Scan result of Farbar Recovery Scan Tool Version: 25-07-2012 01 Ran by SYSTEM at 25-07-2012 07:48:14 Running from F:\ Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish The current controlset is ControlSet001 ========================== Registry (Whitelisted) ============= HKLM\...\Run: [AtherosBtStack] "C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe" [613536 2010-11-25] (Atheros Communications) HKLM\...\Run: [AthBtTray] "C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe" [379040 2010-11-25] (Atheros Commnucations) HKLM\...\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324096 2010-05-03] (Alcor Micro Corp.) HKLM\...\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /SF3 [2168424 2010-10-13] (Realtek Semiconductor) HKLM\...\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe [170264 2012-03-19] (Intel Corporation) HKLM\...\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe [398616 2012-03-19] (Intel Corporation) HKLM\...\Run: [Persistence] C:\Windows\system32\igfxpers.exe [439064 2012-03-19] (Intel Corporation) HKLM\...\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey [1271168 2012-03-26] (Microsoft Corporation) HKLM-x32\...\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS) HKLM-x32\...\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-23] () HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [843712 2012-01-03] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59240 2012-02-20] (Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2012-04-18] (Apple Inc.) HKLM-x32\...\Run: [CloneCDTray] "C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe" /s [57344 2009-01-29] (SlySoft, Inc.) HKU\A&I\...\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe" [495616 2007-09-02] () HKU\A&I\...\Run: [Google Update] "C:\Users\A&I\AppData\Local\Google\Update\GoogleUpdate.exe" /c [136176 2011-06-11] (Google Inc.) HKU\A&I\...\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [17418928 2012-07-13] (Skype Technologies S.A.) Winlogon\Notify\igfxcui: igfxdev.dll (Intel Corporation) AppInit_DLLs: C:\Windows\system32\nvinitx.dll ==================== Services (Whitelisted) ====== 2 ASLDRService; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [84536 2009-06-15] (ASUS) 2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe [151552 2010-05-24] (Atheros) 2 AtherosSvc; C:\Program Files (x86)\Atheros\Bluetooth Suite\adminservice.exe [52896 2010-11-25] (Atheros Commnucations) 2 ATKGFNEXSrv; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896 2009-12-15] (ASUS) 2 FlipShare Service; "C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe" [460144 2011-05-06] () 2 FlipShareServer; "C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe" [1085440 2011-05-06] () 2 MsMpSvc; "C:\Program Files\Microsoft Security Client\MsMpEng.exe" [12600 2012-03-26] (Microsoft Corporation) 3 NisSrv; "C:\Program Files\Microsoft Security Client\NisSrv.exe" [291696 2012-03-26] (Microsoft Corporation) 2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [88576 2011-09-15] () ========================== Drivers (Whitelisted) ============= 2 ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [15416 2009-07-02] (ASUS) 3 AthBTPort; C:\Windows\System32\DRIVERS\btath_flt.sys [36000 2010-11-25] (Atheros) 1 ATKWMIACPIIO; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [17024 2010-07-26] (ASUS) 3 BTATH_A2DP; C:\Windows\System32\Drivers\BTATH_A2DP.sys [298144 2010-11-25] (Atheros) 3 BTATH_BUS; C:\Windows\System32\Drivers\BTATH_BUS.sys [28832 2010-11-25] (Atheros) 3 BTATH_HCRP; C:\Windows\System32\Drivers\BTATH_HCRP.sys [201376 2010-11-25] (Atheros) 3 BTATH_LWFLT; C:\Windows\System32\Drivers\BTATH_LWFLT.sys [55456 2010-11-25] (Atheros) 3 BTATH_RCP; C:\Windows\System32\Drivers\BTATH_RCP.sys [154272 2010-11-25] (Atheros) 3 BtFilter; C:\Windows\System32\Drivers\BtFilter.sys [275616 2010-11-25] (Atheros) 3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.) 3 ElbyCDFL; C:\Windows\SysWow64\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.) 2 ElbyCDIO; C:\Windows\SysWow64\Drivers\ElbyCDIO.sys [9856 2004-07-21] (Elaborate Bytes AG) 3 FLxHCIh; C:\Windows\System32\Drivers\FLxHCIh.sys [81984 2010-10-28] (Fresco Logic) 3 kbfiltr; C:\Windows\System32\Drivers\kbfiltr.sys [15416 2009-07-21] ( ) 2 NSHE; C:\Windows\SysWow64\Drivers\NSHE.sys [97792 2008-11-23] (T0r0 2008) 2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2008-07-11] (SafeNet, Inc.) 3 SNP2UVC; C:\Windows\System32\Drivers\SNP2UVC.sys [1800832 2010-09-07] (Sonix Technology Co., Ltd.) 3 hwdatacard; C:\Windows\System32\DRIVERS\ewusbmdm.sys [x] ========================== NetSvcs (Whitelisted) =========== ============ One Month Created Files and Folders ============== 2012-07-25 07:47 - 2012-07-25 07:48 - 00000000 ____D C:\FRST 2012-07-25 00:34 - 2012-07-25 00:35 - 01153912 ____A (Emsi Software GmbH) C:\Users\A&I\Desktop\BlitzBlank.exe 2012-07-25 00:31 - 2012-07-25 00:31 - 00450216 ____A C:\Users\A&I\Downloads\BlitzBlank.exe.ghpsa8r.partial 2012-07-24 23:58 - 2012-07-24 23:58 - 00328704 ____A (Microsoft Corporation) C:\Windows\System32\services.exe.B7F00DED51CEF9AB 2012-07-24 23:58 - 2012-07-24 23:58 - 00050392 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\bwaaehrp.sys 2012-07-24 23:55 - 2012-07-24 23:55 - 00328704 ____A (Microsoft Corporation) C:\Windows\System32\services.exe.37A2ED84D72E865C 2012-07-24 23:51 - 2012-07-24 23:51 - 00328704 ____A (Microsoft Corporation) C:\Windows\System32\services.exe.11AA8DF185B40910 2012-07-24 23:48 - 2012-07-24 23:48 - 00328704 ____A (Microsoft Corporation) C:\Windows\System32\services.exe.1B472134D33556E7 2012-07-24 23:39 - 2012-07-24 23:39 - 00328704 ____A (Microsoft Corporation) C:\Windows\System32\services.exe.90D5DE3776DBCA68 2012-07-24 23:35 - 2012-07-24 23:35 - 00328704 ____A (Microsoft Corporation) C:\Windows\System32\services.exe.6DCF1AEF06731825 2012-07-24 23:31 - 2012-07-24 23:31 - 00328704 ____A (Microsoft Corporation) C:\Windows\System32\services.exe.09397FD9C5865616 2012-07-24 23:23 - 2012-07-24 23:23 - 00000000 ____D C:\Program Files\Microsoft Security Client 2012-07-24 23:23 - 2012-07-24 23:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client 2012-07-24 22:49 - 2012-07-24 23:09 - 00000000 ____D C:\Users\All Users\ccccccccc 2012-07-24 21:26 - 2012-07-24 21:27 - 00000000 ____D C:\Users\A&I\AppData\Local\{ACAF752D-B626-412D-A3E4-462032536B14} 2012-07-24 21:26 - 2012-07-24 21:26 - 00000000 ____D C:\Users\A&I\AppData\Local\{786B3ECA-D969-4F24-9371-401266EC12E5} 2012-07-24 16:09 - 2012-07-24 16:17 - 00082995 ____A C:\Users\A&I\Downloads\DISPLAY_33_56_EN_micars_980540728600.ZIP 2012-07-24 16:09 - 2012-07-24 16:15 - 00066935 ____A C:\Users\A&I\Downloads\DGDEMO_14_30_RU_micars_980540728600.ZIP 2012-07-24 14:22 - 2012-07-24 14:22 - 00000266 ____A C:\Users\A&I\Desktop\PRZEKLADNIA BOXER DUCATO JUMPER STILO MAGLOWNICA (3) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-24 14:21 - 2012-07-24 14:21 - 00000266 ____A C:\Users\A&I\Desktop\PRZEKLADNIA BOXER DUCATO JUMPER STILO MAGLOWNICA (2) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-24 09:26 - 2012-07-24 09:26 - 00000000 ____D C:\Users\A&I\AppData\Local\{F7BCE019-CD53-4B79-B9CC-E747D91DD2BA} 2012-07-24 09:26 - 2012-07-24 09:26 - 00000000 ____D C:\Users\A&I\AppData\Local\{E5F5E644-FB24-4BED-B7C6-3A3FFEB89157} 2012-07-24 09:21 - 2012-07-25 00:54 - 00000035 ____A C:\Users\Public\Documents\AtherosServiceConfig.ini 2012-07-24 09:21 - 2012-07-25 00:45 - 00000000 ____D C:\Users\A&I\Documents\Bluetooth Folder 2012-07-24 09:21 - 2012-07-24 09:21 - 00000000 ____D C:\Users\Public\Documents\Atheros 2012-07-24 09:20 - 2012-07-25 00:53 - 00001176 ____A C:\Windows\setupact.log 2012-07-24 09:20 - 2012-07-24 09:20 - 00001486 ____A C:\Windows\PFRO.log 2012-07-24 09:20 - 2012-07-24 09:20 - 00000000 ____A C:\Windows\setuperr.log 2012-07-23 23:46 - 2012-07-23 23:49 - 00000000 ____D C:\Users\A&I\Documents\Menu Afrodyta i inne 2012-07-23 21:25 - 2012-07-23 21:25 - 00000000 ____D C:\Users\A&I\AppData\Local\{84465DC7-760B-442B-A08A-B8D2C7AB8440} 2012-07-23 21:25 - 2012-07-23 21:25 - 00000000 ____D C:\Users\A&I\AppData\Local\{56B80197-40A2-4C86-B92E-9F4D32BFAA7D} 2012-07-23 21:23 - 2012-07-23 21:23 - 00000000 ____D C:\Users\A&I\AppData\Local\{B66DF3D8-E82C-4287-BE46-9D31CBD4296E} 2012-07-23 21:21 - 2012-07-23 21:21 - 00000000 ____D C:\Users\A&I\Downloads\Nawigacja VW MFD2 2012-07-23 21:20 - 2012-07-23 21:21 - 00000000 ____D C:\Users\A&I\Downloads\Autodata 2012-07-23 21:19 - 2012-07-23 21:20 - 00000000 ____D C:\Users\A&I\Downloads\MMI HIGH 2G MAPA 2012 2012-07-23 21:16 - 2007-10-09 17:11 - 00436736 ____A C:\Windows\System32\Autoserv.exe 2012-07-23 21:16 - 2007-04-20 02:05 - 00660384 ____A (Chilkat Software, Inc.) C:\Windows\System32\ChilkatUtil.dll 2012-07-23 21:16 - 2007-04-20 02:04 - 00926624 ____A (Chilkat Software, Inc.) C:\Windows\System32\ChilkatCrypt2.dll 2012-07-23 21:16 - 2007-04-20 02:04 - 00856992 ____A (Chilkat Software, Inc.) C:\Windows\System32\ChilkatCert.dll 2012-07-23 21:15 - 2012-07-24 23:58 - 00000000 ____D C:\Windows\Downloaded Installations 2012-07-23 21:15 - 2008-07-11 06:05 - 00145448 ____A (SafeNet, Inc.) C:\Windows\System32\Drivers\sentinel64.sys 2012-07-23 17:03 - 2012-07-23 17:03 - 00000266 ____A C:\Users\A&I\Desktop\PRZEKLADNIA BOXER DUCATO JUMPER STILO MAGLOWNICA (2464632245) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-23 17:03 - 2012-07-23 17:03 - 00000266 ____A C:\Users\A&I\Desktop\MAGLOWNICA PRZEKŁADNIA KIEROWNICZA MOVANO DUCATO (2481580920) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-23 09:23 - 2012-07-23 09:23 - 00000000 ____D C:\Users\A&I\AppData\Local\{D7CD87EB-5595-4018-85AB-B5EF7C06D79E} 2012-07-23 09:22 - 2012-07-23 09:23 - 00000000 ____D C:\Users\A&I\AppData\Local\{AD8AF43A-CFC9-4FDB-AD66-60CE249E98C4} 2012-07-23 01:02 - 2012-07-23 01:02 - 00000000 ____D C:\Users\A&I\AppData\Local\{1C352978-7ABB-46A8-BAAA-B7DEDA7FA1F1} 2012-07-23 00:33 - 2012-07-23 00:33 - 00000000 ____D C:\Users\A&I\AppData\Local\{AFBE6AEE-A6EA-4CC8-80F9-8EDEFB4647D3} 2012-07-23 00:33 - 2012-07-23 00:33 - 00000000 ____D C:\Users\A&I\AppData\Local\{86C91AC5-2CE3-4350-B91D-84D4391F1235} 2012-07-22 23:07 - 2012-07-22 23:07 - 00000267 ____A C:\Users\A&I\Desktop\AUDI A8 D3 4e0 maglownica przekładnia kierownicza (2466366437) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-22 23:04 - 2012-07-22 23:04 - 00000265 ____A C:\Users\A&I\Desktop\Sprężarka, pompa zawieszenia Audi A8 Wabco Tanio! (2484400760) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-22 21:24 - 2012-07-22 21:24 - 00000529 ____A C:\Users\A&I\Desktop\mercedesa w 107 (2502396691) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-22 21:24 - 2012-07-22 21:24 - 00000529 ____A C:\Users\A&I\Desktop\Mercedes Benz W107 450 SLC 5.0 L 5000cm3 SL (2509605407) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-22 20:50 - 2012-07-22 20:50 - 00000252 ____A C:\Users\A&I\Desktop\maska Mercedes W107 SL 107 SLC alu (2478924161) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-22 11:38 - 2012-07-22 11:38 - 00000000 ____D C:\Users\A&I\AppData\Local\{086D5350-FA42-4E45-A5E3-3A0C5CA7B2D7} 2012-07-22 11:38 - 2012-07-22 11:38 - 00000000 ____D C:\Users\A&I\AppData\Local\{07044379-3D09-4D64-A0EB-454C0E73B333} 2012-07-21 23:55 - 2012-07-21 23:55 - 00000128 ____A C:\Users\A&I\Desktop\Budowanie, konwersje i modyfikacje pojazdów elektrycznych.url 2012-07-21 21:50 - 2012-07-21 21:50 - 00360448 ____A C:\Users\A&I\AppData\Local\gyrrimecv.exe 2012-07-21 21:31 - 2012-07-21 22:37 - 118861001 ____A C:\Users\A&I\Downloads\windowsvistax32bitrecoverydisc.zip 2012-07-21 21:21 - 2012-07-21 21:21 - 00000230 ____A C:\Users\A&I\Desktop\Mercedes W115 zderzak przód (2501671202) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-21 21:08 - 2012-07-21 21:08 - 00000000 ____D C:\Users\A&I\AppData\Local\{EDA1C91E-1971-446D-9A9A-21179900EA03} 2012-07-21 21:08 - 2012-07-21 21:08 - 00000000 ____D C:\Users\A&I\AppData\Local\{016F50C5-B7BA-43B9-8FA7-0E5FEEA49F8C} 2012-07-21 20:19 - 2012-07-23 17:20 - 00000000 ____D C:\Users\A&I\AppData\Roaming\ImgBurn 2012-07-21 20:19 - 2012-07-21 20:20 - 00000000 ____D C:\Users\A&I\Downloads\ImgBurn 2012-07-21 20:18 - 2012-07-21 20:18 - 00000000 ____D C:\Program Files (x86)\ImgBurn 2012-07-21 19:54 - 2012-07-21 19:54 - 00000000 ____D C:\Users\A&I\Downloads\Firmware_MFD2_CD_DX_EN_PL 2012-07-21 10:18 - 2012-07-21 11:07 - 00000000 ____D C:\Users\A&I\Downloads\Poland-Czech_DX_2011-2012_PL CloneCD 2012-07-21 10:12 - 2012-07-21 10:12 - 00000000 ____D C:\Windows\XSxS 2012-07-21 10:12 - 2012-07-21 10:12 - 00000000 ____D C:\Windows\SysWOW64\winevt 2012-07-21 10:12 - 2012-07-21 10:12 - 00000000 ____D C:\Users\A&I\AppData\Local\Xenocode 2012-07-21 10:12 - 2012-07-21 10:12 - 00000000 ____D C:\Program Files (x86)\Xenocode 2012-07-21 09:55 - 2012-07-21 09:55 - 00000000 ____D C:\Users\A&I\Downloads\MMI HIGH 2G Digital Road Map 2012 4E0 060 884 CN 2012-07-21 09:07 - 2012-07-21 09:07 - 00000000 ____D C:\Users\A&I\AppData\Local\{8A1323E6-E03E-47CE-A7B6-24D6728F38B6} 2012-07-21 09:07 - 2012-07-21 09:07 - 00000000 ____D C:\Users\A&I\AppData\Local\{15F078F7-4180-4944-A18B-B60DDE70758A} 2012-07-20 11:06 - 2012-07-20 11:06 - 00000160 ____A C:\Users\A&I\Desktop\Wymiana rdzeni CHŁODNICE, CHLODNICE , CHŁODNICE SAMOCHODOWE, PRZEŹMIEROWO CHŁODNICE NOWAK CHŁODNICE , Chłodnice samochodowe Poznań - Przeźmierowo. Sprzedaż, naprawa, regeneracja.url 2012-07-20 09:09 - 2012-07-20 09:09 - 00360448 ____A C:\Users\A&I\AppData\Local\hddia.exe 2012-07-20 08:16 - 2012-07-20 08:16 - 00000000 ____D C:\Users\A&I\AppData\Local\{B6000927-33BA-40AE-8401-F16B6E10AF0D} 2012-07-20 08:16 - 2012-07-20 08:16 - 00000000 ____D C:\Users\A&I\AppData\Local\{5FFA9B77-B33F-41CC-9504-2419B1003D9C} 2012-07-20 01:08 - 2012-07-20 01:08 - 00000262 ____A C:\Users\A&I\Desktop\ZASILACZ 15V 800mA 12VA GERMANY NOWY FAKTURA (2474309799) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-20 00:16 - 2012-07-20 00:16 - 00000279 ____A C:\Users\A&I\Desktop\Audi MMI HIGH 2G Digital Road Map 2012 4E0 060 884 CN - Audi MMI 2G Digital - BOMBA63 - Chomikuj.pl.url 2012-07-19 23:58 - 2012-07-19 23:58 - 00000000 ____D C:\Users\A&I\Downloads\Generator TV Free w Audi 2012-07-19 20:15 - 2012-07-19 20:15 - 00000000 ____D C:\Users\A&I\AppData\Local\{F420003E-4493-4BF9-8175-9AD296981F26} 2012-07-19 20:15 - 2012-07-19 20:15 - 00000000 ____D C:\Users\A&I\AppData\Local\{0CBBEA1D-2068-47AA-8F6F-44942F0C1EDC} 2012-07-19 09:09 - 2012-07-19 09:09 - 00000265 ____A C:\Users\A&I\Desktop\Meble ogrodowe rattanowe fotele 6 stół ogrodowy (2346610873) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-19 08:14 - 2012-07-19 08:15 - 00000000 ____D C:\Users\A&I\AppData\Local\{79BCCABB-2E94-4A20-936C-3B9CF08B94C3} 2012-07-19 08:14 - 2012-07-19 08:14 - 00000000 ____D C:\Users\A&I\AppData\Local\{C28BEADA-AF67-4A4B-94B3-5DDCA6A282F5} 2012-07-18 20:00 - 2012-07-18 20:00 - 00000000 ____D C:\Users\A&I\AppData\Local\{CDD94725-FFD2-40F1-BB39-3E1BF24A0F77} 2012-07-18 20:00 - 2012-07-18 20:00 - 00000000 ____D C:\Users\A&I\AppData\Local\{0100DEEA-3BBC-453D-9460-64B3091F3815} 2012-07-18 08:00 - 2012-07-18 08:00 - 00000000 ____D C:\Users\A&I\AppData\Local\{EC65DB3F-0D3A-45BE-9EA5-7E4ABA017C18} 2012-07-17 10:08 - 2012-07-17 10:08 - 00000000 ____D C:\Users\A&I\AppData\Local\{6D2FE94A-D3A7-44E0-9435-CAF6133C8AEC} 2012-07-17 10:08 - 2012-07-17 10:08 - 00000000 ____D C:\Users\A&I\AppData\Local\{518D29C4-38EF-4DDC-BD48-7DF7214F1DA1} 2012-07-16 19:38 - 2012-07-16 19:38 - 00000000 ____D C:\Users\A&I\AppData\Local\{A6778002-779B-4A07-BD27-EF904A5C69E9} 2012-07-16 19:38 - 2012-07-16 19:38 - 00000000 ____D C:\Users\A&I\AppData\Local\{276EBA79-AD7B-4749-BDF6-9CEED7F4B6E4} 2012-07-16 07:37 - 2012-07-16 07:38 - 00000000 ____D C:\Users\A&I\AppData\Local\{3C52A15D-D62B-4B1F-81F9-0C46A2AB1CAE} 2012-07-16 07:37 - 2012-07-16 07:37 - 00000000 ____D C:\Users\A&I\AppData\Local\{292B35E8-8466-4E6D-8C44-BAE3D38ACC43} 2012-07-15 20:38 - 2012-07-15 20:38 - 00000266 ____A C:\Users\A&I\Desktop\zasilacz stabilizowany INVENTEL 15V -1,5A GWAR FV (2485959259) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-15 20:30 - 2012-07-15 20:31 - 00000000 ____D C:\Users\A&I\Desktop\Smart 2012-07-15 12:59 - 2012-07-15 12:59 - 00360448 ____A C:\Users\A&I\AppData\Local\ecqpaivny.exe 2012-07-15 12:13 - 2012-07-15 12:13 - 00000232 ____A C:\Users\A&I\Desktop\Oferta - Mercedes-Benz 350 - Komplet dokumentów do rejestracji.url 2012-07-15 11:40 - 2012-07-15 11:41 - 00000000 ____D C:\Users\A&I\AppData\Local\{08A03B98-EE91-4FFB-AE2C-CD34E22051F9} 2012-07-15 11:40 - 2012-07-15 11:40 - 00000000 ____D C:\Users\A&I\AppData\Local\{EAF0B93E-841D-4F9C-B4EB-184D7FC97678} 2012-07-14 11:19 - 2012-07-14 11:19 - 00000000 ____D C:\Users\A&I\AppData\Local\{8B14BDC2-C2C7-4B93-8964-717C52BA96E3} 2012-07-14 11:19 - 2012-07-14 11:19 - 00000000 ____D C:\Users\A&I\AppData\Local\{75B32199-22F2-46E5-96D6-9724A1D54AC6} 2012-07-14 10:09 - 2012-07-14 10:09 - 00000000 ____D C:\Users\A&I\Desktop\Launch 2012-07-14 09:44 - 2012-07-14 09:44 - 00000000 ____D C:\Users\A&I\AppData\Local\GHISLER 2012-07-13 23:18 - 2012-07-13 23:18 - 00000000 ____D C:\Users\A&I\AppData\Local\{15FA622E-F78D-411E-AA2A-DC291ED716CE} 2012-07-13 23:17 - 2012-07-13 23:18 - 00000000 ____D C:\Users\A&I\AppData\Local\{FA2D9BAC-F80A-4EBB-A4E5-2F3DD12C0418} 2012-07-13 08:28 - 2012-07-13 08:28 - 00000000 ____D C:\Users\A&I\AppData\Local\{C72184ED-AF31-4A7C-B208-D804EC25E410} 2012-07-13 08:28 - 2012-07-13 08:28 - 00000000 ____D C:\Users\A&I\AppData\Local\{311977CF-B170-467F-AC01-126E6A5D0E95} 2012-07-12 22:21 - 2012-07-12 22:21 - 00000267 ____A C:\Users\A&I\Desktop\GRILL ATRAPA AUDI A8 S8 D3 PION CHROM 4E0853651AL (2486556886) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-12 20:50 - 2012-06-12 04:08 - 03148800 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys 2012-07-12 20:39 - 2012-06-02 13:49 - 17807360 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2012-07-12 20:39 - 2012-06-02 13:17 - 10924032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2012-07-12 20:39 - 2012-06-02 13:12 - 02311680 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2012-07-12 20:39 - 2012-06-02 13:05 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2012-07-12 20:39 - 2012-06-02 13:05 - 01346048 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2012-07-12 20:39 - 2012-06-02 13:04 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2012-07-12 20:39 - 2012-06-02 13:04 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll 2012-07-12 20:39 - 2012-06-02 13:03 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2012-07-12 20:39 - 2012-06-02 13:01 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2012-07-12 20:39 - 2012-06-02 13:00 - 00818688 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2012-07-12 20:39 - 2012-06-02 12:59 - 02144768 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2012-07-12 20:39 - 2012-06-02 12:57 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2012-07-12 20:39 - 2012-06-02 12:57 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2012-07-12 20:39 - 2012-06-02 12:54 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2012-07-12 20:39 - 2012-06-02 10:07 - 12314624 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2012-07-12 20:39 - 2012-06-02 09:43 - 09737728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2012-07-12 20:39 - 2012-06-02 09:33 - 01800192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2012-07-12 20:39 - 2012-06-02 09:26 - 01103872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2012-07-12 20:39 - 2012-06-02 09:25 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2012-07-12 20:39 - 2012-06-02 09:25 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2012-07-12 20:39 - 2012-06-02 09:23 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2012-07-12 20:39 - 2012-06-02 09:21 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2012-07-12 20:39 - 2012-06-02 09:20 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2012-07-12 20:39 - 2012-06-02 09:19 - 01793024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2012-07-12 20:39 - 2012-06-02 09:19 - 00716800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2012-07-12 20:39 - 2012-06-02 09:17 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2012-07-12 20:39 - 2012-06-02 09:16 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2012-07-12 20:39 - 2012-06-02 09:14 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2012-07-12 20:14 - 2012-05-04 12:00 - 00366592 ____A (Microsoft Corporation) C:\Windows\System32\qdvd.dll 2012-07-12 20:14 - 2012-05-04 10:59 - 00514560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2012-07-12 17:27 - 2012-07-12 17:27 - 00000000 ____D C:\Users\A&I\AppData\Local\{FD3C883B-56A8-45A2-A678-DF571B8CBB66} 2012-07-12 17:27 - 2012-07-12 17:27 - 00000000 ____D C:\Users\A&I\AppData\Local\{279ECD5F-1343-48A0-9D13-66A2B01FE75C} 2012-07-12 15:16 - 2012-07-12 20:13 - 00203705 ____A C:\Users\A&I\ewa_client_2.log 2012-07-12 15:16 - 2012-07-12 15:18 - 00019703 ____A C:\Users\A&I\ewa_client_3.log 2012-07-12 15:16 - 2012-07-12 15:16 - 00000000 ____N C:\Users\A&I\ewa_client_1.log.lck 2012-07-12 15:16 - 2012-07-12 15:16 - 00000000 ____N C:\Users\A&I\ewa_client_0.log.lck 2012-07-12 04:03 - 2012-07-12 04:03 - 00000000 ____D C:\Users\A&I\AppData\Local\{78A2FDD5-475B-46A0-84E4-8AE821CDEBAD} 2012-07-11 13:00 - 2012-07-11 13:00 - 00000000 ____D C:\Users\A&I\AppData\Local\{241FBE78-BB64-4B5E-999F-D2216A5CBFCC} 2012-07-11 13:00 - 2012-07-11 13:00 - 00000000 ____D C:\Users\A&I\AppData\Local\{134DC53B-F334-4AA7-9A72-26813F6AF9B9} 2012-07-11 12:47 - 2012-06-09 06:43 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll 2012-07-11 12:47 - 2012-06-09 05:41 - 12873728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2012-07-11 12:47 - 2012-06-06 07:06 - 02004480 ____A (Microsoft Corporation) C:\Windows\System32\msxml6.dll 2012-07-11 12:47 - 2012-06-06 07:06 - 01881600 ____A (Microsoft Corporation) C:\Windows\System32\msxml3.dll 2012-07-11 12:47 - 2012-06-06 07:02 - 01133568 ____A (Microsoft Corporation) C:\Windows\System32\cdosys.dll 2012-07-11 12:47 - 2012-06-06 06:05 - 01390080 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2012-07-11 12:47 - 2012-06-06 06:05 - 01236992 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2012-07-11 12:47 - 2012-06-06 06:03 - 00805376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll 2012-07-11 12:47 - 2012-06-02 06:50 - 00458704 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys 2012-07-11 12:47 - 2012-06-02 06:48 - 00151920 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys 2012-07-11 12:47 - 2012-06-02 06:48 - 00095600 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys 2012-07-11 12:47 - 2012-06-02 06:45 - 00340992 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll 2012-07-11 12:47 - 2012-06-02 06:44 - 00307200 ____A (Microsoft Corporation) C:\Windows\System32\ncrypt.dll 2012-07-11 12:47 - 2012-06-02 05:40 - 00225280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2012-07-11 12:47 - 2012-06-02 05:40 - 00022016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2012-07-11 12:47 - 2012-06-02 05:39 - 00219136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2012-07-11 12:47 - 2012-06-02 05:34 - 00096768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2012-07-11 12:47 - 2010-06-26 04:55 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\msxml3r.dll 2012-07-11 12:47 - 2010-06-26 04:24 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2012-07-10 18:58 - 2012-07-10 18:58 - 00000000 ____D C:\Users\A&I\AppData\Local\{9DF73E19-7F25-4E86-A7AC-B60070128DA3} 2012-07-10 18:58 - 2012-07-10 18:58 - 00000000 ____D C:\Users\A&I\AppData\Local\{212EC814-BFB0-4F4C-B252-1F06DBA9327A} 2012-07-10 06:57 - 2012-07-10 06:58 - 00000000 ____D C:\Users\A&I\AppData\Local\{992675B8-6881-4992-A85D-4D55D1BA93A9} 2012-07-10 06:57 - 2012-07-10 06:57 - 00000000 ____D C:\Users\A&I\AppData\Local\{0AABEADF-FCA6-4433-B0B2-112FF7E285FB} 2012-07-09 11:52 - 2012-07-09 11:52 - 00000000 ____D C:\Users\A&I\AppData\Local\{7D75615A-366A-47C2-9E29-DAE01C2551FC} 2012-07-09 11:52 - 2012-07-09 11:52 - 00000000 ____D C:\Users\A&I\AppData\Local\{3C558BC7-182D-4766-A2DA-CE42176C54E8} 2012-07-09 09:18 - 2012-07-09 09:19 - 00000000 ____D C:\Users\A&I\Documents\Launch X431 2012-07-08 23:51 - 2012-07-08 23:52 - 00000000 ____D C:\Users\A&I\AppData\Local\{BDA9399E-C102-4279-A6B6-8714E1BAD158} 2012-07-08 23:51 - 2012-07-08 23:51 - 00000000 ____D C:\Users\A&I\AppData\Local\{33A310AE-C929-4E6F-8B6C-F3C9CBE3AC97} 2012-07-08 20:47 - 2012-07-08 20:47 - 00000197 ____A C:\Users\A&I\Desktop\Launch X431 Update Guide.url 2012-07-08 17:09 - 2012-07-08 17:09 - 00000991 ____A C:\Users\Public\Desktop\X431Update.lnk 2012-07-08 17:09 - 2012-07-08 17:09 - 00000000 ____D C:\Program Files (x86)\X431Update 2012-07-08 17:07 - 2012-07-08 17:09 - 04093253 ____A (Launch Software Corporation ) C:\Users\A&I\Downloads\X431Update.exe 2012-07-08 11:51 - 2012-07-08 11:51 - 00000000 ____D C:\Users\A&I\AppData\Local\{23123DF3-F024-4E5E-9DA8-2E91215DA820} 2012-07-08 11:51 - 2012-07-08 11:51 - 00000000 ____D C:\Users\A&I\AppData\Local\{1B0AD606-9523-4083-9136-9C22BB92C9BD} 2012-07-07 23:50 - 2012-07-07 23:51 - 00000000 ____D C:\Users\A&I\AppData\Local\{BA6545E5-0F19-4000-A00B-B538386A6647} 2012-07-07 23:49 - 2012-07-07 23:50 - 00000000 ____D C:\Users\A&I\AppData\Local\{367BF6DD-243B-4D3D-81A1-E942A84FB7BE} 2012-07-07 07:39 - 2012-07-07 07:39 - 00000000 ____D C:\Users\A&I\AppData\Local\{E5ECE003-92F0-4200-BF49-0176CB8619C3} 2012-07-07 07:39 - 2012-07-07 07:39 - 00000000 ____D C:\Users\A&I\AppData\Local\{C4E83E57-48A6-4A46-9F1E-C05362E9CA40} 2012-07-07 00:46 - 2010-02-23 09:16 - 00294912 ____A (Microsoft Corporation) C:\Windows\System32\browserchoice.exe 2012-07-06 17:15 - 2012-07-06 17:15 - 00000000 ____D C:\Users\A&I\AppData\Local\{8D4DF1BF-EAC7-4305-860A-136CA8F3730C} 2012-07-06 03:11 - 2012-07-06 03:11 - 00000000 ____D C:\Users\A&I\AppData\Local\{C825A423-1F77-419E-B4AA-40A64F4A7501} 2012-07-05 12:55 - 2012-07-05 12:55 - 00000000 ____D C:\Users\A&I\AppData\Local\{8C878580-65DA-41BC-BBC0-D93BF1F62171} 2012-07-05 12:54 - 2012-07-05 12:55 - 00000000 ____D C:\Users\A&I\AppData\Local\{34E4D40F-C372-4570-9E2E-FFF30C127F2B} 2012-07-05 01:02 - 2012-07-05 01:02 - 00000247 ____A C:\Users\A&I\Desktop\MASKA AUDI A8 D3 SZEROKI GRIL (2451331964) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-05 00:54 - 2012-07-05 00:54 - 00000000 ____D C:\Users\A&I\AppData\Local\{D6F1C32B-7302-4C56-B9E4-4738476D011D} 2012-07-05 00:54 - 2012-07-05 00:54 - 00000000 ____D C:\Users\A&I\AppData\Local\{3032C548-AB29-4A9A-959E-837C42F9DE31} 2012-07-04 12:53 - 2012-07-04 12:53 - 00000000 ____D C:\Users\A&I\AppData\Local\{CEC5A640-1D64-4B99-8DF0-8A4568954389} 2012-07-04 12:53 - 2012-07-04 12:53 - 00000000 ____D C:\Users\A&I\AppData\Local\{58AF1E16-12A3-4066-A500-93D34CBE3BC6} 2012-07-04 00:07 - 2012-07-04 00:07 - 00000000 ____D C:\Users\A&I\AppData\Local\{AFFC38FF-23CF-4C82-ACD0-77FD147FA003} 2012-07-04 00:07 - 2012-07-04 00:07 - 00000000 ____D C:\Users\A&I\AppData\Local\{456AB34B-3B5A-4FA2-A287-FDC7DD83379D} 2012-07-03 11:14 - 2012-07-03 11:14 - 00000000 ____D C:\Users\A&I\AppData\Local\{3811EA09-3687-4697-9AA7-72CFA81A9743} 2012-07-03 11:13 - 2012-07-03 11:14 - 00000000 ____D C:\Users\A&I\AppData\Local\{655991EC-B66A-4920-89BC-140B485E7EA8} 2012-07-02 22:58 - 2012-07-02 22:59 - 00000000 ____D C:\Users\A&I\AppData\Local\{8C47F2D1-3C5A-43FF-AA6B-D02EBF01BC0C} 2012-07-02 22:58 - 2012-07-02 22:58 - 00000000 ____D C:\Users\A&I\AppData\Local\{2F7ACBD9-1701-49A5-9DBA-83A776FEE07E} 2012-07-02 22:42 - 2012-03-31 12:11 - 00157472 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaws.exe 2012-07-02 15:40 - 2012-07-02 15:40 - 00000000 ____D C:\Users\A&I\AppData\Local\{85E883F0-4DBC-449D-8759-946DD93A0DE7} 2012-07-02 10:24 - 2012-07-02 10:24 - 00000138 ____A C:\Users\A&I\Desktop\Czynnik chłodniczy R134aczynniki chłodnicze.url 2012-07-02 09:49 - 2012-07-02 09:49 - 00000131 ____A C:\Users\A&I\Desktop\Klimatyzacja samochodowa serwis napełnianie odgrzybianie.url 2012-07-02 00:53 - 2012-07-02 00:53 - 00000000 ____D C:\Users\A&I\AppData\Local\{2523905F-B703-41A8-BA53-9FE2D8BDF69A} 2012-07-02 00:52 - 2012-07-02 00:53 - 00000000 ____D C:\Users\A&I\AppData\Local\{FB3F0228-00B4-45A1-B9F0-B6A5FBE8A4CB} 2012-07-01 23:35 - 2012-07-01 23:35 - 00000137 ____A C:\Users\A&I\Desktop\Wszystko o klimatyzacji samochodowej i drukowaniu w biurze.url 2012-07-01 12:17 - 2012-07-01 12:17 - 00000000 ____D C:\Users\A&I\AppData\Local\{A7644362-98DD-488F-A161-1C035CD961E1} 2012-07-01 12:16 - 2012-07-01 12:16 - 00000000 ____D C:\Users\A&I\AppData\Local\{62AD26B7-CB9B-48F2-87A1-8C2C131D7AA2} 2012-06-30 21:58 - 2012-06-30 21:58 - 00000266 ____A C:\Users\A&I\Desktop\Donica drewniana Skrzynka folia gratis- PRODUCENT (2429250480) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-06-30 21:33 - 2012-06-30 21:33 - 00000000 ____D C:\Users\A&I\AppData\Local\{EF996C79-6DCD-479F-8381-47A4E562400E} 2012-06-30 21:33 - 2012-06-30 21:33 - 00000000 ____D C:\Users\A&I\AppData\Local\{AEC0B2AA-CE76-47A9-97BC-B29D1564C46C} 2012-06-30 08:41 - 2012-06-30 08:41 - 00000000 ____D C:\Users\A&I\AppData\Local\{269D8A22-765F-4070-A784-C72E1FB529F2} 2012-06-30 08:40 - 2012-06-30 08:41 - 00000000 ____D C:\Users\A&I\AppData\Local\{B9EA6DF2-5ABC-436C-A489-23417DDF9F41} 2012-06-29 23:33 - 2012-06-29 23:33 - 00000000 ____D C:\Users\A&I\AppData\Local\{DA9EC14A-5999-4A3A-95AA-27FC4F715025} 2012-06-29 23:33 - 2012-06-29 23:33 - 00000000 ____D C:\Users\A&I\AppData\Local\{4FF1CB32-3A33-4863-839A-41AC30E4DD9D} 2012-06-29 10:00 - 2012-06-29 10:00 - 00000000 ____D C:\Users\A&I\AppData\Local\{11CAAC1E-23E8-41E6-A7CB-4E6D5378A9D7} 2012-06-29 09:59 - 2012-06-29 10:00 - 00000000 ____D C:\Users\A&I\AppData\Local\{650D8621-FBDE-4995-9692-D8CB124C2DF9} 2012-06-28 23:36 - 2012-06-28 23:36 - 00001782 ____A C:\Users\A&I\Desktop\Zamówienie 1 Honda.txt 2012-06-28 21:59 - 2012-06-28 21:59 - 00000000 ____D C:\Users\A&I\AppData\Local\{D326B9FC-74C7-42E8-976F-448E4C976239} 2012-06-28 21:58 - 2012-06-28 21:59 - 00000000 ____D C:\Users\A&I\AppData\Local\{600C94D6-06D7-4E3C-B75D-C09804740F1E} 2012-06-28 09:28 - 2012-06-28 09:28 - 00000000 ____D C:\Users\A&I\AppData\Local\{EFE430F6-7328-4CF6-8E12-0F344019835B} 2012-06-28 09:27 - 2012-06-28 09:28 - 00000000 ____D C:\Users\A&I\AppData\Local\{0E925A7D-A8AC-4FDC-909E-C874B7B51C27} 2012-06-27 21:27 - 2012-06-27 21:27 - 00000000 ____D C:\Users\A&I\AppData\Local\{BF052009-D2C1-4845-BE35-BD0D7646DE31} 2012-06-27 21:27 - 2012-06-27 21:27 - 00000000 ____D C:\Users\A&I\AppData\Local\{B71EB044-BAF3-4124-804B-01DE3BB96EB4} 2012-06-27 11:47 - 2012-06-27 11:47 - 00000206 ____A C:\Users\A&I\Desktop\touch screen do star diagnosis basic#6323427.url 2012-06-27 09:26 - 2012-06-27 09:26 - 00000000 ____D C:\Users\A&I\AppData\Local\{BB30A2B8-3333-47A9-8D1B-29D72F89A1F8} 2012-06-27 09:26 - 2012-06-27 09:26 - 00000000 ____D C:\Users\A&I\AppData\Local\{61283816-C452-4059-8AF4-97A2051F2D5D} 2012-06-26 23:27 - 2012-06-26 23:27 - 00000137 ____A C:\Users\A&I\Desktop\VIN Decoder Mercedes-benz Luxuskombi.url 2012-06-26 23:20 - 2012-06-26 23:20 - 00000000 ____D C:\Program Files\Oracle 2012-06-26 23:19 - 2012-06-26 23:18 - 00268720 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe 2012-06-26 23:19 - 2012-05-04 17:33 - 00955800 ____A (Oracle Corporation) C:\Windows\System32\npDeployJava1.dll 2012-06-26 19:36 - 2012-06-26 19:36 - 00000000 ____D C:\Users\A&I\AppData\Local\{BD5FA27E-6BC5-464F-8D24-CBCF8BDA9334} 2012-06-26 19:36 - 2012-06-26 19:36 - 00000000 ____D C:\Users\A&I\AppData\Local\{1F41B12B-7158-4CAC-B8EF-8B287F18F0E0} 2012-06-26 07:44 - 2012-07-23 21:43 - 00000000 ____D C:\Firefox 2012-06-26 07:34 - 2012-06-26 07:34 - 00000000 ____D C:\Users\All Users\Ask 2012-06-26 07:33 - 2012-06-26 07:33 - 00002954 ____A C:\Windows\SysWOW64\jupdate-1.7.0_05-b05.log 2012-06-26 07:33 - 2012-03-31 12:11 - 00149280 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaw.exe 2012-06-26 07:33 - 2012-03-31 12:11 - 00149280 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\java.exe 2012-06-25 21:26 - 2012-06-25 21:26 - 00000000 ____D C:\Users\A&I\AppData\Local\{AB811EB3-4DD2-457A-9E36-F6E5BABDA904} 2012-06-25 21:25 - 2012-06-25 21:26 - 00000000 ____D C:\Users\A&I\AppData\Local\{7BDC10F2-0051-4C83-8D8B-0135069FCE28} 2012-06-25 17:15 - 2012-06-25 17:15 - 00000283 ____A C:\Users\A&I\Desktop\Zlot miłośników mercedesów na Dniach Osjakowa - Naszemiasto.pl#galeria.url 2012-06-25 15:04 - 2012-06-25 15:04 - 01394248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml4.dll 2012-06-25 09:25 - 2012-06-25 09:25 - 00000000 ____D C:\Users\A&I\AppData\Local\{ED940734-B4F6-4A56-BB10-7550DB9E9750} 2012-06-25 09:25 - 2012-06-25 09:25 - 00000000 ____D C:\Users\A&I\AppData\Local\{2B771F4A-62CF-42C9-9863-8D9BFD0112FF} 2012-06-25 00:17 - 2012-06-25 00:17 - 00000248 ____A C:\Users\A&I\Desktop\Lokal-Obiekt użytkowy, Wieluń, 389,52m2, 1 850 000 PLN - otoDom.pl.url ============ 3 Months Modified Files ======================== 2012-07-25 00:54 - 2012-07-24 09:21 - 00000035 ____A C:\Users\Public\Documents\AtherosServiceConfig.ini 2012-07-25 00:54 - 2011-10-23 13:59 - 00001038 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2012-07-25 00:54 - 2009-07-14 06:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2012-07-25 00:53 - 2012-07-24 09:20 - 00001176 ____A C:\Windows\setupact.log 2012-07-25 00:44 - 2011-06-07 22:42 - 00045056 ____A C:\Windows\System32\acovcnt.exe 2012-07-25 00:41 - 2011-06-08 03:49 - 01587022 ____A C:\Windows\WindowsUpdate.log 2012-07-25 00:35 - 2012-07-25 00:34 - 01153912 ____A (Emsi Software GmbH) C:\Users\A&I\Desktop\BlitzBlank.exe 2012-07-25 00:31 - 2012-07-25 00:31 - 00450216 ____A C:\Users\A&I\Downloads\BlitzBlank.exe.ghpsa8r.partial 2012-07-24 23:58 - 2012-07-24 23:58 - 00328704 ____A (Microsoft Corporation) C:\Windows\System32\services.exe.B7F00DED51CEF9AB 2012-07-24 23:58 - 2012-07-24 23:58 - 00050392 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\bwaaehrp.sys 2012-07-24 23:55 - 2012-07-24 23:55 - 00328704 ____A (Microsoft Corporation) C:\Windows\System32\services.exe.37A2ED84D72E865C 2012-07-24 23:51 - 2012-07-24 23:51 - 00328704 ____A (Microsoft Corporation) C:\Windows\System32\services.exe.11AA8DF185B40910 2012-07-24 23:48 - 2012-07-24 23:48 - 00328704 ____A (Microsoft Corporation) C:\Windows\System32\services.exe.1B472134D33556E7 2012-07-24 23:45 - 2009-07-14 00:19 - 00328704 ____A (Microsoft Corporation) C:\Windows\System32\services.exe 2012-07-24 23:39 - 2012-07-24 23:39 - 00328704 ____A (Microsoft Corporation) C:\Windows\System32\services.exe.90D5DE3776DBCA68 2012-07-24 23:35 - 2012-07-24 23:35 - 00328704 ____A (Microsoft Corporation) C:\Windows\System32\services.exe.6DCF1AEF06731825 2012-07-24 23:31 - 2012-07-24 23:31 - 00328704 ____A (Microsoft Corporation) C:\Windows\System32\services.exe.09397FD9C5865616 2012-07-24 23:29 - 2011-10-23 13:59 - 00001042 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2012-07-24 23:25 - 2009-07-14 05:45 - 00022064 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2012-07-24 23:25 - 2009-07-14 05:45 - 00022064 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2012-07-24 23:24 - 2011-06-11 21:48 - 00001050 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2470409557-1552822084-976138736-1000UA.job 2012-07-24 23:23 - 2011-06-08 23:25 - 01607228 ____A C:\Windows\SysWOW64\PerfStringBackup.INI 2012-07-24 23:23 - 2011-06-08 23:25 - 00001912 ____A C:\Windows\epplauncher.mif 2012-07-24 23:23 - 2011-04-12 14:21 - 00711686 ____A C:\Windows\System32\perfh015.dat 2012-07-24 23:23 - 2011-04-12 14:21 - 00140004 ____A C:\Windows\System32\perfc015.dat 2012-07-24 23:05 - 2012-04-03 07:41 - 00000930 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job 2012-07-24 18:50 - 2011-06-11 21:48 - 00000998 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2470409557-1552822084-976138736-1000Core.job 2012-07-24 16:17 - 2012-07-24 16:09 - 00082995 ____A C:\Users\A&I\Downloads\DISPLAY_33_56_EN_micars_980540728600.ZIP 2012-07-24 16:15 - 2012-07-24 16:09 - 00066935 ____A C:\Users\A&I\Downloads\DGDEMO_14_30_RU_micars_980540728600.ZIP 2012-07-24 14:22 - 2012-07-24 14:22 - 00000266 ____A C:\Users\A&I\Desktop\PRZEKLADNIA BOXER DUCATO JUMPER STILO MAGLOWNICA (3) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-24 14:21 - 2012-07-24 14:21 - 00000266 ____A C:\Users\A&I\Desktop\PRZEKLADNIA BOXER DUCATO JUMPER STILO MAGLOWNICA (2) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-24 09:20 - 2012-07-24 09:20 - 00001486 ____A C:\Windows\PFRO.log 2012-07-24 09:20 - 2012-07-24 09:20 - 00000000 ____A C:\Windows\setuperr.log 2012-07-24 09:20 - 2009-07-14 06:08 - 00032608 ____A C:\Windows\Tasks\SCHEDLGU.TXT 2012-07-23 23:51 - 2012-01-19 10:02 - 00236032 __ASH C:\Users\A&I\Documents\Thumbs.db 2012-07-23 17:03 - 2012-07-23 17:03 - 00000266 ____A C:\Users\A&I\Desktop\PRZEKLADNIA BOXER DUCATO JUMPER STILO MAGLOWNICA (2464632245) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-23 17:03 - 2012-07-23 17:03 - 00000266 ____A C:\Users\A&I\Desktop\MAGLOWNICA PRZEKŁADNIA KIEROWNICZA MOVANO DUCATO (2481580920) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-23 12:59 - 2009-07-14 06:13 - 01587340 ____A C:\Windows\System32\PerfStringBackup.INI 2012-07-22 23:07 - 2012-07-22 23:07 - 00000267 ____A C:\Users\A&I\Desktop\AUDI A8 D3 4e0 maglownica przekładnia kierownicza (2466366437) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-22 23:04 - 2012-07-22 23:04 - 00000265 ____A C:\Users\A&I\Desktop\Sprężarka, pompa zawieszenia Audi A8 Wabco Tanio! (2484400760) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-22 21:24 - 2012-07-22 21:24 - 00000529 ____A C:\Users\A&I\Desktop\mercedesa w 107 (2502396691) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-22 21:24 - 2012-07-22 21:24 - 00000529 ____A C:\Users\A&I\Desktop\Mercedes Benz W107 450 SLC 5.0 L 5000cm3 SL (2509605407) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-22 20:50 - 2012-07-22 20:50 - 00000252 ____A C:\Users\A&I\Desktop\maska Mercedes W107 SL 107 SLC alu (2478924161) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-21 23:55 - 2012-07-21 23:55 - 00000128 ____A C:\Users\A&I\Desktop\Budowanie, konwersje i modyfikacje pojazdów elektrycznych.url 2012-07-21 22:37 - 2012-07-21 21:31 - 118861001 ____A C:\Users\A&I\Downloads\windowsvistax32bitrecoverydisc.zip 2012-07-21 21:50 - 2012-07-21 21:50 - 00360448 ____A C:\Users\A&I\AppData\Local\gyrrimecv.exe 2012-07-21 21:21 - 2012-07-21 21:21 - 00000230 ____A C:\Users\A&I\Desktop\Mercedes W115 zderzak przód (2501671202) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-20 11:06 - 2012-07-20 11:06 - 00000160 ____A C:\Users\A&I\Desktop\Wymiana rdzeni CHŁODNICE, CHLODNICE , CHŁODNICE SAMOCHODOWE, PRZEŹMIEROWO CHŁODNICE NOWAK CHŁODNICE , Chłodnice samochodowe Poznań - Przeźmierowo. Sprzedaż, naprawa, regeneracja.url 2012-07-20 09:09 - 2012-07-20 09:09 - 00360448 ____A C:\Users\A&I\AppData\Local\hddia.exe 2012-07-20 01:08 - 2012-07-20 01:08 - 00000262 ____A C:\Users\A&I\Desktop\ZASILACZ 15V 800mA 12VA GERMANY NOWY FAKTURA (2474309799) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-20 00:16 - 2012-07-20 00:16 - 00000279 ____A C:\Users\A&I\Desktop\Audi MMI HIGH 2G Digital Road Map 2012 4E0 060 884 CN - Audi MMI 2G Digital - BOMBA63 - Chomikuj.pl.url 2012-07-19 09:09 - 2012-07-19 09:09 - 00000265 ____A C:\Users\A&I\Desktop\Meble ogrodowe rattanowe fotele 6 stół ogrodowy (2346610873) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-15 20:38 - 2012-07-15 20:38 - 00000266 ____A C:\Users\A&I\Desktop\zasilacz stabilizowany INVENTEL 15V -1,5A GWAR FV (2485959259) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-15 12:59 - 2012-07-15 12:59 - 00360448 ____A C:\Users\A&I\AppData\Local\ecqpaivny.exe 2012-07-15 12:13 - 2012-07-15 12:13 - 00000232 ____A C:\Users\A&I\Desktop\Oferta - Mercedes-Benz 350 - Komplet dokumentów do rejestracji.url 2012-07-13 08:20 - 2011-06-07 22:24 - 00001278 ____A C:\Windows\System32\ServiceFilter.ini 2012-07-13 08:19 - 2009-07-14 05:45 - 00293976 ____A C:\Windows\System32\FNTCACHE.DAT 2012-07-12 22:21 - 2012-07-12 22:21 - 00000267 ____A C:\Users\A&I\Desktop\GRILL ATRAPA AUDI A8 S8 D3 PION CHROM 4E0853651AL (2486556886) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-12 20:41 - 2011-06-08 23:42 - 59701280 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2012-07-12 20:13 - 2012-07-12 15:16 - 00203705 ____A C:\Users\A&I\ewa_client_2.log 2012-07-12 15:18 - 2012-07-12 15:16 - 00019703 ____A C:\Users\A&I\ewa_client_3.log 2012-07-12 15:16 - 2012-07-12 15:16 - 00000000 ____N C:\Users\A&I\ewa_client_1.log.lck 2012-07-12 15:16 - 2012-07-12 15:16 - 00000000 ____N C:\Users\A&I\ewa_client_0.log.lck 2012-07-12 15:16 - 2011-08-16 23:19 - 00000122 ____A C:\Users\A&I\.ewanapi_cookie 2012-07-12 15:16 - 2011-08-16 23:19 - 00000000 ____A C:\Users\A&I\ewa_client_1.log 2012-07-12 15:16 - 2011-08-16 23:19 - 00000000 ____A C:\Users\A&I\ewa_client_0.log 2012-07-11 20:26 - 2012-04-03 07:41 - 00426184 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2012-07-11 20:26 - 2011-06-09 21:28 - 00070344 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2012-07-08 20:47 - 2012-07-08 20:47 - 00000197 ____A C:\Users\A&I\Desktop\Launch X431 Update Guide.url 2012-07-08 17:09 - 2012-07-08 17:09 - 00000991 ____A C:\Users\Public\Desktop\X431Update.lnk 2012-07-08 17:09 - 2012-07-08 17:07 - 04093253 ____A (Launch Software Corporation ) C:\Users\A&I\Downloads\X431Update.exe 2012-07-05 01:02 - 2012-07-05 01:02 - 00000247 ____A C:\Users\A&I\Desktop\MASKA AUDI A8 D3 SZEROKI GRIL (2451331964) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-07-02 10:24 - 2012-07-02 10:24 - 00000138 ____A C:\Users\A&I\Desktop\Czynnik chłodniczy R134aczynniki chłodnicze.url 2012-07-02 09:49 - 2012-07-02 09:49 - 00000131 ____A C:\Users\A&I\Desktop\Klimatyzacja samochodowa serwis napełnianie odgrzybianie.url 2012-07-01 23:35 - 2012-07-01 23:35 - 00000137 ____A C:\Users\A&I\Desktop\Wszystko o klimatyzacji samochodowej i drukowaniu w biurze.url 2012-06-30 21:58 - 2012-06-30 21:58 - 00000266 ____A C:\Users\A&I\Desktop\Donica drewniana Skrzynka folia gratis- PRODUCENT (2429250480) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-06-28 23:36 - 2012-06-28 23:36 - 00001782 ____A C:\Users\A&I\Desktop\Zamówienie 1 Honda.txt 2012-06-27 11:47 - 2012-06-27 11:47 - 00000206 ____A C:\Users\A&I\Desktop\touch screen do star diagnosis basic#6323427.url 2012-06-27 09:25 - 2011-06-07 22:24 - 00001968 ____A C:\Windows\System32\AutoRunFilter.ini 2012-06-26 23:27 - 2012-06-26 23:27 - 00000137 ____A C:\Users\A&I\Desktop\VIN Decoder Mercedes-benz Luxuskombi.url 2012-06-26 23:18 - 2012-06-26 23:19 - 00268720 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe 2012-06-26 23:18 - 2011-06-19 15:54 - 00189360 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe 2012-06-26 23:18 - 2011-06-19 15:54 - 00188840 ____A (Oracle Corporation) C:\Windows\System32\java.exe 2012-06-26 21:14 - 2011-12-29 23:56 - 00000822 ____A C:\Users\Public\Desktop\CCleaner.lnk 2012-06-26 07:33 - 2012-06-26 07:33 - 00002954 ____A C:\Windows\SysWOW64\jupdate-1.7.0_05-b05.log 2012-06-25 17:15 - 2012-06-25 17:15 - 00000283 ____A C:\Users\A&I\Desktop\Zlot miłośników mercedesów na Dniach Osjakowa - Naszemiasto.pl#galeria.url 2012-06-25 15:04 - 2012-06-25 15:04 - 01394248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml4.dll 2012-06-25 00:17 - 2012-06-25 00:17 - 00000248 ____A C:\Users\A&I\Desktop\Lokal-Obiekt użytkowy, Wieluń, 389,52m2, 1 850 000 PLN - otoDom.pl.url 2012-06-24 23:16 - 2012-06-24 23:16 - 00000110 ____A C:\Users\A&I\Desktop\Firma.url 2012-06-24 20:20 - 2012-06-24 20:20 - 00000137 ____A C:\Users\A&I\Desktop\Caffe prego! • Zobacz temat - Schaerer Opal.url 2012-06-24 20:18 - 2012-06-24 20:18 - 00000186 ____A C:\Users\A&I\Desktop\KAVACAFE - Serwis i renowacja ekspresów do kawy - Kontakt.url 2012-06-23 16:10 - 2012-06-23 16:10 - 00000263 ____A C:\Users\A&I\Desktop\EXLUZYWNE MEBLE ALUMINIOWE 6 KRZESEŁ + STÓŁ , ZM1 (2411671717) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-06-22 08:53 - 2012-06-22 08:53 - 00000306 ____A C:\Users\A&I\Desktop\Dwie kategorie funkcji specjalnych urządzenia do obsługi klimatyzacji Hella ACTT200 - warsztat.pl.url 2012-06-22 08:51 - 2012-06-22 08:51 - 00000127 ____A C:\Users\A&I\Desktop\Wyposażenie warsztatu, elektronarzędzia, lakiery samochodowe Auto Service Manager.url 2012-06-22 08:48 - 2012-06-22 08:48 - 00000223 ____A C:\Users\A&I\Desktop\Klimatyzacja samochodowa (Strona 1) - Forum portalu klimatyzacja.pl.url 2012-06-20 06:13 - 2011-09-19 23:08 - 00000673 ____A C:\Users\A&I\Documents\blabla.txt 2012-06-19 09:14 - 2012-06-19 09:14 - 00000175 ____A C:\Users\A&I\Desktop\Nasz.Wieluń - Promujemy wieluńskie firmy -- vortal informacyjny.url 2012-06-18 11:24 - 2012-06-18 11:24 - 00000101 ____A C:\Users\A&I\Desktop\blank.url 2012-06-17 02:00 - 2012-06-17 02:00 - 00000262 ____A C:\Users\A&I\Desktop\IBM x61t x61 TABLET . DOTYK PALCEM . DIAGNOSTYKA (2404457043) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url 2012-06-13 12:22 - 2012-06-13 12:22 - 00000259 ____A C:\Users\A&I\Desktop\Napełnianie klimatyzacji cz.IV Serwis Klimatyzacji.url 2012-06-12 04:08 - 2012-07-12 20:50 - 03148800 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys 2012-06-09 06:43 - 2012-07-11 12:47 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll 2012-06-09 05:41 - 2012-07-11 12:47 - 12873728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2012-06-06 08:27 - 2012-06-06 08:26 - 00048128 ____A C:\Users\A&I\Documents\Rozliczenia z Sosną 2.xls 2012-06-06 07:06 - 2012-07-11 12:47 - 02004480 ____A (Microsoft Corporation) C:\Windows\System32\msxml6.dll 2012-06-06 07:06 - 2012-07-11 12:47 - 01881600 ____A (Microsoft Corporation) C:\Windows\System32\msxml3.dll 2012-06-06 07:02 - 2012-07-11 12:47 - 01133568 ____A (Microsoft Corporation) C:\Windows\System32\cdosys.dll 2012-06-06 06:05 - 2012-07-11 12:47 - 01390080 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2012-06-06 06:05 - 2012-07-11 12:47 - 01236992 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2012-06-06 06:03 - 2012-07-11 12:47 - 00805376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll 2012-06-03 21:22 - 2012-06-03 21:22 - 00000078 ____A C:\Users\Public\sdelevURL.tmp 2012-06-02 23:19 - 2012-06-19 15:21 - 02428952 ____A (Microsoft Corporation) C:\Windows\System32\wuaueng.dll 2012-06-02 23:19 - 2012-06-19 15:21 - 00701976 ____A (Microsoft Corporation) C:\Windows\System32\wuapi.dll 2012-06-02 23:19 - 2012-06-19 15:21 - 00057880 ____A (Microsoft Corporation) C:\Windows\System32\wuauclt.exe 2012-06-02 23:19 - 2012-06-19 15:21 - 00044056 ____A (Microsoft Corporation) C:\Windows\System32\wups2.dll 2012-06-02 23:19 - 2012-06-19 15:21 - 00038424 ____A (Microsoft Corporation) C:\Windows\System32\wups.dll 2012-06-02 23:15 - 2012-06-19 15:21 - 02622464 ____A (Microsoft Corporation) C:\Windows\System32\wucltux.dll 2012-06-02 23:15 - 2012-06-19 15:21 - 00099840 ____A (Microsoft Corporation) C:\Windows\System32\wudriver.dll 2012-06-02 14:19 - 2012-06-19 15:21 - 00186752 ____A (Microsoft Corporation) C:\Windows\System32\wuwebv.dll 2012-06-02 14:15 - 2012-06-19 15:21 - 00036864 ____A (Microsoft Corporation) C:\Windows\System32\wuapp.exe 2012-06-02 13:49 - 2012-07-12 20:39 - 17807360 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2012-06-02 13:17 - 2012-07-12 20:39 - 10924032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2012-06-02 13:12 - 2012-07-12 20:39 - 02311680 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2012-06-02 13:05 - 2012-07-12 20:39 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2012-06-02 13:05 - 2012-07-12 20:39 - 01346048 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2012-06-02 13:04 - 2012-07-12 20:39 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2012-06-02 13:04 - 2012-07-12 20:39 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll 2012-06-02 13:03 - 2012-07-12 20:39 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2012-06-02 13:01 - 2012-07-12 20:39 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2012-06-02 13:00 - 2012-07-12 20:39 - 00818688 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2012-06-02 12:59 - 2012-07-12 20:39 - 02144768 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2012-06-02 12:57 - 2012-07-12 20:39 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2012-06-02 12:57 - 2012-07-12 20:39 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2012-06-02 12:54 - 2012-07-12 20:39 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2012-06-02 10:07 - 2012-07-12 20:39 - 12314624 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2012-06-02 09:43 - 2012-07-12 20:39 - 09737728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2012-06-02 09:33 - 2012-07-12 20:39 - 01800192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2012-06-02 09:26 - 2012-07-12 20:39 - 01103872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2012-06-02 09:25 - 2012-07-12 20:39 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2012-06-02 09:25 - 2012-07-12 20:39 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2012-06-02 09:23 - 2012-07-12 20:39 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2012-06-02 09:21 - 2012-07-12 20:39 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2012-06-02 09:20 - 2012-07-12 20:39 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2012-06-02 09:19 - 2012-07-12 20:39 - 01793024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2012-06-02 09:19 - 2012-07-12 20:39 - 00716800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2012-06-02 09:17 - 2012-07-12 20:39 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2012-06-02 09:16 - 2012-07-12 20:39 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2012-06-02 09:14 - 2012-07-12 20:39 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2012-06-02 06:50 - 2012-07-11 12:47 - 00458704 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys 2012-06-02 06:48 - 2012-07-11 12:47 - 00151920 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys 2012-06-02 06:48 - 2012-07-11 12:47 - 00095600 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys 2012-06-02 06:45 - 2012-07-11 12:47 - 00340992 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll 2012-06-02 06:44 - 2012-07-11 12:47 - 00307200 ____A (Microsoft Corporation) C:\Windows\System32\ncrypt.dll 2012-06-02 05:40 - 2012-07-11 12:47 - 00225280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2012-06-02 05:40 - 2012-07-11 12:47 - 00022016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2012-06-02 05:39 - 2012-07-11 12:47 - 00219136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2012-06-02 05:34 - 2012-07-11 12:47 - 00096768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2012-05-27 17:54 - 2011-10-03 21:18 - 00000222 ____A C:\Users\A&I\Desktop\Pitbull - Rain Over Me ft. Marc Anthony - YouTube.url 2012-05-17 07:25 - 2012-05-17 07:25 - 00000211 ____A C:\Users\A&I\Desktop\[Focus MK1] Klimatyzacja-Prawidłowe nabijanie i jaka ilość czynnika. - Forum Ford Club Polska.url 2012-05-15 18:10 - 2012-06-04 21:15 - 00772592 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2012-05-15 18:10 - 2011-06-19 15:57 - 00687600 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2012-05-06 21:33 - 2012-05-06 21:33 - 00000018 ____A C:\Users\A&I\Documents\lek na arytmie.txt 2012-05-04 17:33 - 2012-06-26 23:19 - 00955800 ____A (Oracle Corporation) C:\Windows\System32\npDeployJava1.dll 2012-05-04 17:32 - 2011-06-19 15:54 - 00839056 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll 2012-05-04 12:06 - 2012-06-13 22:35 - 05559664 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe 2012-05-04 12:00 - 2012-07-12 20:14 - 00366592 ____A (Microsoft Corporation) C:\Windows\System32\qdvd.dll 2012-05-04 11:03 - 2012-06-13 22:35 - 03968368 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2012-05-04 11:03 - 2012-06-13 22:35 - 03913072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2012-05-04 10:59 - 2012-07-12 20:14 - 00514560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2012-05-01 06:40 - 2012-06-13 22:35 - 00209920 ____A (Microsoft Corporation) C:\Windows\System32\profsvc.dll 2012-04-28 04:55 - 2012-06-13 22:35 - 00210944 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys ZeroAccess: C:\Windows\Installer\{74f3bbb3-dc17-fb65-7b27-793954469adc} C:\Windows\Installer\{74f3bbb3-dc17-fb65-7b27-793954469adc}\@ C:\Windows\Installer\{74f3bbb3-dc17-fb65-7b27-793954469adc}\L C:\Windows\Installer\{74f3bbb3-dc17-fb65-7b27-793954469adc}\n C:\Windows\Installer\{74f3bbb3-dc17-fb65-7b27-793954469adc}\U C:\Windows\Installer\{74f3bbb3-dc17-fb65-7b27-793954469adc}\U\00000001.@ ZeroAccess: C:\Users\A&I\AppData\Local\{74f3bbb3-dc17-fb65-7b27-793954469adc} C:\Users\A&I\AppData\Local\{74f3bbb3-dc17-fb65-7b27-793954469adc}\@ C:\Users\A&I\AppData\Local\{74f3bbb3-dc17-fb65-7b27-793954469adc}\L C:\Users\A&I\AppData\Local\{74f3bbb3-dc17-fb65-7b27-793954469adc}\U ========================= Known DLLs (Whitelisted) ============ ========================= Bamital & volsnap Check ============ C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe 014A9CB92514E27C0107614DF764BC06 ZeroAccess <==== ATTENTION!. C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ========================= Memory info ====================== Percentage of memory in use: 11% Total physical RAM: 6054.71 MB Available physical RAM: 5352.55 MB Total Pagefile: 6052.91 MB Available Pagefile: 5347.9 MB Total Virtual: 8192 MB Available Virtual: 8191.9 MB ======================= Partitions ========================= 1 Drive c: () (Fixed) (Total:465.66 GB) (Free:376.03 GB) NTFS 3 Drive f: () (Removable) (Total:7.51 GB) (Free:3.38 GB) FAT32 4 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS 5 Drive y: (Zastrzeżone przez system) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)] Nr dysku Stan Rozmiar Wolne Dyn GPT -------- ------------- ------- ------- --- --- Dysk 0 Online 465 GB 0 B Dysk 1 Online 7701 MB 0 B Partitions of Disk 0: =============== Partycja ### Typ Rozmiar Przesuni©cie ------------- ---------------- ------- ------------ Partycja 1 Podstawowy 100 MB 1024 KB Partycja 2 Podstawowy 465 GB 101 MB ================================================================================== Disk: 0 Partycja 1 Typ : 07 Ukryta : Nie Aktywna : Tak Przesuni©cie w bajtach: 1048576 Wolumin ### Lit Etykieta Fs Typ Rozmiar Stan Info ----------- --- ----------- ----- ---------- ------- --------- -------- * Wolumin 1 Y Zastrzeľone NTFS Partycja 100 MB Zdrowy ================================================================================== Disk: 0 Partycja 2 Typ : 07 Ukryta : Nie Aktywna : Nie Przesuni©cie w bajtach: 105906176 Wolumin ### Lit Etykieta Fs Typ Rozmiar Stan Info ----------- --- ----------- ----- ---------- ------- --------- -------- * Wolumin 2 C NTFS Partycja 465 GB Zdrowy ================================================================================== Partitions of Disk 1: =============== Partycja ### Typ Rozmiar Przesuni©cie ------------- ---------------- ------- ------------ * Partycja 1 Podstawowy 7701 MB 0 B ================================================================================== Disk: 1 Nie wybrano partycji. Nie wybrano partycji. Wybierz partycj© i spr˘buj ponownie. ================================================================================== ========================================================== Last Boot: 2012-07-18 09:30 ======================= End Of Log ==========================