OTL logfile created on: 2012-07-20 21:30:45 - Run 1 OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\Justyś\Desktop\Instalki Ultimate Edition (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.16562) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,75 Gb Total Physical Memory | 2,11 Gb Available Physical Memory | 76,95% Memory free 5,50 Gb Paging File | 4,91 Gb Available in Paging File | 89,36% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 48,83 Gb Total Space | 5,75 Gb Free Space | 11,78% Space Free | Partition Type: NTFS Drive D: | 184,06 Gb Total Space | 14,90 Gb Free Space | 8,09% Space Free | Partition Type: NTFS Computer Name: AUTO | User Name: Justyś | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-20 21:14:19 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Justyś\Desktop\Instalki\OTL.exe PRC - [2012-03-30 22:00:30 | 000,949,104 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe PRC - [2010-08-03 15:39:52 | 003,144,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-03-01 21:52:02 | 000,052,280 | ---- | M] () -- C:\Program Files\Eset\pr_imon.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2011-03-01 21:52:01 | 000,552,064 | ---- | M] (Eset ) [Auto | Stopped] -- C:\Program Files\Eset\nod32krn.exe -- (NOD32krn) SRV - [2009-07-23 18:23:56 | 000,178,720 | ---- | M] () [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe -- (nSvcIp) SRV - [2009-07-23 18:23:54 | 000,387,616 | ---- | M] () [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe -- (ForceWare Intelligent Application Manager (IAM)) ForceWare Intelligent Application Manager (IAM) SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2009-04-28 21:21:04 | 000,410,624 | ---- | M] (Conexant Systems, Inc.) [Auto | Stopped] -- C:\Windows\System32\XAudio32.dll -- (HsfXAudioService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\RtsUCcid.sys -- (USBCCID) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\Rts516xIR.sys -- (RtsUIR) DRV - [2012-01-02 09:27:29 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sptd.sys -- (sptd) DRV - [2011-03-01 21:52:01 | 000,512,096 | ---- | M] (Eset ) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\amon.sys -- (AMON) DRV - [2011-03-01 21:52:01 | 000,015,424 | ---- | M] () [Kernel | System | Stopped] -- C:\Windows\System32\drivers\nod32drv.sys -- (nod32drv) DRV - [2010-03-31 14:30:58 | 000,198,656 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbnet.sys -- (ewusbnet) DRV - [2010-03-31 14:30:58 | 000,102,912 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard) DRV - [2010-03-31 14:30:58 | 000,101,120 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbdev.sys -- (hwusbdev) DRV - [2009-08-12 07:19:18 | 000,066,592 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA) DRV - [2009-07-24 06:01:00 | 009,791,072 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2009-07-14 03:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus) DRV - [2009-07-14 03:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV - [2009-07-14 03:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc) DRV - [2009-07-14 01:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp) DRV - [2009-07-14 01:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap) DRV - [2009-07-14 01:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2009-07-14 00:02:52 | 000,347,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvm62x32.sys -- (NVENETFD) DRV - [2009-07-14 00:02:46 | 001,096,704 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr) DRV - [2009-07-01 13:20:54 | 000,287,392 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvmf6232.sys -- (NVNET) DRV - [2009-06-29 01:36:36 | 000,017,920 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvsmu.sys -- (nvsmu) DRV - [2009-06-14 20:46:22 | 000,475,648 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CHDRT32.sys -- (CnxtHdAudService) DRV - [2009-06-04 17:45:48 | 000,166,912 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV - [2009-04-29 08:46:54 | 000,015,872 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV - [2009-04-28 21:20:56 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\XAudio32.sys -- (XAudio) DRV - [2007-01-04 14:48:04 | 000,104,344 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e4usbaw.sys -- (e4usbaw) DRV - [2007-01-04 14:47:48 | 000,069,656 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\e4ldr.sys -- (E4LOADER) General Purpose USB Driver (e4ldr.sys) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = pl.v9.com/idg/idg_1330166738_266282 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = pl.v9.com/idg/idg_1330166738_266282 IE - HKLM\..\SearchScopes,DefaultScope = Yandex IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\Google: "URL" = http://www.google.ru/search?hl=ru&q={searchTerms}\ IE - HKLM\..\SearchScopes\Wikipedia: "URL" = http://ru.wikipedia.org/wiki/{searchTerms}\ IE - HKLM\..\SearchScopes\Yahoo: "URL" = http://ru.search.yahoo.com/search?p={searchTerms}\ IE - HKLM\..\SearchScopes\Yandex: "URL" = http://www.yandex.ru/yandsearch?stype=&nl=0&text={searchTerms}\ IE - HKU\S-1-5-21-2189750768-1742448291-703956433-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = pl.v9.com/idg/idg_1330166738_266282 IE - HKU\S-1-5-21-2189750768-1742448291-703956433-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = pl.v9.com/idg/idg_1330166738_266282 IE - HKU\S-1-5-21-2189750768-1742448291-703956433-1000\..\SearchScopes,DefaultScope = Yandex IE - HKU\S-1-5-21-2189750768-1742448291-703956433-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-2189750768-1742448291-703956433-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Oracle) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation) [2012-03-24 22:28:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Justyś\AppData\Roaming\mozilla\Extensions O1 HOSTS File: ([2009-06-10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O4 - HKLM..\Run: [jernjzyscmcswrf] C:\ProgramData\jernjzys.exe () O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG) O4 - HKLM..\Run: [nod32kui] C:\Program Files\Eset\nod32kui.exe (Eset ) O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [UpdateReminder] C:\Program Files\Eset\UpdateReminder.exe (ESET, spol. s r.o.) O4 - HKU\S-1-5-21-2189750768-1742448291-703956433-1000..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-2189750768-1742448291-703956433-1000..\Run: [GG] C:\Users\Justyś\AppData\Local\GG\Application\gghub.exe (GG Network S.A.) O4 - HKU\S-1-5-21-2189750768-1742448291-703956433-1000..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG) O4 - HKU\S-1-5-21-2189750768-1742448291-703956433-1000..\Run: [jernjzyscmcswrf] C:\ProgramData\jernjzys.exe () O4 - HKU\S-1-5-21-2189750768-1742448291-703956433-1000..\Run: [UpdateMyDrivers] C:\Program Files\SmartTweak Software\UpdateMyDrivers\UpdateMyDrivers.exe /ot /as /ss File not found O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-2189750768-1742448291-703956433-1000..\RunOnce: [FlashPlayerUpdate] C:\Windows\System32\Macromed\Flash\FlashUtil10h_Plugin.exe (Adobe Systems, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0 O7 - HKU\S-1-5-21-2189750768-1742448291-703956433-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\imon.dll (Eset ) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5F62457E-25B1-4A51-9FA5-AEB0A1291066}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{60EFD00D-D220-4CD5-BC04-86C5C55B66A7}: NameServer = 213.158.199.1 213.158.199.5 O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{57e92f28-3513-11e1-a85f-fd4a0dcebbc5}\Shell - "" = AutoRun O33 - MountPoints2\{57e92f28-3513-11e1-a85f-fd4a0dcebbc5}\Shell\AutoRun\command - "" = G:\Autorun.exe O33 - MountPoints2\{875ce116-840a-11e1-a587-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{875ce116-840a-11e1-a587-806e6f6e6963}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8df4599d-8edc-11e1-9ebe-e66cc317c7b2}\Shell - "" = AutoRun O33 - MountPoints2\{8df4599d-8edc-11e1-9ebe-e66cc317c7b2}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{bccc4f7b-a282-11e1-adba-96d2c08bc9c6}\Shell - "" = AutoRun O33 - MountPoints2\{bccc4f7b-a282-11e1-adba-96d2c08bc9c6}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{ca47a4cd-845c-11e1-b9ab-001e101f79c9}\Shell - "" = AutoRun O33 - MountPoints2\{ca47a4cd-845c-11e1-b9ab-001e101f79c9}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{ca47a4d8-845c-11e1-b9ab-001e101f79c9}\Shell - "" = AutoRun O33 - MountPoints2\{ca47a4d8-845c-11e1-b9ab-001e101f79c9}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{dbc4f38b-8496-11e1-b248-001e101f9843}\Shell - "" = AutoRun O33 - MountPoints2\{dbc4f38b-8496-11e1-b248-001e101f9843}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{dbc4f3a9-8496-11e1-b248-001e101f9843}\Shell - "" = AutoRun O33 - MountPoints2\{dbc4f3a9-8496-11e1-b248-001e101f9843}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{dbc4f3b4-8496-11e1-b248-001e101f9843}\Shell - "" = AutoRun O33 - MountPoints2\{dbc4f3b4-8496-11e1-b248-001e101f9843}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{dbc4f3c4-8496-11e1-b248-001e101f9843}\Shell - "" = AutoRun O33 - MountPoints2\{dbc4f3c4-8496-11e1-b248-001e101f9843}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{f8019c51-840a-11e1-a50f-cdfa0849a5c5}\Shell - "" = AutoRun O33 - MountPoints2\{f8019c51-840a-11e1-a50f-cdfa0849a5c5}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{f8019c76-840a-11e1-a50f-001e101f8924}\Shell - "" = AutoRun O33 - MountPoints2\{f8019c76-840a-11e1-a50f-001e101f8924}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\F\Shell - "" = AutoRun O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-19 21:11:26 | 000,000,000 | ---D | C] -- C:\ProgramData\irlrrmgaclvrhna [2012-06-28 20:50:00 | 002,422,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll [2012-06-28 20:50:00 | 000,045,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll [2012-06-28 20:49:50 | 000,577,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll [2012-06-28 20:49:50 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll [2012-06-28 20:49:50 | 000,035,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll [2012-06-28 20:49:42 | 000,171,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll [2012-06-28 20:49:42 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-20 21:12:04 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-07-20 16:44:26 | 000,000,248 | ---- | M] () -- C:\ProgramData\hpqp.ini [2012-07-20 16:43:28 | 134,290,672 | ---- | M] () -- C:\Windows\MEMORY.DMP [2012-07-19 22:34:28 | 000,016,944 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-07-19 22:34:28 | 000,016,944 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-07-19 21:29:15 | 000,687,828 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2012-07-19 21:29:15 | 000,666,732 | ---- | M] () -- C:\Windows\System32\perfh019.dat [2012-07-19 21:29:15 | 000,607,190 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012-07-19 21:29:15 | 000,131,382 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2012-07-19 21:29:15 | 000,128,892 | ---- | M] () -- C:\Windows\System32\perfc019.dat [2012-07-19 21:29:15 | 000,103,568 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012-07-19 21:11:39 | 000,053,248 | ---- | M] () -- C:\Users\Justyś\ms.exe [2012-07-19 21:11:29 | 000,000,051 | ---- | M] () -- C:\ProgramData\ljdmkrefuyascoi [2012-07-19 21:11:20 | 000,053,248 | ---- | M] () -- C:\ProgramData\jernjzys.exe [2012-07-19 21:11:20 | 000,053,248 | ---- | M] () -- C:\Users\Justyś\0.1753352509893481.exe [2012-07-19 20:47:53 | 000,002,432 | ---- | M] () -- C:\Users\Justyś\AppData\Local\Tempgh2044.html [2012-07-19 20:47:53 | 000,002,089 | ---- | M] () -- C:\Users\Justyś\AppData\Local\Tempzy2044.html [2012-07-19 20:17:47 | 000,002,432 | ---- | M] () -- C:\Users\Justyś\AppData\Local\TempAX2588.html [2012-07-19 20:17:47 | 000,002,089 | ---- | M] () -- C:\Users\Justyś\AppData\Local\TempJb2588.html [2012-07-19 19:34:52 | 000,000,012 | ---- | M] () -- C:\ProgramData\ReminderNextRun [2012-07-01 17:44:26 | 000,000,238 | ---- | M] () -- C:\Windows\mafosav.INI [2012-07-01 17:23:02 | 000,000,062 | ---- | M] () -- C:\Users\Justyś\AppData\Roaming\default.pls [2012-07-01 17:20:42 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini [2012-06-23 16:47:56 | 000,010,892 | ---- | M] () -- C:\Users\Justyś\Desktop\piłka.jpeg [2012-06-23 16:32:05 | 000,620,587 | ---- | M] () -- C:\Users\Justyś\Desktop\kosciol.JPG [2012-06-23 16:22:55 | 000,186,391 | ---- | M] () -- C:\Users\Justyś\Desktop\dworek2.jpg [2012-06-23 16:15:59 | 000,046,809 | ---- | M] () -- C:\Users\Justyś\Desktop\dworek.jpg [2012-06-23 16:05:05 | 000,018,463 | ---- | M] () -- C:\Users\Justyś\Desktop\logo-wszia-nazwa.png [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-20 16:43:28 | 134,290,672 | ---- | C] () -- C:\Windows\MEMORY.DMP [2012-07-19 21:11:39 | 000,053,248 | ---- | C] () -- C:\Users\Justyś\ms.exe [2012-07-19 21:11:28 | 000,053,248 | ---- | C] () -- C:\ProgramData\jernjzys.exe [2012-07-19 21:11:21 | 000,000,051 | ---- | C] () -- C:\ProgramData\ljdmkrefuyascoi [2012-07-19 21:11:20 | 000,053,248 | ---- | C] () -- C:\Users\Justyś\0.1753352509893481.exe [2012-07-19 20:47:53 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempgh2044.html [2012-07-19 20:47:53 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempzy2044.html [2012-07-19 20:16:48 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempAX2588.html [2012-07-19 20:16:48 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempJb2588.html [2012-06-23 16:47:56 | 000,010,892 | ---- | C] () -- C:\Users\Justyś\Desktop\piłka.jpeg [2012-06-23 16:32:05 | 000,620,587 | ---- | C] () -- C:\Users\Justyś\Desktop\kosciol.JPG [2012-06-23 16:22:48 | 000,186,391 | ---- | C] () -- C:\Users\Justyś\Desktop\dworek2.jpg [2012-06-23 16:15:59 | 000,046,809 | ---- | C] () -- C:\Users\Justyś\Desktop\dworek.jpg [2012-06-23 16:05:05 | 000,018,463 | ---- | C] () -- C:\Users\Justyś\Desktop\logo-wszia-nazwa.png [2012-03-30 22:53:49 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempEE2292.html [2012-03-30 22:53:49 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempfo2292.html [2012-03-30 21:53:07 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempfC2956.html [2012-03-30 21:53:07 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempsB2956.html [2012-03-30 15:40:47 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempLV3292.html [2012-03-30 15:40:47 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempTr3292.html [2012-03-30 09:07:12 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempJV2784.html [2012-03-30 09:07:12 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempjo2784.html [2012-03-30 06:56:02 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempKJ3276.html [2012-03-30 06:56:02 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempHp3276.html [2012-03-29 19:31:16 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempwu3632.html [2012-03-29 19:31:16 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempqn3632.html [2012-03-29 18:09:06 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempyD3956.html [2012-03-29 18:09:06 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempBI3956.html [2012-03-29 16:51:04 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempEh3956.html [2012-03-29 16:51:04 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempqj3956.html [2012-03-29 08:16:18 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempPH2324.html [2012-03-29 08:16:18 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempyZ2324.html [2012-03-29 07:05:33 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempTE4016.html [2012-03-29 07:05:33 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempKW4016.html [2012-03-28 22:36:21 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempZw2628.html [2012-03-28 22:36:21 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Templl2628.html [2012-03-28 21:33:07 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempMr3816.html [2012-03-28 21:33:07 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempdf3816.html [2012-03-28 18:53:51 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempmL3660.html [2012-03-28 18:53:51 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempwC3660.html [2012-03-28 14:15:21 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempHc3660.html [2012-03-28 14:15:21 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempXR3660.html [2012-03-28 09:12:31 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempVC3660.html [2012-03-28 09:12:31 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempEd3660.html [2012-03-28 06:54:15 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempsHq956.html [2012-03-28 06:54:15 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TemptHm956.html [2012-03-27 22:21:12 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempBq1112.html [2012-03-27 22:21:12 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempBC1112.html [2012-03-27 18:51:27 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Temptb2456.html [2012-03-27 18:51:27 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempdQ2456.html [2012-03-27 16:40:02 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempaO2456.html [2012-03-27 16:40:02 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempbs2456.html [2012-03-27 15:41:14 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempAw3964.html [2012-03-27 15:41:13 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempod3964.html [2012-03-26 15:36:40 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempdi3960.html [2012-03-26 15:36:40 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempan3960.html [2012-03-26 14:15:07 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempRR2060.html [2012-03-26 14:15:07 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempLu2060.html [2012-03-26 14:08:46 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempsx3392.html [2012-03-26 14:08:46 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempWP3392.html [2012-03-26 09:13:30 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempcS3392.html [2012-03-26 09:13:30 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempHL3392.html [2012-03-25 22:23:13 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempYB2148.html [2012-03-25 22:23:13 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempBX2148.html [2012-03-25 19:54:53 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempyy3492.html [2012-03-25 19:54:53 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempsc3492.html [2012-03-25 13:30:08 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempRI3788.html [2012-03-25 13:30:08 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempLf3788.html [2012-03-25 10:28:37 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempve2108.html [2012-03-25 10:28:37 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempkO2108.html [2012-03-25 00:10:02 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempdk3728.html [2012-03-25 00:10:02 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempLH3728.html [2012-03-24 19:36:04 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempBC1700.html [2012-03-24 19:36:04 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempjt1700.html [2012-03-24 16:22:10 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Temphd4044.html [2012-03-24 16:22:10 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempxq4044.html [2012-03-24 16:18:33 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempMg4044.html [2012-03-24 16:18:33 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempdv4044.html [2012-03-24 15:36:18 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempGc3756.html [2012-03-24 15:36:18 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempDy3756.html [2012-03-24 14:20:08 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempKJ3408.html [2012-03-24 14:20:08 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempwC3408.html [2012-03-24 13:20:30 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempIjH968.html [2012-03-24 13:20:30 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempJhT968.html [2012-03-24 11:16:17 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempKL2856.html [2012-03-24 11:16:17 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempaF2856.html [2012-03-24 10:33:04 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempEA3420.html [2012-03-23 23:18:59 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempqV2564.html [2012-03-23 21:41:31 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempvd4044.html [2012-03-23 21:41:31 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempJJ4044.html [2012-03-23 19:26:57 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempKZ4044.html [2012-03-23 19:26:57 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempAM4044.html [2012-03-23 19:08:05 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempre2504.html [2012-03-23 17:31:55 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TemptN3764.html [2012-03-23 17:31:55 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempUC3764.html [2012-03-23 15:08:27 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempxp2720.html [2012-03-23 15:08:27 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempvO2720.html [2012-03-23 14:54:53 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Templz2720.html [2012-03-23 14:54:53 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempqF2720.html [2012-03-23 14:46:41 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempaU3704.html [2012-03-23 14:46:41 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempgY3704.html [2012-03-23 10:31:35 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempwna256.html [2012-03-23 10:31:35 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempffj256.html [2012-03-23 00:02:36 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempQy1168.html [2012-03-23 00:02:36 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempQz1168.html [2012-03-22 15:01:58 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempRbz200.html [2012-03-22 15:01:58 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempqkC200.html [2012-03-22 07:13:00 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempPL2864.html [2012-03-22 07:13:00 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempHG2864.html [2012-03-22 00:26:37 | 000,000,062 | ---- | C] () -- C:\Users\Justyś\AppData\Roaming\default.pls [2012-03-21 10:33:12 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempmR2464.html [2012-03-21 10:33:12 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempdt2464.html [2012-03-20 22:03:01 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempTz3692.html [2012-03-20 22:03:01 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempAp3692.html [2012-03-20 19:51:40 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempEJ3692.html [2012-03-20 19:51:40 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempZW3692.html [2012-03-20 15:27:52 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempJU3692.html [2012-03-20 15:27:52 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempqs3692.html [2012-03-20 15:07:25 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempQT3692.html [2012-03-20 15:07:25 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempvD3692.html [2012-03-20 14:57:27 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempMCE460.html [2012-03-20 14:57:27 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempIrI460.html [2012-03-20 08:05:12 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TemppS3576.html [2012-03-20 08:05:12 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempbP3576.html [2012-03-19 14:45:41 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempBJ2856.html [2012-03-19 14:45:41 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempvw2856.html [2012-03-19 09:28:04 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempLN2856.html [2012-03-19 09:28:04 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempjP2856.html [2012-03-19 08:03:23 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Temppr2720.html [2012-03-19 08:03:23 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempcu2720.html [2012-03-18 21:41:36 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempgV3340.html [2012-03-18 21:41:36 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempiv3340.html [2012-03-18 17:03:10 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempIX3340.html [2012-03-18 17:03:10 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Temppx3340.html [2012-03-18 15:47:21 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempYZ3676.html [2012-03-18 15:47:21 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempUi3676.html [2012-03-18 12:34:44 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempmw1488.html [2012-03-18 12:34:44 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempjC1488.html [2012-03-17 22:57:14 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempCC2948.html [2012-03-17 22:57:14 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempIo2948.html [2012-03-17 17:18:32 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempfe3276.html [2012-03-17 17:18:32 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempNa3276.html [2012-03-17 14:48:59 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempxY3276.html [2012-03-17 14:48:59 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempSG3276.html [2012-03-16 20:27:25 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempBg2964.html [2012-03-16 20:27:25 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempFU2964.html [2012-03-16 19:53:11 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempCJ2408.html [2012-03-16 19:53:11 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempDI2408.html [2012-03-16 19:25:57 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempwZ1156.html [2012-03-16 19:25:57 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempio1156.html [2012-03-15 20:44:23 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempiA2900.html [2012-03-15 20:44:23 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempce2900.html [2012-03-15 14:53:49 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempNm2552.html [2012-03-15 14:53:49 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempFz2552.html [2012-03-15 00:55:29 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempJH2088.html [2012-03-15 00:55:29 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempLa2088.html [2012-03-14 19:38:21 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempmk3568.html [2012-03-14 19:38:21 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempIC3568.html [2012-03-14 17:18:45 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TemprE3428.html [2012-03-14 17:18:45 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempmV3428.html [2012-03-14 13:10:36 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempXG3600.html [2012-03-14 13:10:36 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempnA3600.html [2012-03-13 21:27:40 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempMCl688.html [2012-03-13 21:27:40 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempVMh688.html [2012-03-13 19:31:56 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempVwl520.html [2012-03-13 19:31:56 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempwPF520.html [2012-03-13 10:25:46 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempPL4012.html [2012-03-13 10:25:46 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempZh4012.html [2012-03-12 23:35:10 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempyw2692.html [2012-03-12 23:35:10 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempAW2692.html [2012-03-12 22:33:13 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempNeE552.html [2012-03-12 22:33:13 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempZpn552.html [2012-03-12 21:49:35 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempDPx552.html [2012-03-12 21:49:35 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempZTj552.html [2012-03-12 21:29:54 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempiw2440.html [2012-03-12 21:29:54 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempcT2440.html [2012-03-12 18:40:55 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TemprUv824.html [2012-03-12 18:40:55 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempIrk824.html [2012-03-12 15:28:44 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempZe2532.html [2012-03-12 15:28:44 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempEd2532.html [2012-03-12 07:49:47 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempSZ1776.html [2012-03-12 01:01:59 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempeu2952.html [2012-03-12 01:01:59 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempQD2952.html [2012-03-11 21:47:16 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempci2816.html [2012-03-11 21:47:16 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempCR2816.html [2012-03-11 20:45:08 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempxw2644.html [2012-03-11 20:45:08 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempSK2644.html [2012-03-11 14:44:40 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempYT2640.html [2012-03-11 14:44:40 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempFF2640.html [2012-03-10 20:35:07 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempuK3736.html [2012-03-10 20:35:07 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempHg3736.html [2012-03-10 18:29:29 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempwR2180.html [2012-03-10 18:29:29 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempSB2180.html [2012-03-10 00:55:59 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempCp3204.html [2012-03-10 00:55:59 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempLP3204.html [2012-03-09 01:22:16 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempXr3204.html [2012-03-09 01:22:16 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempIo3204.html [2012-03-08 20:30:46 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempoZ3204.html [2012-03-08 20:30:46 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempPt3204.html [2012-03-08 15:19:23 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempbg3724.html [2012-03-08 15:19:23 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TemphT3724.html [2012-03-07 20:04:01 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempRC1260.html [2012-03-07 20:04:01 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempKF1260.html [2012-03-07 18:41:52 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempBz1260.html [2012-03-07 18:41:52 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempxL1260.html [2012-03-07 13:39:39 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempmL3824.html [2012-03-07 13:39:39 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempXS3824.html [2012-03-06 23:05:34 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempKyO800.html [2012-03-06 23:05:34 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempuMt800.html [2012-03-06 20:34:14 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempeq2932.html [2012-03-06 20:34:14 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempbD2932.html [2012-03-06 15:30:22 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempMx2932.html [2012-03-06 15:30:22 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempXW2932.html [2012-03-06 13:48:32 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempBk3016.html [2012-03-06 13:48:32 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempsM3016.html [2012-03-06 13:06:36 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempsF1852.html [2012-03-06 13:06:36 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempnR1852.html [2012-03-05 20:49:11 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempSE1208.html [2012-03-05 20:49:11 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempDl1208.html [2012-03-05 11:17:55 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempCXW264.html [2012-03-05 11:17:55 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TemphNx264.html [2012-03-04 22:06:57 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempXa3160.html [2012-03-04 22:06:57 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempRF3160.html [2012-03-04 16:00:24 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempti1012.html [2012-03-04 16:00:24 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempnH1012.html [2012-03-04 14:38:29 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempxf2580.html [2012-03-04 14:38:29 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempWG2580.html [2012-03-04 12:11:15 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempTZ2144.html [2012-03-04 12:11:15 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempur2144.html [2012-03-04 01:16:05 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TemprO2716.html [2012-03-04 01:16:04 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempbs2716.html [2012-03-03 22:57:58 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempiT3720.html [2012-03-03 22:57:58 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempwi3720.html [2012-03-03 18:54:48 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempnI2240.html [2012-03-03 18:54:48 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempue2240.html [2012-03-03 17:46:34 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TemptC3968.html [2012-03-03 17:46:34 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempNw3968.html [2012-03-03 14:37:45 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempOh3968.html [2012-03-03 14:37:45 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Temprr3968.html [2012-03-03 13:14:45 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempuf3968.html [2012-03-03 13:14:45 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempFl3968.html [2012-03-03 12:47:51 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempFI3352.html [2012-03-03 12:47:51 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempiD3352.html [2012-03-02 19:15:20 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempjG4036.html [2012-03-02 19:15:20 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempdB4036.html [2012-03-02 17:51:36 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempDy4036.html [2012-03-02 17:51:36 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempgK4036.html [2012-03-01 21:13:15 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempbh3584.html [2012-03-01 21:13:15 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempXS3584.html [2012-03-01 21:03:43 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempCm3584.html [2012-03-01 21:03:43 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempQo3584.html [2012-03-01 19:53:32 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempEB2132.html [2012-03-01 19:53:32 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempXf2132.html [2012-03-01 19:09:30 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempCh2144.html [2012-03-01 19:09:30 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempbq2144.html [2012-02-29 18:34:24 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempFv1724.html [2012-02-29 18:34:24 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempBM1724.html [2012-02-29 15:49:37 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempnW1724.html [2012-02-29 15:49:37 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempDc1724.html [2012-02-29 15:49:13 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempwk1724.html [2012-02-29 15:49:13 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TemphW1724.html [2012-02-29 14:36:47 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempsb3564.html [2012-02-29 14:36:47 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempRo3564.html [2012-02-29 11:22:54 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempAE3564.html [2012-02-29 11:22:54 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempCf3564.html [2012-02-28 23:12:44 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempnu3564.html [2012-02-28 23:12:44 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempFD3564.html [2012-02-28 20:27:43 | 000,009,653 | ---- | C] () -- C:\Users\Justyś\.recently-used.xbel [2012-02-28 20:06:27 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempXN3564.html [2012-02-28 20:06:27 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempTZ3564.html [2012-02-28 19:51:11 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempBj3564.html [2012-02-28 19:51:11 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempYg3564.html [2012-02-28 18:33:39 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempPU3820.html [2012-02-28 18:33:39 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempzX3820.html [2012-02-28 17:06:41 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempjN1492.html [2012-02-28 17:06:41 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempQZ1492.html [2012-02-28 11:31:24 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempHp3464.html [2012-02-28 11:31:24 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Temprr3464.html [2012-02-27 23:06:28 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempCn1784.html [2012-02-27 23:06:28 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempqN1784.html [2012-02-26 20:17:35 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempZG2020.html [2012-02-26 20:17:35 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempGv2020.html [2012-02-26 17:19:29 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempLX4044.html [2012-02-26 17:19:29 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempSL4044.html [2012-02-26 05:15:04 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempvu4044.html [2012-02-26 05:15:04 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempBH4044.html [2012-02-25 23:00:52 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TemppV2544.html [2012-02-25 23:00:52 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempmc2544.html [2012-02-25 21:46:16 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempXp2544.html [2012-02-25 21:46:16 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempww2544.html [2012-02-25 20:49:45 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TemppU3688.html [2012-02-25 20:49:45 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempcD3688.html [2012-02-25 00:43:09 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TemplS3688.html [2012-02-25 00:43:09 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempYb3688.html [2012-02-25 00:33:33 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempLE1388.html [2012-02-25 00:33:33 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempyT1388.html [2012-02-24 22:58:25 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempgN2220.html [2012-02-24 22:58:25 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempUL2220.html [2012-02-24 21:28:47 | 000,000,238 | ---- | C] () -- C:\Windows\mafosav.INI [2012-02-24 02:27:46 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempcs2600.html [2012-02-24 02:27:46 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempgn2600.html [2012-02-24 02:19:54 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempHw2404.html [2012-02-24 02:19:54 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TemppO2404.html [2012-02-23 23:20:01 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempCC2340.html [2012-02-23 23:20:01 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempQo2340.html [2012-02-23 23:15:43 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempto3224.html [2012-02-23 23:15:43 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempAR3224.html [2012-02-23 23:07:13 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempei2004.html [2012-02-23 23:07:13 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempwm2004.html [2012-02-23 21:18:33 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Temptf2032.html [2012-02-23 21:18:33 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempuq2032.html [2012-02-23 20:54:16 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2012-02-23 20:42:36 | 000,001,024 | ---- | C] () -- C:\Users\Justyś\.rnd [2012-02-23 19:15:35 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempmnh876.html [2012-02-23 19:15:35 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempJOx876.html [2012-02-23 17:40:22 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TemprO3964.html [2012-02-23 17:40:22 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempfq3964.html [2012-02-23 15:01:31 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempNF1764.html [2012-02-23 15:01:31 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempnK1764.html [2012-02-23 13:43:25 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempwT2300.html [2012-02-23 13:43:25 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempWR2300.html [2012-02-23 13:27:05 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempzH3780.html [2012-02-23 13:27:05 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempRM3780.html [2012-02-23 12:11:10 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempXg2660.html [2012-02-23 12:11:10 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempXZ2660.html [2012-02-23 11:53:18 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempcn4052.html [2012-02-23 11:53:18 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempbb4052.html [2012-02-22 23:27:43 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TemptW3600.html [2012-02-22 23:27:43 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempnt3600.html [2012-02-22 23:06:16 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempnQ2348.html [2012-02-22 23:06:16 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempXV2348.html [2012-02-22 22:28:09 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempnln740.html [2012-02-22 22:28:09 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Temprzp740.html [2012-02-22 21:38:47 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempUk1764.html [2012-02-22 21:38:47 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempMQ1764.html [2012-02-22 13:42:34 | 000,000,012 | ---- | C] () -- C:\ProgramData\ReminderNextRun [2012-02-22 12:59:43 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempqp3580.html [2012-02-22 12:59:43 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempBf3580.html [2012-01-10 19:51:17 | 000,013,312 | ---- | C] () -- C:\Users\Justyś\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-01-03 09:28:06 | 002,570,286 | ---- | C] () -- C:\Windows\System32\abgx360.exe [2012-01-02 10:56:38 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempOd3604.html [2012-01-02 10:56:38 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempSa3604.html [2012-01-02 10:54:01 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempgZ3844.html [2012-01-02 10:54:01 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempWR3844.html [2012-01-02 10:15:31 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempUW2908.html [2012-01-02 10:15:31 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Templf2908.html [2012-01-02 10:11:14 | 000,002,432 | ---- | C] () -- C:\Users\Justyś\AppData\Local\Tempgy2004.html [2012-01-02 10:11:14 | 000,002,089 | ---- | C] () -- C:\Users\Justyś\AppData\Local\TempOo2004.html [2011-12-31 19:54:43 | 000,006,656 | ---- | C] () -- C:\Windows\System32\bcmwlrc.dll [2011-12-30 20:00:22 | 000,373,040 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2011-03-02 08:48:37 | 000,000,169 | ---- | C] () -- C:\Windows\adidsl.ini [2011-03-02 08:48:37 | 000,000,021 | ---- | C] () -- C:\Windows\Fast800.ini [2011-03-02 08:48:29 | 000,253,008 | ---- | C] () -- C:\Windows\adirasx64.exe [2011-03-02 08:48:29 | 000,194,128 | ---- | C] () -- C:\Windows\adiras.exe [2011-03-02 08:48:29 | 000,127,456 | ---- | C] () -- C:\Windows\System32\IPDETECT.EXE [2011-03-02 08:48:27 | 000,152,308 | ---- | C] () -- C:\Windows\System32\drivers\L1E4I2.BIN [2011-03-02 08:48:27 | 000,152,306 | ---- | C] () -- C:\Windows\System32\drivers\L1E4I1.BIN [2011-03-02 08:48:27 | 000,152,306 | ---- | C] () -- C:\Windows\System32\drivers\L1E4I0.BIN [2011-03-02 08:48:27 | 000,152,146 | ---- | C] () -- C:\Windows\System32\drivers\L1E4P2.BIN [2011-03-02 08:48:27 | 000,152,145 | ---- | C] () -- C:\Windows\System32\drivers\L1E4P1.BIN [2011-03-02 08:48:27 | 000,152,145 | ---- | C] () -- C:\Windows\System32\drivers\L1E4P0.BIN [2011-03-02 08:48:27 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9P2.BIN [2011-03-02 08:48:27 | 000,152,036 | ---- | C] () -- C:\Windows\System32\drivers\L1E4D2.BIN [2011-03-02 08:48:27 | 000,152,034 | ---- | C] () -- C:\Windows\System32\drivers\L1E4D1.BIN [2011-03-02 08:48:27 | 000,046,892 | ---- | C] () -- C:\Windows\System32\ADADIX16.DLL [2011-03-02 08:48:27 | 000,024,576 | ---- | C] () -- C:\Windows\enddisk32.exe [2011-03-02 08:48:26 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9P1.BIN [2011-03-02 08:48:26 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9P0.BIN [2011-03-02 08:48:26 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9I2.BIN [2011-03-02 08:48:26 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9I1.BIN [2011-03-02 08:48:26 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9I0.BIN [2011-03-02 08:48:26 | 000,152,034 | ---- | C] () -- C:\Windows\System32\drivers\L1E4D0.BIN [2011-03-02 08:48:26 | 000,022,395 | ---- | C] () -- C:\Windows\System32\drivers\fpga.bin [2011-03-01 21:58:54 | 000,000,990 | ---- | C] () -- C:\Windows\adiras.ini [2011-03-01 21:52:28 | 000,015,424 | ---- | C] () -- C:\Windows\System32\drivers\nod32drv.sys [2011-03-01 21:04:56 | 000,006,136 | ---- | C] () -- C:\Windows\System32\drivers\nvphy.bin [2011-03-01 20:50:34 | 000,000,248 | ---- | C] () -- C:\ProgramData\hpqp.ini [2010-08-03 00:05:14 | 000,337,158 | ---- | C] () -- C:\Windows\System32\perfi015.dat [2010-08-03 00:05:13 | 000,687,828 | ---- | C] () -- C:\Windows\System32\perfh015.dat [2010-08-03 00:05:13 | 000,131,382 | ---- | C] () -- C:\Windows\System32\perfc015.dat [2010-08-03 00:05:13 | 000,038,710 | ---- | C] () -- C:\Windows\System32\perfd015.dat [color=#E56717]========== LOP Check ==========[/color] [2012-05-12 14:15:10 | 000,000,000 | ---D | M] -- C:\Users\Justyś\AppData\Roaming\abgx360 [2012-01-10 19:50:32 | 000,000,000 | ---D | M] -- C:\Users\Justyś\AppData\Roaming\CometPlayer [2012-01-02 09:43:52 | 000,000,000 | ---D | M] -- C:\Users\Justyś\AppData\Roaming\DAEMON Tools Lite [2012-02-28 23:12:44 | 000,000,000 | ---D | M] -- C:\Users\Justyś\AppData\Roaming\Gadu-Gadu 10 [2012-07-19 20:15:18 | 000,000,000 | ---D | M] -- C:\Users\Justyś\AppData\Roaming\GG [2012-02-28 20:27:43 | 000,000,000 | ---D | M] -- C:\Users\Justyś\AppData\Roaming\gtk-2.0 [2012-03-03 18:37:58 | 000,000,000 | ---D | M] -- C:\Users\Justyś\AppData\Roaming\ImgBurn [2012-02-27 16:18:16 | 000,000,000 | ---D | M] -- C:\Users\Justyś\AppData\Roaming\OpenFM [2011-03-02 09:07:30 | 000,000,000 | ---D | M] -- C:\Users\Justyś\AppData\Roaming\Opera [2012-01-02 10:06:18 | 000,000,000 | ---D | M] -- C:\Users\Justyś\AppData\Roaming\PDF Writer [2012-01-10 19:51:57 | 000,000,000 | ---D | M] -- C:\Users\Justyś\AppData\Roaming\tigerplayer [2012-07-19 21:15:55 | 000,000,000 | ---D | M] -- C:\Users\Justyś\AppData\Roaming\uTorrent [2012-04-25 15:43:25 | 000,032,602 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >