OTL logfile created on: 2012-07-24 20:28:19 - Run 1
OTL by OldTimer - Version 3.2.54.1     Folder = C:\Users\USER\Downloads
64bit- Enterprise Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,50 Gb Total Physical Memory | 2,31 Gb Available Physical Memory | 66,01% Memory free
7,00 Gb Paging File | 5,84 Gb Available in Paging File | 83,52% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 244,14 Gb Total Space | 44,14 Gb Free Space | 18,08% Space Free | Partition Type: NTFS
Drive D: | 221,52 Gb Total Space | 59,80 Gb Free Space | 26,99% Space Free | Partition Type: NTFS
Drive E: | 494,24 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: USER-KOMPUTER | User Name: USER | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 1 Day
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-24 20:20:30 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\USER\Downloads\OTL.exe
PRC - [2012-07-18 08:41:47 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-07-18 08:41:46 | 002,003,424 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2009-11-11 06:58:54 | 000,202,752 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2009-10-27 18:16:32 | 000,117,584 | ---- | M] (Devguru Co., Ltd.) [Auto | Stopped] -- C:\Windows\SysNative\dgdersvc.exe -- (dgdersvc)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012-07-18 08:41:46 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-07-05 18:41:46 | 003,048,136 | ---- | M] (Skype Technologies S.A.) [Auto | Stopped] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012-06-27 12:29:24 | 002,369,960 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012-06-20 10:27:47 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012-03-03 17:49:49 | 000,076,888 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2012-02-29 09:50:48 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2010-07-17 09:18:56 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2010-04-08 15:22:11 | 000,181,312 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Photodex\ProShowProducer\ScsiAccess.exe -- (ScsiAccess)
SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Stopped] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2009-10-26 15:40:00 | 000,095,568 | ---- | M] (Devguru Co., Ltd.) [Auto | Stopped] -- C:\Windows\SysWOW64\dgdersvc.exe -- (dgdersvc)
SRV - [2009-08-24 15:38:06 | 000,068,136 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE -- (ES lite Service)
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2012-04-26 12:25:03 | 000,269,904 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (AvgLdx64)
DRV:[b]64bit:[/b] - [2012-02-15 12:01:50 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:[b]64bit:[/b] - [2011-09-13 14:46:26 | 000,035,664 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (AvgMfx64)
DRV:[b]64bit:[/b] - [2011-08-17 09:43:40 | 000,314,016 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:[b]64bit:[/b] - [2011-08-17 09:43:39 | 000,043,680 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:[b]64bit:[/b] - [2011-05-05 15:49:06 | 000,317,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (AvgTdiA)
DRV:[b]64bit:[/b] - [2010-07-02 20:37:29 | 000,828,912 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2010-03-06 15:48:28 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin)
DRV:[b]64bit:[/b] - [2009-12-06 12:24:22 | 000,224,920 | ---- | M] (SysProgs.org) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BazisVirtualCDBus.sys -- (BazisVirtualCDBus)
DRV:[b]64bit:[/b] - [2009-11-11 07:34:52 | 006,108,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:[b]64bit:[/b] - [2009-10-27 18:16:32 | 000,020,568 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dgderdrv.sys -- (dgderdrv)
DRV:[b]64bit:[/b] - [2009-09-30 10:47:38 | 000,016,392 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TFsExDisk.sys -- (TFsExDisk)
DRV:[b]64bit:[/b] - [2009-07-30 13:58:42 | 000,236,544 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2009-07-17 20:52:00 | 000,201,472 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-05-18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:[b]64bit:[/b] - [2009-03-18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:[b]64bit:[/b] - [2009-02-17 19:11:25 | 000,031,400 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:[b]64bit:[/b] - [2007-02-16 02:57:06 | 000,040,648 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2012-07-24 20:24:15 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2010-01-29 12:40:16 | 000,115,600 | ---- | M] (EZB Systems, Inc.) [File_System | System | Stopped] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive)
DRV - [2009-10-26 15:40:00 | 000,018,136 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2009-09-30 10:47:38 | 000,016,392 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys -- (TFsExDisk)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009-02-28 20:40:18 | 000,146,928 | ---- | M] (CyberLink Corp.) [2010/02/25 13:39:59] [Kernel | Auto | Stopped] -- C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl -- ({B154377D-700F-42cc-9474-23858FBDF4BD})
DRV - [2007-02-16 02:57:06 | 000,040,648 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\ElbyCDFL.sys -- (ElbyCDFL)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2405280
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-3485034920-2337340962-2755768679-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-3485034920-2337340962-2755768679-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3485034920-2337340962-2755768679-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.defaultthis.engineName: "Softonic-Eng7 Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.wp.pl/"
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.911
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.10
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.2
FF - prefs.js..extensions.enabledItems: searchrecs@veoh.com:1.5.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}:3.3.3.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.3.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..extensions.enabledItems: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.6.0.8442
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}:6.0.30
FF - prefs.js..keyword.URL: "http://search.babylon.com/?affID=113480&tt=010712_2&babsrc=KW_ss&mntrId=b2978bf60000000000006cf049078e64&q="
 
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_262.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.116.0: C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\USER\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files (x86)\AVG\AVG9\Firefox [2011-09-13 17:59:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-07-18 08:41:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-04-11 12:13:53 | 000,000,000 | ---D | M]
 
[2010-02-25 14:46:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\USER\AppData\Roaming\mozilla\Extensions
[2012-07-18 19:13:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\9ullbtbm.default\extensions
[2011-06-07 17:04:05 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\9ullbtbm.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2012-07-15 18:10:06 | 000,000,000 | ---D | M] (ST-Eng7 Community Toolbar) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\9ullbtbm.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}
[2010-05-01 10:10:56 | 000,000,000 | ---D | M] (Veoh Video Compass) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\9ullbtbm.default\extensions\searchrecs@veoh.com
[2012-06-22 11:31:48 | 000,001,959 | ---- | M] () -- C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\9ullbtbm.default\searchplugins\lastfm.xml
[2012-04-26 15:58:11 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012-07-22 23:06:45 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012-07-18 19:13:05 | 000,339,888 | ---- | M] () (No name found) -- C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9ULLBTBM.DEFAULT\EXTENSIONS\{19503E42-CA3C-4C27-B1E2-9CDB2170EE34}.XPI
[2012-06-21 11:49:59 | 000,010,586 | ---- | M] () (No name found) -- C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\9ULLBTBM.DEFAULT\EXTENSIONS\SUBMIT@WONTUBE.COM.XPI
[2012-07-18 08:41:47 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010-02-15 11:59:20 | 000,931,328 | ---- | M] (Ganymede Technologies) -- C:\Program Files (x86)\mozilla firefox\plugins\NPBOARDS.dll
[2012-04-13 14:20:35 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2009-12-18 02:31:54 | 000,063,488 | ---- | M] (Nullsoft) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll
[2012-06-18 08:37:51 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2012-07-09 10:58:35 | 000,002,351 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2012-06-18 08:37:51 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2012-06-18 08:37:51 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2012-06-18 08:37:51 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2012-06-18 08:37:51 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-06-18 08:37:51 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2010-10-13 17:14:00 | 000,000,988 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 serial.alcohol-soft.com
O1 - Hosts: 127.0.0.1 www.alcohol-soft.com
O1 - Hosts: 127.0.0.1 images.alcohol-soft.com
O1 - Hosts: 127.0.0.1 trial.alcohol-soft.com
O1 - Hosts: 127.0.0.1 alcohol-soft.com
O2:[b]64bit:[/b] - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (FlashGetBHO) - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Users\USER\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll (Trend Media Group)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll File not found
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG9_TRAY] C:\PROGRA~2\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [fhinszpzbdiukai] C:\ProgramData\fhinszpz.exe ()
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3485034920-2337340962-2755768679-1000..\Run: [fhinszpzbdiukai] C:\ProgramData\fhinszpz.exe ()
O4 - HKU\S-1-5-21-3485034920-2337340962-2755768679-1000..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG)
O4 - HKU\S-1-5-21-3485034920-2337340962-2755768679-1000..\Run: [KiesTrayAgent]  File not found
O4 - HKU\S-1-5-21-3485034920-2337340962-2755768679-1000..\Run: [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent File not found
O4 - HKU\S-1-5-21-3485034920-2337340962-2755768679-1000..\Run: [Steam] C:\Program Files (x86)\Valve\Steam\steam.exe (Valve Corporation)
O4 - HKU\S-1-5-21-3485034920-2337340962-2755768679-1000..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8:[b]64bit:[/b] - Extra context menu item: Download all by FlashGet3 - C:\Users\USER\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O8:[b]64bit:[/b] - Extra context menu item: Download by FlashGet3 - C:\Users\USER\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8:[b]64bit:[/b] - Extra context menu item: 使用快车3下载 - C:\Users\USER\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8:[b]64bit:[/b] - Extra context menu item: 使用快车3下载全部链接 - C:\Users\USER\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O8 - Extra context menu item: Download all by FlashGet3 - C:\Users\USER\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O8 - Extra context menu item: Download by FlashGet3 - C:\Users\USER\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: 使用快车3下载 - C:\Users\USER\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8 - Extra context menu item: 使用快车3下载全部链接 - C:\Users\USER\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:[b]64bit:[/b] - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16:[b]64bit:[/b] - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16:[b]64bit:[/b] - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{27345A9B-6074-4721-BAC4-294055B2753E}: DhcpNameServer = 192.168.0.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{27345A9B-6074-4721-BAC4-294055B2753E}: NameServer = 8.8.8.8,8.8.4.4
O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - AppInit_DLLs: (avgrssta.dll) - C:\Windows\SysNative\avgrssta.dll (AVG Technologies CZ, s.r.o.)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2001-04-18 17:23:00 | 000,000,041 | R--- | M] () - E:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{4bfe1b06-22d9-11df-8d2d-6cf049078e64}\Shell - "" = AutoRun
O33 - MountPoints2\{4bfe1b06-22d9-11df-8d2d-6cf049078e64}\Shell\AutoRun\command - "" = F:\Setup.exe
O33 - MountPoints2\{86a6a6c4-21f6-11df-a242-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{86a6a6c4-21f6-11df-a242-806e6f6e6963}\Shell\AutoRun\command - "" = E:\SETUP.EXE -- [2001-04-30 19:33:00 | 000,032,768 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 1 Day ==========[/color]
 
[2012-07-24 20:20:40 | 000,000,000 | ---D | C] -- C:\_OTL
[2012-07-24 19:55:32 | 000,000,000 | ---D | C] -- C:\Users\USER\AppData\Roaming\Malwarebytes
[2012-07-24 19:55:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012-07-24 19:55:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012-07-24 19:55:24 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012-07-24 19:55:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012-07-24 18:36:12 | 000,000,000 | ---D | C] -- C:\ProgramData\eucvamxhbybtvwh
[2010-03-06 15:48:28 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\USER\AppData\Roaming\pcouffin.sys
 
[color=#E56717]========== Files - Modified Within 1 Day ==========[/color]
 
[2012-07-24 20:26:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-07-24 20:26:48 | 2817,384,448 | -HS- | M] () -- C:\hiberfil.sys
[2012-07-24 20:24:15 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\Windows\gdrv.sys
[2012-07-24 19:45:57 | 000,015,136 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-07-24 19:45:57 | 000,015,136 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-07-24 18:41:24 | 000,002,432 | ---- | M] () -- C:\Users\USER\AppData\Local\TempKI4764.html
[2012-07-24 18:41:24 | 000,002,089 | ---- | M] () -- C:\Users\USER\AppData\Local\Tempgg4764.html
[2012-07-24 18:36:14 | 000,000,051 | ---- | M] () -- C:\ProgramData\hmymprvmtlkuqxl
[2012-07-24 18:36:05 | 000,057,344 | ---- | M] () -- C:\ProgramData\fhinszpz.exe
[2012-07-24 17:43:44 | 102,076,494 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\incavi.avm
[2012-07-24 13:50:55 | 000,000,683 | ---- | M] () -- C:\Users\USER\Desktop\World Of Warcraft.lnk
[2012-07-24 10:14:04 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-07-24 19:55:25 | 000,001,131 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012-07-24 18:36:13 | 000,057,344 | ---- | C] () -- C:\ProgramData\fhinszpz.exe
[2012-07-24 18:36:06 | 000,000,051 | ---- | C] () -- C:\ProgramData\hmymprvmtlkuqxl
[2012-07-24 09:42:13 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempKI4764.html
[2012-07-24 09:42:13 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempgg4764.html
[2012-07-23 18:40:08 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempxB5260.html
[2012-07-23 11:03:16 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempWw4396.html
[2012-07-22 11:38:15 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempKo4012.html
[2012-07-21 10:11:59 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempTa1780.html
[2012-07-20 10:04:36 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemprR4284.html
[2012-07-19 18:48:30 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempAD4404.html
[2012-07-18 16:20:39 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempQK5080.html
[2012-07-17 10:09:15 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Temprq3756.html
[2012-07-16 16:57:14 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempqG5368.html
[2012-07-15 18:47:23 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempRw4188.html
[2012-07-13 09:48:51 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempbH2704.html
[2012-07-12 09:12:35 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempwJ2620.html
[2012-07-11 10:40:11 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempMM4608.html
[2012-07-11 10:40:11 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempng4608.html
[2012-07-10 11:09:59 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempdD3972.html
[2012-07-09 10:22:42 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempWN3784.html
[2012-07-08 10:36:25 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempdP4436.html
[2012-07-07 15:45:37 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemprL5844.html
[2012-07-06 17:47:11 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempXB4940.html
[2012-07-05 20:05:45 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempYo2272.html
[2012-07-05 16:35:32 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempCu4368.html
[2012-07-03 10:27:42 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempbZ2324.html
[2012-07-02 09:17:08 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempub4868.html
[2012-07-01 11:36:30 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempGa2580.html
[2012-06-30 18:24:43 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempvi4180.html
[2012-06-29 09:59:13 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempTD5092.html
[2012-06-28 14:38:21 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempZL4900.html
[2012-06-27 11:01:39 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempEc3200.html
[2012-06-26 16:11:59 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempsx2496.html
[2012-06-26 10:38:23 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempdV3552.html
[2012-06-25 09:33:39 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Temppl2412.html
[2012-06-24 20:23:27 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempKR3288.html
[2012-06-23 11:32:46 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempHsu724.html
[2012-06-22 10:24:45 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempPc4172.html
[2012-06-21 10:22:19 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemprN2376.html
[2012-06-20 15:59:08 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempTb2564.html
[2012-06-19 10:34:11 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Temphn4736.html
[2012-06-18 09:37:21 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempsw4140.html
[2012-06-17 18:38:59 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempEH4776.html
[2012-06-15 10:04:09 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempNA4128.html
[2012-06-14 13:47:02 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempfuN164.html
[2012-06-13 15:01:28 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempOv4920.html
[2012-06-13 14:00:32 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempNi1404.html
[2012-06-13 14:00:32 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempIq1404.html
[2012-06-12 10:10:39 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempjlK204.html
[2012-06-11 10:11:24 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempuz2284.html
[2012-06-10 18:07:54 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemplP3584.html
[2012-06-09 09:05:54 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempXY4792.html
[2012-06-08 10:08:27 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempRy4976.html
[2012-06-06 15:02:49 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempWd2020.html
[2012-06-06 15:02:49 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempyZ2020.html
[2012-06-06 12:51:57 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempxc2756.html
[2012-06-05 10:46:33 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempIA3740.html
[2012-06-04 11:34:58 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempSV4024.html
[2012-06-01 11:09:42 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempWP5040.html
[2012-05-31 18:12:13 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempxf2172.html
[2012-05-30 11:13:34 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempKI4356.html
[2012-05-29 14:06:37 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemplA2680.html
[2012-05-27 12:50:34 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempoP2068.html
[2012-05-26 11:55:27 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempjn3284.html
[2012-05-25 11:34:27 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempDW1636.html
[2012-05-24 10:22:07 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempMl4812.html
[2012-05-23 08:17:06 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempur2540.html
[2012-05-18 14:05:26 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempFI3508.html
[2012-05-14 13:33:21 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempJw1336.html
[2012-05-14 13:33:21 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempbV1336.html
[2012-05-11 13:31:40 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempjn2208.html
[2012-05-08 15:57:26 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempMV4564.html
[2012-05-07 12:29:33 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempLF3772.html
[2012-05-05 18:34:45 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempPFM328.html
[2012-05-05 11:02:53 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempwD2404.html
[2012-05-04 11:04:26 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempZZ5032.html
[2012-04-28 18:41:05 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemptG3448.html
[2012-04-27 19:39:20 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempwb3320.html
[2012-04-27 12:06:39 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempoS4112.html
[2012-04-26 12:49:18 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempAK3120.html
[2012-04-25 11:08:57 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempiq4980.html
[2012-04-24 16:25:49 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempKj2864.html
[2012-04-23 10:59:54 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempMd4820.html
[2012-04-22 16:14:08 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempOX4552.html
[2012-04-22 00:00:08 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempjo4152.html
[2012-04-21 14:08:56 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempDO4956.html
[2012-04-20 19:40:45 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempVk2700.html
[2012-04-19 11:19:40 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempbq2440.html
[2012-04-18 11:19:05 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempAz3676.html
[2012-04-17 18:13:01 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempSB4864.html
[2012-04-17 13:09:05 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Temphk3864.html
[2012-04-16 14:30:19 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempDR3092.html
[2012-04-16 14:30:19 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempaA3092.html
[2012-04-15 12:44:30 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempPR3440.html
[2012-04-15 10:57:57 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempkM2132.html
[2012-04-14 17:20:44 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempvn4524.html
[2012-04-13 15:19:55 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemphJ6084.html
[2012-04-13 12:01:47 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempGz3760.html
[2012-04-13 12:01:47 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempbQ3760.html
[2012-04-12 14:46:20 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempxs4912.html
[2012-04-11 12:14:05 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempLm4596.html
[2012-04-09 12:15:34 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempDC1076.html
[2012-04-09 12:15:34 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempdI1076.html
[2012-04-08 10:28:20 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempAP4536.html
[2012-04-06 09:20:35 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempba3960.html
[2012-04-04 17:00:24 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempok2940.html
[2012-04-03 08:18:02 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Templz4584.html
[2012-04-01 18:27:13 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempJv4548.html
[2012-03-31 19:22:58 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempLC5000.html
[2012-03-30 12:35:51 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempUP1408.html
[2012-03-29 15:52:14 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempBf1320.html
[2012-03-29 15:52:14 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempKe1320.html
[2012-03-29 12:47:06 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempnJ3876.html
[2012-03-27 17:14:56 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempBX5224.html
[2012-03-26 12:14:08 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempnC1852.html
[2012-03-24 16:14:54 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempPO3724.html
[2012-03-23 12:59:30 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempam1136.html
[2012-03-22 15:37:15 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempbOa400.html
[2012-03-21 12:24:29 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempFM3196.html
[2012-03-20 17:04:27 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempzB4620.html
[2012-02-27 17:05:45 | 000,031,573 | ---- | C] () -- C:\Windows\DIIUnin.dat
[2012-01-28 10:15:51 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempae4616.html
[2012-01-28 10:15:51 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempCj4616.html
[2011-12-29 13:24:02 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempXK4932.html
[2011-11-13 20:51:56 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemptZ4752.html
[2011-11-13 20:51:56 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempiy4752.html
[2011-11-12 22:19:48 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempnVl584.html
[2011-11-12 22:19:48 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempVDv584.html
[2011-10-08 20:22:53 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempbu1532.html
[2011-10-08 20:22:53 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempFO1532.html
[2011-10-06 17:19:10 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempBo3996.html
[2011-10-05 14:16:36 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempAg3420.html
[2011-09-29 12:21:30 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempxC2284.html
[2011-09-29 12:21:30 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempVZ2284.html
[2011-09-28 12:15:26 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempEY5052.html
[2011-09-27 11:43:53 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempYT1132.html
[2011-09-26 11:57:13 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempnT2396.html
[2011-09-25 11:30:57 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemppF1764.html
[2011-09-24 11:59:31 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempSj1420.html
[2011-09-23 19:22:26 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempfP1876.html
[2011-09-23 19:22:26 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempAx1876.html
[2011-09-23 12:34:51 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempHn1724.html
[2011-09-18 15:20:23 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempjh3312.html
[2011-09-18 15:20:23 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempAG3312.html
[2011-09-18 13:15:16 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempgX4976.html
[2011-09-18 13:15:16 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempDV4976.html
[2011-09-15 20:28:27 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempIz3008.html
[2011-09-15 20:28:27 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\Temppm3008.html
[2011-09-11 22:33:28 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempWc2448.html
[2011-09-11 22:33:28 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempzU2448.html
[2011-09-05 17:19:24 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempae4352.html
[2011-09-05 17:19:24 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\Temphb4352.html
[2011-09-04 11:48:27 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempQd2788.html
[2011-09-04 11:48:27 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempQC2788.html
[2011-08-26 11:42:08 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempzv3344.html
[2011-08-26 11:42:08 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempJt3344.html
[2011-08-19 21:19:23 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempEy5044.html
[2011-08-19 21:19:23 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempJk5044.html
[2011-08-18 20:32:26 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempYh4964.html
[2011-08-18 20:32:26 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempvD4964.html
[2011-08-13 21:26:17 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempyb3224.html
[2011-08-13 21:26:17 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempma3224.html
[2011-08-10 22:44:27 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempOF1984.html
[2011-08-10 22:44:27 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempKt1984.html
[2011-08-08 15:47:28 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempzx2832.html
[2011-08-08 15:47:28 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempWf2832.html
[2011-07-31 22:23:37 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempFj3976.html
[2011-07-31 22:23:37 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempTk3976.html
[2011-07-31 15:41:01 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempub5020.html
[2011-07-31 15:41:01 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempCh5020.html
[2011-07-31 12:47:41 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempGw2160.html
[2011-07-31 12:47:41 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempYG2160.html
[2011-07-30 21:55:22 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempLG3672.html
[2011-07-30 21:55:22 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempyy3672.html
[2011-07-30 16:39:35 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempVb4388.html
[2011-07-30 16:39:35 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempqr4388.html
[2011-07-30 14:00:14 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempnO4204.html
[2011-07-30 14:00:14 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\Temppt4204.html
[2011-07-30 09:37:02 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempCh2444.html
[2011-07-30 09:37:02 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempzd2444.html
[2011-07-29 21:15:39 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempip4780.html
[2011-07-29 21:15:39 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempjL4780.html
[2011-07-24 09:17:35 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempRq4344.html
[2011-07-24 09:17:35 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempCv4344.html
[2011-07-14 16:21:24 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempmq4208.html
[2011-07-08 19:35:32 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempKB4948.html
[2011-07-08 19:35:32 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempoj4948.html
[2011-07-08 18:43:39 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempQU4036.html
[2011-06-09 23:41:34 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempSK1116.html
[2011-06-08 15:27:17 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempcX4780.html
[2011-06-03 23:00:04 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempLo2840.html
[2011-06-03 23:00:04 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempMj2840.html
[2011-05-28 21:34:24 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempgv2560.html
[2011-05-28 21:34:24 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempUv2560.html
[2011-05-23 19:14:22 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempqO4600.html
[2011-05-23 19:14:22 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempGS4600.html
[2011-05-22 19:03:08 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempPG4624.html
[2011-05-22 19:03:08 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempWf4624.html
[2011-05-20 18:00:11 | 000,093,671 | ---- | C] () -- C:\Users\USER\AppData\Roaming\Uninstal.exe
[2011-05-16 19:14:56 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempBd4364.html
[2011-05-15 19:08:14 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempnR4896.html
[2011-05-15 19:08:14 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempAp4896.html
[2011-05-14 08:57:25 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempHf2816.html
[2011-05-08 21:04:43 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempcC4692.html
[2011-05-04 20:50:08 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempEe3408.html
[2011-04-29 21:44:18 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempfv2272.html
[2011-04-29 21:44:18 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempvT2272.html
[2011-04-29 18:50:07 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempeH5048.html
[2011-04-29 18:50:07 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempUx5048.html
[2011-04-29 13:47:03 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempIf3792.html
[2011-04-29 13:47:03 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempbG3792.html
[2011-04-26 13:08:17 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempDWc736.html
[2011-04-23 10:36:17 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempnk4764.html
[2011-04-13 16:41:15 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempiXR772.html
[2011-04-12 22:19:31 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempPY4200.html
[2011-04-11 19:29:11 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempUW4248.html
[2011-04-11 19:29:11 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempDZ4248.html
[2011-04-11 14:26:53 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempGo3036.html
[2011-04-11 14:26:53 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempov3036.html
[2011-04-10 21:23:49 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempXCY208.html
[2011-04-10 21:23:49 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempyJw208.html
[2011-04-10 16:01:18 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemppJ1180.html
[2011-04-10 16:01:18 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempTX1180.html
[2011-04-10 13:32:52 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempoN3016.html
[2011-04-10 08:39:03 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempNS3604.html
[2011-04-09 21:20:02 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempwT4716.html
[2011-04-09 21:20:02 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempAw4716.html
[2011-04-09 18:26:57 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempVl4764.html
[2011-04-09 08:46:32 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Temphh4692.html
[2011-04-09 08:46:08 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempYV4692.html
[2011-04-09 08:44:09 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempSs4244.html
[2011-04-08 22:19:58 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Temphd3280.html
[2011-04-08 22:18:04 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempgn3280.html
[2011-03-30 17:15:47 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempYy4296.html
[2011-03-22 19:54:29 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempNT4996.html
[2011-03-20 18:41:11 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempEi2008.html
[2011-03-19 16:52:21 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempJU1284.html
[2011-03-18 16:44:52 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempdM4036.html
[2011-03-17 13:45:53 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempIA1616.html
[2011-03-16 19:38:26 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemphF2592.html
[2011-03-15 10:13:22 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempCx4584.html
[2011-03-12 15:46:31 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempKY5044.html
[2011-03-07 17:47:20 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempbn2616.html
[2011-03-05 16:52:24 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempOm4088.html
[2011-03-04 18:51:42 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempKF1872.html
[2011-03-03 18:04:31 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempuS4620.html
[2011-03-02 18:45:08 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempYE4432.html
[2011-02-27 15:10:19 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempma2228.html
[2011-02-27 00:18:27 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempKJ4520.html
[2011-02-25 13:43:11 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempQG3228.html
[2011-02-23 13:42:44 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempYq4176.html
[2011-02-22 18:29:35 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempop5912.html
[2011-02-22 11:42:45 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempDg4680.html
[2011-02-20 21:45:14 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempiNF728.html
[2011-02-20 21:45:14 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempxgg728.html
[2011-02-20 14:13:52 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempus2848.html
[2011-02-18 19:27:35 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempGU1656.html
[2011-02-14 17:54:51 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempjY4312.html
[2011-02-13 18:29:38 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempqd2916.html
[2011-02-12 13:57:26 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempAb4128.html
[2011-02-11 18:59:25 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempDS4744.html
[2011-02-10 19:20:19 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempKd4148.html
[2011-02-09 16:47:43 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempfu4368.html
[2011-02-08 18:37:07 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempNYd784.html
[2011-02-07 19:07:58 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempej4976.html
[2011-02-05 10:11:37 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Temppo4176.html
[2011-02-03 18:04:35 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempNn3348.html
[2011-02-02 11:03:56 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempXp4768.html
[2011-02-01 21:24:48 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempQS3140.html
[2011-01-31 23:38:09 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempeE3420.html
[2011-01-31 13:58:26 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempOh3964.html
[2011-01-30 18:08:55 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempUa4968.html
[2011-01-30 18:02:33 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempth4428.html
[2011-01-29 09:34:07 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Templer208.html
[2011-01-28 19:50:37 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempfe3964.html
[2011-01-26 21:20:00 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempRk3856.html
[2011-01-24 18:18:00 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempPNQ288.html
[2011-01-23 20:03:56 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempkG1176.html
[2011-01-22 21:38:00 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempKy4820.html
[2011-01-21 11:28:23 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempLc4864.html
[2011-01-20 19:55:21 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempkJU684.html
[2011-01-20 12:57:50 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempDv1080.html
[2011-01-20 11:10:08 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempAW4432.html
[2011-01-20 09:37:30 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempJE3916.html
[2011-01-19 20:41:31 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempbG4880.html
[2011-01-18 10:16:05 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempnQ3580.html
[2011-01-17 20:15:02 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemprT3928.html
[2011-01-16 10:16:14 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemppO4688.html
[2011-01-12 17:52:28 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempGH4988.html
[2011-01-11 14:51:27 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempWT4392.html
[2011-01-10 14:12:29 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempei4728.html
[2011-01-04 11:27:56 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempnv4752.html
[2011-01-03 18:45:43 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempBJ2816.html
[2011-01-02 14:17:11 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempQc3544.html
[2010-12-30 19:26:24 | 002,392,064 | ---- | C] () -- C:\Windows\SysWow64\videotrans.dll
[2010-12-30 19:26:24 | 000,215,040 | ---- | C] () -- C:\Windows\SysWow64\videoformat.dll
[2010-12-30 19:26:24 | 000,128,512 | ---- | C] () -- C:\Windows\SysWow64\xvid.dll
[2010-12-30 19:26:24 | 000,061,440 | ---- | C] () -- C:\Windows\SysWow64\imgscaler.dll
[2010-12-30 19:26:24 | 000,022,016 | ---- | C] () -- C:\Windows\SysWow64\img_utils.dll
[2010-12-30 19:26:24 | 000,017,920 | ---- | C] () -- C:\Windows\SysWow64\videocore.dll
[2010-12-30 12:12:17 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempFp4200.html
[2010-12-28 22:49:32 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempYF4936.html
[2010-12-26 12:44:20 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempDGX340.html
[2010-12-26 00:08:33 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempcx4736.html
[2010-12-25 10:19:07 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempGW2920.html
[2010-12-24 23:43:06 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempnAs200.html
[2010-12-21 10:38:58 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempBw2860.html
[2010-12-16 09:52:49 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempFI2272.html
[2010-12-15 23:18:52 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempxG3904.html
[2010-12-15 23:18:52 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempQl3904.html
[2010-12-14 22:35:55 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempBS2984.html
[2010-12-14 19:43:07 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemphQ4160.html
[2010-12-13 13:44:48 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempqz3080.html
[2010-12-12 17:29:09 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempRA5548.html
[2010-12-12 14:14:25 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempnw2824.html
[2010-12-12 11:51:59 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempPh4480.html
[2010-12-12 11:49:45 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempgs1972.html
[2010-12-12 11:29:04 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempYl4524.html
[2010-12-12 09:21:47 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempKU4424.html
[2010-12-10 17:52:38 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempTo3348.html
[2010-12-09 21:06:01 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempER1372.html
[2010-12-08 17:17:47 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempAC4764.html
[2010-12-08 15:46:13 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempIv2248.html
[2010-12-07 19:31:14 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempHS2232.html
[2010-12-07 14:56:10 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempag4720.html
[2010-12-06 17:07:31 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempBV4112.html
[2010-12-04 17:05:13 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempIj1772.html
[2010-12-03 13:41:07 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempWP4180.html
[2010-12-02 15:16:52 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempjM4120.html
[2010-12-02 11:40:13 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempOK3792.html
[2010-12-01 20:10:36 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempoq2340.html
[2010-12-01 19:11:19 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempMW4924.html
[2010-11-30 23:57:31 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempZP4940.html
[2010-11-28 18:30:36 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempRP4748.html
[2010-11-28 15:58:33 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempkI3296.html
[2010-11-28 15:58:33 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempgi3296.html
[2010-11-27 13:41:42 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempWV4664.html
[2010-11-25 13:14:59 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempgI4716.html
[2010-11-24 15:05:16 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempAt1732.html
[2010-11-18 20:18:43 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempiR4476.html
[2010-11-17 13:42:13 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempCM1116.html
[2010-11-16 18:14:31 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempMX3284.html
[2010-11-16 15:47:39 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempfn5036.html
[2010-11-16 13:41:05 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemphE3192.html
[2010-11-14 14:46:57 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempvt2524.html
[2010-11-14 11:04:53 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempRe2544.html
[2010-11-13 16:23:35 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Temphv3172.html
[2010-11-13 15:28:31 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempOz1696.html
[2010-11-11 17:04:36 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\CmdLineExt03.dll
[2010-11-11 15:13:57 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempWn3268.html
[2010-11-09 07:16:23 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempVVY300.html
[2010-11-09 00:13:57 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempNW2148.html
[2010-11-08 19:16:28 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempxW4824.html
[2010-11-08 08:45:22 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemptR1736.html
[2010-11-08 00:23:33 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempEto588.html
[2010-11-05 17:38:53 | 001,253,376 | ---- | C] () -- C:\Windows\SysWow64\vorbis.dll
[2010-11-05 17:38:53 | 001,032,192 | ---- | C] () -- C:\Windows\SysWow64\vorbisenc.dll
[2010-11-05 17:38:53 | 000,102,400 | ---- | C] () -- C:\Windows\SysWow64\vorbisfile.dll
[2010-11-05 17:38:53 | 000,061,440 | ---- | C] () -- C:\Windows\SysWow64\ogg.dll
[2010-11-05 12:16:50 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempHM2616.html
[2010-11-03 11:45:13 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempxM4732.html
[2010-11-02 15:14:48 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempfx4788.html
[2010-10-31 16:58:28 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempRl2300.html
[2010-10-31 14:56:32 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Temppn3564.html
[2010-10-30 18:28:17 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempQxJ316.html
[2010-10-30 11:25:52 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempsN1700.html
[2010-10-29 17:25:35 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempfN4336.html
[2010-10-28 17:09:23 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempbM4568.html
[2010-10-26 14:11:58 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempmi2080.html
[2010-10-26 14:11:58 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempWE2080.html
[2010-10-23 17:07:36 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempSw1924.html
[2010-10-23 14:54:25 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempxl3092.html
[2010-10-22 17:34:51 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempAv1828.html
[2010-10-21 18:34:24 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempiM3700.html
[2010-10-20 09:24:17 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempXI3844.html
[2010-10-18 16:32:13 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempGS4720.html
[2010-10-18 16:32:13 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\Temphh4720.html
[2010-10-15 17:13:14 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempDV4452.html
[2010-10-15 17:13:14 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempLf4452.html
[2010-10-11 19:30:03 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempxd4460.html
[2010-10-06 17:24:04 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempbtX248.html
[2010-10-05 06:09:43 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempkgT616.html
[2010-10-04 22:57:30 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempcs2740.html
[2010-10-04 19:42:59 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Temptz1096.html
[2010-10-04 19:27:35 | 000,000,292 | ---- | C] () -- C:\Windows\SysWow64\secustat.dat
[2010-10-04 18:40:49 | 000,000,891 | ---- | C] () -- C:\Windows\SysWow64\secushr.dat
[2010-10-04 18:09:45 | 000,000,025 | ---- | C] () -- C:\Windows\libem.INI
[2010-10-04 17:59:15 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempjK3740.html
[2010-10-02 17:58:35 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempcQ5276.html
[2010-10-02 16:00:51 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempRM3604.html
[2010-10-02 12:58:19 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempCH4544.html
[2010-09-29 18:39:48 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempsg2816.html
[2010-09-29 16:03:31 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempWW2916.html
[2010-09-29 13:35:06 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempngf692.html
[2010-09-29 13:33:50 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempcP4464.html
[2010-09-29 13:33:50 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempXQ4464.html
[2010-09-27 21:10:55 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempzSU728.html
[2010-09-26 16:07:08 | 000,217,088 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2010-09-26 16:07:08 | 000,205,824 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2010-09-26 16:07:08 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2010-09-26 16:07:07 | 000,085,504 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2010-09-26 15:29:21 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempIS3860.html
[2010-09-26 12:34:19 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempHn2712.html
[2010-09-25 14:20:03 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempIm3848.html
[2010-09-24 18:28:52 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempdO3504.html
[2010-09-22 19:35:40 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemprY4308.html
[2010-09-22 16:57:50 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempEE4704.html
[2010-09-21 17:03:47 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempSZ4956.html
[2010-09-20 20:27:29 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempRU5432.html
[2010-09-14 13:59:40 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemptA1260.html
[2010-09-12 17:39:12 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempDz3228.html
[2010-09-09 21:18:16 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempua2756.html
[2010-09-09 17:45:51 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempRq4768.html
[2010-09-09 17:43:07 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TemptY2408.html
[2010-09-08 19:35:09 | 000,000,058 | ---- | C] () -- C:\Windows\wininit.ini
[2010-09-08 19:33:47 | 000,000,032 | ---- | C] () -- C:\Windows\system87sG.dat
[2010-09-06 19:25:08 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempai3264.html
[2010-09-06 16:16:22 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempqd4588.html
[2010-09-04 22:45:24 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempos3112.html
[2010-09-04 20:17:14 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempkR3280.html
[2010-09-04 12:33:00 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempdF4236.html
[2010-09-03 17:00:12 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempry1392.html
[2010-08-30 21:12:57 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempWy4604.html
[2010-08-27 22:09:36 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempKj1988.html
[2010-08-27 15:26:35 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempdQ4376.html
[2010-08-27 12:24:38 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempDwI740.html
[2010-08-26 23:04:45 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempbrA148.html
[2010-08-25 23:44:16 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempmk4244.html
[2010-08-25 19:58:18 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempLb1540.html
[2010-08-25 19:58:18 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TemplH1540.html
[2010-08-25 17:47:55 | 000,000,565 | ---- | C] () -- C:\Users\USER\AppData\Roaming\myMPQ.ini
[2010-08-25 10:20:28 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempWp4452.html
[2010-08-24 14:08:06 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempwH2848.html
[2010-08-23 18:00:58 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempaC2292.html
[2010-08-21 22:30:03 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempXU3532.html
[2010-08-21 19:22:48 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempupA724.html
[2010-08-21 12:58:26 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Temphi4656.html
[2010-08-16 13:02:37 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempbT1384.html
[2010-08-16 10:49:41 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempJk3840.html
[2010-08-13 21:07:11 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempASZ164.html
[2010-08-13 21:07:11 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempGEx164.html
[2010-08-13 13:10:40 | 000,000,092 | ---- | C] () -- C:\Users\USER\AppData\Local\fusioncache.dat
[2010-08-07 17:53:51 | 000,000,084 | -HS- | C] () -- C:\ProgramData\.zreglib
[2010-07-27 15:38:35 | 000,021,840 | ---- | C] () -- C:\Windows\SysWow64\SIntfNT.dll
[2010-07-27 15:38:35 | 000,017,212 | ---- | C] () -- C:\Windows\SysWow64\SIntf32.dll
[2010-07-27 15:38:35 | 000,012,067 | ---- | C] () -- C:\Windows\SysWow64\SIntf16.dll
[2010-04-01 09:45:19 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Temphw3656.html
[2010-04-01 09:45:19 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempkK3656.html
[2010-03-29 19:38:42 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Tempky2744.html
[2010-03-29 19:38:42 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TemppW2744.html
[2010-03-29 18:09:37 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempMa2952.html
[2010-03-16 18:51:37 | 000,017,408 | ---- | C] () -- C:\Users\USER\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-03-06 15:49:04 | 000,001,175 | ---- | C] () -- C:\Users\USER\AppData\Roaming\vso_ts_preview.xml
[2010-03-06 15:48:28 | 000,099,384 | ---- | C] () -- C:\Users\USER\AppData\Roaming\inst.exe
[2010-03-06 15:48:28 | 000,007,859 | ---- | C] () -- C:\Users\USER\AppData\Roaming\pcouffin.cat
[2010-03-06 15:48:28 | 000,001,167 | ---- | C] () -- C:\Users\USER\AppData\Roaming\pcouffin.inf
[2010-02-26 12:42:59 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\TempzL4740.html
[2010-02-26 12:42:59 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempLx4740.html
[2010-02-26 11:57:08 | 000,002,432 | ---- | C] () -- C:\Users\USER\AppData\Local\Templx2820.html
[2010-02-26 11:57:08 | 000,002,089 | ---- | C] () -- C:\Users\USER\AppData\Local\TempNp2820.html
[2010-02-25 14:39:07 | 000,007,605 | ---- | C] () -- C:\Users\USER\AppData\Local\Resmon.ResmonCfg
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-06-12 14:11:21 | 000,000,000 | -HSD | M] -- C:\Users\USER\AppData\Roaming\.#
[2012-06-13 22:35:50 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\.minecraft
[2010-12-30 19:33:07 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\AVI ReComp
[2012-07-09 10:58:30 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Babylon
[2012-07-24 10:13:56 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\BESTplayer
[2012-07-19 13:21:17 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\BITS
[2010-07-27 17:12:16 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Command and Conquer 4
[2010-02-26 15:30:25 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\DAEMON Tools Lite
[2011-12-27 15:03:38 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\EurekaLog
[2010-10-04 18:09:18 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\FlashGet
[2010-10-04 18:09:16 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\FlashGetBHO
[2012-04-25 19:02:48 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\FMZilla
[2010-08-11 12:08:06 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\FOG Downloader
[2010-02-26 12:45:09 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Gadu-Gadu 10
[2012-01-21 21:04:44 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\GameRanger
[2010-05-04 16:03:39 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\GanymedeNet
[2010-06-06 19:19:13 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Gearbox Software
[2010-02-25 14:31:35 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\GHISLER
[2011-09-15 18:33:32 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\LolClient
[2012-06-18 18:36:09 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\LolClient2
[2012-03-20 16:49:35 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Might & Magic Heroes VI
[2010-03-02 23:22:08 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Mp3tag
[2011-10-03 15:57:35 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\NapiProjekt
[2010-04-08 15:22:14 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Netscape
[2010-11-08 19:33:31 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\OpenFM
[2012-02-04 13:53:31 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Origin
[2010-04-08 15:21:48 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Photodex
[2012-01-03 14:22:40 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\rockbox.org
[2010-08-16 13:38:24 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Samsung
[2010-02-25 14:35:30 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\TeamViewer
[2010-09-08 19:30:36 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Thinstall
[2010-03-18 19:20:34 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Tlen.pl
[2010-08-13 14:20:51 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Turbine
[2012-04-20 18:24:51 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Unity
[2012-07-24 20:25:53 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\uTorrent
[2010-12-30 20:26:16 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Vso
[2011-02-25 17:41:11 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Xilisoft
[2012-06-07 09:17:46 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 24 bytes -> C:\Windows:37FF64B2CABB39B2
@Alternate Data Stream - 110 bytes -> C:\ProgramData\Temp:90EF0C9C

< End of report >