-05-30 04:51 - 2012-05-30 02:19 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempjQ2596.html 2012-05-29 17:38 - 2012-05-29 11:06 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempWO2520.html 2012-05-29 17:38 - 2012-05-29 11:06 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempBh2520.html 2012-05-29 09:16 - 2012-05-29 09:04 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempJG3472.html 2012-05-29 09:16 - 2012-05-29 09:04 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempWO3472.html 2012-05-29 07:22 - 2012-05-29 05:34 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempTj2516.html 2012-05-29 07:22 - 2012-05-29 05:34 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempAO2516.html 2012-05-29 04:08 - 2012-05-29 02:45 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempxE2516.html 2012-05-29 04:08 - 2012-05-29 02:45 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempFc2516.html 2012-05-28 17:27 - 2012-05-28 09:16 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempvT4328.html 2012-05-28 17:27 - 2012-05-28 09:16 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempET4328.html 2012-05-28 08:32 - 2012-05-28 06:33 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemptO2584.html 2012-05-28 03:25 - 2012-05-28 02:20 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempLm3624.html 2012-05-28 03:25 - 2012-05-28 02:20 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempaU3624.html 2012-05-27 17:03 - 2012-05-27 05:53 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempTF2560.html 2012-05-27 17:03 - 2012-05-27 05:53 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempON2560.html 2012-05-26 17:32 - 2012-05-26 11:57 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempjoZ892.html 2012-05-26 17:32 - 2012-05-26 11:57 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempDGf892.html 2012-05-26 10:06 - 2012-05-26 10:01 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempwl2668.html 2012-05-26 10:06 - 2012-05-26 10:01 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempGC2668.html 2012-05-26 09:10 - 2012-05-26 06:40 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempcY3720.html 2012-05-26 09:10 - 2012-05-26 06:40 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempZh3720.html 2012-05-25 19:37 - 2012-05-25 09:25 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempBn5816.html 2012-05-25 19:37 - 2012-05-25 09:25 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempzh5816.html 2012-05-24 17:25 - 2012-05-24 07:28 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempMR2640.html 2012-05-24 17:25 - 2012-05-24 07:28 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempfU2640.html 2012-05-24 06:17 - 2012-05-24 05:00 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempkr2684.html 2012-05-24 06:17 - 2012-05-24 05:00 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempOq2684.html 2012-05-24 03:43 - 2012-05-24 01:56 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempqU3540.html 2012-05-24 03:43 - 2012-05-24 01:56 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempzQ3540.html 2012-05-23 16:50 - 2012-05-23 06:31 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempRq3588.html 2012-05-23 16:50 - 2012-05-23 06:31 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempZW3588.html 2012-05-23 05:23 - 2012-05-23 05:00 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temppj2536.html 2012-05-23 05:23 - 2012-05-23 05:00 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempQW2536.html 2012-05-23 03:45 - 2012-05-23 01:57 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempTF3736.html 2012-05-23 03:45 - 2012-05-23 01:57 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemplK3736.html 2012-05-22 17:15 - 2012-05-22 09:29 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempMZ2408.html 2012-05-22 17:15 - 2012-05-22 09:29 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemprC2408.html 2012-05-22 08:06 - 2012-05-22 06:03 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempaf2936.html 2012-05-22 08:06 - 2012-05-22 06:03 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempSD2936.html 2012-05-21 17:30 - 2012-05-21 11:30 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempNc2592.html 2012-05-21 17:30 - 2012-05-21 11:30 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempAc2592.html 2012-05-21 03:30 - 2012-05-21 03:16 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempMs2528.html 2012-05-21 03:30 - 2012-05-21 03:16 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempaq2528.html 2012-05-20 17:39 - 2012-05-20 13:22 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempEH5600.html 2012-05-20 17:39 - 2012-05-20 13:22 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempvD5600.html 2012-05-19 19:52 - 2012-05-19 16:37 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempWP3604.html 2012-05-19 19:52 - 2012-05-19 16:37 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempUW3604.html 2012-05-19 19:52 - 2012-05-19 16:37 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemppW3604.html 2012-05-19 19:52 - 2012-05-19 16:37 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempOm3604.html 2012-05-19 19:52 - 2012-05-19 16:37 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempnh3604.html 2012-05-19 19:52 - 2012-05-19 16:37 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemphG3604.html 2012-05-19 15:27 - 2012-05-19 09:09 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempWZ2388.html 2012-05-19 15:27 - 2012-05-19 09:09 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempMx2388.html 2012-05-19 15:27 - 2012-05-19 09:09 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempiu2388.html 2012-05-19 15:27 - 2012-05-19 09:09 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempjP2388.html 2012-05-19 15:27 - 2012-05-19 09:09 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHe2388.html 2012-05-19 15:27 - 2012-05-19 09:09 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempcd2388.html 2012-05-19 06:13 - 2012-05-19 03:57 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temptj3740.html 2012-05-19 06:13 - 2012-05-19 03:57 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempqc3740.html 2012-05-19 06:13 - 2012-05-19 03:57 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempHQ3740.html 2012-05-19 06:13 - 2012-05-19 03:57 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempwo3740.html 2012-05-19 06:13 - 2012-05-19 03:57 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempOF3740.html 2012-05-19 06:13 - 2012-05-19 03:57 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempcf3740.html 2012-05-18 17:39 - 2012-05-18 15:34 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempVj4740.html 2012-05-18 17:39 - 2012-05-18 15:34 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempjO4740.html 2012-05-18 17:39 - 2012-05-18 15:34 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempFj4740.html 2012-05-18 17:39 - 2012-05-18 15:34 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempNE4740.html 2012-05-18 17:39 - 2012-05-18 15:34 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHW4740.html 2012-05-18 17:39 - 2012-05-18 15:34 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempCN4740.html 2012-05-18 12:01 - 2012-05-18 12:01 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempZA2556.html 2012-05-18 12:01 - 2012-05-18 12:01 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempyl2556.html 2012-05-18 12:01 - 2012-05-18 12:01 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempRA2556.html 2012-05-18 12:01 - 2012-05-18 12:01 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempgO2556.html 2012-05-18 12:01 - 2012-05-18 12:01 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempFl2556.html 2012-05-18 12:01 - 2012-05-18 12:01 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempcy2556.html 2012-05-18 11:51 - 2012-05-18 09:08 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempIE5204.html 2012-05-18 11:51 - 2012-05-18 09:08 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempFe5204.html 2012-05-18 11:51 - 2012-05-18 09:08 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempab5204.html 2012-05-18 11:51 - 2012-05-18 09:08 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempXC5204.html 2012-05-18 11:51 - 2012-05-18 09:08 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempnV5204.html 2012-05-18 11:51 - 2012-05-18 09:08 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempLv5204.html 2012-05-18 07:23 - 2012-05-18 07:23 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempuc2564.html 2012-05-18 07:23 - 2012-05-18 07:23 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempgi2564.html 2012-05-18 07:23 - 2012-05-18 07:23 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempAi2564.html 2012-05-18 07:23 - 2012-05-18 07:23 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempMM2564.html 2012-05-18 07:23 - 2012-05-18 07:23 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempJE2564.html 2012-05-18 07:23 - 2012-05-18 07:23 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempdE2564.html 2012-05-18 05:24 - 2012-05-18 03:52 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempyB2544.html 2012-05-18 05:24 - 2012-05-18 03:52 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempMw2544.html 2012-05-18 05:24 - 2012-05-18 03:52 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempiM2544.html 2012-05-18 05:24 - 2012-05-18 03:52 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempWP2544.html 2012-05-18 05:24 - 2012-05-18 03:52 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempKq2544.html 2012-05-18 05:24 - 2012-05-18 03:52 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempEo2544.html 2012-05-18 03:13 - 2012-05-18 02:52 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temprg3628.html 2012-05-18 03:13 - 2012-05-18 02:52 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemphJ3628.html 2012-05-18 03:13 - 2012-05-18 02:52 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempao3628.html 2012-05-18 03:13 - 2012-05-18 02:52 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempPb3628.html 2012-05-18 03:13 - 2012-05-18 02:52 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Temphg3628.html 2012-05-18 03:13 - 2012-05-18 02:52 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempbw3628.html 2012-05-17 19:11 - 2012-06-15 02:03 - 12314624 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2012-05-17 18:48 - 2012-06-15 02:03 - 09737728 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2012-05-17 18:45 - 2012-06-15 02:03 - 01800192 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2012-05-17 18:36 - 2012-06-15 02:03 - 01103872 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2012-05-17 18:35 - 2012-06-15 02:03 - 01427968 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2012-05-17 18:35 - 2012-06-15 02:03 - 01129472 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2012-05-17 18:33 - 2012-06-15 02:03 - 00231936 ____A (Microsoft Corporation) C:\Windows\System32\url.dll 2012-05-17 18:31 - 2012-06-15 02:03 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2012-05-17 18:29 - 2012-06-15 02:03 - 00716800 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2012-05-17 18:29 - 2012-06-15 02:03 - 00142848 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2012-05-17 18:27 - 2012-06-15 02:03 - 01793024 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2012-05-17 18:25 - 2012-06-15 02:03 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2012-05-17 18:24 - 2012-06-15 02:03 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2012-05-17 18:20 - 2012-06-15 02:03 - 00176640 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2012-05-17 17:39 - 2012-05-17 10:43 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempZA2600.html 2012-05-17 17:39 - 2012-05-17 10:43 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempus2600.html 2012-05-17 17:39 - 2012-05-17 10:43 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempot2600.html 2012-05-17 17:39 - 2012-05-17 10:43 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempmY2600.html 2012-05-17 17:39 - 2012-05-17 10:43 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempEv2600.html 2012-05-17 17:39 - 2012-05-17 10:43 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempbR2600.html 2012-05-17 09:55 - 2012-05-17 09:30 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempzm2788.html 2012-05-17 09:55 - 2012-05-17 09:30 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempsU2788.html 2012-05-17 09:55 - 2012-05-17 09:30 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempIM2788.html 2012-05-17 09:55 - 2012-05-17 09:30 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempuX2788.html 2012-05-17 09:55 - 2012-05-17 09:30 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempLT2788.html 2012-05-17 09:55 - 2012-05-17 09:30 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempAi2788.html 2012-05-17 08:32 - 2012-05-17 07:38 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempXu2520.html 2012-05-17 08:32 - 2012-05-17 07:38 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempVW2520.html 2012-05-17 08:32 - 2012-05-17 07:38 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempAq2520.html 2012-05-17 08:32 - 2012-05-17 07:38 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempxd2520.html 2012-05-17 08:32 - 2012-05-17 07:38 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempgE2520.html 2012-05-17 08:32 - 2012-05-17 07:38 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempfl2520.html 2012-05-17 03:42 - 2012-05-17 02:32 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempYo2552.html 2012-05-17 03:42 - 2012-05-17 02:32 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temprp2552.html 2012-05-17 03:42 - 2012-05-17 02:32 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Templh2552.html 2012-05-17 03:42 - 2012-05-17 02:32 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempZP2552.html 2012-05-17 03:42 - 2012-05-17 02:32 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempxF2552.html 2012-05-17 03:42 - 2012-05-17 02:32 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempfg2552.html 2012-05-16 16:57 - 2012-05-16 09:00 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempwB3488.html 2012-05-16 16:57 - 2012-05-16 09:00 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempUi3488.html 2012-05-16 16:57 - 2012-05-16 09:00 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempnw3488.html 2012-05-16 16:57 - 2012-05-16 09:00 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempyr3488.html 2012-05-16 16:57 - 2012-05-16 09:00 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemptD3488.html 2012-05-16 16:57 - 2012-05-16 09:00 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempQv3488.html 2012-05-16 08:36 - 2012-05-16 07:01 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempPI2432.html 2012-05-16 08:36 - 2012-05-16 07:01 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempjx2432.html 2012-05-16 08:36 - 2012-05-16 07:01 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempec2432.html 2012-05-16 08:36 - 2012-05-16 07:01 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempNd2432.html 2012-05-16 08:36 - 2012-05-16 07:01 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempiL2432.html 2012-05-16 08:36 - 2012-05-16 07:01 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemphP2432.html 2012-05-16 03:12 - 2012-05-16 03:06 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempyB3060.html 2012-05-16 03:12 - 2012-05-16 03:06 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempnu3060.html 2012-05-16 03:12 - 2012-05-16 03:06 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempBE3060.html 2012-05-16 03:12 - 2012-05-16 03:06 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempsP3060.html 2012-05-16 03:12 - 2012-05-16 03:06 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempNV3060.html 2012-05-16 03:12 - 2012-05-16 03:06 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempfs3060.html 2012-05-15 18:03 - 2012-05-15 09:23 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempoV2596.html 2012-05-15 18:03 - 2012-05-15 09:23 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempDu2596.html 2012-05-15 18:03 - 2012-05-15 09:23 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempBw2596.html 2012-05-15 18:03 - 2012-05-15 09:23 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempVz2596.html 2012-05-15 18:03 - 2012-05-15 09:23 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempKA2596.html 2012-05-15 18:03 - 2012-05-15 09:23 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempFi2596.html 2012-05-15 15:51 - 2012-06-14 02:27 - 02045440 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys 2012-05-15 08:46 - 2012-05-15 05:40 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempmq3068.html 2012-05-15 08:46 - 2012-05-15 05:40 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempFs3068.html 2012-05-15 08:46 - 2012-05-15 05:40 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempBu3068.html 2012-05-15 08:46 - 2012-05-15 05:40 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempIl3068.html 2012-05-15 08:46 - 2012-05-15 05:40 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempFQ3068.html 2012-05-15 08:46 - 2012-05-15 05:40 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempDl3068.html 2012-05-15 05:09 - 2012-05-15 02:36 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempwm2544.html 2012-05-15 05:09 - 2012-05-15 02:36 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempuR2544.html 2012-05-15 05:09 - 2012-05-15 02:36 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempsq2544.html 2012-05-15 05:09 - 2012-05-15 02:36 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempYy2544.html 2012-05-15 05:09 - 2012-05-15 02:36 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempNg2544.html 2012-05-15 05:09 - 2012-05-15 02:36 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempfK2544.html 2012-05-14 15:04 - 2012-05-14 07:07 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempwV3584.html 2012-05-14 15:04 - 2012-05-14 07:07 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempUM3584.html 2012-05-14 15:04 - 2012-05-14 07:07 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemppJ3584.html 2012-05-14 15:04 - 2012-05-14 07:07 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempTs3584.html 2012-05-14 15:04 - 2012-05-14 07:07 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempId3584.html 2012-05-14 15:04 - 2012-05-14 07:07 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempEI3584.html 2012-05-14 03:06 - 2012-05-14 02:31 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempot2516.html 2012-05-14 03:06 - 2012-05-14 02:31 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempoN2516.html 2012-05-14 03:06 - 2012-05-14 02:31 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemplL2516.html 2012-05-14 03:06 - 2012-05-14 02:31 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempZV2516.html 2012-05-14 03:06 - 2012-05-14 02:31 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempmv2516.html 2012-05-14 03:06 - 2012-05-14 02:31 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempJb2516.html 2012-05-13 17:00 - 2012-05-13 05:44 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempnt3424.html 2012-05-13 17:00 - 2012-05-13 05:44 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempHl3424.html 2012-05-13 17:00 - 2012-05-13 05:44 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempaZ3424.html 2012-05-13 17:00 - 2012-05-13 05:44 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempuQ3424.html 2012-05-13 17:00 - 2012-05-13 05:44 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempPD3424.html 2012-05-13 17:00 - 2012-05-13 05:44 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempNk3424.html 2012-05-12 20:11 - 2012-05-12 15:59 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temptu3172.html 2012-05-12 20:11 - 2012-05-12 15:59 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempOO3172.html 2012-05-12 20:11 - 2012-05-12 15:59 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempnc3172.html 2012-05-12 20:11 - 2012-05-12 15:59 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempXk3172.html 2012-05-12 20:11 - 2012-05-12 15:59 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempqH3172.html 2012-05-12 20:11 - 2012-05-12 15:59 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempDZ3172.html 2012-05-12 15:09 - 2012-05-12 05:48 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempuB2476.html 2012-05-12 15:09 - 2012-05-12 05:48 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temptl2476.html 2012-05-12 15:09 - 2012-05-12 05:48 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempcW2476.html 2012-05-12 15:09 - 2012-05-12 05:48 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempwe2476.html 2012-05-12 15:09 - 2012-05-12 05:48 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempnD2476.html 2012-05-12 15:09 - 2012-05-12 05:48 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempca2476.html 2012-05-11 15:23 - 2012-05-11 13:18 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempun3624.html 2012-05-11 15:23 - 2012-05-11 13:18 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempmw3624.html 2012-05-11 15:23 - 2012-05-11 13:18 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempJZ3624.html 2012-05-11 15:23 - 2012-05-11 13:18 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempWU3624.html 2012-05-11 15:23 - 2012-05-11 13:18 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempPk3624.html 2012-05-11 15:23 - 2012-05-11 13:18 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempfi3624.html 2012-05-11 13:14 - 2012-05-11 10:07 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempYm3432.html 2012-05-11 13:14 - 2012-05-11 10:07 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempvJ3432.html 2012-05-11 13:14 - 2012-05-11 10:07 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempki3432.html 2012-05-11 13:14 - 2012-05-11 10:07 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempQB3432.html 2012-05-11 13:14 - 2012-05-11 10:07 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempmB3432.html 2012-05-11 13:14 - 2012-05-11 10:07 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempJF3432.html 2012-05-10 17:08 - 2012-05-10 15:26 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempuW2520.html 2012-05-10 17:08 - 2012-05-10 15:26 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempNx2520.html 2012-05-10 17:08 - 2012-05-10 15:26 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemphM2520.html 2012-05-10 17:08 - 2012-05-10 15:26 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempxe2520.html 2012-05-10 17:08 - 2012-05-10 15:26 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempGB2520.html 2012-05-10 17:08 - 2012-05-10 15:26 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempCf2520.html 2012-05-10 15:24 - 2012-05-10 10:44 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemptO2560.html 2012-05-10 15:24 - 2012-05-10 10:44 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempGH2560.html 2012-05-10 15:24 - 2012-05-10 10:44 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempAv2560.html 2012-05-10 15:24 - 2012-05-10 10:44 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemppP2560.html 2012-05-10 15:24 - 2012-05-10 10:44 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempML2560.html 2012-05-10 15:24 - 2012-05-10 10:44 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempiH2560.html 2012-05-10 10:21 - 2012-05-10 10:12 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempth2968.html 2012-05-10 10:21 - 2012-05-10 10:12 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temppa2968.html 2012-05-10 10:21 - 2012-05-10 10:12 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempnB2968.html 2012-05-10 10:21 - 2012-05-10 10:12 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempMb2968.html 2012-05-10 10:21 - 2012-05-10 10:12 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempbE2968.html 2012-05-10 10:21 - 2012-05-10 10:12 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempAN2968.html 2012-05-10 08:40 - 2012-05-10 07:14 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempVJ2628.html 2012-05-10 08:40 - 2012-05-10 07:14 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempSo2628.html 2012-05-10 08:40 - 2012-05-10 07:14 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempnh2628.html 2012-05-10 08:40 - 2012-05-10 07:14 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempXs2628.html 2012-05-10 08:40 - 2012-05-10 07:14 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempVO2628.html 2012-05-10 08:40 - 2012-05-10 07:14 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempbI2628.html 2012-05-10 04:55 - 2012-05-10 04:19 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempNr2552.html 2012-05-10 04:55 - 2012-05-10 04:19 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempfl2552.html 2012-05-10 04:55 - 2012-05-10 04:19 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempEi2552.html 2012-05-10 04:55 - 2012-05-10 04:19 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempvt2552.html 2012-05-10 04:55 - 2012-05-10 04:19 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempOf2552.html 2012-05-10 04:55 - 2012-05-10 04:19 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempMe2552.html 2012-05-10 03:40 - 2012-05-10 02:25 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempyh2476.html 2012-05-10 03:40 - 2012-05-10 02:25 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempia2476.html 2012-05-10 03:40 - 2012-05-10 02:25 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempbT2476.html 2012-05-10 03:40 - 2012-05-10 02:25 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempxC2476.html 2012-05-10 03:40 - 2012-05-10 02:25 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempNy2476.html 2012-05-10 03:40 - 2012-05-10 02:25 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempLd2476.html 2012-05-09 17:10 - 2012-05-09 11:17 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempwf3568.html 2012-05-09 17:10 - 2012-05-09 11:17 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempOv3568.html 2012-05-09 17:10 - 2012-05-09 11:17 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemphC3568.html 2012-05-09 17:10 - 2012-05-09 11:17 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempXZ3568.html 2012-05-09 17:10 - 2012-05-09 11:17 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempXf3568.html 2012-05-09 17:10 - 2012-05-09 11:17 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempBJ3568.html 2012-05-09 06:36 - 2012-05-09 06:36 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Templw3100.html 2012-05-09 06:36 - 2012-05-09 06:36 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempLL3100.html 2012-05-09 06:36 - 2012-05-09 06:36 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempEi3100.html 2012-05-09 06:36 - 2012-05-09 06:36 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempKk3100.html 2012-05-09 06:36 - 2012-05-09 06:36 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempiz3100.html 2012-05-09 06:36 - 2012-05-09 06:36 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempfE3100.html 2012-05-09 03:12 - 2012-05-09 03:06 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempVC2916.html 2012-05-09 03:12 - 2012-05-09 03:06 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemprC2916.html 2012-05-09 03:12 - 2012-05-09 03:06 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempLZ2916.html 2012-05-09 03:12 - 2012-05-09 03:06 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempsJ2916.html 2012-05-09 03:12 - 2012-05-09 03:06 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempkV2916.html 2012-05-09 03:12 - 2012-05-09 03:06 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempDB2916.html 2012-05-08 17:49 - 2012-05-08 16:29 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempSr2728.html 2012-05-08 17:49 - 2012-05-08 16:29 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempgm2728.html 2012-05-08 17:49 - 2012-05-08 16:29 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempcF2728.html 2012-05-08 17:49 - 2012-05-08 16:29 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempPf2728.html 2012-05-08 17:49 - 2012-05-08 16:29 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempce2728.html 2012-05-08 17:49 - 2012-05-08 16:29 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempab2728.html 2012-05-08 16:12 - 2012-05-08 09:35 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempUz2452.html 2012-05-08 16:12 - 2012-05-08 09:35 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempTW2452.html 2012-05-08 16:12 - 2012-05-08 09:35 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempaF2452.html 2012-05-08 16:12 - 2012-05-08 09:35 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempzT2452.html 2012-05-08 16:12 - 2012-05-08 09:35 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempVk2452.html 2012-05-08 16:12 - 2012-05-08 09:35 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempOA2452.html 2012-05-08 08:05 - 2012-05-08 05:49 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempWA2632.html 2012-05-08 08:05 - 2012-05-08 05:49 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temptj2632.html 2012-05-08 08:05 - 2012-05-08 05:49 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempPT2632.html 2012-05-08 08:05 - 2012-05-08 05:49 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempXp2632.html 2012-05-08 08:05 - 2012-05-08 05:49 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempco2632.html 2012-05-08 08:05 - 2012-05-08 05:49 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempBZ2632.html 2012-05-08 04:04 - 2012-05-08 03:09 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempRZ2020.html 2012-05-08 04:04 - 2012-05-08 03:09 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempej2020.html 2012-05-08 04:04 - 2012-05-08 03:09 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempCp2020.html 2012-05-08 04:04 - 2012-05-08 03:09 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempLQ2020.html 2012-05-08 04:04 - 2012-05-08 03:09 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempJH2020.html 2012-05-08 04:04 - 2012-05-08 03:09 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempaC2020.html 2012-05-07 17:10 - 2012-05-07 10:50 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempPX3440.html 2012-05-07 17:10 - 2012-05-07 10:50 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempjS3440.html 2012-05-07 17:10 - 2012-05-07 10:50 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempiB3440.html 2012-05-07 17:10 - 2012-05-07 10:50 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempTo3440.html 2012-05-07 17:10 - 2012-05-07 10:50 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempNl3440.html 2012-05-07 17:10 - 2012-05-07 10:50 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempbT3440.html 2012-05-07 04:02 - 2012-05-07 03:57 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempQS2608.html 2012-05-07 04:02 - 2012-05-07 03:57 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempPo2608.html 2012-05-07 04:02 - 2012-05-07 03:57 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempGe2608.html 2012-05-07 04:02 - 2012-05-07 03:57 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempym2608.html 2012-05-07 04:02 - 2012-05-07 03:57 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempxM2608.html 2012-05-07 04:02 - 2012-05-07 03:57 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempDQ2608.html 2012-05-07 03:56 - 2012-05-07 03:56 - 00000000 ____A C:\Windows\setuperr.log 2012-05-06 17:27 - 2012-05-06 14:55 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempMH2544.html 2012-05-06 17:27 - 2012-05-06 14:55 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempKc2544.html 2012-05-06 17:27 - 2012-05-06 14:55 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempeJ2544.html 2012-05-06 17:27 - 2012-05-06 14:55 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempqd2544.html 2012-05-06 17:27 - 2012-05-06 14:55 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempGh2544.html 2012-05-06 17:27 - 2012-05-06 14:55 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempeN2544.html 2012-05-06 12:24 - 2012-05-06 05:40 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempsX3284.html 2012-05-06 12:24 - 2012-05-06 05:40 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempez3284.html 2012-05-06 12:24 - 2012-05-06 05:40 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempCC3284.html 2012-05-06 12:24 - 2012-05-06 05:40 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempJG3284.html 2012-05-06 12:24 - 2012-05-06 05:40 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempcJ3284.html 2012-05-06 12:24 - 2012-05-06 05:40 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempCd3284.html 2012-05-05 19:07 - 2012-05-05 06:46 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempXV2884.html 2012-05-05 19:07 - 2012-05-05 06:46 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempqA2884.html 2012-05-05 19:07 - 2012-05-05 06:46 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Templz2884.html 2012-05-05 19:07 - 2012-05-05 06:46 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempYd2884.html 2012-05-05 19:07 - 2012-05-05 06:46 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempmD2884.html 2012-05-05 19:07 - 2012-05-05 06:46 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHF2884.html 2012-05-04 19:41 - 2012-05-04 12:51 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempXn2564.html 2012-05-04 19:41 - 2012-05-04 12:51 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempfu2564.html 2012-05-04 19:41 - 2012-05-04 12:51 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempCN2564.html 2012-05-04 19:41 - 2012-05-04 12:51 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempQQ2564.html 2012-05-04 19:41 - 2012-05-04 12:51 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempjs2564.html 2012-05-04 19:41 - 2012-05-04 12:51 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempja2564.html 2012-05-04 08:27 - 2012-05-04 05:12 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempPQ2844.html 2012-05-04 08:27 - 2012-05-04 05:12 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemphV2844.html 2012-05-04 08:27 - 2012-05-04 05:12 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempbi2844.html 2012-05-04 08:27 - 2012-05-04 05:12 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempxG2844.html 2012-05-04 08:27 - 2012-05-04 05:12 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempeH2844.html 2012-05-04 08:27 - 2012-05-04 05:12 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempBm2844.html 2012-05-03 17:59 - 2012-05-03 13:31 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempUl2696.html 2012-05-03 17:59 - 2012-05-03 13:31 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempsX2696.html 2012-05-03 17:59 - 2012-05-03 13:31 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempPE2696.html 2012-05-03 17:59 - 2012-05-03 13:31 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempTg2696.html 2012-05-03 17:59 - 2012-05-03 13:31 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempmm2696.html 2012-05-03 17:59 - 2012-05-03 13:31 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHA2696.html 2012-05-03 13:11 - 2012-05-03 10:45 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temptp2752.html 2012-05-03 13:11 - 2012-05-03 10:45 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempKi2752.html 2012-05-03 13:11 - 2012-05-03 10:45 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempgv2752.html 2012-05-03 13:11 - 2012-05-03 10:45 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempXC2752.html 2012-05-03 13:11 - 2012-05-03 10:45 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Templx2752.html 2012-05-03 13:11 - 2012-05-03 10:45 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempah2752.html 2012-05-03 09:02 - 2012-05-03 07:49 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempsL3596.html 2012-05-03 09:02 - 2012-05-03 07:49 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempRL3596.html 2012-05-03 09:02 - 2012-05-03 07:49 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempQA3596.html 2012-05-03 09:02 - 2012-05-03 07:49 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempsE3596.html 2012-05-03 09:02 - 2012-05-03 07:49 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempMz3596.html 2012-05-03 09:02 - 2012-05-03 07:49 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempiO3596.html 2012-05-03 04:34 - 2012-05-03 04:34 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemptM2648.html 2012-05-03 04:34 - 2012-05-03 04:34 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempEc2648.html 2012-05-03 04:34 - 2012-05-03 04:34 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempAq2648.html 2012-05-03 04:34 - 2012-05-03 04:34 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempUr2648.html 2012-05-03 04:34 - 2012-05-03 04:34 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempFi2648.html 2012-05-03 04:34 - 2012-05-03 04:34 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempfA2648.html 2012-05-02 19:01 - 2012-05-02 18:56 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempLH2512.html 2012-05-02 19:01 - 2012-05-02 18:56 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempIr2512.html 2012-05-02 19:01 - 2012-05-02 18:56 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempaI2512.html 2012-05-02 19:01 - 2012-05-02 18:56 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempWZ2512.html 2012-05-02 19:01 - 2012-05-02 18:56 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempKe2512.html 2012-05-02 19:01 - 2012-05-02 18:56 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempEi2512.html 2012-05-02 18:41 - 2012-05-02 17:28 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempFI2944.html 2012-05-02 18:41 - 2012-05-02 17:28 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHK2944.html 2012-05-02 18:41 - 2012-05-02 12:54 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempFb2944.html 2012-05-02 18:41 - 2012-05-02 12:54 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempam2944.html 2012-05-02 18:41 - 2012-05-02 12:54 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempUp2944.html 2012-05-02 18:41 - 2012-05-02 12:54 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemprX2944.html 2012-05-02 12:03 - 2012-05-02 10:40 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temprb3492.html 2012-05-02 12:03 - 2012-05-02 10:40 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempPs3492.html 2012-05-02 12:03 - 2012-05-02 10:40 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempix3492.html 2012-05-02 12:03 - 2012-05-02 10:40 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempSR3492.html 2012-05-02 12:03 - 2012-05-02 10:40 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempKz3492.html 2012-05-02 12:03 - 2012-05-02 10:40 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempiD3492.html 2012-05-02 08:29 - 2012-05-02 05:29 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempYG2572.html 2012-05-02 08:29 - 2012-05-02 05:29 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempFN2572.html 2012-05-02 08:29 - 2012-05-02 05:29 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempDc2572.html 2012-05-02 08:29 - 2012-05-02 05:29 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempDf2572.html 2012-05-02 08:29 - 2012-05-02 05:29 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempcR2572.html 2012-05-02 08:29 - 2012-05-02 05:29 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempCP2572.html 2012-05-01 18:54 - 2012-05-01 09:47 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempYj3556.html 2012-05-01 18:54 - 2012-05-01 09:47 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempur3556.html 2012-05-01 18:54 - 2012-05-01 09:47 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempHg3556.html 2012-05-01 18:54 - 2012-05-01 09:47 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempRY3556.html 2012-05-01 18:54 - 2012-05-01 09:47 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHT3556.html 2012-05-01 18:54 - 2012-05-01 09:47 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempbm3556.html 2012-05-01 10:03 - 2012-06-14 02:27 - 00180736 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys 2012-05-01 08:58 - 2012-05-01 08:49 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempTL3524.html 2012-05-01 08:58 - 2012-05-01 08:49 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempLM3524.html 2012-05-01 08:58 - 2012-05-01 08:49 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemplA3524.html 2012-05-01 08:58 - 2012-05-01 08:49 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempRF3524.html 2012-05-01 08:58 - 2012-05-01 08:49 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempKu3524.html 2012-05-01 08:58 - 2012-05-01 08:49 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempkb3524.html 2012-05-01 05:25 - 2012-05-01 04:43 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempYZ2060.html 2012-05-01 05:25 - 2012-05-01 04:43 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempvK2060.html 2012-05-01 05:25 - 2012-05-01 04:43 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempTa2060.html 2012-05-01 05:25 - 2012-05-01 04:43 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempzR2060.html 2012-05-01 05:25 - 2012-05-01 04:43 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempVA2060.html 2012-05-01 05:25 - 2012-05-01 04:43 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempTz2060.html 2012-04-30 17:44 - 2012-04-30 14:44 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempsc3764.html 2012-04-30 17:44 - 2012-04-30 14:44 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempRz3764.html 2012-04-30 17:44 - 2012-04-30 14:44 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempoA3764.html 2012-04-30 17:44 - 2012-04-30 14:44 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempxY3764.html 2012-04-30 17:44 - 2012-04-30 14:44 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempkY3764.html 2012-04-30 17:44 - 2012-04-30 14:44 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempdW3764.html 2012-04-29 18:25 - 2012-04-29 13:04 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempiB2112.html 2012-04-29 18:25 - 2012-04-29 13:04 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempgY2112.html 2012-04-29 18:25 - 2012-04-29 13:04 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempEI2112.html 2012-04-29 18:25 - 2012-04-29 13:04 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempws2112.html 2012-04-29 18:25 - 2012-04-29 13:04 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempMt2112.html 2012-04-29 18:25 - 2012-04-29 13:04 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempal2112.html 2012-04-29 13:01 - 2012-04-29 11:10 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempjQ2688.html 2012-04-29 13:01 - 2012-04-29 11:10 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempIN2688.html 2012-04-29 13:01 - 2012-04-29 11:10 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempFw2688.html 2012-04-29 13:01 - 2012-04-29 11:10 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempVZ2688.html 2012-04-29 13:01 - 2012-04-29 11:10 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempTF2688.html 2012-04-29 13:01 - 2012-04-29 11:10 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHQ2688.html 2012-04-29 08:05 - 2012-04-29 06:50 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemppV2820.html 2012-04-29 08:05 - 2012-04-29 06:50 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemphV2820.html 2012-04-29 08:05 - 2012-04-29 06:50 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempbh2820.html 2012-04-29 08:05 - 2012-04-29 06:50 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempuU2820.html 2012-04-29 08:05 - 2012-04-29 06:50 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempuQ2820.html 2012-04-29 08:05 - 2012-04-29 06:50 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempAX2820.html 2012-04-28 19:54 - 2012-04-28 16:12 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempzT2200.html 2012-04-28 19:54 - 2012-04-28 16:12 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempYe2200.html 2012-04-28 19:54 - 2012-04-28 16:12 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemplM2200.html 2012-04-28 19:54 - 2012-04-28 16:12 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempwG2200.html 2012-04-28 19:54 - 2012-04-28 16:12 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemptX2200.html 2012-04-28 19:54 - 2012-04-28 16:12 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempfn2200.html 2012-04-28 14:16 - 2012-04-28 14:16 - 01372322 ____A C:\Users\Wiktoria\Downloads\samurai_x.zip 2012-04-28 14:16 - 2012-04-28 14:16 - 01346608 ____A C:\Users\Wiktoria\Downloads\jay_zx.zip 2012-04-28 14:16 - 2012-04-28 14:16 - 01310320 ____A C:\Users\Wiktoria\Downloads\cole_zx.zip 2012-04-28 12:26 - 2012-04-28 12:26 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempTk2532.html 2012-04-28 12:26 - 2012-04-28 12:26 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempjT2532.html 2012-04-28 12:26 - 2012-04-28 12:26 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempij2532.html 2012-04-28 12:26 - 2012-04-28 12:26 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempTN2532.html 2012-04-28 12:26 - 2012-04-28 12:26 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempqu2532.html 2012-04-28 12:26 - 2012-04-28 12:26 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempkv2532.html 2012-04-28 09:25 - 2012-04-28 08:16 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempSb1612.html 2012-04-28 09:25 - 2012-04-28 08:16 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempqs1612.html 2012-04-28 09:25 - 2012-04-28 08:16 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemppY1612.html 2012-04-28 09:25 - 2012-04-28 08:16 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempSw1612.html 2012-04-28 09:25 - 2012-04-28 08:16 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempKi1612.html 2012-04-28 09:25 - 2012-04-28 08:16 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempGg1612.html 2012-04-28 07:34 - 2012-04-28 07:15 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temphu4020.html 2012-04-28 07:34 - 2012-04-28 07:15 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempbf4020.html 2012-04-28 07:34 - 2012-04-28 07:15 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempAN4020.html 2012-04-28 07:34 - 2012-04-28 07:15 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempxS4020.html 2012-04-28 07:34 - 2012-04-28 07:15 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempgy4020.html 2012-04-28 07:34 - 2012-04-28 07:15 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempba4020.html 2012-04-28 07:02 - 2012-04-28 05:46 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempmN2584.html 2012-04-28 07:02 - 2012-04-28 05:46 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempIr2584.html 2012-04-28 07:02 - 2012-04-28 05:46 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempHs2584.html 2012-04-28 07:02 - 2012-04-28 05:46 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempti2584.html 2012-04-28 07:02 - 2012-04-28 05:46 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempNj2584.html 2012-04-28 07:02 - 2012-04-28 05:46 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemphW2584.html 2012-04-27 18:47 - 2012-04-27 12:27 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempTx2448.html 2012-04-27 18:47 - 2012-04-27 12:27 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempQV2448.html 2012-04-27 18:47 - 2012-04-27 12:27 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempnU2448.html 2012-04-27 18:47 - 2012-04-27 12:27 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempQO2448.html 2012-04-27 18:47 - 2012-04-27 12:27 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempLs2448.html 2012-04-27 18:47 - 2012-04-27 12:27 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempAI2448.html 2012-04-27 10:02 - 2012-04-27 09:15 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempGS2400.html 2012-04-27 10:02 - 2012-04-27 09:15 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempFu2400.html 2012-04-27 10:02 - 2012-04-27 09:15 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempbW2400.html 2012-04-27 10:02 - 2012-04-27 09:15 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempny2400.html 2012-04-27 10:02 - 2012-04-27 09:15 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempMb2400.html 2012-04-27 10:02 - 2012-04-27 09:15 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Temphr2400.html 2012-04-27 06:09 - 2012-04-27 05:51 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempQk2064.html 2012-04-27 06:09 - 2012-04-27 05:51 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempog2064.html 2012-04-27 06:09 - 2012-04-27 05:51 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempAY2064.html 2012-04-27 06:09 - 2012-04-27 05:51 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempxB2064.html 2012-04-27 06:09 - 2012-04-27 05:51 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHY2064.html 2012-04-27 06:09 - 2012-04-27 05:51 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemphA2064.html 2012-04-26 17:21 - 2012-04-26 09:54 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempPA2916.html 2012-04-26 17:21 - 2012-04-26 09:54 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempoL2916.html 2012-04-26 17:21 - 2012-04-26 09:54 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempBF2916.html 2012-04-26 17:21 - 2012-04-26 09:54 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempWV2916.html 2012-04-26 17:21 - 2012-04-26 09:54 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempms2916.html 2012-04-26 17:21 - 2012-04-26 09:54 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempIv2916.html 2012-04-26 09:03 - 2012-04-26 06:19 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempXs2420.html 2012-04-26 09:03 - 2012-04-26 06:19 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempWQ2420.html 2012-04-26 09:03 - 2012-04-26 06:19 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempfU2420.html 2012-04-26 09:03 - 2012-04-26 06:19 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempzZ2420.html 2012-04-26 09:03 - 2012-04-26 06:19 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempBE2420.html 2012-04-26 09:03 - 2012-04-26 06:19 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempaH2420.html 2012-04-25 19:41 - 2012-04-25 09:48 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temppd2448.html 2012-04-25 19:41 - 2012-04-25 09:48 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempHA2448.html 2012-04-25 19:41 - 2012-04-25 09:48 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempbl2448.html 2012-04-25 19:41 - 2012-04-25 09:48 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempZZ2448.html 2012-04-25 19:41 - 2012-04-25 09:48 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempOO2448.html 2012-04-25 19:41 - 2012-04-25 09:48 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempjx2448.html 2012-04-25 08:35 - 2012-04-25 05:35 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temprx3564.html 2012-04-25 08:35 - 2012-04-25 05:35 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempRS3564.html 2012-04-25 08:35 - 2012-04-25 05:35 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempHZ3564.html 2012-04-25 08:35 - 2012-04-25 05:35 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempXy3564.html 2012-04-25 08:35 - 2012-04-25 05:35 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempBz3564.html 2012-04-25 08:35 - 2012-04-25 05:35 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempBp3564.html 2012-04-24 19:08 - 2012-04-24 10:03 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempMq3844.html 2012-04-24 19:08 - 2012-04-24 10:03 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempkq3844.html 2012-04-24 19:08 - 2012-04-24 10:03 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempFs3844.html 2012-04-24 19:08 - 2012-04-24 10:03 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempjv3844.html 2012-04-24 19:08 - 2012-04-24 10:03 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHR3844.html 2012-04-24 19:08 - 2012-04-24 10:03 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempDf3844.html 2012-04-24 08:40 - 2012-04-24 07:10 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempUk2444.html 2012-04-24 08:40 - 2012-04-24 07:10 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempSz2444.html 2012-04-24 08:40 - 2012-04-24 07:10 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempgo2444.html 2012-04-24 08:40 - 2012-04-24 07:10 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempTq2444.html 2012-04-24 08:40 - 2012-04-24 07:10 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemppO2444.html 2012-04-24 08:40 - 2012-04-24 07:10 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempGy2444.html 2012-04-23 19:01 - 2012-04-23 14:46 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempXZ2640.html 2012-04-23 19:01 - 2012-04-23 14:46 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempxk2640.html 2012-04-23 19:01 - 2012-04-23 14:46 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempLl2640.html 2012-04-23 19:01 - 2012-04-23 14:46 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempqC2640.html 2012-04-23 19:01 - 2012-04-23 14:46 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempNp2640.html 2012-04-23 19:01 - 2012-04-23 14:46 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempMc2640.html 2012-04-23 14:42 - 2012-04-23 11:04 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempxu3744.html 2012-04-23 14:42 - 2012-04-23 11:04 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempFb3744.html 2012-04-23 14:42 - 2012-04-23 11:04 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempdq3744.html 2012-04-23 14:42 - 2012-04-23 11:04 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempOC3744.html 2012-04-23 14:42 - 2012-04-23 11:04 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempjz3744.html 2012-04-23 14:42 - 2012-04-23 11:04 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempfy3744.html 2012-04-23 12:00 - 2012-06-14 02:28 - 00984064 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll 2012-04-23 12:00 - 2012-06-14 02:28 - 00133120 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll 2012-04-23 12:00 - 2012-06-14 02:28 - 00098304 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll 2012-04-23 10:56 - 2012-04-23 08:41 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempxW4044.html 2012-04-23 10:56 - 2012-04-23 08:41 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempMG4044.html 2012-04-23 10:56 - 2012-04-23 08:41 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempcZ4044.html 2012-04-23 10:56 - 2012-04-23 08:41 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempyk4044.html 2012-04-23 10:56 - 2012-04-23 08:41 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempXL4044.html 2012-04-23 10:56 - 2012-04-23 08:41 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempIg4044.html 2012-04-23 06:14 - 2012-04-23 05:02 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempyS2480.html 2012-04-23 06:14 - 2012-04-23 05:02 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempxQ2480.html 2012-04-23 06:14 - 2012-04-23 05:02 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempNL2480.html 2012-04-23 06:14 - 2012-04-23 05:02 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempMf2480.html 2012-04-23 06:14 - 2012-04-23 05:02 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Templs2480.html 2012-04-23 06:14 - 2012-04-23 05:02 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempeC2480.html 2012-04-22 17:23 - 2012-04-22 04:53 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempvY2396.html 2012-04-22 17:23 - 2012-04-22 04:53 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempdt2396.html 2012-04-22 17:23 - 2012-04-22 04:53 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempDK2396.html 2012-04-22 17:23 - 2012-04-22 04:53 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Temppc2396.html 2012-04-22 17:23 - 2012-04-22 04:53 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempgx2396.html 2012-04-22 17:23 - 2012-04-22 04:53 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempAe2396.html 2012-04-21 19:54 - 2012-04-21 12:16 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempMO3092.html 2012-04-21 19:54 - 2012-04-21 12:16 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempeK3092.html 2012-04-21 19:54 - 2012-04-21 12:16 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempdc3092.html 2012-04-21 19:54 - 2012-04-21 12:16 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempsq3092.html 2012-04-21 19:54 - 2012-04-21 12:16 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempFE3092.html 2012-04-21 19:54 - 2012-04-21 12:16 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempbq3092.html 2012-04-21 09:43 - 2012-04-21 06:46 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempYa3632.html 2012-04-21 09:43 - 2012-04-21 06:46 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempSr3632.html 2012-04-21 09:43 - 2012-04-21 06:46 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempAo3632.html 2012-04-21 09:43 - 2012-04-21 06:46 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemptL3632.html 2012-04-21 09:43 - 2012-04-21 06:46 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempEA3632.html 2012-04-21 09:43 - 2012-04-21 06:46 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempaZ3632.html 2012-04-21 02:33 - 2012-04-21 02:07 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Temprby868.html 2012-04-21 02:33 - 2012-04-21 02:07 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempNpl868.html 2012-04-21 02:33 - 2012-04-21 02:07 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempaKr868.html 2012-04-21 02:33 - 2012-04-21 02:07 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempuBx868.html 2012-04-21 02:33 - 2012-04-21 02:07 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempRtb868.html 2012-04-21 02:33 - 2012-04-21 02:07 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempfcQ868.html 2012-04-20 17:34 - 2012-04-20 08:16 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempnj2564.html 2012-04-20 17:34 - 2012-04-20 08:16 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempJg2564.html 2012-04-20 17:34 - 2012-04-20 08:16 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempAT2564.html 2012-04-20 17:34 - 2012-04-20 08:16 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempOd2564.html 2012-04-20 17:34 - 2012-04-20 08:16 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Templp2564.html 2012-04-20 17:34 - 2012-04-20 08:16 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempDy2564.html 2012-04-20 04:05 - 2012-04-20 03:06 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempVd3556.html 2012-04-20 04:05 - 2012-04-20 03:06 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempHN3556.html 2012-04-20 04:05 - 2012-04-20 03:06 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempgu3556.html 2012-04-20 04:05 - 2012-04-20 03:06 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempjA3556.html 2012-04-20 04:05 - 2012-04-20 03:06 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempGG3556.html 2012-04-20 04:05 - 2012-04-20 03:06 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempdg3556.html 2012-04-19 17:47 - 2012-04-19 12:36 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempuj2148.html 2012-04-19 17:47 - 2012-04-19 12:36 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempiJ2148.html 2012-04-19 17:47 - 2012-04-19 12:36 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempCw2148.html 2012-04-19 17:47 - 2012-04-19 12:36 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempqn2148.html 2012-04-19 17:47 - 2012-04-19 12:36 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempOC2148.html 2012-04-19 17:47 - 2012-04-19 12:36 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempcG2148.html 2012-04-19 09:33 - 2012-04-19 08:16 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempVB2584.html 2012-04-19 09:33 - 2012-04-19 08:16 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempUL2584.html 2012-04-19 09:33 - 2012-04-19 08:16 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempBQ2584.html 2012-04-19 09:33 - 2012-04-19 08:16 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempPK2584.html 2012-04-19 09:33 - 2012-04-19 08:16 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempIe2584.html 2012-04-19 09:33 - 2012-04-19 08:16 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempcZ2584.html 2012-04-19 07:01 - 2012-04-19 07:01 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempuy2408.html 2012-04-19 07:01 - 2012-04-19 07:01 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempNL2408.html 2012-04-19 07:01 - 2012-04-19 07:01 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempIZ2408.html 2012-04-19 07:01 - 2012-04-19 07:01 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempMX2408.html 2012-04-19 07:01 - 2012-04-19 07:01 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempdu2408.html 2012-04-19 07:01 - 2012-04-19 07:01 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempbz2408.html 2012-04-19 03:20 - 2012-04-19 02:14 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempRo2932.html 2012-04-19 03:20 - 2012-04-19 02:14 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempdu2932.html 2012-04-19 03:20 - 2012-04-19 02:14 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempdo2932.html 2012-04-19 03:20 - 2012-04-19 02:14 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Temprz2932.html 2012-04-19 03:20 - 2012-04-19 02:14 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempRy2932.html 2012-04-19 03:20 - 2012-04-19 02:14 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempeY2932.html 2012-04-18 18:19 - 2012-04-18 09:05 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemplH3912.html 2012-04-18 18:19 - 2012-04-18 09:05 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempdw3912.html 2012-04-18 18:19 - 2012-04-18 09:05 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempbz3912.html 2012-04-18 18:19 - 2012-04-18 09:05 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemptO3912.html 2012-04-18 18:19 - 2012-04-18 09:05 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempet3912.html 2012-04-18 18:19 - 2012-04-18 09:05 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempav3912.html 2012-04-18 08:34 - 2012-04-18 06:30 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemppA2592.html 2012-04-18 08:34 - 2012-04-18 06:30 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempMu2592.html 2012-04-18 08:34 - 2012-04-18 06:30 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempIV2592.html 2012-04-18 08:34 - 2012-04-18 06:30 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempZN2592.html 2012-04-18 08:34 - 2012-04-18 06:30 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempuw2592.html 2012-04-18 08:34 - 2012-04-18 06:30 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempqq2592.html 2012-04-18 04:41 - 2012-04-18 02:20 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempSO2524.html 2012-04-18 04:41 - 2012-04-18 02:20 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempQa2524.html 2012-04-18 04:41 - 2012-04-18 02:20 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempGP2524.html 2012-04-18 04:41 - 2012-04-18 02:20 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempSu2524.html 2012-04-18 04:41 - 2012-04-18 02:20 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempdE2524.html 2012-04-18 04:41 - 2012-04-18 02:20 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempDc2524.html 2012-04-17 18:37 - 2012-04-17 09:06 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemprU2592.html 2012-04-17 18:37 - 2012-04-17 09:06 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempFP2592.html 2012-04-17 18:37 - 2012-04-17 09:06 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempav2592.html 2012-04-17 18:37 - 2012-04-17 09:06 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempjl2592.html 2012-04-17 18:37 - 2012-04-17 09:06 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Temphk2592.html 2012-04-17 18:37 - 2012-04-17 09:06 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempGI2592.html 2012-04-17 04:11 - 2012-04-17 02:24 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempxZ3692.html 2012-04-17 04:11 - 2012-04-17 02:24 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempWZ3692.html 2012-04-17 04:11 - 2012-04-17 02:24 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempSg3692.html 2012-04-17 04:11 - 2012-04-17 02:24 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempqH3692.html 2012-04-17 04:11 - 2012-04-17 02:24 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempjE3692.html 2012-04-17 04:11 - 2012-04-17 02:24 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempDH3692.html 2012-04-16 18:04 - 2012-04-16 08:39 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempxS4684.html 2012-04-16 18:04 - 2012-04-16 08:39 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempBT4684.html 2012-04-16 18:04 - 2012-04-16 08:39 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempak4684.html 2012-04-16 18:04 - 2012-04-16 08:39 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempPO4684.html 2012-04-16 18:04 - 2012-04-16 08:39 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempoG4684.html 2012-04-16 18:04 - 2012-04-16 08:39 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Templc4684.html 2012-04-16 08:31 - 2012-04-16 08:30 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempyK4860.html 2012-04-16 08:31 - 2012-04-16 08:30 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempiA4860.html 2012-04-16 08:31 - 2012-04-16 08:30 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempCT4860.html 2012-04-16 08:31 - 2012-04-16 08:30 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempwf4860.html 2012-04-16 08:31 - 2012-04-16 08:30 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempNt4860.html 2012-04-16 08:31 - 2012-04-16 08:30 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempcC4860.html 2012-04-16 08:09 - 2012-04-16 05:23 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempkA2820.html 2012-04-16 08:09 - 2012-04-16 05:23 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempEF2820.html 2012-04-16 08:09 - 2012-04-16 05:23 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempau2820.html 2012-04-16 08:09 - 2012-04-16 05:23 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempzQ2820.html 2012-04-16 08:09 - 2012-04-16 05:23 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempyi2820.html 2012-04-16 08:09 - 2012-04-16 05:23 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempfI2820.html 2012-04-15 19:00 - 2012-04-15 05:57 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempqP2648.html 2012-04-15 19:00 - 2012-04-15 05:57 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempNh2648.html 2012-04-15 19:00 - 2012-04-15 05:57 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Templc2648.html 2012-04-15 19:00 - 2012-04-15 05:57 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TemplY2648.html 2012-04-15 19:00 - 2012-04-15 05:57 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempgY2648.html 2012-04-15 19:00 - 2012-04-15 05:57 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempgb2648.html 2012-04-14 19:37 - 2012-04-14 04:43 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempvf3568.html 2012-04-14 19:37 - 2012-04-14 04:43 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempnt3568.html 2012-04-14 19:37 - 2012-04-14 04:43 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempEo3568.html 2012-04-14 19:37 - 2012-04-14 04:43 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempYz3568.html 2012-04-14 19:37 - 2012-04-14 04:43 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempom3568.html 2012-04-14 19:37 - 2012-04-14 04:43 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempKP3568.html 2012-04-13 19:12 - 2012-04-13 15:11 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempZH2420.html 2012-04-13 19:12 - 2012-04-13 15:11 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempvj2420.html 2012-04-13 19:12 - 2012-04-13 15:11 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempOJ2420.html 2012-04-13 19:12 - 2012-04-13 15:11 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempvw2420.html 2012-04-13 19:12 - 2012-04-13 15:11 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempQn2420.html 2012-04-13 19:12 - 2012-04-13 15:11 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempjG2420.html 2012-04-13 12:14 - 2012-04-13 09:30 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempOu2356.html 2012-04-13 12:14 - 2012-04-13 09:30 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\Tempkb2356.html 2012-04-13 12:14 - 2012-04-13 09:30 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempIk2356.html 2012-04-13 12:14 - 2012-04-13 09:30 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Tempxk2356.html 2012-04-13 12:14 - 2012-04-13 09:30 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\Temphq2356.html 2012-04-13 12:14 - 2012-04-13 09:30 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHj2356.html 2012-04-13 07:55 - 2012-04-13 03:38 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempzA2612.html 2012-04-13 07:55 - 2012-04-13 03:38 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TempWE2612.html 2012-04-13 07:55 - 2012-04-13 03:38 - 00002432 ____A C:\Users\Wiktoria\AppData\Local\TemppY2612.html 2012-04-13 07:55 - 2012-04-13 03:38 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempYW2612.html 2012-04-13 07:55 - 2012-04-13 03:38 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempHL2612.html 2012-04-13 07:55 - 2012-04-13 03:38 - 00002089 ____A C:\Users\Wiktoria\AppData\Local\TempdD2612.html ========================= Known DLLs (Whitelisted) ============ ========================= Bamital & volsnap Check ============ C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ==================== Restore Points (XP) ===================== ========================= Memory info ====================== Percentage of memory in use: 12% Total physical RAM: 3070.42 MB Available physical RAM: 2701.91 MB Total Pagefile: 2895.09 MB Available Pagefile: 2778.78 MB Total Virtual: 2047.88 MB Available Virtual: 1994.02 MB ======================= Partitions ========================= 1 Drive b: (RAMDisk) (Fixed) (Total:0.06 GB) (Free:0.06 GB) NTFS 2 Drive c: () (Fixed) (Total:465.76 GB) (Free:352.33 GB) NTFS 7 Drive h: (WOD2) (Removable) (Total:7.51 GB) (Free:1.26 GB) FAT32 8 Drive x: (ReatogoPE) (CDROM) (Total:0.43 GB) (Free:0 GB) CDFS Disk ### Status Size Free Dyn Gpt -------- ---------- ------- ------- --- --- Disk 4 Online 466 GB 0 B Partitions of Disk 4: =============== Partition ### Type Size Offset ------------- ---------------- ------- ------- Partition 1 Primary 466 GB 1024 KB ================================================================================== Disk: 4 Partition 1 Type : 07 Hidden: No Active: Yes Volume ### Ltr Label Fs Type Size Status Info ---------- --- ----------- ----- ---------- ------- --------- -------- * Volume 5 C NTFS Partition 466 GB Healthy ================================================================================== ========================================================== Last Boot: 2012-07-05 09:58 ======================= End Of Log ==========================