OTL logfile created on: 2012-07-25 15:23:27 - Run 1 OTL by OldTimer - Version 3.2.54.1 Folder = C:\Users\Kiecha\Downloads 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 6,00 Gb Total Physical Memory | 5,11 Gb Available Physical Memory | 85,25% Memory free 12,00 Gb Paging File | 11,16 Gb Available in Paging File | 93,08% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 74,43 Gb Total Space | 2,93 Gb Free Space | 3,94% Space Free | Partition Type: NTFS Drive G: | 931,51 Gb Total Space | 117,20 Gb Free Space | 12,58% Space Free | Partition Type: NTFS Computer Name: KIECHA-KOMPUTER | User Name: Kiecha | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-25 15:21:00 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Kiecha\Downloads\OTL-2.exe PRC - [2012-06-27 12:29:26 | 001,996,200 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe PRC - [2011-02-16 00:18:16 | 002,388,264 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Safari\Safari.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-09-27 07:23:00 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2011-09-27 07:22:40 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll MOD - [2010-01-30 02:41:12 | 004,254,560 | ---- | M] () -- C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2011-05-24 23:18:38 | 000,365,568 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service) SRV:[b]64bit:[/b] - [2011-05-24 23:03:38 | 000,204,288 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009-05-06 10:41:52 | 000,062,464 | ---- | M] (ASUSTeK COMPUTER INC.) [Auto | Stopped] -- C:\Windows\SysNative\ATKFUSService.exe -- (ATKFUSService) SRV:[b]64bit:[/b] - [2008-07-29 14:20:28 | 004,737,024 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe -- (msvsmon90) SRV - [2012-07-19 15:10:36 | 000,792,512 | ---- | M] (Spigot, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe -- (Application Updater) SRV - [2012-07-01 15:44:43 | 000,246,112 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe -- (PLAY ONLINE. RunOuc) SRV - [2012-06-27 12:29:24 | 002,369,960 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2012-02-21 00:26:32 | 000,008,704 | ---- | M] (Hi-Rez Studios) [Auto | Stopped] -- g:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe -- (HiPatchService) SRV - [2012-02-11 16:59:23 | 000,481,064 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2012-01-06 00:57:21 | 000,076,888 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2011-07-07 20:31:08 | 000,195,336 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc) SRV - [2011-06-15 18:33:20 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (BBUpdate) SRV - [2011-03-14 17:27:34 | 000,346,976 | ---- | M] () [Auto | Stopped] -- C:\ProgramData\DatacardService\HWDeviceService64.exe -- (HWDeviceService64.exe) SRV - [2011-01-06 14:42:04 | 000,168,448 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe -- (AVerUpdateServer) SRV - [2011-01-05 04:31:34 | 000,570,880 | ---- | M] (AVerMedia Technologies, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\SnugTV\SnugTV Station\AMAServer.exe -- (SnugTV Service) SRV - [2010-03-25 10:25:22 | 030,969,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- G:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010-03-10 15:26:48 | 000,189,728 | ---- | M] (Protexis Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2) SRV - [2009-07-27 11:13:28 | 000,061,440 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\ASDR.exe -- (ASDR) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012-07-01 15:44:44 | 000,223,744 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_juwwanecm.sys -- (huawei_wwanecm) DRV:[b]64bit:[/b] - [2012-07-01 15:44:44 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys -- (ew_hwusbdev) DRV:[b]64bit:[/b] - [2012-07-01 15:44:44 | 000,098,304 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_jucdcacm.sys -- (huawei_cdcacm) DRV:[b]64bit:[/b] - [2012-07-01 15:44:44 | 000,087,040 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_jubusenum.sys -- (huawei_enumerator) DRV:[b]64bit:[/b] - [2012-07-01 15:44:44 | 000,028,672 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_juextctrl.sys -- (huawei_ext_ctrl) DRV:[b]64bit:[/b] - [2012-07-01 15:44:44 | 000,013,952 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_usbenumfilter.sys -- (ew_usbenumfilter) DRV:[b]64bit:[/b] - [2012-02-02 19:13:43 | 000,279,616 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:[b]64bit:[/b] - [2012-01-07 07:00:13 | 000,530,488 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2011-08-02 17:38:56 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:[b]64bit:[/b] - [2011-05-25 00:26:56 | 009,359,872 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2011-05-25 00:26:56 | 009,359,872 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2011-05-24 22:25:42 | 000,309,760 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2011-03-30 14:46:44 | 000,114,704 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2010-07-04 11:24:24 | 000,314,016 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt) DRV:[b]64bit:[/b] - [2010-07-04 11:24:18 | 000,043,680 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt) DRV:[b]64bit:[/b] - [2010-04-26 20:21:04 | 000,034,032 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\seehcri.sys -- (seehcri) DRV:[b]64bit:[/b] - [2010-04-23 23:27:08 | 000,116,736 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV:[b]64bit:[/b] - [2010-04-23 22:41:18 | 000,016,384 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\EIO64.sys -- (EIO64) DRV:[b]64bit:[/b] - [2010-02-18 09:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-09 04:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64) DRV:[b]64bit:[/b] - [2009-06-10 22:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-05-18 14:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:[b]64bit:[/b] - [2009-03-18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV:[b]64bit:[/b] - [2009-02-17 18:22:22 | 000,039,424 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ATKDispLowFilter.sys -- (atkdisplf) DRV:[b]64bit:[/b] - [2009-02-17 18:22:22 | 000,017,792 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\asusgsb.sys -- (asusgsb) DRV:[b]64bit:[/b] - [2008-12-18 10:13:26 | 000,032,336 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\eusk2par-amd64.sys -- (eusk2par) DRV:[b]64bit:[/b] - [2008-07-29 05:47:00 | 001,075,712 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrxusb.sys -- (athrusb) DRV:[b]64bit:[/b] - [2008-03-10 15:50:54 | 001,041,920 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WlanUZAG.sys -- (SA760V64) DRV:[b]64bit:[/b] - [2007-05-10 09:33:48 | 000,886,400 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBAVCap.sys -- (USBAVCap) DRV:[b]64bit:[/b] - [2007-01-23 15:47:00 | 000,051,984 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt) DRV:[b]64bit:[/b] - [2007-01-23 15:47:00 | 000,048,912 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt) DRV - [2010-01-29 11:40:16 | 000,115,600 | ---- | M] (EZB Systems, Inc.) [File_System | System | Stopped] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2002-07-17 17:20:32 | 000,084,832 | ---- | M] (Adaptec) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\ASPI32.SYS -- (ASPI) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\tbSof0.dll (Conduit Ltd.) IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0388404D-6072-4CEB-B521-8F090FEAEE57}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=ec5485dc-1540-11e1-8b89-00241ddbc95d&q={searchTerms} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2832599 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..\URLSearchHook: {14f6a182-4c6f-45ae-9f5a-aa3ccbb1cfa3} - C:\Program Files (x86)\InnoGames_Polska\tbInno.dll (Conduit Ltd.) IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\tbSof0.dll (Conduit Ltd.) IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..\SearchScopes\{0388404D-6072-4CEB-B521-8F090FEAEE57}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=ec5485dc-1540-11e1-8b89-00241ddbc95d&q={searchTerms} IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=109993&tt=090212_noffx&babsrc=SP_ss&mntrId=e035a4150000000000000060b344cac8 IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=SPC2&o=15000&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=PV&apn_dtid=&apn_uid=6F0F606A-9AE4-4826-AF69-A80D2EE7780E&apn_sauid=1BEA4CED-58FB-4096-841B-3A33875CAC8F IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..\SearchScopes\{2DF3D4EF-C477-4A55-A3C9-7DBE9B3459C1}: "URL" = http://searchya.com/?chnl=dcom-100&s=1&cr=1765550354&cd=2XzutAtN2Y1L1QzutN0D0TzutBtDtCtBtDyEtBtA&q={searchTerms} IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..\SearchScopes\{95A0BD22-2FD4-4D11-89C7-ADF740F8D089}: "URL" = http://klit.startnow.com/s/?q={searchTerms}&src=defsearch&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=741&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.3.0&install_country=PL&install_date=20110826&user_guid=E1A279A477DC44DCB3B93759F92AB9AD&machine_id=8dcb35a55c4ae1924312a47bba28a6a4&browser=IE&os=win&os_version=6.1-x64-SP0&iesrc={referrer:source} IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search/web?q={searchTerms} IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2832599 IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..\SearchScopes\{FFF4C9C6-673A-4AFB-A30F-8348ECA83A29}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 218.199.208.20:8080 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..browser.search.defaultthis.engineName: "InnoGames Polska Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2832599&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=937811&ilc=12" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://searchya.com/?chnl=dcom-100&s=0&cr=1765550354&cd=2XzutAtN2Y1L1QzutN0D0TzutBtDtCtBtDyEtBtA" FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2832599&q=" FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.110.0: C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll File not found FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.118.0: C:\Program Files (x86)\Battlelog Web Plugins\1.118.0\npesnlaunch.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Oracle) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: G:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: G:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@soe.sony.com/installer,version=1.0.3: C:\Users\Kiecha\AppData\Roaming\Mozilla\Firefox\Profiles\pzohxa2z.default\extensions\{000F1EA4-5E08-4564-A29B-29076F63A37A}\plugins\npsoe.dll File not found FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Kiecha\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKCU\Software\MozillaPlugins\facebook.com/fbDesktopPlugin: C:\Users\Kiecha\AppData\Local\Facebook\Messenger\2.1.4587.0\npFbDesktopPlugin.dll (Facebook, Inc.) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011-11-09 18:50:27 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011-11-22 21:34:25 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\Kiecha\AppData\Roaming\IDM\idmmzcc3 [2012-07-25 13:54:41 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\Kiecha\AppData\Roaming\IDM\idmmzcc3 [2012-07-25 13:54:41 | 000,000,000 | ---D | M] [2011-02-22 01:53:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kiecha\AppData\Roaming\mozilla\Extensions [2011-02-22 01:53:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kiecha\AppData\Roaming\mozilla\Extensions\IMVUClientXUL@imvu.com [2012-07-25 03:29:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kiecha\AppData\Roaming\mozilla\Firefox\Profiles\pzohxa2z.default\extensions [2010-10-16 18:10:22 | 000,000,000 | ---D | M] () -- C:\Users\Kiecha\AppData\Roaming\mozilla\Firefox\Profiles\pzohxa2z.default\extensions\{000F1EA4-5E08-4564-A29B-29076F63A37A} [2012-06-22 01:07:17 | 000,000,000 | ---D | M] (InnoGames Polska Community Toolbar) -- C:\Users\Kiecha\AppData\Roaming\mozilla\Firefox\Profiles\pzohxa2z.default\extensions\{14f6a182-4c6f-45ae-9f5a-aa3ccbb1cfa3} [2011-11-22 21:34:28 | 000,000,000 | ---D | M] (VshareComplete - Speed up your search with your personal search suggestions tool) -- C:\Users\Kiecha\AppData\Roaming\mozilla\Firefox\Profiles\pzohxa2z.default\extensions\{3697b17c-b572-4862-a5e6-7f922c0f3403} [2012-06-14 20:53:26 | 000,000,000 | ---D | M] (FT DeepDark) -- C:\Users\Kiecha\AppData\Roaming\mozilla\Firefox\Profiles\pzohxa2z.default\extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2012-04-03 21:12:59 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Kiecha\AppData\Roaming\mozilla\Firefox\Profiles\pzohxa2z.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2012-06-14 20:53:18 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Users\Kiecha\AppData\Roaming\mozilla\Firefox\Profiles\pzohxa2z.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} [2012-05-21 01:19:26 | 000,000,000 | ---D | M] (ST-Polska Community Toolbar) -- C:\Users\Kiecha\AppData\Roaming\mozilla\Firefox\Profiles\pzohxa2z.default\extensions\{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} [2012-06-22 01:07:17 | 000,000,000 | ---D | M] (DownloadnSave) -- C:\Users\Kiecha\AppData\Roaming\mozilla\Firefox\Profiles\pzohxa2z.default\extensions\4fe0e1ba2608a@4fe0e1ba260c3.info [2011-05-07 12:04:29 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Kiecha\AppData\Roaming\mozilla\Firefox\Profiles\pzohxa2z.default\extensions\engine@conduit.com [2012-03-02 17:05:15 | 000,000,000 | ---D | M] (Sopcast Ask Toolbar) -- C:\Users\Kiecha\AppData\Roaming\mozilla\Firefox\Profiles\pzohxa2z.default\extensions\toolbar@ask.com [2011-02-10 20:54:43 | 000,000,000 | ---- | M] () -- C:\Users\Kiecha\AppData\Roaming\Mozilla\Firefox\Profiles\pzohxa2z.default\searchplugins\askcom.xml [2012-04-17 18:16:58 | 000,000,935 | ---- | M] () -- C:\Users\Kiecha\AppData\Roaming\Mozilla\Firefox\Profiles\pzohxa2z.default\searchplugins\conduit.xml [2010-10-01 14:19:35 | 000,002,059 | ---- | M] () -- C:\Users\Kiecha\AppData\Roaming\Mozilla\Firefox\Profiles\pzohxa2z.default\searchplugins\daemon-search.xml [2012-04-23 23:44:32 | 000,001,465 | ---- | M] () -- C:\Users\Kiecha\AppData\Roaming\Mozilla\Firefox\Profiles\pzohxa2z.default\searchplugins\searchya.xml [2012-02-14 22:07:05 | 000,000,792 | ---- | M] () -- C:\Users\Kiecha\AppData\Roaming\Mozilla\Firefox\Profiles\pzohxa2z.default\searchplugins\startsear.xml [2011-08-26 12:35:45 | 000,001,390 | ---- | M] () -- C:\Users\Kiecha\AppData\Roaming\Mozilla\Firefox\Profiles\pzohxa2z.default\searchplugins\yahoo-zugo.xml [2011-12-20 22:14:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2011-12-20 22:14:06 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012-07-25 03:29:52 | 000,000,000 | ---D | M] (Widgi Toolbar Platform) -- C:\PROGRAM FILES (X86)\COMMON FILES\SPIGOT\WTXPCOM [2012-07-25 03:29:52 | 000,000,000 | ---D | M] (YouTube Downloader Toolbar) -- C:\PROGRAM FILES (X86)\YOUTUBE DOWNLOADER TOOLBAR\FF File not found (No name found) -- C:\USERS\KIECHA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\PZOHXA2Z.DEFAULT\EXTENSIONS\{5911488E-9D1E-40EC-8CBB-06B231CC153F} File not found (No name found) -- C:\USERS\KIECHA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\PZOHXA2Z.DEFAULT\EXTENSIONS\FFXTLBR@SEARCHYA.COM [2011-11-09 18:50:26 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2009-10-14 19:36:14 | 000,027,648 | ---- | M] (Ivo Software Sp. z o.o.) -- C:\Program Files (x86)\mozilla firefox\components\IvonaFirefoxToolbar.dll [2010-07-21 20:31:36 | 000,423,656 | ---- | M] (Oracle) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2011-10-03 11:14:54 | 000,083,456 | ---- | M] (vShare.tv ) -- C:\Program Files (x86)\mozilla firefox\plugins\npvsharetvplg.dll [2010-05-25 18:09:48 | 000,063,488 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2011-10-02 13:22:05 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2012-02-15 22:40:23 | 000,002,352 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml [2011-10-02 13:22:05 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2011-10-02 13:22:05 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2011-10-02 13:22:05 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2012-03-02 15:58:58 | 000,002,415 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\v9.xml [2011-10-02 13:22:05 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-10-02 13:22:05 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: () CHR - default_search_provider: search_url = CHR - default_search_provider: suggest_url = CHR - homepage: http://searchya.com/?chnl=dcom-100&s=0&cr=1765550354&cd=2XzutAtN2Y1L1QzutN0D0TzutBtDtCtBtDyEtBtA CHR - Extension: No name found = C:\Users\Kiecha\AppData\Local\Google\Chrome\User Data\Default\Extensions\okmcbgkkeagngnijeiighgblfljbekip\2_0\ O1 HOSTS File: ([2012-07-25 13:53:29 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2:[b]64bit:[/b] - BHO: (VshareComplete) - {08337871-0e50-4031-9110-3bd21ca3c065} - C:\Users\Kiecha\AppData\Roaming\VshareComplete\64\VshareComplete64.dll (SimplyGen) O2:[b]64bit:[/b] - BHO: (no name) - {8664889D-ED18-4713-918F-E2BB69D8452B} - No CLSID value found. O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Tonec Inc.) O2 - BHO: (VshareComplete) - {08337871-0e50-4031-9110-3bd21ca3c065} - C:\Users\Kiecha\AppData\Roaming\VshareComplete\VshareComplete.dll (SimplyGen) O2 - BHO: (DownloadnSave Class) - {1E964D5C-16D3-5374-08D1-B75890A4F7FE} - C:\ProgramData\DownloadnSave\bhoclass.dll File not found O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO) O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - G:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (IVONA Reader) - {8664889D-ED18-4713-918F-E2BB69D8452B} - C:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2.dll (IVO Software Sp. z o.o.) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - G:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (IeMonitorBho Class) - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - g:\Program Files (x86)\Megaupload\Mega Manager\MegaIEMn.dll (Megaupload Limited) O2 - BHO: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\tbSof0.dll (Conduit Ltd.) O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~2\ALLPLA~1\Iplex\IPLEXT~1.DLL (ALLCinema Ltd.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {8664889D-ED18-4713-918F-E2BB69D8452B} - No CLSID value found. O3 - HKLM\..\Toolbar: (InnoGames Polska Toolbar) - {14f6a182-4c6f-45ae-9f5a-aa3ccbb1cfa3} - C:\Program Files (x86)\InnoGames_Polska\tbInno.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (IVONA Reader) - {8664889D-ED18-4713-918F-E2BB69D8452B} - C:\Program Files (x86)\IVONA\IVONA Reader\integr\IR_iexplorer2.dll (IVO Software Sp. z o.o.) O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM\..\Toolbar: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\tbSof0.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3:[b]64bit:[/b] - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found O3 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..\Toolbar\WebBrowser: (Softonic-Polska Toolbar) - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - C:\Program Files (x86)\Softonic-Polska\tbSof0.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4:[b]64bit:[/b] - HKLM..\Run: [combofix] C:\ComboFix\CF28859.3XE /c C:\ComboFix\Combobatch.bat File not found O4:[b]64bit:[/b] - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [SqlServerSpatial] C:\Users\Kiecha\AppData\Local\Microsoft\Windows\2074\SqlServerSpatial.exe () O4 - HKLM..\Run: [ASUSGamerOSD] C:\Program Files (x86)\ASUS\GamerOSD\GamerOSD.exe (ASUSTeK Computer Inc.) O4 - HKLM..\Run: [BCSSync] G:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation) O4 - HKLM..\Run: [Desktop Window Manager] C:\WINDOWS\debug\dwm.exe File not found O4 - HKLM..\Run: [Display Driver] C:\WINDOWS\debug\nvscvr32.exe File not found O4 - HKLM..\Run: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (CANON INC.) O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) O4 - HKLM..\Run: [SearchSettings] C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe File not found O4 - HKLM..\Run: [Windows Font Manager] C:\\WINDOWS\\FontCache_x64.exe File not found O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [BitTorrent] G:\Program Files (x86)\BitTorrent\BitTorrent.exe (BitTorrent, Inc.) O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [Comrade.exe] C:\Program Files (x86)\GameSpy\Comrade\Comrade.exe (IGN Entertainment Inc.) O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [Desktop Window Manager] C:\WINDOWS\debug\dwm.exe File not found O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [Display Driver] C:\WINDOWS\debug\nvscvr32.exe File not found O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent File not found O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [Gadu-Gadu 10] C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.) O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [IPLA!] C:\Program Files (x86)\ipla\ipla.exe (Redefine Sp z o.o.) O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [IROElauncher] C:\Program Files (x86)\IVONA\IVONA Reader\integr\OutlookExpress\IROElauncher.exe (Nektra S.A.) O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [IVONA ControlCenter] C:\Program Files (x86)\IVONA\IVONA ControlCenter\IVONA ControlCenter.exe (IVO Software Sp. z o.o.) O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [IVONA Reader] C:\Program Files (x86)\IVONA\IVONA Reader\IVONA Reader.exe (IVO Software Sp. z o.o.) O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [RDReminder] File not found O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [RGSC] G:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV\Rockstar Games Social Club\RGSCLauncher.exe (Take-Two Interactive Software, Inc.) O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited) O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent File not found O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [uTorrent] "g:\Program Files (x86)\uTorrent\uTorrent.exe" File not found O4 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000..\Run: [Windows Font Manager] C:\\WINDOWS\\FontCache_x64.exe File not found O4 - Startup: C:\Users\Kiecha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk = C:\Users\Kiecha\AppData\Local\Facebook\Messenger\2.1.4587.0\FacebookMessenger.exe (Facebook) O4 - Startup: C:\Users\Kiecha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IMVU.lnk = C:\Users\Kiecha\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - G:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O8:[b]64bit:[/b] - Extra context menu item: Ściągnij przez IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm () O8:[b]64bit:[/b] - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm () O8:[b]64bit:[/b] - Extra context menu item: Ściągnij zawartość wideo FLV przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm () O8:[b]64bit:[/b] - Extra context menu item: Wyślij &do programu OneNote - G:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.) O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - G:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Ściągnij przez IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm () O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm () O8 - Extra context menu item: Ściągnij zawartość wideo FLV przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm () O8 - Extra context menu item: Wyślij &do programu OneNote - G:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - G:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - G:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - G:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - G:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\Kiecha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk () O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O13[b]64bit:[/b] - gopher Prefix: missing O15 - HKU\.DEFAULT\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites) O15 - HKU\.DEFAULT\..Trusted Domains: freerealms.com ([]* in Trusted sites) O15 - HKU\.DEFAULT\..Trusted Domains: soe.com ([]* in Trusted sites) O15 - HKU\.DEFAULT\..Trusted Domains: sony.com ([]* in Trusted sites) O15 - HKU\S-1-5-18\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites) O15 - HKU\S-1-5-18\..Trusted Domains: freerealms.com ([]* in Trusted sites) O15 - HKU\S-1-5-18\..Trusted Domains: soe.com ([]* in Trusted sites) O15 - HKU\S-1-5-18\..Trusted Domains: sony.com ([]* in Trusted sites) O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in ) O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in ) O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in ) O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in ) O15 - HKU\S-1-5-20\..Trusted Domains: clonewarsadventures.com ([]* in ) O15 - HKU\S-1-5-20\..Trusted Domains: freerealms.com ([]* in ) O15 - HKU\S-1-5-20\..Trusted Domains: soe.com ([]* in ) O15 - HKU\S-1-5-20\..Trusted Domains: sony.com ([]* in ) O15 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites) O15 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..Trusted Domains: freerealms.com ([]* in Trusted sites) O15 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..Trusted Domains: soe.com ([]* in Trusted sites) O15 - HKU\S-1-5-21-3407819016-2735834526-3671976630-1000\..Trusted Domains: sony.com ([]* in Trusted sites) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{33A50B56-ECAD-4B7B-A009-C7CF798FE403}: DhcpNameServer = 193.41.112.14 193.41.112.18 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{33A50B56-ECAD-4B7B-A009-C7CF798FE403}: NameServer = 193.41.112.14 193.41.112.18 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{472FAC34-7AC1-45FB-9DC8-27BA836A39D3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5FEE404D-A78F-49C2-A722-57BB37740AE2}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{666E458A-FF1F-4587-926D-9FDBCBF57166}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{718D3254-EEB9-474E-A479-FAA221E785CA}: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{71F65BBC-A916-4998-95C7-D972B9C0336A}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9F647A1A-3E2B-4989-8E66-EABB133E38B7}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9F9AABDB-117A-4544-930B-E7C4D0AD6554}: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A08E0980-63A1-41AB-A070-580234D14502}: NameServer = 193.41.112.14 193.41.112.18 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E4D7528A-1B33-4F54-9DC9-20F3B3DD1642}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EB18981A-EF8F-42C1-9412-4ECD0C424913}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F0F42964-C896-4663-B4E0-62CFABAA3B2D}: DhcpNameServer = 192.168.0.1 O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - G:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-25 14:38:35 | 000,000,000 | ---D | C] -- C:\_OTL [2012-07-25 13:53:55 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2012-07-25 13:51:43 | 000,000,000 | ---D | C] -- C:\Windows\temp [2012-07-25 13:42:28 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2012-07-25 13:42:28 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2012-07-25 13:42:28 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2012-07-25 13:42:23 | 000,000,000 | ---D | C] -- C:\ComboFix [2012-07-25 13:42:21 | 000,000,000 | ---D | C] -- C:\Qoobox [2012-07-25 03:24:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Application Updater [2012-07-25 03:24:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\YouTube Downloader Toolbar [2012-07-25 03:24:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Spigot [2012-07-25 02:50:49 | 000,000,000 | ---D | C] -- C:\Users\Kiecha\AppData\Roaming\hellomoto [2012-07-24 00:56:24 | 000,000,000 | ---D | C] -- C:\Users\Kiecha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook [2012-07-10 21:40:10 | 000,000,000 | ---D | C] -- C:\Users\Kiecha\AppData\Roaming\FMRTEv5 [2012-07-10 21:37:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FMRTE [2012-07-10 21:37:25 | 000,000,000 | ---D | C] -- C:\BraCa Soft [2012-07-03 18:01:27 | 000,000,000 | ---D | C] -- C:\Users\Kiecha\AppData\Local\Ascaron Entertainment [2012-07-01 15:45:45 | 000,000,000 | ---D | C] -- C:\ProgramData\PLAY ONLINE [2012-07-01 15:45:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PLAY ONLINE [2012-07-01 15:45:22 | 001,490,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01007.dll [2012-07-01 15:45:22 | 001,490,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfCoInstaller01007.dll [2012-07-01 15:45:22 | 001,001,472 | ---- | C] (DiBcom SA) -- C:\Windows\SysNative\drivers\mod7700.sys [2012-07-01 15:45:22 | 000,422,400 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbwwan.sys [2012-07-01 15:45:22 | 000,223,744 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_juwwanecm.sys [2012-07-01 15:45:22 | 000,223,232 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbmdm.sys [2012-07-01 15:45:22 | 000,117,248 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys [2012-07-01 15:45:22 | 000,098,304 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jucdcacm.sys [2012-07-01 15:45:22 | 000,087,040 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jubusenum.sys [2012-07-01 15:45:22 | 000,072,192 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jucdcecm.sys [2012-07-01 15:45:22 | 000,032,768 | ---- | C] (Huawei Tech. Co., Ltd.) -- C:\Windows\SysNative\drivers\ewdcsc.sys [2012-07-01 15:45:22 | 000,028,672 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_juextctrl.sys [2012-07-01 15:45:22 | 000,022,016 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_hwupgrade.sys [2012-07-01 15:45:22 | 000,013,952 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_usbenumfilter.sys [2012-07-01 15:44:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PLAY ONLINE [2012-07-01 15:44:12 | 000,000,000 | ---D | C] -- C:\ProgramData\DatacardService [2012-06-29 23:22:54 | 000,000,000 | ---D | C] -- C:\Users\Kiecha\AppData\Roaming\runic games [2012-06-29 23:21:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Torchlight [2012-06-29 23:19:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Runic Games [2012-06-29 06:15:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi [2012-06-29 06:15:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi [2012-06-29 00:41:33 | 000,000,000 | -HSD | C] -- C:\Users\Kiecha\Documents\i68Backups [2012-06-29 00:41:33 | 000,000,000 | ---D | C] -- C:\Users\Kiecha\Documents\i68Fifa12 [2012-06-27 12:28:54 | 000,000,000 | ---D | C] -- C:\Users\Kiecha\AppData\Local\FalloutNV [2012-06-27 12:20:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks [2011-02-25 13:38:47 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Kiecha\AppData\Roaming\pcouffin.sys [2010-09-15 18:31:58 | 002,736,736 | ---- | C] (Conduit Ltd.) -- C:\Program Files (x86)\tbSoft.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-25 15:04:15 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-07-25 15:04:03 | 535,683,071 | -HS- | M] () -- C:\hiberfil.sys [2012-07-25 15:01:55 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012-07-25 14:24:24 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-07-25 14:24:24 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-07-25 13:53:29 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2012-07-25 03:44:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012-07-25 00:52:03 | 000,001,082 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3407819016-2735834526-3671976630-1000UA.job [2012-07-25 00:52:00 | 000,001,060 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3407819016-2735834526-3671976630-1000Core.job [2012-07-24 13:43:18 | 000,000,887 | ---- | M] () -- C:\Users\Kiecha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IMVU.lnk [2012-07-24 00:56:25 | 000,001,360 | ---- | M] () -- C:\Users\Kiecha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk [2012-07-11 18:29:16 | 000,000,294 | ---- | M] () -- C:\Windows\tasks\DLL-files.com Fixer_UPDATES.job [2012-07-09 15:13:55 | 000,009,379 | ---- | M] () -- C:\Users\Kiecha\Desktop\Lista #1.m3u [2012-07-06 23:29:36 | 000,283,304 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr [2012-07-06 23:29:36 | 000,283,304 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2012-07-06 23:29:21 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0 [2012-07-04 02:39:32 | 000,459,236 | -H-- | M] () -- C:\Windows\SysWow64\mlfcache.dat [2012-07-03 23:47:34 | 005,515,624 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012-07-03 16:50:15 | 000,122,904 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll [2012-07-03 16:50:15 | 000,109,080 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll [2012-07-01 15:46:58 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ew_juextctrl_01007.Wdf [2012-07-01 15:46:47 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf [2012-07-01 15:45:45 | 000,001,058 | ---- | M] () -- C:\Users\Public\Desktop\PLAY ONLINE.lnk [2012-07-01 15:45:31 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf [2012-07-01 15:44:44 | 001,490,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01007.dll [2012-07-01 15:44:44 | 001,490,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfCoInstaller01007.dll [2012-07-01 15:44:44 | 001,001,472 | ---- | M] (DiBcom SA) -- C:\Windows\SysNative\drivers\mod7700.sys [2012-07-01 15:44:44 | 000,422,400 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbwwan.sys [2012-07-01 15:44:44 | 000,223,744 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_juwwanecm.sys [2012-07-01 15:44:44 | 000,223,232 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbmdm.sys [2012-07-01 15:44:44 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys [2012-07-01 15:44:44 | 000,098,304 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jucdcacm.sys [2012-07-01 15:44:44 | 000,087,040 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jubusenum.sys [2012-07-01 15:44:44 | 000,072,192 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jucdcecm.sys [2012-07-01 15:44:44 | 000,032,768 | ---- | M] (Huawei Tech. Co., Ltd.) -- C:\Windows\SysNative\drivers\ewdcsc.sys [2012-07-01 15:44:44 | 000,028,672 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_juextctrl.sys [2012-07-01 15:44:44 | 000,022,016 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_hwupgrade.sys [2012-07-01 15:44:44 | 000,013,952 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_usbenumfilter.sys [2012-06-27 16:54:58 | 000,694,806 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2012-06-27 16:54:58 | 000,135,348 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-25 13:42:28 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe [2012-07-25 13:42:28 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe [2012-07-25 13:42:28 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2012-07-25 13:42:28 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2012-07-25 13:42:28 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2012-07-01 15:46:58 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ew_juextctrl_01007.Wdf [2012-07-01 15:46:47 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf [2012-07-01 15:45:45 | 000,001,058 | ---- | C] () -- C:\Users\Public\Desktop\PLAY ONLINE.lnk [2012-07-01 15:45:31 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf [2012-06-13 13:12:34 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2012-04-21 01:56:31 | 000,000,001 | ---- | C] () -- C:\Users\Kiecha\AppData\Roaming\etc.dat [2012-04-21 01:56:31 | 000,000,001 | ---- | C] () -- C:\Users\Kiecha\AppData\Roaming\DirectX.dat [2012-04-21 01:55:57 | 000,498,688 | ---- | C] ( ) -- C:\ProgramData\nvwiz.exe [2012-03-22 02:47:28 | 000,000,021 | ---- | C] () -- C:\Windows\SurCode.INI [2012-02-12 01:04:00 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll [2012-02-11 14:30:35 | 000,000,032 | R--- | C] () -- C:\ProgramData\hash.dat [2012-01-06 17:08:36 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempYM2072.html [2012-01-06 17:08:36 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempyU2072.html [2012-01-05 21:44:13 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempas2552.html [2012-01-04 22:22:10 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempsw2536.html [2012-01-04 18:21:11 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempdF1980.html [2012-01-04 18:21:11 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempIc1980.html [2012-01-03 18:04:02 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUb2800.html [2012-01-03 00:58:13 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempPr2004.html [2012-01-03 00:58:13 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempue2004.html [2011-12-31 18:46:57 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempZj2924.html [2011-12-31 01:30:20 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempfe2768.html [2011-12-30 16:15:28 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVsu680.html [2011-12-29 12:43:28 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempwN2720.html [2011-12-29 12:33:22 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempBv3004.html [2011-12-29 12:33:22 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNj3004.html [2011-12-28 13:22:12 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempIM1684.html [2011-12-27 15:07:30 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempdKj844.html [2011-12-26 20:14:40 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempQe2888.html [2011-12-26 14:40:33 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempma1680.html [2011-12-25 20:09:23 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempaC1316.html [2011-12-23 14:57:03 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempWU2936.html [2011-12-22 17:20:08 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempTM2832.html [2011-12-22 00:06:18 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempwW1328.html [2011-12-21 20:11:26 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempde2184.html [2011-12-20 22:12:12 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temptbz796.html [2011-12-20 22:12:12 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempXvj796.html [2011-12-19 20:18:26 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempDK1316.html [2011-12-18 14:15:07 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempTY1496.html [2011-12-17 15:16:29 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempDD2604.html [2011-12-16 16:53:43 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempaB2116.html [2011-12-15 20:00:58 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temprr2160.html [2011-12-14 15:33:54 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempbe5208.html [2011-12-14 14:51:25 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempGK2328.html [2011-12-13 17:14:17 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemppH1596.html [2011-12-12 20:19:15 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempdkv656.html [2011-12-12 20:19:15 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempvYy656.html [2011-12-11 20:05:21 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempWH3000.html [2011-12-11 20:05:21 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVw3000.html [2011-12-10 14:03:59 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempzN2396.html [2011-12-09 18:04:15 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempay2552.html [2011-12-08 18:04:23 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLN2364.html [2011-12-06 19:20:04 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempPm2392.html [2011-12-05 21:49:00 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemplO2552.html [2011-12-05 21:49:00 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempes2552.html [2011-12-05 17:52:20 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempZU2748.html [2011-12-05 17:52:20 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempuH2748.html [2011-12-04 15:04:52 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempdr2832.html [2011-12-04 13:25:33 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempwob224.html [2011-12-03 13:36:54 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVa2844.html [2011-12-03 13:00:57 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempjf2808.html [2011-12-03 13:00:57 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempuw2808.html [2011-12-02 17:58:53 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUj2848.html [2011-12-01 18:33:51 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempqU2892.html [2011-11-30 18:01:34 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUy2684.html [2011-11-29 20:12:17 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temprhj660.html [2011-11-29 17:51:53 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempeI2828.html [2011-11-29 17:51:53 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLo2828.html [2011-11-28 18:17:49 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempTgR220.html [2011-11-27 13:04:44 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempEn1452.html [2011-11-25 17:24:27 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempPO2236.html [2011-11-24 17:03:45 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempjYv596.html [2011-11-23 17:18:00 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempzV2232.html [2011-11-22 21:29:01 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempCs1652.html [2011-11-21 13:26:21 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempma2248.html [2011-11-20 13:13:46 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLz1292.html [2011-11-19 14:53:11 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempZm2308.html [2011-11-18 13:39:40 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempKF2104.html [2011-11-17 15:46:58 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempWl3036.html [2011-11-16 20:35:24 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLx1448.html [2011-11-16 19:28:29 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempAI2856.html [2011-11-15 16:21:57 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempQZ2080.html [2011-11-14 17:14:47 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempjg3000.html [2011-11-13 15:02:49 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempKy2740.html [2011-11-12 16:29:49 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempevd228.html [2011-11-11 20:11:59 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempdo2604.html [2011-11-11 20:11:59 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempoR2604.html [2011-11-11 14:28:16 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempbw2784.html [2011-11-11 14:28:16 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempGS2784.html [2011-11-11 01:09:10 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempMk1448.html [2011-11-11 01:09:10 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempat1448.html [2011-11-10 20:36:52 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempnR1096.html [2011-11-10 18:29:01 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLA1464.html [2011-11-09 15:24:53 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempHJ2012.html [2011-11-08 16:58:15 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempMi1564.html [2011-11-07 22:54:37 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLTw860.html [2011-11-07 18:42:44 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempma1604.html [2011-11-07 16:42:13 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemparQ764.html [2011-11-06 15:53:39 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempDA3676.html [2011-11-06 15:53:39 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempXK3676.html [2011-11-06 13:00:21 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempBq1968.html [2011-11-05 17:29:37 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempKZ3000.html [2011-11-04 17:50:10 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemplzV340.html [2011-11-03 17:47:14 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUk2572.html [2011-11-02 17:21:52 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempMvH944.html [2011-11-01 14:59:48 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempQl2584.html [2011-10-31 20:39:11 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempRm1684.html [2011-10-30 17:46:38 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempFW4980.html [2011-10-30 13:39:42 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUY2360.html [2011-10-29 12:19:37 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempys1972.html [2011-10-29 11:20:07 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempfI1436.html [2011-10-29 11:20:07 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempBm1436.html [2011-10-28 20:21:31 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempjI2720.html [2011-10-27 14:40:55 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempor1240.html [2011-10-26 14:32:38 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempip2144.html [2011-10-25 15:54:55 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempsa1208.html [2011-10-24 16:24:09 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempdM2500.html [2011-10-24 16:24:09 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVr2500.html [2011-10-23 17:42:21 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempcG2940.html [2011-10-22 12:00:42 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempOd2304.html [2011-10-22 12:00:42 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVj2304.html [2011-10-21 16:40:08 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempfE1220.html [2011-10-20 19:00:20 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempIF1888.html [2011-10-20 19:00:20 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempAv1888.html [2011-10-19 14:51:52 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempsH2016.html [2011-10-18 16:52:21 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempYM2008.html [2011-10-17 16:06:23 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempWSy508.html [2011-10-16 10:58:04 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempWw1452.html [2011-10-15 20:31:58 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempao2872.html [2011-10-15 11:56:45 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempQmR636.html [2011-10-14 13:19:33 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempxBf672.html [2011-10-13 16:39:29 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempRx1716.html [2011-10-12 16:52:11 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempbNl376.html [2011-10-12 00:12:47 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempWB1836.html [2011-10-12 00:12:47 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temptn1836.html [2011-10-11 14:44:07 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempGal828.html [2011-10-10 23:16:03 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempjqR804.html [2011-10-10 18:37:32 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemprY2668.html [2011-10-10 16:37:32 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempvI2536.html [2011-10-10 16:37:32 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempCm2536.html [2011-10-09 21:20:18 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempwS1772.html [2011-10-09 16:43:21 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempWl2996.html [2011-10-09 00:02:17 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempmkL224.html [2011-10-08 19:40:12 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempxZ1720.html [2011-10-08 11:29:56 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempYcF168.html [2011-10-07 23:07:39 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempDa2900.html [2011-10-07 23:07:39 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempBO2900.html [2011-10-06 17:53:33 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempxA2444.html [2011-10-06 16:37:32 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempnv2636.html [2011-10-06 16:37:32 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempaY2636.html [2011-10-05 18:53:31 | 000,001,456 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Adobe Save for Web 12.0 Prefs [2011-10-05 15:25:44 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempWEO268.html [2011-10-04 20:36:30 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempjbY888.html [2011-10-04 20:36:30 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempFzr888.html [2011-10-04 18:25:10 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempbPm340.html [2011-10-04 18:25:10 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempknA340.html [2011-10-03 16:05:19 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemphiI948.html [2011-10-02 19:47:42 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempJuk608.html [2011-10-01 17:26:29 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVf5648.html [2011-09-30 17:15:18 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempkLW168.html [2011-09-30 14:08:26 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempeZ1280.html [2011-09-29 15:40:08 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVa2340.html [2011-09-28 21:45:13 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempqI2736.html [2011-09-28 16:11:16 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemphGw224.html [2011-09-27 15:41:39 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempITN220.html [2011-09-27 14:47:05 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempRJs224.html [2011-09-27 14:47:05 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempAXn224.html [2011-09-26 15:26:23 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemplCC168.html [2011-09-26 15:17:58 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempDB2472.html [2011-09-26 15:17:58 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempIK2472.html [2011-09-26 00:46:40 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempEH2552.html [2011-09-25 12:31:43 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempFo2524.html [2011-09-24 17:18:29 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemppSz760.html [2011-09-23 21:02:45 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempIhI168.html [2011-09-23 20:49:52 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempGI1620.html [2011-09-23 14:27:16 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUYZ304.html [2011-09-22 15:39:06 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempBS2604.html [2011-09-21 14:53:29 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempCO1816.html [2011-09-21 14:45:22 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempmy1840.html [2011-09-21 14:45:22 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempoP1840.html [2011-09-21 12:18:10 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempHT2952.html [2011-09-20 21:22:31 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Templo1844.html [2011-09-20 16:03:18 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempSw3036.html [2011-09-20 08:37:47 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempXsE308.html [2011-09-19 15:30:57 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNx2532.html [2011-09-18 13:20:31 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempo11088.html [2011-09-03 21:42:34 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempTg2744.html [2011-09-03 21:42:34 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempmQ2744.html [2011-09-03 14:26:05 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempmd2848.html [2011-09-03 14:18:21 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUW2108.html [2011-09-03 14:18:20 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempmA2108.html [2011-09-02 13:30:29 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempcE2728.html [2011-09-01 20:41:59 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempse4976.html [2011-09-01 20:41:59 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempfj4976.html [2011-09-01 16:14:05 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempMm3036.html [2011-09-01 11:36:13 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemprI1832.html [2011-08-31 21:53:38 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempwK3380.html [2011-08-31 18:52:29 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempaX1644.html [2011-08-31 13:24:58 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempbm2600.html [2011-08-30 20:55:16 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempfr2616.html [2011-08-30 20:55:16 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempRf2616.html [2011-08-30 20:34:08 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempylH184.html [2011-08-30 20:34:08 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempTrd184.html [2011-08-30 13:16:22 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempky1136.html [2011-08-30 13:16:22 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempuR1136.html [2011-08-30 12:07:31 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempaV2984.html [2011-08-30 12:07:31 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempge2984.html [2011-08-29 21:57:00 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempGe3328.html [2011-08-29 20:38:56 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temprk9556.html [2011-08-29 16:00:11 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempZX2352.html [2011-08-29 15:36:29 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempHm1800.html [2011-08-29 14:25:30 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempnt1708.html [2011-08-29 14:17:04 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLY5720.html [2011-08-29 14:17:04 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempKY5720.html [2011-08-29 11:37:52 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempwH1832.html [2011-08-28 21:43:35 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Templ15820.html [2011-08-26 12:35:24 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2011-08-26 12:35:21 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini [2011-08-26 12:35:19 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2011-08-26 12:35:19 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2011-08-26 12:35:18 | 000,074,752 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2011-08-25 12:30:59 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempSp2884.html [2011-08-25 12:30:59 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temppe2884.html [2011-08-25 10:15:55 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempSM1708.html [2011-08-25 00:30:26 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempCo2528.html [2011-08-24 12:50:34 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemphQ2780.html [2011-08-23 21:29:32 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempTV2968.html [2011-08-21 21:25:57 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemptN2796.html [2011-08-20 20:18:08 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempJe2988.html [2011-06-02 22:57:52 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempDq1940.html [2011-06-02 22:57:52 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempvP1940.html [2011-06-02 18:07:14 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempgx2244.html [2011-06-02 14:54:24 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempcM2696.html [2011-06-02 14:54:24 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempES2696.html [2011-06-02 14:24:58 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempRo2788.html [2011-06-02 14:24:58 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempFV2788.html [2011-05-31 18:19:11 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempve2440.html [2011-05-31 18:19:11 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempFQ2440.html [2011-05-31 14:31:53 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempZqY220.html [2011-05-30 11:06:39 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempin2252.html [2011-05-24 23:44:26 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll [2011-05-20 21:41:30 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempYk2520.html [2011-05-20 21:41:30 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempDk2520.html [2011-05-15 23:15:56 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempYo3056.html [2011-05-15 23:15:55 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempXh3056.html [2011-05-13 20:09:38 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempju2684.html [2011-05-13 20:09:38 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temprg2684.html [2011-05-12 14:24:43 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemppsI984.html [2011-05-12 14:24:43 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempEiP984.html [2011-05-11 15:54:24 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempre2028.html [2011-05-11 15:54:24 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempKw2028.html [2011-05-10 17:52:42 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempcl3424.html [2011-05-10 17:52:42 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempzc3424.html [2011-05-10 16:25:05 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempjFp756.html [2011-05-10 16:25:05 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempscb756.html [2011-05-09 17:30:16 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempCi2312.html [2011-05-09 17:30:13 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemplD2312.html [2011-05-09 14:05:48 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempgw2160.html [2011-05-09 14:05:45 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempSy2160.html [2011-05-08 21:04:18 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempHm1368.html [2011-05-08 21:04:18 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempYN1368.html [2011-05-08 17:08:16 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempOf1920.html [2011-05-08 17:08:16 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempmx1920.html [2011-05-07 20:42:17 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempYe2492.html [2011-05-07 20:42:15 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempiA2492.html [2011-05-07 17:41:11 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemprFB272.html [2011-05-07 12:57:16 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempeR2964.html [2011-05-07 12:33:04 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVx2964.html [2011-05-06 17:41:46 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempOo2720.html [2011-05-06 17:41:46 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemphI2720.html [2011-05-06 14:25:23 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemppJ2848.html [2011-05-06 14:25:23 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempRO2848.html [2011-05-05 21:17:53 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempRe2804.html [2011-05-05 21:17:53 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNz2804.html [2011-05-05 21:17:23 | 000,019,968 | -HS- | C] () -- C:\Windows\exsvmotnv.exe [2011-05-05 14:14:16 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempdO1484.html [2011-05-05 14:14:16 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempST1484.html [2011-05-05 14:12:16 | 000,019,968 | -HS- | C] () -- C:\Windows\kotwyzvzq.exe [2011-05-04 20:40:23 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempomu740.html [2011-05-04 20:40:23 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempXqM740.html [2011-05-04 20:39:44 | 000,019,968 | -HS- | C] () -- C:\Windows\xwnldyrmk.exe [2011-05-04 19:00:11 | 000,019,968 | -HS- | C] () -- C:\Windows\kdgyobrwx.exe [2011-05-04 18:58:45 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempAl2728.html [2011-05-04 18:58:45 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempri2728.html [2011-04-27 21:36:18 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempAX8924.html [2011-04-27 21:36:18 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempPt8924.html [2011-04-27 13:58:18 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUT2320.html [2011-04-27 13:56:16 | 000,019,968 | -HS- | C] () -- C:\Windows\ctrfpnpxx.exe [2011-04-26 22:16:32 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempHd1208.html [2011-04-26 22:16:32 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempwC1208.html [2011-04-26 19:40:05 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemptpA912.html [2011-04-09 19:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2011-04-04 22:07:19 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempMU1704.html [2011-04-04 22:07:17 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempyy1704.html [2011-04-04 20:50:47 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempji2804.html [2011-04-04 20:50:43 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempOA2804.html [2011-04-04 19:13:38 | 000,051,200 | -HS- | C] () -- C:\Windows\mrodqcqnu.exe [2011-04-04 13:51:17 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Templo2628.html [2011-04-04 13:51:16 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempxl2628.html [2011-04-03 18:39:23 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temprt2032.html [2011-04-03 18:39:23 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempHU2032.html [2011-04-03 18:38:04 | 000,050,688 | -HS- | C] () -- C:\Windows\ynmortsqt.exe [2011-04-02 10:00:06 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempjq9304.html [2011-04-02 10:00:06 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempSP9304.html [2011-04-01 22:13:58 | 000,050,688 | -HS- | C] () -- C:\Windows\kwtivbyhv.exe [2011-04-01 12:27:43 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempHQ2144.html [2011-04-01 12:27:43 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempFN2144.html [2011-04-01 11:53:33 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempHP2744.html [2011-04-01 11:53:33 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempdf2744.html [2011-03-30 15:09:18 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempFY1496.html [2011-03-30 15:09:18 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Templz1496.html [2011-03-29 19:46:40 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempvH1764.html [2011-03-29 19:46:39 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempwW1764.html [2011-03-29 18:59:14 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempPh1804.html [2011-03-29 18:59:14 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempAb1804.html [2011-03-29 17:22:08 | 000,009,728 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-03-29 15:52:25 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLXD128.html [2011-03-29 15:52:25 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempriF128.html [2011-03-28 14:24:35 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempxa3036.html [2011-03-28 14:24:35 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Templz3036.html [2011-03-28 14:04:52 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempJh2804.html [2011-03-28 14:04:52 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempWP2804.html [2011-03-27 20:03:37 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempIJ2564.html [2011-03-27 20:03:37 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempoQ2564.html [2011-03-26 15:32:48 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempiu1312.html [2011-03-26 15:32:48 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempqt1312.html [2011-03-25 15:20:13 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempdl1696.html [2011-03-25 15:20:13 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempXF1696.html [2011-03-25 14:11:44 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempxg2860.html [2011-03-24 23:53:38 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempsf1372.html [2011-03-24 23:53:38 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempdP1372.html [2011-03-24 22:08:44 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempxG2644.html [2011-03-24 22:08:44 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempvG2644.html [2011-03-23 20:11:42 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempXo1744.html [2011-03-23 20:11:42 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temptf1744.html [2011-03-23 18:28:32 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNt2316.html [2011-03-23 18:28:32 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempdB2316.html [2011-03-22 15:28:47 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempRs1148.html [2011-03-22 15:28:47 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempxg1148.html [2011-03-21 13:29:21 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Templo2372.html [2011-03-21 13:29:21 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempSm2372.html [2011-03-20 02:11:28 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempaU3020.html [2011-03-20 02:11:27 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Templz3020.html [2011-03-20 00:37:30 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemprK3048.html [2011-03-20 00:37:30 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempBl3048.html [2011-03-18 21:39:48 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempre2316.html [2011-03-18 21:39:48 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemptW2316.html [2011-03-17 15:53:07 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempJf2652.html [2011-03-17 15:53:07 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempqY2652.html [2011-03-16 22:35:12 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempef7952.html [2011-03-16 22:35:12 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempzC7952.html [2011-03-16 22:35:09 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temptz7952.html [2011-03-15 16:43:59 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempby2260.html [2011-03-15 16:43:59 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempjq2260.html [2011-03-14 16:18:31 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemppA1080.html [2011-03-14 16:18:31 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempJz1080.html [2011-03-11 18:49:52 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempOO2776.html [2011-03-09 17:59:01 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempJDx232.html [2011-03-09 17:59:01 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempSFU232.html [2011-03-08 21:50:23 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempQe2832.html [2011-03-08 21:50:23 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempFY2832.html [2011-03-08 17:05:32 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempzY2580.html [2011-03-08 17:05:32 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempTI2580.html [2011-03-07 15:56:16 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempBGV916.html [2011-03-07 15:56:16 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUlm916.html [2011-03-06 18:48:02 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempHq2432.html [2011-03-06 18:48:02 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempvQ2432.html [2011-03-06 16:55:32 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempDK3012.html [2011-03-06 16:55:32 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempek3012.html [2011-03-06 14:23:25 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempnl2748.html [2011-03-06 14:23:25 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUm2748.html [2011-03-06 14:06:17 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempvb1424.html [2011-03-06 14:06:17 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemppC1424.html [2011-03-06 00:04:23 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempMc2164.html [2011-03-06 00:04:23 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLG2164.html [2011-03-05 16:12:18 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempjp2368.html [2011-03-05 16:12:18 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Templm2368.html [2011-03-05 15:26:45 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempqt2276.html [2011-03-05 15:26:45 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempCH2276.html [2011-03-05 14:32:49 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLd1616.html [2011-03-05 13:17:11 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempaY1664.html [2011-03-05 13:17:11 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempqV1664.html [2011-03-05 12:23:17 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempze2820.html [2011-03-05 02:39:17 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempMY2720.html [2011-03-05 02:39:17 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempvg2720.html [2011-03-04 21:52:46 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempDA2332.html [2011-03-04 21:52:46 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temptx2332.html [2011-03-04 20:51:59 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempuyw580.html [2011-03-04 20:51:59 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNQN580.html [2011-03-04 15:24:48 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempef1816.html [2011-03-03 23:48:03 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempuC4504.html [2011-03-03 23:48:03 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempEx4504.html [2011-03-03 23:47:42 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempzn4504.html [2011-02-25 13:38:47 | 000,007,859 | ---- | C] () -- C:\Users\Kiecha\AppData\Roaming\pcouffin.cat [2011-02-25 13:38:47 | 000,001,167 | ---- | C] () -- C:\Users\Kiecha\AppData\Roaming\pcouffin.inf [2011-02-15 20:37:17 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempRd2768.html [2011-02-15 20:37:16 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempvh2768.html [2011-02-15 20:09:00 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempiA2228.html [2011-02-15 20:09:00 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempil2228.html [2011-02-15 16:33:45 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempec4732.html [2011-02-15 16:33:45 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempYz4732.html [2011-02-15 12:41:29 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempdQ1612.html [2011-02-14 18:24:28 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempcY2768.html [2011-02-14 18:24:28 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNN2768.html [2011-02-14 02:12:37 | 000,000,003 | ---- | C] () -- C:\Windows\treeskp.sys [2011-02-14 02:12:37 | 000,000,003 | ---- | C] () -- C:\Windows\sbacknt.bin [2011-02-10 22:19:44 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempiE1020.html [2011-02-10 22:19:44 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempnB1020.html [2011-02-10 21:15:12 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempjc1792.html [2011-02-10 21:15:12 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemptR1792.html [2011-02-09 16:49:49 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempGh2412.html [2011-02-09 16:49:49 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempjj2412.html [2011-02-08 16:06:23 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempCY3024.html [2011-02-08 16:06:23 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempsC3024.html [2011-02-07 20:13:56 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempmm2932.html [2011-02-07 20:13:56 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemplD2932.html [2011-02-07 15:14:56 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempRj1700.html [2011-02-07 15:14:56 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempTb1700.html [2011-02-06 11:32:19 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempxj1476.html [2011-02-06 11:32:19 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempkh1476.html [2011-02-05 15:33:33 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNO2916.html [2011-02-05 15:33:33 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempje2916.html [2011-02-02 18:19:11 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempiq1936.html [2011-02-02 18:19:11 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempyS1936.html [2011-02-01 19:13:29 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempXMW316.html [2011-02-01 19:13:29 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempgfu316.html [2011-01-31 15:59:01 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemptO2720.html [2011-01-31 15:59:01 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempOp2720.html [2011-01-27 20:56:06 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempjW4636.html [2011-01-24 16:30:48 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempjR2460.html [2011-01-24 16:30:48 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempiB2460.html [2011-01-24 08:25:11 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempdC1716.html [2011-01-24 08:25:11 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUf1716.html [2011-01-23 15:29:05 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempAk2780.html [2011-01-23 15:29:05 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempqn2780.html [2011-01-23 14:04:18 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempzBI620.html [2011-01-23 14:04:18 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempgvd620.html [2011-01-22 21:24:37 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempnF3948.html [2011-01-22 21:24:37 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempfa3948.html [2011-01-21 15:17:52 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempcQ2852.html [2011-01-20 17:02:36 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempjG1160.html [2011-01-20 17:02:36 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempno1160.html [2011-01-19 21:04:26 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempFgd248.html [2011-01-19 21:04:26 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempOUL248.html [2011-01-18 15:36:55 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUF2748.html [2011-01-18 15:36:54 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempuk2748.html [2011-01-17 16:13:52 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempoT2260.html [2011-01-17 16:13:52 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempGF2260.html [2011-01-14 15:50:11 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempHM1808.html [2011-01-14 14:29:27 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempPFR696.html [2011-01-14 14:29:27 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempBft696.html [2011-01-13 23:23:42 | 000,003,347 | ---- | C] () -- C:\Users\Kiecha\.recently-used.xbel [2011-01-13 15:03:51 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempiT2564.html [2011-01-12 22:19:22 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempiz2224.html [2011-01-12 22:19:22 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempea2224.html [2011-01-12 19:44:33 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempHt2372.html [2011-01-12 19:25:51 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempyv3768.html [2011-01-12 19:25:51 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemppA3768.html [2011-01-12 17:57:21 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempwZ1484.html [2011-01-12 17:57:21 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempYT1484.html [2011-01-11 17:29:51 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUb3068.html [2011-01-11 17:29:51 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempAR3068.html [2011-01-10 15:35:38 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempQz2448.html [2011-01-10 15:35:38 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempAb2448.html [2011-01-08 15:16:26 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempwO2740.html [2011-01-08 15:16:26 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempgo2740.html [2011-01-07 13:45:18 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemplZq828.html [2011-01-07 13:45:18 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempYEt828.html [2011-01-06 01:04:25 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUD2144.html [2011-01-05 16:29:10 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempwP1084.html [2011-01-05 16:11:38 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempTB2228.html [2011-01-04 18:28:30 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempzCg636.html [2011-01-04 18:28:30 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemppVM636.html [2011-01-03 17:30:39 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempxso540.html [2011-01-02 11:13:10 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempzo2268.html [2011-01-01 21:02:12 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempeY2556.html [2010-12-31 14:54:22 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempjH3048.html [2010-12-31 02:27:29 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempGh2120.html [2010-12-31 00:34:53 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temppx1084.html [2010-12-31 00:34:53 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempMW1084.html [2010-12-30 15:34:01 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempEz2068.html [2010-12-29 21:20:01 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempgp2164.html [2010-12-29 16:31:54 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempvG2484.html [2010-12-29 16:31:54 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempqM2484.html [2010-12-28 05:21:34 | 000,000,998 | ---- | C] () -- C:\Windows\GTA-SA_Trn_Settings.ini [2010-12-27 14:54:11 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempN10508.html [2010-12-27 14:54:11 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempT10508.html [2010-12-26 19:01:44 | 000,459,236 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat [2010-12-26 04:56:44 | 000,283,304 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2010-12-26 04:56:42 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe [2010-12-26 04:56:42 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2010-12-25 19:04:22 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVf2056.html [2010-12-23 21:22:26 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempZC3048.html [2010-12-23 21:22:26 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempxq3048.html [2010-12-23 12:26:56 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempdm2968.html [2010-12-23 12:26:56 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempOh2968.html [2010-12-22 19:57:11 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempSw2944.html [2010-12-22 19:57:11 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempJI2944.html [2010-12-22 19:46:28 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempok2972.html [2010-12-22 19:46:28 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempRZ2972.html [2010-12-22 19:35:51 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempbe2940.html [2010-12-22 18:20:12 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempZu2904.html [2010-12-22 15:38:02 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempEz3004.html [2010-12-22 15:38:02 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempaY3004.html [2010-12-22 15:27:17 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempCf3040.html [2010-12-22 15:27:17 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempBY3040.html [2010-12-22 14:18:27 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVZ3064.html [2010-12-21 18:32:01 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempHC2928.html [2010-12-21 18:32:01 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempPb2928.html [2010-12-20 22:47:13 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempMC3044.html [2010-12-20 22:47:13 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempQI3044.html [2010-12-20 18:08:27 | 000,000,331 | ---- | C] () -- C:\Windows\game.ini [2010-12-20 16:36:16 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempfd3028.html [2010-12-20 16:36:16 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempyF3028.html [2010-12-19 19:53:18 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempx25236.html [2010-12-19 19:53:18 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempe25236.html [2010-12-18 21:37:10 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempTw2104.html [2010-12-18 21:37:10 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUW2104.html [2010-12-18 21:37:06 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempAR2104.html [2010-12-18 21:37:06 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempaa2104.html [2010-12-18 19:28:40 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempx21684.html [2010-12-18 19:28:40 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempz21684.html [2010-12-18 19:25:38 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempc21684.html [2010-12-18 19:25:38 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempq21684.html [2010-12-17 19:56:46 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempP33856.html [2010-12-17 19:56:46 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempH33856.html [2010-12-16 19:53:32 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempye2740.html [2010-12-16 18:20:26 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempax2708.html [2010-12-16 18:20:26 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempPc2708.html [2010-12-16 18:20:25 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempSF2708.html [2010-12-16 18:20:25 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempPU2708.html [2010-12-16 16:03:40 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempYt2988.html [2010-12-15 16:09:01 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempAm3020.html [2010-12-15 16:09:01 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLt3020.html [2010-12-15 16:08:57 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempMH3020.html [2010-12-15 16:08:57 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempXV3020.html [2010-12-14 16:46:34 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemphJ1396.html [2010-12-14 16:46:34 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempnS1396.html [2010-12-14 16:46:31 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempXF1396.html [2010-12-14 16:46:31 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempEN1396.html [2010-12-13 19:55:22 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempIh2940.html [2010-12-13 19:55:22 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempKE2940.html [2010-12-13 17:25:56 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempuM2976.html [2010-12-13 17:25:56 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempfT2976.html [2010-12-13 16:59:49 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVZ2976.html [2010-12-13 16:59:49 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempFZ2976.html [2010-12-11 14:59:27 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempN24548.html [2010-12-11 14:59:27 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempy24548.html [2010-12-11 14:59:26 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempZ24548.html [2010-12-11 14:59:26 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempB24548.html [2010-12-10 19:44:07 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempI39572.html [2010-12-10 19:44:05 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempQ39572.html [2010-12-09 15:06:24 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temptc2912.html [2010-12-09 15:06:20 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempQC2912.html [2010-12-09 15:06:20 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempJo2912.html [2010-12-08 17:58:05 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUB2900.html [2010-12-08 17:58:05 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemplU2900.html [2010-12-08 17:58:00 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNH2900.html [2010-12-08 17:58:00 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempmd2900.html [2010-12-07 16:20:53 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempaL3004.html [2010-12-07 16:20:53 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLg3004.html [2010-12-07 16:20:49 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempFp3004.html [2010-12-07 16:20:49 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempIj3004.html [2010-12-06 18:36:51 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempRe3052.html [2010-12-06 18:36:51 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempfB3052.html [2010-12-06 18:36:47 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempos3052.html [2010-12-06 18:36:47 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempbD3052.html [2010-12-05 12:15:48 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempi20848.html [2010-12-05 12:15:48 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempY20848.html [2010-12-05 12:13:46 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempC20848.html [2010-12-05 12:13:46 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempj20848.html [2010-12-04 18:51:44 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempBa3032.html [2010-12-04 18:51:44 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temply3032.html [2010-12-04 18:51:41 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temprn3032.html [2010-12-04 18:51:41 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempvK3032.html [2010-12-04 16:46:30 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempHM3056.html [2010-12-04 16:46:30 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemphZ3056.html [2010-12-04 16:46:29 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempsi3056.html [2010-12-04 16:46:29 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempSv3056.html [2010-12-04 14:58:49 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempry3056.html [2010-12-04 14:58:49 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempzK3056.html [2010-12-04 14:58:48 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempEj3056.html [2010-12-04 14:58:48 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempSJ3056.html [2010-12-04 14:15:13 | 000,007,625 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Resmon.ResmonCfg [2010-12-04 13:31:48 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempJy2124.html [2010-12-04 13:31:48 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempdh2124.html [2010-12-04 13:31:47 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Templb2124.html [2010-12-04 13:31:47 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNm2124.html [2010-12-04 12:20:17 | 003,495,784 | ---- | C] () -- C:\Windows\SysWow64\d3dx9_33.dll [2010-12-03 15:08:22 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempDh3068.html [2010-12-03 15:08:22 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temppz3068.html [2010-12-02 00:16:33 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempmo1064.html [2010-12-02 00:16:33 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLF1064.html [2010-12-02 00:16:32 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempWj1064.html [2010-12-02 00:16:32 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemplS1064.html [2010-11-30 20:00:40 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempjg3052.html [2010-11-30 20:00:40 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempex3052.html [2010-11-30 20:00:39 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempqr3052.html [2010-11-30 20:00:39 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempEb3052.html [2010-11-29 15:37:22 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempxj2788.html [2010-11-29 15:37:22 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempwi2788.html [2010-11-29 15:37:21 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempin2788.html [2010-11-29 15:37:21 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempoD2788.html [2010-11-28 19:25:01 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempXV3060.html [2010-11-28 19:25:01 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempFE3060.html [2010-11-28 19:24:58 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempkO3060.html [2010-11-28 19:24:58 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempsF3060.html [2010-11-25 20:26:49 | 000,974,848 | ---- | C] () -- C:\Windows\vorbis.dll [2010-11-25 20:26:49 | 000,049,152 | ---- | C] () -- C:\Windows\ogg.dll [2010-11-25 20:26:49 | 000,028,672 | ---- | C] () -- C:\Windows\vorbisfile.dll [2010-11-25 18:39:52 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempgl1004.html [2010-11-25 18:39:52 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempnq1004.html [2010-11-25 18:38:42 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempSV1004.html [2010-11-25 18:38:42 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempem1004.html [2010-11-24 16:16:16 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempnt1496.html [2010-11-24 16:16:16 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempHA1496.html [2010-11-23 18:21:20 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempwE2980.html [2010-11-23 18:21:20 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempOL2980.html [2010-11-23 18:19:51 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempDj2980.html [2010-11-23 18:19:51 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempnZ2980.html [2010-11-21 17:27:13 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempDC2972.html [2010-11-21 17:27:13 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempDr2972.html [2010-11-20 12:09:19 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNM2948.html [2010-11-20 12:09:19 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempfV2948.html [2010-11-20 11:59:02 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat [2010-11-20 11:51:52 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempnN2832.html [2010-11-20 11:51:52 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempcq2832.html [2010-11-19 14:38:37 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemprE2948.html [2010-11-19 14:38:37 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNE2948.html [2010-11-18 14:59:13 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempAu2912.html [2010-11-18 14:59:13 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempBp2912.html [2010-11-17 18:40:20 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempiz2936.html [2010-11-17 18:40:20 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempeW2936.html [2010-11-17 02:00:15 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempYP2964.html [2010-11-17 02:00:15 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempun2964.html [2010-11-16 15:46:04 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempmK2764.html [2010-11-16 15:46:04 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempbr2764.html [2010-11-15 21:07:29 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempYJ2464.html [2010-11-15 21:07:29 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempBB2464.html [2010-11-15 19:52:52 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempAn2104.html [2010-11-15 19:52:52 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempzZ2104.html [2010-11-15 19:43:46 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempTq2980.html [2010-11-14 16:52:45 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempwN2976.html [2010-11-14 16:52:45 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempHG2976.html [2010-11-11 02:20:39 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempAw2392.html [2010-11-11 02:20:39 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempvi2392.html [2010-11-10 16:41:23 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempYY3020.html [2010-11-10 16:41:23 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempma3020.html [2010-11-09 19:00:06 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempkI2000.html [2010-11-09 19:00:06 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempzB2000.html [2010-11-09 17:47:19 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemppK2992.html [2010-11-09 17:47:19 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempCb2992.html [2010-11-07 20:15:19 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempiX2964.html [2010-11-07 20:15:19 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempRG2964.html [2010-11-07 20:14:00 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempsC2964.html [2010-11-07 20:14:00 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempWL2964.html [2010-11-07 19:47:02 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempxB2752.html [2010-11-07 19:47:02 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempcz2752.html [2010-11-07 19:33:21 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVY2800.html [2010-11-07 19:33:21 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempvN2800.html [2010-11-07 17:45:35 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempQn2772.html [2010-11-07 17:45:35 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempIO2772.html [2010-11-06 18:57:58 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempCC1988.html [2010-11-06 18:57:58 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempRo1988.html [2010-11-06 18:41:55 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempQO3060.html [2010-11-06 18:41:55 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempSz3060.html [2010-11-06 18:14:51 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempDK2072.html [2010-11-06 18:14:51 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempxe2072.html [2010-11-06 18:14:49 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempgU2072.html [2010-11-06 18:14:49 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNK2072.html [2010-11-06 14:39:41 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempSq3052.html [2010-11-06 14:39:41 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempgA3052.html [2010-11-06 14:39:38 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempWH3052.html [2010-11-06 14:39:38 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempXn3052.html [2010-11-05 21:28:16 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempnp3000.html [2010-11-05 21:28:16 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempwQ3000.html [2010-11-05 21:26:55 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempij3000.html [2010-11-05 21:26:55 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempgI3000.html [2010-11-05 18:09:03 | 001,970,176 | ---- | C] () -- C:\Windows\SysWow64\d3dx9.dll [2010-11-04 17:23:42 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempWn3432.html [2010-11-04 17:23:42 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempXD3432.html [2010-11-04 15:54:14 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempwS2892.html [2010-11-04 15:54:14 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempXi2892.html [2010-11-03 18:08:24 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempQa2912.html [2010-11-03 18:08:24 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempBZ2912.html [2010-11-03 15:29:51 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempCw2812.html [2010-11-03 15:29:51 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempWu2812.html [2010-11-02 18:33:07 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempJr2884.html [2010-11-02 18:33:07 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempqw2884.html [2010-11-01 16:54:41 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempkC5492.html [2010-11-01 16:54:41 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempGo5492.html [2010-11-01 16:52:43 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempnZ5492.html [2010-11-01 16:52:43 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempJs5492.html [2010-11-01 15:16:45 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVr5072.html [2010-11-01 15:16:45 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNG5072.html [2010-11-01 00:46:34 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempOC2940.html [2010-11-01 00:46:34 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempxA2940.html [2010-11-01 00:46:32 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempsa2940.html [2010-11-01 00:46:32 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemprK2940.html [2010-10-31 20:11:34 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempWf3044.html [2010-10-31 20:11:34 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempeL3044.html [2010-10-31 20:06:43 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempeB3044.html [2010-10-31 20:06:43 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempPL3044.html [2010-10-30 10:38:53 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempum2804.html [2010-10-30 10:38:53 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempJQ2804.html [2010-10-29 14:06:59 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempao2724.html [2010-10-29 14:06:59 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempzs2724.html [2010-10-28 14:25:24 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempEH2900.html [2010-10-28 14:25:24 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNq2900.html [2010-10-27 16:03:49 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempZz2900.html [2010-10-27 16:03:49 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUz2900.html [2010-10-26 11:03:31 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempcl1064.html [2010-10-26 11:03:31 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temppc1064.html [2010-10-25 23:59:25 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempoA2784.html [2010-10-25 23:59:25 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempyO2784.html [2010-10-25 16:14:29 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempqc2804.html [2010-10-25 16:14:29 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemphS2804.html [2010-10-24 18:21:40 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemptN2904.html [2010-10-24 18:21:40 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUu2904.html [2010-10-24 00:09:18 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLS2944.html [2010-10-24 00:09:18 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempik2944.html [2010-10-23 18:00:11 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempy22376.html [2010-10-23 18:00:11 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempb22376.html [2010-10-22 17:35:45 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempeA4236.html [2010-10-22 17:35:45 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempJU4236.html [2010-10-22 14:11:22 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat [2010-10-21 20:33:45 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Temphl3028.html [2010-10-21 20:33:45 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempqI3028.html [2010-10-20 18:14:15 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempSC2368.html [2010-10-20 18:14:15 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempJl2368.html [2010-10-19 15:32:46 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempeJ2924.html [2010-10-19 15:32:46 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempOS2924.html [2010-10-18 16:59:49 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempev2860.html [2010-10-18 16:59:49 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempMw2860.html [2010-10-18 15:49:47 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempoC2864.html [2010-10-18 15:49:47 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempyw2864.html [2010-10-17 12:47:47 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempJc2996.html [2010-10-17 12:47:47 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemptI2996.html [2010-10-15 13:57:39 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempoq3012.html [2010-10-15 13:57:39 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUw3012.html [2010-10-13 18:05:49 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUn2920.html [2010-10-13 18:05:49 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempHp2920.html [2010-10-12 20:03:53 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempseA404.html [2010-10-12 20:03:53 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempDts404.html [2010-10-12 20:03:07 | 000,000,094 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\fusioncache.dat [2010-10-12 15:43:40 | 001,673,994 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010-10-12 15:10:02 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemppJB936.html [2010-10-12 15:10:02 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempcLr936.html [2010-10-11 17:17:56 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempKt2248.html [2010-10-11 17:17:56 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNf2248.html [2010-10-11 16:43:10 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempye3020.html [2010-10-11 16:43:10 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempzr3020.html [2010-10-10 17:46:17 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempcB3044.html [2010-10-10 17:46:17 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempvL3044.html [2010-10-08 13:50:30 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Templg3012.html [2010-10-08 13:50:30 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLu3012.html [2010-10-07 20:13:13 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempkz2936.html [2010-10-07 20:13:13 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVR2936.html [2010-10-07 20:00:24 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempbl2460.html [2010-10-07 20:00:24 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempYj2460.html [2010-10-07 13:53:41 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUJ2952.html [2010-10-07 13:53:41 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempnz2952.html [2010-10-06 15:11:05 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempkY2712.html [2010-10-06 15:11:05 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempCf2712.html [2010-10-04 17:39:51 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLo2708.html [2010-10-04 17:39:51 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLx2708.html [2010-10-03 19:05:18 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempGk2076.html [2010-10-03 19:05:18 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempOY2076.html [2010-10-01 21:16:16 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVI2908.html [2010-10-01 21:16:16 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempCh2908.html [2010-10-01 15:11:54 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempJM1944.html [2010-10-01 15:11:54 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemppG1944.html [2010-10-01 14:27:30 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempdz3052.html [2010-10-01 14:27:30 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLr3052.html [2010-10-01 14:15:34 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempcq2916.html [2010-10-01 14:15:34 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempvW2916.html [2010-09-30 14:38:52 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemptE2152.html [2010-09-30 14:38:52 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVI2152.html [2010-09-29 18:28:46 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempiI3044.html [2010-09-29 18:28:46 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempDM3044.html [2010-09-27 15:59:32 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempMs2684.html [2010-09-27 15:59:32 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempOW2684.html [2010-09-25 22:23:53 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempTc2900.html [2010-09-25 22:23:53 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempTO2900.html [2010-09-25 10:50:13 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempsP2952.html [2010-09-25 10:50:13 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempzm2952.html [2010-09-25 09:51:10 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempgU2876.html [2010-09-25 09:51:10 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempqc2876.html [2010-09-24 13:57:49 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempMJ2884.html [2010-09-24 13:57:49 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempoM2884.html [2010-09-23 15:28:45 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempaJ2612.html [2010-09-23 15:28:45 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempPa2612.html [2010-09-22 14:46:40 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempYg2592.html [2010-09-22 14:46:40 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempxN2592.html [2010-09-21 23:34:24 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempqg2624.html [2010-09-21 23:34:24 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempcJ2624.html [2010-09-21 15:55:43 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempMO2344.html [2010-09-21 15:55:43 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempRl2344.html [2010-09-20 22:52:08 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempxr2880.html [2010-09-20 22:52:08 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempBP2880.html [2010-09-20 16:33:12 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempwB2476.html [2010-09-20 16:33:12 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempMa2476.html [2010-09-19 21:26:15 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Templh2880.html [2010-09-19 21:26:15 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempZr2880.html [2010-09-19 20:27:00 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemplJ2612.html [2010-09-19 20:27:00 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempab2612.html [2010-09-19 15:58:44 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempAT2864.html [2010-09-19 15:58:44 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNe2864.html [2010-09-18 22:30:25 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempGd2888.html [2010-09-18 22:30:25 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempyE2888.html [2010-09-18 10:46:41 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempZv2808.html [2010-09-18 10:46:41 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempTv2808.html [2010-09-18 10:44:55 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempCU2808.html [2010-09-17 22:30:49 | 000,000,000 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempUV2200.html [2010-09-17 22:30:49 | 000,000,000 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNJ2200.html [2010-09-16 20:46:15 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempvc2080.html [2010-09-16 20:46:15 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempVZ2080.html [2010-09-12 18:27:00 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempwa2116.html [2010-09-12 18:27:00 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempyh2116.html [2010-09-10 17:33:34 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempMcy928.html [2010-09-10 17:33:34 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempmUf928.html [2010-09-08 15:19:52 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempxC2088.html [2010-09-08 15:19:52 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemptH2088.html [2010-09-06 15:52:10 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempnh1056.html [2010-09-06 15:52:10 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempLO1056.html [2010-09-06 00:54:05 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempxM2120.html [2010-09-06 00:54:05 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TemplZ2120.html [2010-09-05 19:53:43 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempoo1452.html [2010-09-05 19:53:43 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempNQ1452.html [2010-09-01 12:53:45 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempR13224.html [2010-09-01 12:53:45 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempa13224.html [2010-08-29 19:23:09 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempCe2148.html [2010-08-29 19:23:09 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\TempoN2148.html [2010-08-19 13:20:11 | 000,002,432 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempkr8720.html [2010-08-19 13:20:11 | 000,002,089 | ---- | C] () -- C:\Users\Kiecha\AppData\Local\Tempvz8720.html [color=#E56717]========== LOP Check ==========[/color] [2012-06-27 19:19:25 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\.minecraft [2010-12-04 17:35:56 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\3DFA [2012-06-04 16:14:52 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\AIMP [2010-07-18 19:42:58 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\ASCON [2011-01-13 21:19:48 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\Atari [2012-02-15 22:40:20 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\Babylon [2012-06-24 01:59:06 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\BitTorrent [2012-04-02 18:53:48 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\BlackBean [2011-12-19 00:11:53 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\Canneverbe Limited [2011-10-08 22:14:08 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 [2012-06-29 23:18:36 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\DAEMON Tools Lite [2011-11-10 19:29:43 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\dll-files.com [2012-07-24 13:44:54 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\DMCache [2011-03-31 23:59:01 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\fltk.org [2012-07-10 21:40:10 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\FMRTEv5 [2011-09-18 13:20:30 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\Gadu-Gadu 10 [2011-03-14 18:07:28 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\GetRightToGo [2010-08-01 17:04:31 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\GHISLER [2011-01-08 20:29:36 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\gtk-2.0 [2012-07-25 02:50:57 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\hellomoto [2012-07-25 13:54:39 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\IDM [2012-07-24 13:43:11 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\IMVU [2011-02-22 01:52:39 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\IMVUClient [2012-07-25 15:03:10 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\ipla [2010-08-18 21:54:38 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\IVONA Reader [2011-08-20 23:33:04 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\Jasc [2012-05-07 15:32:57 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\Kalypso Media [2010-10-28 14:48:54 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\Leadertech [2011-02-25 13:39:04 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\log [2011-10-16 12:30:23 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\LolClient [2010-10-11 17:35:41 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\My Games [2010-10-12 17:32:30 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\MyPhoneExplorer [2012-01-30 00:18:20 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\Need for Speed World [2010-11-05 18:32:31 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\OpenCandy [2010-08-31 21:09:11 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\OpenFM [2011-12-25 23:27:31 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\Origin [2012-03-22 02:47:28 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\PACE Anti-Piracy [2012-02-03 02:16:53 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\Publish Providers [2011-03-20 12:22:04 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\PunkBuster [2011-02-20 20:17:42 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\RDRM [2011-10-30 19:07:56 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\redsn0w [2012-06-29 23:22:54 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\runic games [2011-12-07 00:05:15 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\SEGA [2012-06-19 22:41:15 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\SendSpace [2012-02-05 16:04:32 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\Sony [2012-01-13 22:18:45 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\Sony Creative Software [2012-03-02 02:28:18 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\Sports Interactive [2011-05-09 00:05:34 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1 [2012-05-07 22:52:59 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\Tropico 4 [2011-11-08 01:10:04 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\Ulead Systems [2011-11-16 22:19:45 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\Unity [2012-07-01 22:22:50 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\uTorrent [2011-11-22 21:34:27 | 000,000,000 | ---D | M] -- C:\Users\Kiecha\AppData\Roaming\VshareComplete [2012-07-11 18:29:16 | 000,000,294 | ---- | M] () -- C:\Windows\Tasks\DLL-files.com Fixer_UPDATES.job [2012-07-25 00:52:00 | 000,001,060 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3407819016-2735834526-3671976630-1000Core.job [2012-07-25 00:52:03 | 000,001,082 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3407819016-2735834526-3671976630-1000UA.job [2012-05-16 14:37:09 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:05EE1EEF @Alternate Data Stream - 1199 bytes -> C:\ProgramData\Microsoft:c2AVgOUs2kdnUTc5hybgS @Alternate Data Stream - 1075 bytes -> C:\ProgramData\Microsoft:IWqd9MJ2C2LOgki2QdgGILD < End of report >