OTL logfile created on: 2012-07-20 16:01:42 - Run 2
OTL by OldTimer - Version 3.2.54.0     Folder = C:\Users\User\Downloads
 Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,97 Gb Total Physical Memory | 2,16 Gb Available Physical Memory | 72,97% Memory free
5,93 Gb Paging File | 5,22 Gb Available in Paging File | 88,05% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 102,68 Gb Total Space | 50,32 Gb Free Space | 49,01% Space Free | Partition Type: NTFS
Drive D: | 195,31 Gb Total Space | 112,07 Gb Free Space | 57,38% Space Free | Partition Type: NTFS
 
Computer Name: IWA | User Name: User | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-20 15:13:16 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\User\Downloads\OTL.exe
PRC - [2012-07-18 23:26:25 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011-07-16 22:21:04 | 000,302,592 | ---- | M] () -- C:\Users\User\AppData\Local\Temp\Rar$EX00.480\gmer.exe
PRC - [2009-07-14 03:14:28 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe
PRC - [2009-07-14 03:14:21 | 000,497,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\HelpPane.exe
PRC - [2009-07-14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-07-18 23:26:24 | 002,003,424 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2012-03-26 21:47:33 | 000,016,832 | ---- | M] () -- C:\Program Files\Adobe\Reader 9.0\Reader\ViewerPS.dll
MOD - [2011-12-01 16:58:31 | 008,527,008 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll
MOD - [2011-07-16 22:21:04 | 000,302,592 | ---- | M] () -- C:\Users\User\AppData\Local\Temp\Rar$EX00.480\gmer.exe
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2012-07-18 23:26:24 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-06-07 19:12:14 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2010-03-25 15:39:22 | 000,490,280 | ---- | M] (Nero AG) [Auto | Stopped] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2010-03-09 13:24:08 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010-03-09 13:24:08 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010-03-09 13:24:08 | 000,040,384 | ---- | M] (ALWIL Software) [Auto | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009-03-11 14:39:12 | 000,098,304 | R--- | M] () [Auto | Stopped] -- C:\Program Files\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
SRV - [2007-05-31 16:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007-05-31 16:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\Users\User\AppData\Local\Temp\pxldrpow.sys -- (pxldrpow)
DRV - [2011-10-17 19:40:44 | 000,085,520 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AtihdW73.sys -- (AtiHDAudioService)
DRV - [2010-03-09 13:12:54 | 000,046,672 | ---- | M] (ALWIL Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2010-03-09 13:12:33 | 000,162,640 | ---- | M] (ALWIL Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2010-03-09 13:09:08 | 000,023,376 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2010-03-09 13:08:52 | 000,051,792 | ---- | M] (ALWIL Software) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2010-03-09 13:08:30 | 000,019,024 | ---- | M] (ALWIL Software) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009-07-14 03:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2009-07-14 03:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2009-07-14 03:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2009-07-14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WINUSB)
DRV - [2009-07-14 01:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2009-07-14 01:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2009-07-14 00:09:17 | 004,194,816 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2009-07-14 00:02:46 | 001,096,704 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2009-06-04 22:44:28 | 000,014,344 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PuAcpi32.sys -- (MTsensor32)
DRV - [2009-03-09 16:58:00 | 000,056,320 | ---- | M] (ITE Tech. Inc. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\itecir.sys -- (itecir)
DRV - [2008-02-15 17:42:42 | 000,046,592 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2007-07-30 11:54:02 | 000,038,400 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2007-07-30 10:42:58 | 000,043,008 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2007-06-13 17:33:20 | 000,048,384 | ---- | M] (Service_Quality Technology Co., LTD.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Capt9090.sys -- (SQTECH9090) TOP Cam(PID_9090_00)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1654181040-1862790788-3784404696-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = pl.v9.com/idg/idg_1332251539_955887
IE - HKU\S-1-5-21-1654181040-1862790788-3784404696-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-1654181040-1862790788-3784404696-1000\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKU\S-1-5-21-1654181040-1862790788-3784404696-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-1654181040-1862790788-3784404696-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "MyStart Search"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.pl/"
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.6.6.117
FF - prefs.js..keyword.URL: "http://search.sweetim.com/search.asp?src=2&q="
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "http://search.sweetim.com/search.asp?src=2&q="
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-18 23:26:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-05-23 10:29:35 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-18 23:26:25 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-05-23 10:29:35 | 000,000,000 | ---D | M]
 
[2011-10-30 20:14:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\User\AppData\Roaming\mozilla\Extensions
[2012-06-23 11:59:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\User\AppData\Roaming\mozilla\Firefox\Profiles\9qd3ldex.default\extensions
[2012-06-23 11:59:26 | 000,000,000 | ---D | M] (incredibar.com) -- C:\Users\User\AppData\Roaming\mozilla\Firefox\Profiles\9qd3ldex.default\extensions\ffxtlbr@incredibar.com
[2011-10-30 21:21:27 | 000,000,000 | ---D | M] (Ask Toolbar) -- C:\Users\User\AppData\Roaming\mozilla\Firefox\Profiles\9qd3ldex.default\extensions\toolbar@ask.com
[2011-11-02 17:27:47 | 000,002,253 | ---- | M] () -- C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9qd3ldex.default\searchplugins\askcom.xml
[2012-06-23 11:58:49 | 000,002,203 | ---- | M] () -- C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9qd3ldex.default\searchplugins\MyStart Search.xml
[2012-03-03 13:50:01 | 000,004,089 | ---- | M] () -- C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9qd3ldex.default\searchplugins\sweetim.xml
[2012-03-31 21:19:06 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-03-31 21:19:07 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012-03-02 19:20:28 | 000,162,686 | ---- | M] () (No name found) -- C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9QD3LDEX.DEFAULT\EXTENSIONS\{EEE6C361-6118-11DC-9C72-001320C79847}.XPI
[2012-07-18 23:26:25 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012-03-03 23:33:30 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012-05-06 18:27:59 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-05-06 18:27:59 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-05-06 18:27:59 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-05-06 18:27:59 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-05-06 18:27:59 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-05-06 18:27:59 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2009-06-10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (ALWIL Software)
O4 - HKLM..\Run: [HControlUser] C:\Program Files\ATK Hotkey\HcontrolUser.exe ()
O4 - HKLM..\Run: [NBAgent] C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe (Nero AG)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKU\S-1-5-21-1654181040-1862790788-3784404696-1000..\Run: [Gadu-Gadu 10] C:\Programy\gg\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O4 - HKU\S-1-5-21-1654181040-1862790788-3784404696-1000..\Run: [IPLA!] C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.)
O4 - HKU\S-1-5-21-1654181040-1862790788-3784404696-1000..\Run: [tujsnomrlnnonrr] C:\ProgramData\tujsnomr.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.233.233.233 208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{77E59681-A8FD-407E-A1FE-DFD4D7CBE54E}: DhcpNameServer = 62.233.233.233 208.67.222.222
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-20 13:59:21 | 000,000,000 | ---D | C] -- C:\ProgramData\shdavfuzlignunq
[2012-07-18 17:47:24 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Sahmon Games
[2012-07-18 17:47:04 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\AlawarWrapper
[2012-07-15 17:50:40 | 000,000,000 | ---D | C] -- C:\Users\User\Desktop\bulgaria
[2012-07-11 17:06:20 | 000,000,000 | ---D | C] -- C:\Users\User\Desktop\Nowy folder
[2012-06-26 12:25:02 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\eMule
[2012-06-26 12:25:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eMule
[2012-06-26 12:25:00 | 000,000,000 | ---D | C] -- C:\Program Files\eMule
[2012-06-23 12:01:22 | 000,000,000 | ---D | C] -- C:\Users\User\Documents\Dokumenty na Iwa GPS
[2012-06-23 11:59:45 | 000,000,000 | ---D | C] -- C:\tmp
[2012-06-23 11:58:24 | 000,000,000 | ---D | C] -- C:\ZillaPDFtoTXTConverter
[2012-06-22 10:09:00 | 000,000,000 | ---D | C] -- C:\Windows\WindowsMobile
[2012-06-22 00:23:52 | 000,000,000 | ---D | C] -- C:\Users\User\Documents\Notesy programu OneNote
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-07-20 16:01:49 | 002,097,152 | -HS- | M] () -- C:\Users\User\ntuser.dat
[2012-07-20 15:27:27 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-07-20 15:27:22 | 2388,529,152 | -HS- | M] () -- C:\hiberfil.sys
[2012-07-20 15:07:48 | 000,010,208 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-07-20 15:07:48 | 000,010,208 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-07-20 15:07:33 | 000,001,028 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012-07-20 15:07:25 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2012-07-20 14:23:20 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempQl3468.html
[2012-07-20 14:23:20 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempPk3468.html
[2012-07-20 14:20:42 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempWS3788.html
[2012-07-20 14:20:42 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempOe3788.html
[2012-07-20 14:08:15 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\Temptw3100.html
[2012-07-20 14:08:15 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\Tempqk3100.html
[2012-07-20 14:02:02 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012-07-20 13:59:24 | 000,000,051 | ---- | M] () -- C:\ProgramData\vzzroksehvpspoy
[2012-07-20 13:59:13 | 000,049,152 | ---- | M] () -- C:\ProgramData\tujsnomr.exe
[2012-07-20 13:59:13 | 000,049,152 | ---- | M] () -- C:\Users\User\0.09961978255338921.exe
[2012-07-20 09:55:00 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempuR3592.html
[2012-07-20 09:55:00 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempkQ3592.html
[2012-07-20 00:46:35 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempSt3852.html
[2012-07-20 00:46:35 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\Tempoo3852.html
[2012-07-19 21:51:25 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempOo3380.html
[2012-07-19 21:51:25 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\Tempbo3380.html
[2012-07-19 11:14:50 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempJQ3672.html
[2012-07-19 11:14:50 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempZL3672.html
[2012-07-19 00:13:35 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempxR3552.html
[2012-07-19 00:13:35 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\Tempxc3552.html
[2012-07-18 23:39:04 | 002,333,026 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2012-07-18 23:39:04 | 000,687,828 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012-07-18 23:39:04 | 000,681,356 | ---- | M] () -- C:\Windows\System32\perfh013.dat
[2012-07-18 23:39:04 | 000,607,190 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012-07-18 23:39:04 | 000,131,382 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012-07-18 23:39:04 | 000,129,608 | ---- | M] () -- C:\Windows\System32\perfc013.dat
[2012-07-18 23:39:04 | 000,103,568 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012-07-18 23:26:27 | 000,001,994 | ---- | M] () -- C:\Users\User\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2012-07-18 21:55:38 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempZp2032.html
[2012-07-18 21:55:38 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempoE2032.html
[2012-07-18 17:44:27 | 000,001,189 | ---- | M] () -- C:\Users\User\Desktop\The Island Castaway.lnk
[2012-07-18 17:43:25 | 000,001,828 | ---- | M] () -- C:\Users\User\Desktop\Gry Alawar.lnk
[2012-07-17 22:58:23 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempCk2656.html
[2012-07-17 22:58:23 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempKs2656.html
[2012-07-16 23:27:06 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\Tempqr3252.html
[2012-07-16 23:27:06 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempSz3252.html
[2012-07-16 23:07:06 | 000,049,152 | ---- | M] () -- C:\Users\User\0.7266698676028889.exe
[2012-07-16 22:11:20 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempWa3160.html
[2012-07-16 22:11:20 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempRC3160.html
[2012-07-16 10:53:41 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempQR3084.html
[2012-07-16 10:53:41 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempiS3084.html
[2012-07-15 23:26:49 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\Tempfh2952.html
[2012-07-15 23:26:49 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempTC2952.html
[2012-07-15 17:53:59 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\Temphn3796.html
[2012-07-15 17:53:59 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempyT3796.html
[2012-07-15 00:22:45 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\Templk3044.html
[2012-07-15 00:22:45 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempTw3044.html
[2012-07-14 00:41:09 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\Tempdh3596.html
[2012-07-14 00:41:09 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempyP3596.html
[2012-07-12 21:39:19 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\Tempudd244.html
[2012-07-12 21:39:19 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempPcf244.html
[2012-07-11 22:13:07 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TemphF3072.html
[2012-07-11 22:13:07 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempyS3072.html
[2012-06-29 11:01:12 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\Tempeo3016.html
[2012-06-29 11:01:12 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempiX3016.html
[2012-06-29 03:20:51 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempTk2656.html
[2012-06-29 03:20:51 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempUC2656.html
[2012-06-28 22:49:02 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempRQ3880.html
[2012-06-28 22:49:02 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempsB3880.html
[2012-06-28 00:15:56 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempPW1428.html
[2012-06-28 00:15:56 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempWr1428.html
[2012-06-27 21:57:33 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempfG3464.html
[2012-06-27 21:57:33 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempzL3464.html
[2012-06-26 23:50:40 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempyD4092.html
[2012-06-26 23:50:40 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempjK4092.html
[2012-06-26 12:25:06 | 000,000,961 | ---- | M] () -- C:\Users\Public\Desktop\eMule.lnk
[2012-06-25 22:55:14 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempNy2636.html
[2012-06-25 22:55:14 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempaL2636.html
[2012-06-25 17:32:20 | 000,000,201 | ---- | M] () -- C:\Users\User\Desktop\SweetPcFix.url
[2012-06-24 23:50:01 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempGu2740.html
[2012-06-24 23:50:01 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\Tempvy2740.html
[2012-06-24 02:04:58 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\Tempdv2800.html
[2012-06-24 02:04:58 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempbF2800.html
[2012-06-23 18:05:52 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\Tempdu3040.html
[2012-06-23 18:05:52 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\Tempkr3040.html
[2012-06-23 11:59:26 | 000,000,447 | ---- | M] () -- C:\user.js
[2012-06-23 08:32:09 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempPM3296.html
[2012-06-23 08:32:09 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempPQ3296.html
[2012-06-22 23:54:12 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempZN2568.html
[2012-06-22 23:54:12 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempeC2568.html
[2012-06-22 10:21:23 | 000,000,740 | ---- | M] () -- C:\Users\User\Desktop\Dokumenty na Iwa GPS.LNK
[2012-06-22 10:21:21 | 000,000,960 | ---- | M] () -- C:\Users\User\Desktop\Centrum obsługi urządzeń z systemem Windows Mobile.lnk
[2012-06-22 10:09:43 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdRapi2_01_00_00.Wdf
[2012-06-22 00:43:46 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempOs2444.html
[2012-06-22 00:43:46 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempMV2444.html
[2012-06-22 00:23:52 | 000,001,316 | ---- | M] () -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk
[2012-06-21 00:41:04 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\TempQJ2896.html
[2012-06-21 00:41:04 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\TempaQ2896.html
[2012-06-20 20:49:16 | 000,002,432 | ---- | M] () -- C:\Users\User\AppData\Local\Tempvy3068.html
[2012-06-20 20:49:16 | 000,002,089 | ---- | M] () -- C:\Users\User\AppData\Local\Tempqq3068.html
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-07-20 14:23:20 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempQl3468.html
[2012-07-20 14:23:20 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempPk3468.html
[2012-07-20 14:10:30 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempWS3788.html
[2012-07-20 14:10:30 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempOe3788.html
[2012-07-20 13:59:23 | 000,049,152 | ---- | C] () -- C:\ProgramData\tujsnomr.exe
[2012-07-20 13:59:13 | 000,049,152 | ---- | C] () -- C:\Users\User\0.09961978255338921.exe
[2012-07-20 13:52:46 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Temptw3100.html
[2012-07-20 13:52:46 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempqk3100.html
[2012-07-20 08:25:48 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempuR3592.html
[2012-07-20 08:25:48 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempkQ3592.html
[2012-07-19 23:59:05 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempSt3852.html
[2012-07-19 23:59:05 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempoo3852.html
[2012-07-19 13:11:26 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempOo3380.html
[2012-07-19 13:11:26 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempbo3380.html
[2012-07-19 10:28:57 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempJQ3672.html
[2012-07-19 10:28:57 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempZL3672.html
[2012-07-18 23:24:18 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempxR3552.html
[2012-07-18 23:24:18 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempxc3552.html
[2012-07-18 17:44:27 | 000,001,189 | ---- | C] () -- C:\Users\User\Desktop\The Island Castaway.lnk
[2012-07-18 09:02:48 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempZp2032.html
[2012-07-18 09:02:48 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempoE2032.html
[2012-07-17 09:45:32 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempCk2656.html
[2012-07-17 09:45:32 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempKs2656.html
[2012-07-16 23:07:07 | 000,000,051 | ---- | C] () -- C:\ProgramData\vzzroksehvpspoy
[2012-07-16 23:07:06 | 000,049,152 | ---- | C] () -- C:\Users\User\0.7266698676028889.exe
[2012-07-16 23:02:13 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempqr3252.html
[2012-07-16 23:02:13 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempSz3252.html
[2012-07-16 15:04:52 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempWa3160.html
[2012-07-16 15:04:52 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempRC3160.html
[2012-07-16 08:56:15 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempQR3084.html
[2012-07-16 08:56:15 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempiS3084.html
[2012-07-15 22:55:47 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempfh2952.html
[2012-07-15 22:55:47 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempTC2952.html
[2012-07-15 08:03:24 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Temphn3796.html
[2012-07-15 08:03:24 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempyT3796.html
[2012-07-14 13:16:14 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Templk3044.html
[2012-07-14 13:16:14 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempTw3044.html
[2012-07-13 12:45:02 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempdh3596.html
[2012-07-13 12:45:02 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempyP3596.html
[2012-07-12 08:45:49 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempudd244.html
[2012-07-12 08:45:49 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempPcf244.html
[2012-07-11 15:56:51 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemphF3072.html
[2012-07-11 15:56:51 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempyS3072.html
[2012-06-29 06:20:54 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempeo3016.html
[2012-06-29 06:20:54 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempiX3016.html
[2012-06-29 02:53:46 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempTk2656.html
[2012-06-29 02:53:46 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempUC2656.html
[2012-06-28 12:37:30 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempRQ3880.html
[2012-06-28 12:37:30 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempsB3880.html
[2012-06-27 23:37:02 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempPW1428.html
[2012-06-27 23:37:02 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempWr1428.html
[2012-06-27 10:43:44 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempfG3464.html
[2012-06-27 10:43:44 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempzL3464.html
[2012-06-26 12:25:06 | 000,000,961 | ---- | C] () -- C:\Users\Public\Desktop\eMule.lnk
[2012-06-26 11:32:16 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempyD4092.html
[2012-06-26 11:32:16 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempjK4092.html
[2012-06-25 17:32:20 | 000,000,201 | ---- | C] () -- C:\Users\User\Desktop\SweetPcFix.url
[2012-06-25 10:26:16 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempNy2636.html
[2012-06-25 10:26:16 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempaL2636.html
[2012-06-24 11:14:54 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempGu2740.html
[2012-06-24 11:14:54 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempvy2740.html
[2012-06-23 18:08:03 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempdv2800.html
[2012-06-23 18:08:03 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempbF2800.html
[2012-06-23 11:59:26 | 000,000,447 | ---- | C] () -- C:\user.js
[2012-06-23 11:42:24 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempdu3040.html
[2012-06-23 11:42:24 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempkr3040.html
[2012-06-23 08:32:09 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempPM3296.html
[2012-06-23 08:32:09 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempPQ3296.html
[2012-06-22 10:21:23 | 000,000,740 | ---- | C] () -- C:\Users\User\Desktop\Dokumenty na Iwa GPS.LNK
[2012-06-22 10:21:21 | 000,000,960 | ---- | C] () -- C:\Users\User\Desktop\Centrum obsługi urządzeń z systemem Windows Mobile.lnk
[2012-06-22 10:09:43 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdRapi2_01_00_00.Wdf
[2012-06-22 10:09:13 | 000,002,419 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk
[2012-06-22 09:57:23 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempZN2568.html
[2012-06-22 09:57:23 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempeC2568.html
[2012-06-22 00:23:52 | 000,001,316 | ---- | C] () -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk
[2012-06-21 12:44:02 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempOs2444.html
[2012-06-21 12:44:02 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempMV2444.html
[2012-06-20 22:28:51 | 000,620,583 | ---- | C] () -- C:\Zdjęcie-0031.jpg
[2012-06-20 21:19:14 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempQJ2896.html
[2012-06-20 21:19:14 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempaQ2896.html
[2012-06-20 19:07:46 | 2622,593,024 | ---- | C] () -- C:\Users\User\Desktop\Jake i Piraci z Nibylndii.2011.PLDUBB.HQDVDRip.XViD.AC3-SLiSU.avi
[2012-06-20 07:26:25 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempvy3068.html
[2012-06-20 07:26:25 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempqq3068.html
[2012-06-19 14:00:53 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempPu2756.html
[2012-06-19 14:00:53 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Temptg2756.html
[2012-06-18 16:12:04 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempwJ2792.html
[2012-06-18 16:12:04 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempjH2792.html
[2012-06-18 05:19:01 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempGV3056.html
[2012-06-18 05:19:01 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempdy3056.html
[2012-06-17 08:29:26 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempZN3320.html
[2012-06-17 08:29:26 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempGG3320.html
[2012-06-16 13:01:32 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempWG2716.html
[2012-06-16 13:01:32 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempyI2716.html
[2012-06-16 11:53:56 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempHf2628.html
[2012-06-16 11:53:56 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempAf2628.html
[2012-06-16 11:38:45 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempHc2608.html
[2012-06-16 11:38:45 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempAj2608.html
[2012-06-15 22:13:51 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Temphl2672.html
[2012-06-15 22:13:51 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempOI2672.html
[2012-06-15 03:39:21 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempFM3568.html
[2012-06-15 03:39:21 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempBp3568.html
[2012-06-14 11:23:04 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempal1944.html
[2012-06-14 11:23:04 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TemprP1944.html
[2012-06-14 00:55:01 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempwn2732.html
[2012-06-14 00:55:01 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempsL2732.html
[2012-06-13 09:13:27 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempKV3284.html
[2012-06-13 09:13:27 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempJB3284.html
[2012-06-12 18:16:26 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Templcq648.html
[2012-06-12 18:16:26 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempyhN648.html
[2012-06-12 07:16:59 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempff3640.html
[2012-06-12 07:16:59 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempRW3640.html
[2012-06-11 09:12:04 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempRJ3068.html
[2012-06-11 09:12:04 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempFx3068.html
[2012-06-10 10:50:17 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempoX3544.html
[2012-06-10 10:50:17 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempKG3544.html
[2012-06-10 09:44:06 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempWU2196.html
[2012-06-10 09:44:06 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempnm2196.html
[2012-06-09 15:07:15 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempgF2752.html
[2012-06-09 15:07:14 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempac2752.html
[2012-06-09 14:58:41 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Templb3012.html
[2012-06-09 14:58:41 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempZv3012.html
[2012-06-09 09:12:31 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempmp3764.html
[2012-06-09 09:12:31 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempcW3764.html
[2012-06-08 08:55:40 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempPJ1916.html
[2012-06-08 08:55:40 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempbw1916.html
[2012-06-07 08:00:11 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempgm1960.html
[2012-06-07 08:00:11 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempTF1960.html
[2012-06-06 10:52:02 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempaZ2804.html
[2012-06-06 10:52:02 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempKZ2804.html
[2012-06-05 23:03:27 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemppZ2692.html
[2012-06-05 23:03:27 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TemphC2692.html
[2012-06-05 06:23:29 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempqq3144.html
[2012-06-05 06:23:29 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempgE3144.html
[2012-06-04 14:21:11 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempJE3004.html
[2012-06-04 14:21:11 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempVY3004.html
[2012-06-03 08:51:19 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempYI2868.html
[2012-06-03 08:51:19 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempHE2868.html
[2012-06-02 14:42:19 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempvZ3592.html
[2012-06-02 14:42:19 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempXd3592.html
[2012-06-01 18:06:47 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempVe3020.html
[2012-06-01 18:06:47 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempLr3020.html
[2012-05-31 08:18:29 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempcu3108.html
[2012-05-31 08:18:29 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempzr3108.html
[2012-05-30 08:10:24 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempEU3632.html
[2012-05-30 08:10:24 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempkm3632.html
[2012-05-29 07:19:12 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempop3288.html
[2012-05-29 07:19:12 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempaE3288.html
[2012-05-28 17:32:27 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempPF3220.html
[2012-05-28 17:32:27 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempOF3220.html
[2012-05-28 08:21:24 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempuA2800.html
[2012-05-28 08:21:24 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempXo2800.html
[2012-05-27 17:51:25 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempyY3288.html
[2012-05-27 17:51:25 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempzA3288.html
[2012-05-27 02:43:40 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempcF1920.html
[2012-05-27 02:43:40 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempKW1920.html
[2012-05-27 02:39:25 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempaC1932.html
[2012-05-27 02:39:25 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempPE1932.html
[2012-05-27 02:20:12 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempzL3768.html
[2012-05-27 02:20:12 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempOe3768.html
[2012-05-26 07:35:26 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempxQ2636.html
[2012-05-26 07:35:26 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempdN2636.html
[2012-05-25 07:25:16 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempZL2628.html
[2012-05-25 07:25:16 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempHM2628.html
[2012-05-24 12:46:45 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempgS2556.html
[2012-05-24 12:46:45 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TemphZ2556.html
[2012-05-24 11:05:19 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempUk2932.html
[2012-05-24 11:05:19 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempgc2932.html
[2012-05-23 10:28:42 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempqV2840.html
[2012-05-23 10:28:42 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempei2840.html
[2012-05-23 08:05:48 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemplS2484.html
[2012-05-23 08:05:48 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempWC2484.html
[2012-05-22 08:47:57 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempuH2712.html
[2012-05-22 08:47:57 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempTU2712.html
[2012-05-22 07:13:15 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempsY2688.html
[2012-05-22 07:13:15 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempOS2688.html
[2012-05-21 09:10:39 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempUh3952.html
[2012-05-21 09:10:39 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempJS3952.html
[2012-05-21 06:45:20 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempiu2672.html
[2012-05-21 06:45:20 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempME2672.html
[2012-05-20 09:22:39 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempuY3112.html
[2012-05-20 09:22:39 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempsj3112.html
[2012-05-19 08:45:42 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempWe3076.html
[2012-05-19 08:45:42 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempsN3076.html
[2012-05-19 01:09:31 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempYb2748.html
[2012-05-19 01:09:31 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempZq2748.html
[2012-05-18 05:22:33 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempEh2684.html
[2012-05-18 05:22:33 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempeR2684.html
[2012-05-17 12:56:01 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempWC2628.html
[2012-05-17 12:56:01 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Temptc2628.html
[2012-05-17 08:26:22 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempZB2556.html
[2012-05-17 08:26:22 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempTk2556.html
[2012-05-16 11:58:41 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempWU2808.html
[2012-05-16 11:58:41 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempyJ2808.html
[2012-05-16 08:03:54 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempTr2672.html
[2012-05-16 08:03:54 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempBX2672.html
[2012-05-15 21:12:03 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Templl2900.html
[2012-05-15 21:12:03 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempfR2900.html
[2012-05-15 09:28:16 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempXz3132.html
[2012-05-15 09:28:16 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempDd3132.html
[2012-05-14 13:56:49 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempdK2624.html
[2012-05-14 13:56:49 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempts2624.html
[2012-05-14 10:44:24 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemprB1832.html
[2012-05-14 10:44:24 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempsh1832.html
[2012-05-13 11:33:14 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempJS3752.html
[2012-05-13 11:33:14 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempVc3752.html
[2012-05-13 01:48:54 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempih2800.html
[2012-05-13 01:48:54 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempwV2800.html
[2012-05-13 01:26:52 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempxH3104.html
[2012-05-13 01:26:52 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempzi3104.html
[2012-05-12 20:44:02 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempeX2764.html
[2012-05-12 20:44:02 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempvL2764.html
[2012-05-12 08:46:49 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempQJ2736.html
[2012-05-12 08:46:49 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempsf2736.html
[2012-05-11 04:34:23 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempkG3152.html
[2012-05-11 04:34:23 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempEj3152.html
[2012-05-10 10:05:08 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Templf2816.html
[2012-05-10 10:05:08 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempzV2816.html
[2012-05-09 10:59:33 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempmZ3916.html
[2012-05-09 10:59:33 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempmA3916.html
[2012-05-08 13:14:27 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempNk1956.html
[2012-05-08 13:14:27 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempHR1956.html
[2012-05-08 08:58:24 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempOS3284.html
[2012-05-08 08:58:24 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempei3284.html
[2012-05-07 18:40:14 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempEb2224.html
[2012-05-07 18:40:14 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempKI2224.html
[2012-05-07 16:55:19 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempLW2752.html
[2012-05-07 16:55:19 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Temply2752.html
[2012-05-07 09:06:59 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempCz2636.html
[2012-05-07 09:06:59 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempBn2636.html
[2012-05-07 08:09:08 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempLx2588.html
[2012-05-07 08:09:08 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempty2588.html
[2012-05-06 14:11:53 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemphM3120.html
[2012-05-06 14:11:53 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempCa3120.html
[2012-05-06 09:47:26 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempyj2940.html
[2012-05-06 09:47:26 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempiv2940.html
[2012-05-05 18:39:28 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempLL3784.html
[2012-05-05 18:39:28 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempQS3784.html
[2012-05-05 14:30:48 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempDO3088.html
[2012-05-05 14:30:48 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempfC3088.html
[2012-05-04 09:14:13 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempTD2872.html
[2012-05-04 09:14:13 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempqS2872.html
[2012-05-04 01:18:42 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempGS2624.html
[2012-05-04 01:18:42 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempKB2624.html
[2012-05-03 12:36:25 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempTx2912.html
[2012-05-03 12:36:25 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempeR2912.html
[2012-05-02 09:16:53 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempnN2572.html
[2012-05-02 09:16:53 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempZb2572.html
[2012-05-01 14:55:55 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempfw3280.html
[2012-05-01 14:55:55 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempMe3280.html
[2012-05-01 10:01:09 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempce2376.html
[2012-05-01 10:01:09 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempEU2376.html
[2012-04-30 23:22:55 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemphY2748.html
[2012-04-30 23:22:55 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempWB2748.html
[2012-04-30 07:05:34 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempmC2964.html
[2012-04-30 07:05:34 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Temppc2964.html
[2012-04-30 06:59:53 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempZJ3068.html
[2012-04-30 06:59:53 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempXv3068.html
[2012-04-29 22:52:14 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempGG2720.html
[2012-04-29 22:52:14 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempZe2720.html
[2012-04-29 09:17:33 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempDo2768.html
[2012-04-29 09:17:33 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempDZ2768.html
[2012-04-28 09:38:59 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempyv2928.html
[2012-04-28 09:38:59 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempGP2928.html
[2012-04-26 18:38:02 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempHo2160.html
[2012-04-26 18:38:02 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempqL2160.html
[2012-04-26 07:26:44 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempBY1904.html
[2012-04-26 07:26:44 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempUN1904.html
[2012-04-25 21:31:41 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemprQ3052.html
[2012-04-25 21:31:41 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempmd3052.html
[2012-04-25 20:03:03 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempGo2020.html
[2012-04-25 20:03:03 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempqw2020.html
[2012-04-25 17:49:13 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempNY2072.html
[2012-04-25 17:49:13 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempEq2072.html
[2012-04-25 08:01:13 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempfM2172.html
[2012-04-25 08:01:13 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempLY2172.html
[2012-04-24 21:22:44 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempSc2260.html
[2012-04-24 21:22:44 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempZd2260.html
[2012-04-24 19:58:16 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempaK2260.html
[2012-04-24 19:58:16 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempDi2260.html
[2012-04-24 12:39:34 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempMC2220.html
[2012-04-24 12:39:34 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TemphE2220.html
[2012-04-24 07:01:14 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempIm2104.html
[2012-04-24 07:01:14 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempkw2104.html
[2012-04-23 20:14:31 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempve1408.html
[2012-04-23 20:14:31 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempJa1408.html
[2012-04-23 19:24:40 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempUm2600.html
[2012-04-23 19:24:40 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempiB2600.html
[2012-04-23 18:08:45 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempOG2492.html
[2012-04-23 18:08:45 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempVk2492.html
[2012-04-22 18:13:52 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempHN2588.html
[2012-04-22 18:13:52 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempzz2588.html
[2012-04-22 08:24:26 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempCR2624.html
[2012-04-22 08:24:26 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempGA2624.html
[2012-04-21 14:02:36 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempRq2596.html
[2012-04-21 14:02:36 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempGR2596.html
[2012-04-21 03:20:48 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempzr2728.html
[2012-04-21 03:20:48 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempkO2728.html
[2012-04-20 20:41:31 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempUh2776.html
[2012-04-20 20:41:31 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempzq2776.html
[2012-04-19 12:30:52 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempMW2644.html
[2012-04-19 12:30:52 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempYO2644.html
[2012-04-17 22:20:08 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempql2676.html
[2012-04-17 22:20:08 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempDX2676.html
[2012-04-16 16:11:19 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempfi2624.html
[2012-04-16 16:11:19 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempjL2624.html
[2012-04-16 11:33:26 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Temptm2668.html
[2012-04-16 11:33:26 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempoW2668.html
[2012-04-15 15:18:12 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempdk2676.html
[2012-04-15 15:18:12 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TemptV2676.html
[2012-04-14 22:28:41 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempEm2944.html
[2012-04-14 22:28:41 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempMH2944.html
[2012-04-13 21:12:38 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempQl2552.html
[2012-04-13 21:12:38 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempru2552.html
[2012-04-12 21:00:00 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempTS2508.html
[2012-04-12 21:00:00 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempGW2508.html
[2012-04-11 17:41:42 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempMx2548.html
[2012-04-11 17:41:42 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempLy2548.html
[2012-04-10 20:05:16 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempmX2492.html
[2012-04-10 20:05:16 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempvM2492.html
[2012-04-09 09:25:17 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempbw2548.html
[2012-04-09 09:25:17 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempjV2548.html
[2012-04-08 12:07:25 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemplI2824.html
[2012-04-08 12:07:25 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempjC2824.html
[2012-04-07 21:46:20 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempyP1900.html
[2012-04-07 21:46:20 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempGS1900.html
[2012-04-07 12:41:54 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempVG2580.html
[2012-04-07 12:41:54 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempbe2580.html
[2012-04-06 20:13:41 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempiz1880.html
[2012-04-06 20:13:41 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempry1880.html
[2012-04-05 20:42:12 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempwU1860.html
[2012-04-05 20:42:12 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempkK1860.html
[2012-04-03 21:53:52 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempPG2844.html
[2012-04-03 21:53:52 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempIc2844.html
[2012-04-01 12:02:59 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempUH2796.html
[2012-04-01 12:02:59 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempIQ2796.html
[2012-03-31 15:38:06 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempSx2704.html
[2012-03-31 15:38:06 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempKd2704.html
[2012-03-31 15:15:27 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempXD2648.html
[2012-03-31 15:15:27 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempYi2648.html
[2012-03-31 12:39:16 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempDS2620.html
[2012-03-31 12:39:16 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempDH2620.html
[2012-03-31 10:36:53 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempHb2700.html
[2012-03-31 10:36:52 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempZd2700.html
[2012-03-30 08:02:57 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempce2748.html
[2012-03-30 08:02:57 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempZt2748.html
[2012-03-30 02:43:54 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempwu2780.html
[2012-03-30 02:43:54 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempNs2780.html
[2012-03-30 01:38:26 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemphY2768.html
[2012-03-30 01:38:26 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempjC2768.html
[2012-03-29 08:09:11 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempdZ3556.html
[2012-03-29 08:09:11 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempxT3556.html
[2012-03-28 09:34:39 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempKI2808.html
[2012-03-28 09:34:39 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempcV2808.html
[2012-03-27 08:00:41 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempXE2668.html
[2012-03-26 08:55:02 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempWD2540.html
[2012-03-26 08:55:02 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempdN2540.html
[2012-03-25 09:55:35 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempeo2684.html
[2012-03-25 09:55:35 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempbr2684.html
[2012-03-24 11:02:00 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempgy2540.html
[2012-03-24 11:02:00 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempFA2540.html
[2012-03-23 11:09:39 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempWv2548.html
[2012-03-23 11:09:39 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempPK2548.html
[2012-03-23 08:35:41 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempdN2804.html
[2012-03-23 08:35:41 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempYt2804.html
[2012-03-22 08:11:35 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempae2224.html
[2012-03-22 08:11:35 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempOX2224.html
[2012-03-21 18:20:28 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemptlZ780.html
[2012-03-21 18:20:28 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempcWM780.html
[2012-03-21 10:05:01 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempgN3680.html
[2012-03-21 10:05:01 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempip3680.html
[2012-03-20 17:07:19 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempFE1944.html
[2012-03-20 17:07:19 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempOh1944.html
[2012-03-20 09:37:19 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempKy1868.html
[2012-03-20 09:37:19 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempNs1868.html
[2012-03-19 09:58:01 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempzX2384.html
[2012-03-19 09:58:01 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempqv2384.html
[2012-03-18 09:27:00 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempow2560.html
[2012-03-18 09:27:00 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempJr2560.html
[2012-03-17 07:38:14 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempEt2656.html
[2012-03-17 07:38:14 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempSK2656.html
[2012-03-16 16:41:16 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempaK2520.html
[2012-03-16 16:41:16 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempZl2520.html
[2012-03-16 11:06:26 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempaO2780.html
[2012-03-16 11:06:26 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempJT2780.html
[2012-03-15 20:34:46 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempIR3228.html
[2012-03-15 20:34:46 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempMQ3228.html
[2012-03-15 09:15:19 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempLF2972.html
[2012-03-15 09:15:19 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempdl2972.html
[2012-03-14 17:22:36 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempfP2928.html
[2012-03-14 17:22:36 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempOA2928.html
[2012-03-14 11:13:42 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempRI3544.html
[2012-03-14 11:13:42 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempjQ3544.html
[2012-03-13 19:07:54 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempjh2728.html
[2012-03-13 19:07:54 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempwS2728.html
[2012-03-13 17:44:19 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempJn3092.html
[2012-03-13 17:44:19 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempVv3092.html
[2012-03-13 09:20:35 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempcd2820.html
[2012-03-13 09:20:35 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempxC2820.html
[2012-03-12 11:50:10 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempIX2944.html
[2012-03-11 16:47:12 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempRv3012.html
[2012-03-11 16:47:12 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempWe3012.html
[2012-03-11 15:43:15 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempSI2848.html
[2012-03-11 15:43:15 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempJF2848.html
[2012-03-11 15:32:16 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempHQ3124.html
[2012-03-11 15:32:16 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempIX3124.html
[2012-03-10 20:24:53 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempAh3040.html
[2012-03-10 12:30:07 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempzb2744.html
[2012-03-10 12:30:07 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempVH2744.html
[2012-03-09 02:26:19 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempOp2020.html
[2012-03-09 02:26:19 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempDa2020.html
[2012-03-09 00:17:47 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempEg2864.html
[2012-03-09 00:17:47 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempDw2864.html
[2012-03-07 09:33:38 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempsT2508.html
[2012-03-06 23:50:00 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempTb1084.html
[2012-03-06 23:50:00 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempNH1084.html
[2012-03-06 18:37:57 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempyK2008.html
[2012-03-06 18:37:57 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempNJ2008.html
[2012-03-06 15:22:36 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempEp2456.html
[2012-03-06 15:22:36 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempTJ2456.html
[2012-03-05 23:00:05 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempMn3000.html
[2012-03-05 23:00:05 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempUs3000.html
[2012-03-05 09:32:17 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempKU2776.html
[2012-03-04 11:07:35 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemptV2620.html
[2012-03-04 02:54:08 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Templk2600.html
[2012-03-04 02:54:08 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempAD2600.html
[2012-03-04 02:25:22 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempML3312.html
[2012-03-04 02:25:22 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempqD3312.html
[2012-03-03 23:29:14 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemprOd412.html
[2012-03-03 23:29:14 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempEUJ412.html
[2012-03-03 23:11:13 | 000,524,288 | -HS- | C] () -- C:\Users\User\ntuser.dat{8092f34b-6573-11e1-b294-0026189699a7}.TMContainer00000000000000000002.regtrans-ms
[2012-03-03 23:11:13 | 000,524,288 | -HS- | C] () -- C:\Users\User\ntuser.dat{8092f34b-6573-11e1-b294-0026189699a7}.TMContainer00000000000000000001.regtrans-ms
[2012-03-03 23:11:13 | 000,065,536 | -HS- | C] () -- C:\Users\User\ntuser.dat{8092f34b-6573-11e1-b294-0026189699a7}.TM.blf
[2012-03-03 22:58:40 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempqL2744.html
[2012-03-03 22:58:40 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempsA2744.html
[2012-03-03 13:31:50 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempcw1044.html
[2012-03-02 19:14:35 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempKQ2488.html
[2012-03-02 19:14:35 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempeo2488.html
[2012-03-02 11:57:13 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempQD2648.html
[2012-03-02 11:57:13 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempSp2648.html
[2012-03-01 15:06:35 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempPj2728.html
[2012-03-01 08:37:31 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempvf2552.html
[2012-02-29 16:36:36 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempDI1964.html
[2012-02-29 16:36:36 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempny1964.html
[2012-02-29 15:04:14 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempQc1912.html
[2012-02-29 15:04:14 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempvY1912.html
[2012-02-29 09:36:18 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempkk3100.html
[2012-02-28 12:11:45 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempyr2588.html
[2012-02-27 09:22:01 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempZn2780.html
[2012-02-26 09:42:09 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempkq2688.html
[2012-02-26 09:42:09 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempnh2688.html
[2012-02-25 12:58:42 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempCk2596.html
[2012-02-25 12:58:42 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempEW2596.html
[2012-02-24 08:27:58 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Temphm2456.html
[2012-02-24 00:11:04 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempdR2724.html
[2012-02-24 00:11:04 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempBt2724.html
[2012-02-23 11:45:01 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempkj1976.html
[2012-02-23 00:25:57 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempGX4068.html
[2012-02-22 23:36:42 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempdF2856.html
[2012-02-22 07:05:27 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempyJ2984.html
[2012-02-22 07:05:27 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempUx2984.html
[2012-02-21 21:57:06 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempQW2884.html
[2012-02-21 21:57:06 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempve2884.html
[2012-02-21 09:24:51 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemphS2820.html
[2012-02-21 09:24:51 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempmr2820.html
[2012-02-20 08:17:11 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempCt2552.html
[2012-02-20 08:17:11 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempnt2552.html
[2012-02-19 23:35:20 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempwR2752.html
[2012-02-19 23:35:20 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TemphU2752.html
[2012-02-19 08:24:14 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemptZ2504.html
[2012-02-19 08:24:14 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempRT2504.html
[2012-02-18 17:21:01 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempWq2504.html
[2012-02-18 17:21:01 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempXq2504.html
[2012-02-18 12:17:47 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempte2640.html
[2012-02-18 12:17:47 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempOZ2640.html
[2012-02-17 11:05:36 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemprR2804.html
[2012-02-17 11:05:36 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempTs2804.html
[2012-02-16 11:20:51 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempjU2652.html
[2012-02-16 11:20:51 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempKR2652.html
[2012-02-16 09:22:37 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempPF3144.html
[2012-02-15 21:44:38 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempYs2940.html
[2012-02-15 21:44:38 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempuI2940.html
[2012-02-15 14:52:03 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempid2552.html
[2012-02-15 14:52:03 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempix2552.html
[2012-02-15 11:40:40 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempbI2556.html
[2012-02-15 11:40:40 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Temprv2556.html
[2012-02-14 23:41:43 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempHr2864.html
[2012-02-14 23:41:42 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempOM2864.html
[2012-02-14 14:45:26 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempYx1912.html
[2012-02-14 14:45:26 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempPU1912.html
[2012-02-14 11:05:28 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempLl2468.html
[2012-02-14 11:05:28 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempNY2468.html
[2012-02-13 23:01:16 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempRZ2832.html
[2012-02-13 23:01:15 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempjO2832.html
[2012-02-13 12:07:28 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemprT2740.html
[2012-02-11 11:44:59 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempiD2504.html
[2012-02-10 14:38:49 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempEy2940.html
[2012-02-10 08:07:05 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempNW2096.html
[2012-02-09 16:42:36 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempmV2832.html
[2012-02-09 16:42:36 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempNn2832.html
[2012-02-09 12:29:36 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempuo2428.html
[2012-02-09 12:29:36 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempyi2428.html
[2012-02-08 21:48:33 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempyq2652.html
[2012-02-08 21:48:33 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempqO2652.html
[2012-02-08 11:25:39 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempRC1828.html
[2012-02-07 10:43:41 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempIL1980.html
[2012-02-06 17:08:07 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempEO2832.html
[2012-02-06 15:26:08 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemphY1912.html
[2012-02-06 09:23:04 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempLj1996.html
[2012-02-05 09:57:37 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempna2744.html
[2012-02-04 08:54:34 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempXg1964.html
[2012-02-03 21:29:30 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempbl2152.html
[2012-02-03 21:29:30 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempfn2152.html
[2012-02-03 17:22:16 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemplL1252.html
[2012-02-03 17:22:16 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempIx1252.html
[2012-02-03 00:28:57 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemptH2544.html
[2012-02-03 00:28:57 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Temppz2544.html
[2012-02-02 23:17:19 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemplB2824.html
[2012-02-02 23:17:19 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempBd2824.html
[2012-02-02 22:57:49 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempAg2492.html
[2012-02-02 22:57:49 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempca2492.html
[2012-02-02 08:10:38 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempZF2552.html
[2012-02-02 08:10:38 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempem2552.html
[2012-02-01 15:46:41 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Temprj2784.html
[2012-02-01 15:46:41 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempir2784.html
[2012-02-01 09:24:17 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempdk3196.html
[2012-02-01 09:24:17 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempUU3196.html
[2012-01-31 14:04:56 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempZi2940.html
[2012-01-31 14:04:56 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempMk2940.html
[2012-01-31 09:11:47 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempMg2548.html
[2012-01-31 07:00:24 | 000,016,896 | ---- | C] () -- C:\Windows\System32\kdbsdk32.dll
[2012-01-30 15:40:33 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Temphi2900.html
[2012-01-30 15:40:33 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempWa2900.html
[2012-01-30 13:05:46 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempHd2564.html
[2012-01-30 13:05:46 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempbq2564.html
[2012-01-30 08:51:48 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempiS2664.html
[2012-01-30 08:51:48 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TemplO2664.html
[2012-01-28 13:28:51 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempWa2308.html
[2012-01-28 13:28:51 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempgs2308.html
[2012-01-27 19:37:18 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempGx2520.html
[2012-01-27 19:37:18 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempRN2520.html
[2012-01-25 20:11:45 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempAU2624.html
[2012-01-25 20:11:45 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempjH2624.html
[2012-01-25 08:47:00 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemptS3660.html
[2012-01-25 08:47:00 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempip3660.html
[2012-01-24 20:14:56 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempSz3092.html
[2012-01-24 20:14:56 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempmB3092.html
[2012-01-24 11:14:47 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempAi3564.html
[2012-01-24 11:14:47 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempvH3564.html
[2012-01-23 23:31:43 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempYt1992.html
[2012-01-23 23:31:43 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempZk1992.html
[2012-01-23 12:54:39 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempiB2768.html
[2012-01-23 12:54:39 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempLO2768.html
[2012-01-23 12:30:05 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempdn3084.html
[2012-01-23 12:30:05 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempxT3084.html
[2012-01-22 09:52:32 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempmR2656.html
[2012-01-22 09:52:32 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Temppk2656.html
[2012-01-21 23:15:47 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempxp2736.html
[2012-01-21 23:15:47 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempyN2736.html
[2012-01-21 23:00:47 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempKV2756.html
[2012-01-21 23:00:47 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempHa2756.html
[2012-01-21 12:30:58 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempRq2556.html
[2012-01-21 12:30:58 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempEV2556.html
[2012-01-19 17:06:19 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempDv2652.html
[2012-01-19 17:06:19 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempQX2652.html
[2012-01-19 11:12:47 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempkm2560.html
[2012-01-19 11:12:47 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempCI2560.html
[2012-01-19 08:26:19 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempIV2340.html
[2012-01-19 08:26:19 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempRF2340.html
[2012-01-18 23:41:42 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempGb2620.html
[2012-01-18 23:41:42 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempcD2620.html
[2012-01-18 22:14:37 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempFG2600.html
[2012-01-18 22:14:37 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempng2600.html
[2012-01-18 09:17:44 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempYN1920.html
[2012-01-18 09:17:44 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempAS1920.html
[2012-01-18 01:22:07 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempKl2000.html
[2012-01-18 01:22:07 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempOF2000.html
[2012-01-16 15:17:26 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempDu2500.html
[2012-01-16 11:49:27 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempxo2448.html
[2012-01-16 11:49:27 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempKj2448.html
[2012-01-16 09:49:39 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempSs3300.html
[2012-01-16 09:49:39 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempAI3300.html
[2012-01-15 21:27:11 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempKB1732.html
[2012-01-15 21:27:11 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempHZ1732.html
[2012-01-15 14:44:31 | 000,122,880 | ---- | C] () -- C:\Windows\UnGins.exe
[2012-01-15 10:04:32 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempPS2484.html
[2012-01-15 10:04:32 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempJZ2484.html
[2012-01-14 15:36:22 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempUy2632.html
[2012-01-14 15:36:22 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempGM2632.html
[2012-01-13 12:35:19 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempaV2600.html
[2012-01-13 12:35:19 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempnh2600.html
[2012-01-12 18:07:26 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempYi2572.html
[2012-01-12 18:07:26 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempHz2572.html
[2012-01-11 12:54:14 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TemplJ2584.html
[2012-01-11 12:54:14 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TemplA2584.html
[2012-01-09 13:46:27 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempuA4056.html
[2012-01-09 13:46:27 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\Tempba4056.html
[2012-01-08 19:27:26 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempoq8804.html
[2012-01-08 19:27:26 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempFL8804.html
[2011-12-31 13:54:57 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempsO5968.html
[2011-12-31 13:54:57 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempOk5968.html
[2011-12-05 23:04:00 | 000,059,904 | ---- | C] () -- C:\Windows\System32\OpenVideo.dll
[2011-12-05 23:03:52 | 000,054,784 | ---- | C] () -- C:\Windows\System32\OVDecode.dll
[2011-11-26 13:08:18 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempqku836.html
[2011-11-26 13:08:18 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempGOJ836.html
[2011-11-11 19:21:06 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\TempZq3944.html
[2011-11-11 19:21:06 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempnJ3944.html
[2011-11-06 18:03:51 | 000,000,581 | ---- | C] () -- C:\Windows\eReg.dat
[2011-11-04 18:16:24 | 000,002,432 | ---- | C] () -- C:\Users\User\AppData\Local\Tempjt1432.html
[2011-11-04 18:16:24 | 000,002,089 | ---- | C] () -- C:\Users\User\AppData\Local\TempWA1432.html
[2011-10-30 21:33:04 | 000,108,824 | ---- | C] () -- C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
[2011-10-30 20:12:58 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011-10-30 20:12:57 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2011-10-30 20:12:51 | 000,881,664 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2011-10-30 20:12:51 | 000,205,824 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2011-10-30 20:12:48 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2011-10-30 20:12:48 | 000,000,547 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll.manifest
[2011-05-04 15:40:18 | 000,687,828 | ---- | C] () -- C:\Windows\System32\perfh015.dat
[2011-05-04 15:40:18 | 000,337,158 | ---- | C] () -- C:\Windows\System32\perfi015.dat
[2011-05-04 15:40:18 | 000,131,382 | ---- | C] () -- C:\Windows\System32\perfc015.dat
[2011-05-04 15:40:18 | 000,038,710 | ---- | C] () -- C:\Windows\System32\perfd015.dat
[2011-05-04 15:26:56 | 000,681,356 | ---- | C] () -- C:\Windows\System32\perfh013.dat
[2011-05-04 15:26:56 | 000,341,322 | ---- | C] () -- C:\Windows\System32\perfi013.dat
[2011-05-04 15:26:56 | 000,129,608 | ---- | C] () -- C:\Windows\System32\perfc013.dat
[2011-05-04 15:26:56 | 000,043,068 | ---- | C] () -- C:\Windows\System32\perfd013.dat
[2011-05-04 15:20:17 | 000,000,546 | ---- | C] () -- C:\Windows\System32\ABH17HV.DAT
[2011-05-04 15:19:44 | 000,014,344 | ---- | C] () -- C:\Windows\System32\drivers\PuAcpi32.sys
[2011-05-04 15:15:02 | 002,333,026 | ---- | C] () -- C:\Windows\System32\PerfStringBackup.INI
[2011-05-04 15:10:39 | 000,000,020 | -HS- | C] () -- C:\Users\User\ntuser.ini
[2011-05-04 15:10:38 | 000,524,288 | -HS- | C] () -- C:\Users\User\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms
[2011-05-04 15:10:38 | 000,524,288 | -HS- | C] () -- C:\Users\User\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms
[2011-05-04 15:10:38 | 000,065,536 | -HS- | C] () -- C:\Users\User\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf
[2011-05-04 15:10:37 | 002,097,152 | -HS- | C] () -- C:\Users\User\ntuser.dat
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011-11-14 00:03:00 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\BESTplayer
[2012-03-21 18:56:34 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Friday's games
[2011-11-04 18:16:21 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Gadu-Gadu 10
[2012-07-20 15:07:23 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\ipla
[2012-03-12 22:54:15 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\PlayFirst
[2012-07-18 17:47:24 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Sahmon Games
[2012-07-12 08:44:32 | 000,032,604 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >