OTL logfile created on: 2012-07-25 15:45:27 - Run 5
OTL by OldTimer - Version 3.2.54.1     Folder = C:\Users\PZ\Desktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,86 Gb Total Physical Memory | 2,55 Gb Available Physical Memory | 66,08% Memory free
7,73 Gb Paging File | 6,29 Gb Available in Paging File | 81,37% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 58,59 Gb Total Space | 7,30 Gb Free Space | 12,45% Space Free | Partition Type: NTFS
Drive D: | 229,63 Gb Total Space | 24,78 Gb Free Space | 10,79% Space Free | Partition Type: NTFS
Drive E: | 565,51 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF
 
Computer Name: PZ-NOT | User Name: PZ | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-24 17:20:32 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\PZ\Desktop\OTL.exe
PRC - [2012-07-20 09:11:35 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2012-07-03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012-07-03 13:46:44 | 000,462,920 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2012-02-21 03:05:12 | 000,101,048 | ---- | M] () -- C:\Program Files (x86)\ContourStoryteller\ContourAutoplay.exe
PRC - [2012-01-04 08:07:40 | 000,021,392 | ---- | M] () -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
PRC - [2012-01-04 08:07:30 | 003,508,624 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
PRC - [2011-09-22 20:43:28 | 000,645,048 | ---- | M] (Cisco Systems, Inc.) -- C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
PRC - [2011-08-30 18:18:30 | 002,358,656 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
PRC - [2011-04-30 10:52:17 | 000,253,952 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Program Files (x86)\blueconnect\DataCardMonitor.exe
PRC - [2010-08-01 12:38:46 | 000,399,920 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnat.exe
PRC - [2010-08-01 12:38:32 | 000,334,384 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnetdhcp.exe
PRC - [2010-08-01 12:38:28 | 000,113,200 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
PRC - [2010-08-01 12:38:06 | 000,064,048 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\VMware\VMware Player\hqtray.exe
PRC - [2010-08-01 11:39:16 | 000,539,184 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe
PRC - [2010-07-12 18:32:48 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Winamp\winampa.exe
PRC - [2010-01-06 11:57:42 | 000,266,240 | ---- | M] (XEROX) -- C:\Program Files (x86)\Xerox\NetworkScan\NSCSysUI_XEROX.exe
PRC - [2009-12-31 14:13:52 | 000,110,592 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Users\PZ\AppData\Roaming\blueconnect\ouc.exe
PRC - [2009-09-30 20:01:32 | 002,320,920 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2009-09-30 20:01:30 | 000,268,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2009-05-16 10:36:04 | 000,241,664 | ---- | M] () -- C:\Program Files (x86)\PLAY ONLINE\AssistantServices.exe
PRC - [2009-05-16 10:35:02 | 000,132,608 | ---- | M] () -- C:\Program Files (x86)\PLAY ONLINE\UIExec.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-07-20 09:11:34 | 002,003,424 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2012-07-19 09:34:58 | 018,019,840 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\d239f585ee55f833dbe21e897e1265ac\PresentationFramework.ni.dll
MOD - [2012-07-19 09:34:42 | 011,522,048 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\b7de318e9fd1ef519ca6c1f3b5dba8e0\PresentationCore.ni.dll
MOD - [2012-07-19 09:34:38 | 013,198,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\00a4922fbf869a79c043b665035516b6\System.Windows.Forms.ni.dll
MOD - [2012-07-19 09:34:29 | 003,881,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\a6e37a05b8d0cedbc5c3ea266ae3fc31\WindowsBase.ni.dll
MOD - [2012-07-19 09:34:26 | 001,666,048 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\4230ed1c7990e4ee8352baf67a2a85fa\System.Drawing.ni.dll
MOD - [2012-05-30 15:21:17 | 001,218,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\d0e1cdaff8f9055187f8e7b52c060dff\System.Management.ni.dll
MOD - [2012-05-30 15:18:58 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\63bc6e391de5014965039e100ce1e9d5\System.Runtime.Remoting.ni.dll
MOD - [2012-05-30 15:18:02 | 001,782,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\b68bee05c7e518172982cc92059c3315\System.Xaml.ni.dll
MOD - [2012-05-29 20:03:01 | 000,595,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\608d29d7cc89f3a9a195c91354561915\PresentationFramework.Aero.ni.dll
MOD - [2012-05-29 19:58:37 | 007,069,184 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\09bd2126bba2ab4f29ed52afde1470d7\System.Core.ni.dll
MOD - [2012-05-29 19:58:31 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9abe44a0f82070ead5f1256683a4d25a\System.Xml.ni.dll
MOD - [2012-05-29 19:58:25 | 009,092,096 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\a6be120e49f895ef6b00e9918402395b\System.ni.dll
MOD - [2012-05-29 19:58:18 | 014,414,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\c1af4ec9a36f671617a8ecaec00373f4\mscorlib.ni.dll
MOD - [2012-02-21 03:05:12 | 000,101,048 | ---- | M] () -- C:\Program Files (x86)\ContourStoryteller\ContourAutoplay.exe
MOD - [2012-02-07 02:46:53 | 000,971,776 | ---- | M] () -- C:\Program Files (x86)\ContourStoryteller\QtNetwork4.dll
MOD - [2012-02-07 02:46:52 | 008,191,488 | ---- | M] () -- C:\Program Files (x86)\ContourStoryteller\QtGui4.dll
MOD - [2012-02-07 02:46:52 | 002,296,320 | ---- | M] () -- C:\Program Files (x86)\ContourStoryteller\QtCore4.dll
MOD - [2012-01-14 14:55:30 | 000,115,137 | ---- | M] () -- C:\Users\PZ\AppData\Local\Temp\feb59f87-baa7-4a0a-902c-c33cfc0feb21\CliSecureRT.dll
MOD - [2012-01-04 08:07:40 | 000,021,392 | ---- | M] () -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
MOD - [2010-08-01 12:38:42 | 000,970,288 | ---- | M] () -- C:\Program Files (x86)\VMware\VMware Player\libxml2.dll
MOD - [2010-08-01 12:37:54 | 000,068,656 | ---- | M] () -- C:\Program Files (x86)\VMware\VMware Player\zlib1.dll
MOD - [2009-05-16 10:35:02 | 000,132,608 | ---- | M] () -- C:\Program Files (x86)\PLAY ONLINE\UIExec.exe
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2010-07-10 12:35:04 | 001,038,088 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:[b]64bit:[/b] - [2010-01-22 10:01:12 | 000,202,752 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2009-10-09 20:52:16 | 000,092,160 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters)
SRV:[b]64bit:[/b] - [2009-08-17 21:09:52 | 000,868,128 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012-07-20 09:11:35 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-07-13 09:27:23 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-07-03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012-07-03 13:19:28 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011-09-22 20:43:28 | 000,645,048 | ---- | M] (Cisco Systems, Inc.) [Auto | Running] -- C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe -- (vpnagent)
SRV - [2011-08-30 18:18:30 | 002,358,656 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
SRV - [2010-11-08 23:04:26 | 000,036,352 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe -- (OpenVPNService)
SRV - [2010-08-01 12:38:46 | 000,399,920 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service)
SRV - [2010-08-01 12:38:32 | 000,334,384 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP)
SRV - [2010-08-01 12:38:28 | 000,113,200 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe -- (VMAuthdService)
SRV - [2010-08-01 11:39:16 | 000,539,184 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService)
SRV - [2010-07-10 12:20:21 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010-04-27 16:42:04 | 000,191,024 | ---- | M] (VMware, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe -- (ufad-ws60)
SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009-09-30 20:01:32 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2009-09-30 20:01:30 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009-05-16 10:36:04 | 000,241,664 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\PLAY ONLINE\AssistantServices.exe -- (UI Assistant Service)
SRV - [2007-05-31 17:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007-05-31 17:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2012-07-03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:[b]64bit:[/b] - [2012-03-01 08:54:38 | 000,022,896 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2011-12-08 06:22:36 | 000,172,104 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdm.sys -- (sscdmdm)
DRV:[b]64bit:[/b] - [2011-12-08 06:22:36 | 000,136,264 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdbus.sys -- (sscdbus)
DRV:[b]64bit:[/b] - [2011-12-08 06:22:36 | 000,019,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV:[b]64bit:[/b] - [2011-12-08 06:22:28 | 000,177,640 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)
DRV:[b]64bit:[/b] - [2011-12-08 06:22:28 | 000,157,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus)
DRV:[b]64bit:[/b] - [2011-12-08 06:22:28 | 000,016,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV:[b]64bit:[/b] - [2011-09-22 20:29:18 | 000,022,264 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpnva64.sys -- (vpnva)
DRV:[b]64bit:[/b] - [2011-03-11 08:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011-03-11 08:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2010-11-08 23:04:26 | 000,030,720 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
DRV:[b]64bit:[/b] - [2010-10-25 11:10:22 | 000,020,552 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dgderdrv.sys -- (dgderdrv)
DRV:[b]64bit:[/b] - [2010-08-01 12:39:12 | 000,080,944 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmci.sys -- (vmci)
DRV:[b]64bit:[/b] - [2010-08-01 12:39:10 | 000,068,656 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmx86.sys -- (vmx86)
DRV:[b]64bit:[/b] - [2010-08-01 12:37:24 | 000,031,792 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VMkbd.sys -- (vmkbd)
DRV:[b]64bit:[/b] - [2010-08-01 12:37:14 | 000,030,256 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetuserif.sys -- (VMnetuserif)
DRV:[b]64bit:[/b] - [2010-08-01 11:39:10 | 000,038,448 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\hcmon.sys -- (hcmon)
DRV:[b]64bit:[/b] - [2010-08-01 09:18:24 | 000,045,104 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetbridge.sys -- (VMnetBridge)
DRV:[b]64bit:[/b] - [2010-08-01 09:18:24 | 000,037,680 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmusb.sys -- (vmusb)
DRV:[b]64bit:[/b] - [2010-08-01 09:18:24 | 000,020,016 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vmnetadapter.sys -- (VMnetAdapter)
DRV:[b]64bit:[/b] - [2010-07-21 16:59:28 | 000,045,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64)
DRV:[b]64bit:[/b] - [2010-07-21 16:59:28 | 000,023,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nuidfltr.sys -- (NuidFltr)
DRV:[b]64bit:[/b] - [2010-07-01 17:52:18 | 000,051,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dc3d.sys -- (dc3d)
DRV:[b]64bit:[/b] - [2010-04-19 20:47:42 | 000,050,688 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:[b]64bit:[/b] - [2010-04-19 20:29:18 | 000,022,528 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netaapl64.sys -- (Netaapl)
DRV:[b]64bit:[/b] - [2010-03-25 10:08:46 | 000,120,704 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard)
DRV:[b]64bit:[/b] - [2010-03-24 13:58:36 | 000,249,856 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbnet.sys -- (ewusbnet)
DRV:[b]64bit:[/b] - [2010-03-20 11:56:56 | 000,114,560 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbdev.sys -- (hwusbdev)
DRV:[b]64bit:[/b] - [2010-03-04 13:43:00 | 000,346,144 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2010-01-22 16:38:52 | 000,284,720 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)
DRV:[b]64bit:[/b] - [2010-01-22 10:13:24 | 006,233,088 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:[b]64bit:[/b] - [2010-01-22 10:13:24 | 006,233,088 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atipmdag.sys -- (amdkmdag)
DRV:[b]64bit:[/b] - [2010-01-22 09:07:56 | 000,161,280 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:[b]64bit:[/b] - [2009-12-01 19:55:31 | 000,359,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm)
DRV:[b]64bit:[/b] - [2009-09-30 09:34:32 | 000,121,872 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:[b]64bit:[/b] - [2009-09-23 03:46:18 | 000,066,304 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr)
DRV:[b]64bit:[/b] - [2009-09-23 03:32:39 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb)
DRV:[b]64bit:[/b] - [2009-09-23 03:32:33 | 000,187,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus)
DRV:[b]64bit:[/b] - [2009-09-17 22:54:00 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64)
DRV:[b]64bit:[/b] - [2009-08-10 14:18:30 | 000,090,136 | ---- | M] (Citrix Systems, Inc.) [Kernel | Auto | Running] -- C:\Program Files\Common Files\Deterministic Networks\Common Files\cag.sys -- (cag)
DRV:[b]64bit:[/b] - [2009-07-17 19:06:00 | 002,769,400 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
DRV:[b]64bit:[/b] - [2009-07-17 11:14:12 | 000,220,672 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-07-14 02:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:[b]64bit:[/b] - [2009-07-01 12:46:52 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
DRV:[b]64bit:[/b] - [2009-07-01 12:46:48 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
DRV:[b]64bit:[/b] - [2009-07-01 12:46:40 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-05-07 16:47:16 | 000,150,784 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ZTEusbnmea.sys -- (ZTEusbnmea)
DRV:[b]64bit:[/b] - [2009-05-07 16:47:16 | 000,150,656 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ZTEusbser6k.sys -- (ZTEusbser6k)
DRV:[b]64bit:[/b] - [2009-05-07 16:47:16 | 000,150,656 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k)
DRV:[b]64bit:[/b] - [2009-05-07 16:47:16 | 000,012,800 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\massfilter.sys -- (massfilter)
DRV:[b]64bit:[/b] - [2009-04-29 17:28:30 | 000,030,208 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\KMWDFILTER.sys -- (KMWDFILTER)
DRV:[b]64bit:[/b] - [2009-04-07 15:33:08 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)
DRV:[b]64bit:[/b] - [2008-11-16 18:39:44 | 000,157,968 | ---- | M] (Deterministic Networks, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dne64x.sys -- (DNE)
DRV:[b]64bit:[/b] - [2008-06-27 07:51:10 | 000,088,632 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\adfs.sys -- (adfs)
DRV:[b]64bit:[/b] - [2008-03-12 19:48:38 | 000,054,072 | ---- | M] (Samsung Electronics) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\DgivEcp.sys -- (DgiVecp)
DRV:[b]64bit:[/b] - [2008-03-11 21:02:14 | 000,011,576 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SSPORT.SYS -- (SSPORT)
DRV - [2010-10-25 11:03:52 | 000,016,392 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys -- (TFsExDisk)
DRV - [2010-04-27 16:41:34 | 000,032,816 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys -- (vstor2-ws60)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2008-08-14 07:57:42 | 000,074,720 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysWow64\drivers\adfs.sys -- (adfs)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0D 9D 92 C9 E1 03 CB 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.startup.homepage: "http://www.onet.pl/"
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906
FF - prefs.js..extensions.enabledItems: DeviceDetection@logitech.com:1.21.0.11
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - user.js - File not found
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_265.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_265.dll ()
FF - HKLM\Software\MozillaPlugins\@Citrix.com/NPCAGSE,version=4.6.3.0900: C:\Program Files (x86)\Citrix\Access Gateway\npcagse.dll (Citrix Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-07-20 09:11:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-03-08 10:07:54 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-07-20 09:11:35 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-03-08 10:07:54 | 000,000,000 | ---D | M]
 
[2010-05-26 19:54:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PZ\AppData\Roaming\mozilla\Extensions
[2012-05-04 17:16:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PZ\AppData\Roaming\mozilla\Firefox\Profiles\d2v4s7rv.default\extensions
[2011-08-09 15:07:06 | 000,000,000 | ---D | M] (Разпознаване на устройство Logitech) -- C:\Users\PZ\AppData\Roaming\mozilla\Firefox\Profiles\d2v4s7rv.default\extensions\DeviceDetection@logitech.com
[2012-03-20 12:19:50 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012-03-09 10:08:18 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012-04-04 11:25:48 | 000,140,964 | ---- | M] () (No name found) -- C:\USERS\PZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2V4S7RV.DEFAULT\EXTENSIONS\FIREGESTURES@XULDEV.ORG.XPI
[2011-08-30 12:04:07 | 000,010,043 | ---- | M] () (No name found) -- C:\USERS\PZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D2V4S7RV.DEFAULT\EXTENSIONS\IPLEXTOALL@ALLPLAYER.ORG.XPI
[2012-07-20 09:11:35 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012-03-08 10:10:49 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2010-05-27 10:14:34 | 000,075,208 | ---- | M] (Foxit Software Company) -- C:\Program Files (x86)\mozilla firefox\plugins\npFoxitReaderPlugin.dll
[2010-07-12 18:33:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll
[2011-10-04 09:22:24 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2011-10-04 09:22:24 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2011-10-04 09:22:24 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2011-10-04 09:22:24 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2011-10-04 09:22:24 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2011-10-04 09:22:24 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2011-12-22 16:11:00 | 000,000,833 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4:[b]64bit:[/b] - HKLM..\Run: [IntelliPoint] C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [Windows Mobile Device Center] C:\Windows\WindowsMobile\wmdc.exe (Microsoft Corporation)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui File not found
O4 - HKLM..\Run: [DataCardMonitor] C:\Program Files (x86)\blueconnect\DataCardMonitor.exe (Huawei Technologies Co., Ltd.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NSCSysTrayUI_XEROX] C:\Program Files (x86)\XEROX\NetworkScan\NSCSysUI_XEROX.exe (XEROX)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [UIExec] C:\Program Files (x86)\PLAY ONLINE\UIExec.exe ()
O4 - HKLM..\Run: [VMware hqtray] C:\Program Files (x86)\VMware\VMware Player\hqtray.exe (VMware, Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKCU..\Run: [ALLUpdate] C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe ()
O4 - HKCU..\Run: [AQQ] C:\Program Files (x86)\WapSter\WapSter AQQ\AQQ.exe (Creative Team S.A.)
O4 - HKCU..\Run: [ContourCameraFinder] C:\Program Files (x86)\ContourStoryteller\ContourAutoplay.exe ()
O4 - HKCU..\Run: [HW_OPENEYE_OUC_blueconnect] C:\Program Files (x86)\blueconnect\UpdateDog\ouc.exe (Huawei Technologies Co., Ltd.)
O4 - HKCU..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe (Samsung)
O4 - HKCU..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O4 - HKCU..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKCU..\Run: [Xvid] C:\Program Files (x86)\Xvid\CheckUpdate.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:[b]64bit:[/b] - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:[b]64bit:[/b] - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:[b]64bit:[/b] - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Wyślij do interfejsu Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Wyślij do urządzenia &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000011 - C:\Program Files (x86)\VMware\VMware Player\x64\vsocklib.dll (VMware, Inc.)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000012 - C:\Program Files (x86)\VMware\VMware Player\x64\vsocklib.dll (VMware, Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: bonair.com.pl ([sps] https in Lokalny intranet)
O15 - HKCU\..Trusted Domains: columbus.pl ([extranet] https in Lokalny intranet)
O15 - HKCU\..Trusted Ranges: Range1 ([http] in Lokalny intranet)
O16 - DPF: {55963676-2F5E-4BAF-AC28-CF26AA587566} https://vpn.suedzucker.pl/CACHE/stc/2/binaries/vpnweb.cab (Cisco AnyConnect VPN Client Web Control)
O16 - DPF: {7E0FDFBB-87D4-43A1-9AD4-41F0EA8AFF7B} https://ag.bonair.com.pl/net6helper.cab (Reg Error: Value error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 172.32.32.1 62.233.128.17
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4E1A586F-2A74-4A64-B957-2BEBE24005F8}: DhcpNameServer = 172.32.32.1 62.233.128.17
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A9911D0B-916F-41D9-BDD8-37C0F780986B}: DhcpNameServer = 213.158.199.1 213.158.199.5
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AC67AF3C-0607-45FC-9291-97744D2851B1}: NameServer = 213.158.199.1 213.158.199.5
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-12-22 22:19:51 | 000,000,045 | R--- | M] () - E:\AUTORUN.INF -- [ UDF ]
O33 - MountPoints2\{1aa32c2b-a35e-11e1-97c0-c02c5f31bd5e}\Shell - "" = AutoRun
O33 - MountPoints2\{1aa32c2b-a35e-11e1-97c0-c02c5f31bd5e}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{1d2f1342-ee32-11df-b28e-bcbe519fe220}\Shell - "" = AutoRun
O33 - MountPoints2\{1d2f1342-ee32-11df-b28e-bcbe519fe220}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{1d2f1380-ee32-11df-b28e-bcbe519fe220}\Shell - "" = AutoRun
O33 - MountPoints2\{1d2f1380-ee32-11df-b28e-bcbe519fe220}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{3726d3c3-7234-11e0-9609-b043e40d2250}\Shell - "" = AutoRun
O33 - MountPoints2\{3726d3c3-7234-11e0-9609-b043e40d2250}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{3854aae3-6e98-11e0-9447-be4c3b3d8740}\Shell - "" = AutoRun
O33 - MountPoints2\{3854aae3-6e98-11e0-9447-be4c3b3d8740}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{3854ab1b-6e98-11e0-9447-be4c3b3d8740}\Shell - "" = AutoRun
O33 - MountPoints2\{3854ab1b-6e98-11e0-9447-be4c3b3d8740}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{3957a669-6b3f-11e0-9800-97a902ee3be5}\Shell - "" = AutoRun
O33 - MountPoints2\{3957a669-6b3f-11e0-9800-97a902ee3be5}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{46ba9b7d-74a4-11e0-9891-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{46ba9b7d-74a4-11e0-9891-806e6f6e6963}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{5288c249-3987-11e1-8053-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{5288c249-3987-11e1-8053-806e6f6e6963}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{5b5ce7da-8467-11e0-8aab-f343b0394f39}\Shell - "" = AutoRun
O33 - MountPoints2\{5b5ce7da-8467-11e0-8aab-f343b0394f39}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{7a544777-6961-11df-b3d0-0026b91e64aa}\Shell - "" = AutoRun
O33 - MountPoints2\{7a544777-6961-11df-b3d0-0026b91e64aa}\Shell\AutoRun\command - "" = F:\SETUP.EXE
O33 - MountPoints2\{7a544777-6961-11df-b3d0-0026b91e64aa}\Shell\configure\command - "" = F:\SETUP.EXE
O33 - MountPoints2\{7a544777-6961-11df-b3d0-0026b91e64aa}\Shell\install\command - "" = F:\SETUP.EXE
O33 - MountPoints2\{a19e5dfd-c854-11e1-b2fb-9fdb38baf374}\Shell - "" = AutoRun
O33 - MountPoints2\{a19e5dfd-c854-11e1-b2fb-9fdb38baf374}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{af1376ff-ee8d-11df-a0f5-f91dea7e5c2c}\Shell - "" = AutoRun
O33 - MountPoints2\{af1376ff-ee8d-11df-a0f5-f91dea7e5c2c}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{b385ea58-024e-11e1-b6ac-cb03f10a377b}\Shell - "" = AutoRun
O33 - MountPoints2\{b385ea58-024e-11e1-b6ac-cb03f10a377b}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{db1840f2-6fe0-11e0-951f-8ee784d24b26}\Shell - "" = AutoRun
O33 - MountPoints2\{db1840f2-6fe0-11e0-951f-8ee784d24b26}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-25 13:52:02 | 000,000,000 | ---D | C] -- C:\Users\PZ\Desktop\NOWY
[2012-07-24 21:22:39 | 000,000,000 | -HSD | C] -- C:\Windows\SysNative\%APPDATA%
[2012-07-24 20:49:57 | 000,801,336 | ---- | C] (Duplex Secure Ltd.) -- C:\Users\PZ\Desktop\SPTDinst-v181-x64.exe
[2012-07-24 20:17:08 | 000,694,833 | ---- | C] (Farbar) -- C:\Users\PZ\Desktop\FSS.exe
[2012-07-24 17:20:12 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\PZ\Desktop\OTL.exe
[2012-07-24 14:12:39 | 000,000,000 | ---D | C] -- C:\Users\PZ\AppData\Roaming\Malwarebytes
[2012-07-24 14:12:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012-07-24 14:12:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012-07-24 14:12:16 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012-07-24 14:12:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012-07-24 14:11:31 | 010,652,120 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Users\PZ\Desktop\mbam-setup-1.62.0.1300.exe
[2012-07-19 09:17:31 | 005,505,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2012-07-19 09:17:29 | 003,958,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2012-07-19 09:17:29 | 003,902,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2012-07-19 09:17:23 | 003,213,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
[2012-07-19 09:17:19 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll
[2012-07-19 09:17:19 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll
[2012-07-19 09:17:19 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrmemptylst.exe
[2012-07-19 09:17:12 | 001,460,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2012-07-19 09:17:12 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2012-07-19 09:16:55 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\PZ\*.tmp files -> C:\Users\PZ\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-07-25 15:49:14 | 000,014,816 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-07-25 15:49:14 | 000,014,816 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-07-25 15:41:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-07-25 15:41:06 | 3111,550,976 | -HS- | M] () -- C:\hiberfil.sys
[2012-07-25 15:35:26 | 000,980,480 | ---- | M] () -- C:\Users\PZ\Desktop\MicrosoftFixit50267.msi
[2012-07-25 15:27:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-07-25 14:08:12 | 000,096,770 | ---- | M] () -- C:\Users\PZ\Desktop\BB.jpg
[2012-07-25 13:48:40 | 000,000,392 | ---- | M] () -- C:\Users\PZ\Desktop\FIX.BAT
[2012-07-25 13:48:40 | 000,000,392 | ---- | M] () -- C:\FIX.BAT
[2012-07-24 20:50:01 | 000,801,336 | ---- | M] (Duplex Secure Ltd.) -- C:\Users\PZ\Desktop\SPTDinst-v181-x64.exe
[2012-07-24 20:17:42 | 000,694,833 | ---- | M] (Farbar) -- C:\Users\PZ\Desktop\FSS.exe
[2012-07-24 18:48:45 | 000,165,376 | ---- | M] () -- C:\Users\PZ\Desktop\SystemLook_x64.exe
[2012-07-24 17:20:32 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\PZ\Desktop\OTL.exe
[2012-07-24 14:12:19 | 000,001,069 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012-07-24 14:11:47 | 010,652,120 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Users\PZ\Desktop\mbam-setup-1.62.0.1300.exe
[2012-07-24 13:38:38 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2012-07-23 15:28:51 | 000,327,680 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2012-07-20 09:11:36 | 000,002,044 | ---- | M] () -- C:\Users\PZ\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2012-07-19 09:56:14 | 000,001,093 | ---- | M] () -- C:\Users\PZ\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk
[2012-07-19 09:51:31 | 003,025,616 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012-07-19 09:33:16 | 001,703,918 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012-07-19 09:33:16 | 000,745,858 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2012-07-19 09:33:16 | 000,658,544 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012-07-19 09:33:16 | 000,157,938 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2012-07-19 09:33:16 | 000,123,942 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012-07-18 10:38:00 | 003,932,214 | ---- | M] () -- C:\Users\PZ\Desktop\opakowanie.bmp
[2012-07-13 14:44:07 | 000,002,094 | -H-- | M] () -- C:\Users\PZ\Documents\Default.rdp
[2012-07-13 09:27:23 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012-07-13 09:27:23 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012-07-03 18:21:18 | 000,285,328 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2012-07-03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\PZ\*.tmp files -> C:\Users\PZ\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-07-25 15:35:24 | 000,980,480 | ---- | C] () -- C:\Users\PZ\Desktop\MicrosoftFixit50267.msi
[2012-07-25 14:08:12 | 000,096,770 | ---- | C] () -- C:\Users\PZ\Desktop\BB.jpg
[2012-07-25 13:49:02 | 000,000,392 | ---- | C] () -- C:\FIX.BAT
[2012-07-25 13:48:40 | 000,000,392 | ---- | C] () -- C:\Users\PZ\Desktop\FIX.BAT
[2012-07-24 18:48:45 | 000,165,376 | ---- | C] () -- C:\Users\PZ\Desktop\SystemLook_x64.exe
[2012-07-24 14:12:19 | 000,001,069 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012-07-18 10:38:00 | 003,932,214 | ---- | C] () -- C:\Users\PZ\Desktop\opakowanie.bmp
[2012-07-13 09:11:09 | 000,000,930 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-07-12 13:43:25 | 000,053,589 | ---- | C] () -- C:\Users\PZ\Desktop\Faktura VAT00000001_103.pdf
[2012-01-26 13:56:12 | 000,645,632 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2012-01-26 13:56:11 | 000,240,640 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2012-01-11 18:36:33 | 000,014,803 | ---- | C] () -- C:\Users\PZ\ZEBRA GK420d EPL 2
[2011-12-14 10:38:19 | 000,000,600 | ---- | C] () -- C:\Users\PZ\AppData\Local\PUTTY.RND
[2011-08-03 16:00:31 | 000,089,447 | ---- | C] () -- C:\Users\PZ\IMG_8762.jpg
[2011-08-03 16:00:00 | 000,007,579 | ---- | C] () -- C:\Users\PZ\IMG_8762.xmp
[2011-08-03 15:59:37 | 000,082,519 | ---- | C] () -- C:\Users\PZ\IMG_8763.jpg
[2011-08-03 15:57:55 | 000,007,580 | ---- | C] () -- C:\Users\PZ\IMG_8763.xmp
[2011-08-02 17:27:54 | 023,612,742 | ---- | C] () -- C:\Users\PZ\IMG_8763.CR2
[2011-08-02 17:27:03 | 023,442,390 | ---- | C] () -- C:\Users\PZ\IMG_8762.CR2
[2011-07-26 17:26:48 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2011-04-28 09:49:14 | 000,007,641 | ---- | C] () -- C:\Users\PZ\AppData\Roaming\XeroxFaxOptions.xml
[2011-04-28 09:48:58 | 000,172,032 | ---- | C] () -- C:\Windows\SysWow64\SecSNMP.dll
[2011-04-28 09:47:23 | 000,479,232 | ---- | C] () -- C:\Windows\ssndii.exe
[2011-04-28 09:47:02 | 000,110,592 | ---- | C] () -- C:\Windows\Wiainst.exe
[2011-03-17 11:50:11 | 000,003,584 | ---- | C] () -- C:\Users\PZ\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-02-17 00:45:18 | 000,007,597 | ---- | C] () -- C:\Users\PZ\AppData\Local\Resmon.ResmonCfg
[2011-01-29 17:00:22 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2011-01-29 17:00:22 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2011-01-29 17:00:22 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2011-01-29 17:00:22 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2010-10-28 18:20:52 | 001,691,073 | ---- | C] () -- C:\Users\PZ\plakat.jpg
[2010-10-28 11:18:34 | 000,000,701 | ---- | C] () -- C:\Users\PZ\AppData\Roaming\init.dll
[2010-10-28 11:18:34 | 000,000,006 | ---- | C] () -- C:\Users\PZ\AppData\Roaming\SYSTEM32.dll
[2010-10-28 11:18:24 | 000,000,701 | ---- | C] () -- C:\Users\PZ\AppData\Roaming\sound.dll
[2010-10-28 11:16:52 | 000,116,736 | ---- | C] () -- C:\Windows\SysWow64\redmonnt.dll
[2010-10-27 20:38:45 | 000,040,268 | ---- | C] () -- C:\Users\PZ\Print_data.PDF
[2010-10-16 11:48:48 | 002,625,572 | ---- | C] () -- C:\Users\PZ\okładka.jpg
[2010-10-07 09:34:43 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempae5132.html
[2010-10-06 10:32:59 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempQw4056.html
[2010-10-06 10:32:59 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Temptt4056.html
[2010-10-04 09:24:04 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempSy1256.html
[2010-10-04 09:24:04 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Temppk1256.html
[2010-10-01 09:59:18 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempNy6020.html
[2010-10-01 09:59:18 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempeV6020.html
[2010-10-01 09:58:36 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempAs4576.html
[2010-10-01 09:58:36 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempKe4576.html
[2010-09-30 09:32:40 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempJJ3104.html
[2010-09-30 09:32:40 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempDY3104.html
[2010-09-29 09:16:52 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempHT3092.html
[2010-09-29 09:16:52 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempzG3092.html
[2010-09-28 11:24:37 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TemphO1224.html
[2010-09-28 11:24:37 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempPP1224.html
[2010-09-24 09:50:29 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempJb5548.html
[2010-09-24 09:50:29 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempIT5548.html
[2010-09-23 10:00:42 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TemprW5204.html
[2010-09-23 10:00:42 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempWX5204.html
[2010-09-22 10:00:00 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempJj4436.html
[2010-09-22 10:00:00 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempvU4436.html
[2010-09-21 13:03:38 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempoZ4676.html
[2010-09-21 13:03:38 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempUQ4676.html
[2010-09-20 09:17:29 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempUs4124.html
[2010-09-20 09:17:29 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempmN4124.html
[2010-09-17 09:19:18 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempVm5240.html
[2010-09-17 09:19:18 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempaL5240.html
[2010-09-16 09:22:25 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempJh4740.html
[2010-09-15 09:14:33 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempZF3716.html
[2010-09-15 09:14:33 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempjl3716.html
[2010-09-14 09:00:49 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempOG3784.html
[2010-09-14 09:00:49 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempdO3784.html
[2010-09-13 11:42:06 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TemphI2304.html
[2010-09-13 11:42:06 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempKB2304.html
[2010-09-10 09:47:17 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempgs3348.html
[2010-09-10 09:47:17 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempJQ3348.html
[2010-09-09 09:25:10 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempIr1872.html
[2010-09-09 09:25:10 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Temphd1872.html
[2010-09-08 09:34:08 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempza5000.html
[2010-09-08 09:34:08 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempZC5000.html
[2010-09-07 12:52:19 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Temprz1616.html
[2010-09-07 12:52:19 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempGm1616.html
[2010-09-07 10:04:47 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempCa5860.html
[2010-09-06 09:13:50 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempnb4908.html
[2010-09-06 09:13:50 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempAu4908.html
[2010-09-03 10:12:31 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TemptA2480.html
[2010-09-03 10:12:31 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Temphq2480.html
[2010-09-01 09:34:54 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempNL2792.html
[2010-09-01 09:34:54 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempqo2792.html
[2010-08-31 09:13:55 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TemptA6080.html
[2010-08-31 09:13:55 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempnq6080.html
[2010-08-26 09:24:45 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempJy3284.html
[2010-08-25 09:41:05 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempts1040.html
[2010-08-25 09:41:05 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempoC1040.html
[2010-08-24 09:15:04 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempMvh940.html
[2010-08-23 09:23:25 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempeN1188.html
[2010-08-23 09:23:25 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempTA1188.html
[2010-08-20 09:41:31 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempya2584.html
[2010-08-20 09:41:31 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempwq2584.html
[2010-08-19 09:21:53 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempKQ4688.html
[2010-08-19 09:21:53 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempvh4688.html
[2010-08-18 15:01:36 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempbSG656.html
[2010-08-18 15:01:36 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempAMQ656.html
[2010-08-18 09:24:34 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempCo4848.html
[2010-08-18 09:24:34 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempTf4848.html
[2010-08-17 11:32:43 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempPw4876.html
[2010-08-17 11:32:43 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempvA4876.html
[2010-08-17 10:18:59 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempUf3600.html
[2010-08-17 10:18:59 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempIv3600.html
[2010-08-16 09:22:59 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempMf4952.html
[2010-08-16 09:22:59 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempAu4952.html
[2010-08-13 10:14:35 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Temprl3500.html
[2010-08-13 10:14:35 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempYb3500.html
[2010-08-12 09:18:20 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempgh2796.html
[2010-08-12 09:18:20 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempcl2796.html
[2010-08-11 09:02:44 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempzS1156.html
[2010-08-11 09:02:44 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempKx1156.html
[2010-08-10 09:19:43 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempJX4796.html
[2010-08-10 09:19:43 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempJd4796.html
[2010-08-09 09:07:41 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempBm4716.html
[2010-08-09 09:07:41 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempyv4716.html
[2010-08-06 09:38:41 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempIS5028.html
[2010-08-06 09:38:41 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempQN5028.html
[2010-08-05 12:15:00 | 022,233,362 | ---- | C] () -- C:\Windows\SysWow64\Foto Dalux_e-Dalux_uninstaller.exe
[2010-08-05 09:21:51 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempae4184.html
[2010-08-05 09:21:51 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempwP4184.html
[2010-08-04 14:10:04 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempIk3384.html
[2010-08-04 14:10:04 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempyO3384.html
[2010-08-04 13:32:46 | 000,000,255 | ---- | C] () -- C:\Windows\Brpfx04a.ini
[2010-08-04 13:32:46 | 000,000,094 | ---- | C] () -- C:\Windows\brpcfx.ini
[2010-08-04 13:30:46 | 000,000,000 | ---- | C] () -- C:\Windows\brdfxspd.dat
[2010-08-04 09:09:35 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempZE4700.html
[2010-08-04 09:09:35 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempEo4700.html
[2010-08-03 09:23:37 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempQN2776.html
[2010-08-03 09:23:37 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempWz2776.html
[2010-08-02 09:09:28 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempZN4148.html
[2010-08-02 09:09:28 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempeR4148.html
[2010-07-30 11:14:52 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempYJ5568.html
[2010-07-30 11:14:52 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempGn5568.html
[2010-07-29 09:35:27 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempmW3516.html
[2010-07-29 09:35:27 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TemplZ3516.html
[2010-07-28 09:37:25 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempYj2980.html
[2010-07-28 09:37:25 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempPE2980.html
[2010-07-27 10:06:14 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempkD5848.html
[2010-07-27 10:06:14 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempqB5848.html
[2010-07-27 10:05:43 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempHD6076.html
[2010-07-27 10:05:43 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempPj6076.html
[2010-07-27 10:01:19 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempdT4500.html
[2010-07-27 10:01:19 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempwW4500.html
[2010-07-26 09:57:20 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempAD5100.html
[2010-07-26 09:57:20 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempYB5100.html
[2010-07-23 13:32:49 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempeg5096.html
[2010-07-23 13:32:49 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempWH5096.html
[2010-07-23 09:19:15 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempbE4380.html
[2010-07-23 09:19:15 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempah4380.html
[2010-07-22 09:46:53 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempqn2460.html
[2010-07-22 09:46:53 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempZd2460.html
[2010-07-21 09:30:08 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TemphJ1528.html
[2010-07-21 09:30:08 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempcD1528.html
[2010-07-19 09:22:01 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TemprO2576.html
[2010-07-19 09:22:01 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempOF2576.html
[2010-07-16 08:59:50 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempaw4596.html
[2010-07-16 08:59:50 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempCO4596.html
[2010-07-15 09:18:25 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempDn2908.html
[2010-07-15 09:18:25 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempPD2908.html
[2010-07-14 09:18:25 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempMC4428.html
[2010-07-14 09:18:25 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempin4428.html
[2010-07-13 09:14:49 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempQS4944.html
[2010-07-13 09:14:49 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempkt4944.html
[2010-07-12 09:33:43 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempLe3932.html
[2010-07-10 13:08:15 | 026,734,088 | ---- | C] () -- C:\Users\PZ\okładka.psd
[2010-07-09 09:14:26 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempCXq788.html
[2010-07-09 09:14:26 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempkyu788.html
[2010-07-08 09:30:55 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempuX3120.html
[2010-07-07 09:33:38 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempRU1572.html
[2010-07-07 09:33:38 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempJr1572.html
[2010-07-06 09:13:09 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempeo5088.html
[2010-07-05 09:21:14 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempFMd712.html
[2010-07-05 09:21:14 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempRqz712.html
[2010-07-02 09:11:53 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempSO6084.html
[2010-07-02 09:11:53 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempnd6084.html
[2010-07-01 10:00:12 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempBf4124.html
[2010-07-01 10:00:12 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Templi4124.html
[2010-06-30 09:16:31 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempYma716.html
[2010-06-30 09:16:31 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempDTI716.html
[2010-06-29 13:34:40 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempDb5092.html
[2010-06-29 13:34:40 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempNL5092.html
[2010-06-29 09:38:34 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempyQ4316.html
[2010-06-29 09:38:34 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempzB4316.html
[2010-06-28 09:12:46 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempfl4736.html
[2010-06-28 09:12:46 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempCX4736.html
[2010-06-25 09:53:54 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempAW6072.html
[2010-06-25 09:53:54 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempmE6072.html
[2010-06-24 08:00:30 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempHQ4692.html
[2010-06-23 09:33:43 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TemplH2408.html
[2010-06-23 09:33:43 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempyG2408.html
[2010-06-22 10:22:57 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempaU1360.html
[2010-06-22 10:22:57 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempDE1360.html
[2010-06-22 09:05:51 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempiY4928.html
[2010-06-22 09:05:51 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempQs4928.html
[2010-06-21 09:08:33 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempyP5752.html
[2010-06-21 09:08:33 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempmy5752.html
[2010-06-18 11:35:25 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempfk3796.html
[2010-06-18 10:20:39 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempDN4476.html
[2010-06-18 10:20:39 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempQf4476.html
[2010-06-18 09:20:32 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Templq2468.html
[2010-06-18 09:20:32 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TemptS2468.html
[2010-06-17 09:22:16 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempvZ2624.html
[2010-06-17 09:22:16 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempbL2624.html
[2010-06-16 13:42:22 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempsc4208.html
[2010-06-16 13:42:22 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempWB4208.html
[2010-06-15 09:29:32 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempVg4400.html
[2010-06-15 09:29:32 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempNV4400.html
[2010-06-14 09:33:17 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempdw4224.html
[2010-06-14 09:33:17 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TemprE4224.html
[2010-06-11 09:13:55 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempVa1516.html
[2010-06-11 09:13:55 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempdD1516.html
[2010-06-10 12:10:38 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempAk2072.html
[2010-06-10 12:10:38 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempoz2072.html
[2010-06-09 09:58:01 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempVp6108.html
[2010-06-09 09:58:01 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempig6108.html
[2010-06-09 09:49:24 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempRp4920.html
[2010-06-09 09:49:24 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Templj4920.html
[2010-06-08 09:29:16 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempok4784.html
[2010-06-08 09:29:16 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempdA4784.html
[2010-06-07 09:25:59 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempKE4388.html
[2010-06-07 09:25:59 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempGv4388.html
[2010-06-02 09:23:58 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempDH4404.html
[2010-06-02 09:23:58 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempyx4404.html
[2010-06-01 11:32:03 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempnY4320.html
[2010-06-01 11:32:03 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempQh4320.html
[2010-05-28 09:17:32 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempYs4368.html
[2010-05-28 09:17:32 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempiQ4368.html
[2010-05-27 13:26:24 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempiV5072.html
[2010-05-27 13:26:24 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempSv5072.html
[2010-05-27 10:10:37 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempIx3340.html
[2010-05-27 10:10:37 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempyi3340.html
[2010-05-27 09:35:08 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\Tempsv3008.html
[2010-05-27 09:35:08 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempBP3008.html
[2010-05-27 09:23:21 | 000,002,432 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempBq3444.html
[2010-05-27 09:23:21 | 000,002,089 | ---- | C] () -- C:\Users\PZ\AppData\Local\TempCx3444.html
[2010-05-26 20:10:01 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat

< End of report >