OTL logfile created on: 8/5/2012 6:02:59 PM - Run 1
OTL by OldTimer - Version 3.2.56.0     Folder = C:\Users\Marie\Desktop
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1.75 Gb Total Physical Memory | 1.36 Gb Available Physical Memory | 77.60% Memory free
3.50 Gb Paging File | 3.13 Gb Available in Paging File | 89.39% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 100.00 Gb Total Space | 52.13 Gb Free Space | 52.13% Space Free | Partition Type: NTFS
Drive D: | 122.87 Gb Total Space | 45.38 Gb Free Space | 36.93% Space Free | Partition Type: NTFS
Drive E: | 1.79 Gb Total Space | 1.71 Gb Free Space | 95.16% Space Free | Partition Type: NTFS
Drive G: | 241.50 Mb Total Space | 239.64 Mb Free Space | 99.23% Space Free | Partition Type: FAT
 
Computer Name: MARIE-KOMPUTER | User Name: Marie | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012/08/05 18:00:49 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Marie\Desktop\OTL.exe
PRC - [2012/06/22 21:17:56 | 003,075,936 | ---- | M] (Piriform Ltd) -- C:\Program Files\CCleaner\CCleaner.exe
PRC - [2012/03/26 17:03:40 | 000,011,552 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012/08/04 20:08:33 | 001,670,144 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\6c59a14a23f734093e80d6093e25302a\Microsoft.VisualBasic.ni.dll
MOD - [2012/08/03 06:15:01 | 012,436,480 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll
MOD - [2012/08/03 06:13:39 | 001,591,808 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll
MOD - [2012/08/02 22:11:51 | 005,452,800 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll
MOD - [2012/08/02 22:11:00 | 000,971,264 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
MOD - [2012/08/02 22:10:40 | 007,967,232 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012/08/02 22:08:57 | 011,492,864 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2012/06/23 01:26:58 | 000,036,864 | ---- | M] () -- C:\Program Files\CCleaner\Lang\lang-1045.dll
MOD - [2011/03/17 00:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2010/09/02 13:08:00 | 000,118,784 | ---- | M] () -- C:\Program Files\ASUS\Asus WebStorage\3.0.108.222\AsusWSShellExt.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2012/07/30 20:56:04 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/07/05 18:41:46 | 003,048,136 | ---- | M] (Skype Technologies S.A.) [Auto | Stopped] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012/06/05 15:17:44 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/03/26 17:03:40 | 000,214,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2012/03/26 17:03:40 | 000,011,552 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2011/06/28 23:52:56 | 000,428,200 | ---- | M] (Avira GmbH) [Auto | Stopped] -- C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe -- (AntiVirWebService)
SRV - [2011/06/28 23:52:54 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Stopped] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/06/12 11:15:00 | 031,125,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2011/05/22 16:38:20 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Stopped] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010/11/15 21:55:25 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2009/09/15 03:05:56 | 000,044,312 | ---- | M] () [Auto | Stopped] -- C:\Program Files\ASUS\Game Park\GameConsole\OberonGameConsoleService.exe -- (OberonGameConsoleService)
SRV - [2009/08/19 03:35:56 | 000,219,136 | ---- | M] () [Auto | Stopped] -- C:\Windows\System32\AsusService.exe -- (AsusService)
SRV - [2009/08/03 02:05:24 | 000,582,944 | ---- | M] (Broadcom Corporation.) [Auto | Stopped] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)
SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | System | Stopped] -- system32\drivers\archlp.sys -- (archlp)
DRV - [2012/03/20 20:44:12 | 000,074,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
DRV - [2011/06/28 23:53:10 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2011/06/28 23:53:10 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010/11/20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/06/17 14:27:22 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010/01/29 02:46:18 | 000,997,408 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rtl8192se.sys -- (rtl8192se)
DRV - [2010/01/04 10:30:56 | 000,112,640 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2010/01/04 10:30:56 | 000,102,912 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2010/01/04 10:30:56 | 000,101,120 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbdev.sys -- (hwusbdev)
DRV - [2009/10/05 19:31:50 | 001,221,632 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2009/08/11 09:19:18 | 000,066,592 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2009/08/06 11:16:00 | 009,824,000 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2009/07/27 09:06:45 | 000,051,712 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\L1C62x86.sys -- (L1C)
DRV - [2009/07/20 11:29:40 | 000,013,880 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2009/07/14 01:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2009/07/06 04:48:02 | 000,011,448 | ---- | M] () [Kernel | System | Stopped] -- C:\Windows\System32\drivers\AsUpIO.sys -- (AsUpIO)
DRV - [2009/07/01 06:46:20 | 000,043,944 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\btusbflt.sys -- (btusbflt)
DRV - [2009/06/28 18:36:36 | 000,017,920 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvsmu.sys -- (nvsmu)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://eeepc.asus.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://eeepc.asus.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\..\SearchScopes,DefaultScope = {63A6C709-233F-4DDB-9223-55EB6F57949A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{57557EC7-FC38-4AF6-9B2B-0886384D66CE}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=AVR-W1&o=100000080&src=kw&q={searchTerms}&locale=&apn_ptnrs=JM&apn_dtid=YYYYYYYYPL&apn_uid=179D6BB4-D998-4DD1-981C-4F8AD4E844AA&apn_sauid=468EEB06-EE40-4857-A3EE-14152C4001DA
IE - HKCU\..\SearchScopes\{63A6C709-233F-4DDB-9223-55EB6F57949A}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={sear
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=AVR-W1&o=100000080&locale=en_US&apn_uid=179D6BB4-D998-4DD1-981C-4F8AD4E844AA&apn_ptnrs=JM&apn_sauid=468EEB06-EE40-4857-A3EE-14152C4001DA&apn_dtid=YYYYYYYYPL&q="
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8064.0206: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/07/30 20:56:07 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/07/01 22:02:23 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/07/30 20:56:07 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/07/01 22:02:23 | 000,000,000 | ---D | M]
 
[2010/08/05 22:09:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marie\AppData\Roaming\mozilla\Extensions
[2012/05/03 21:43:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marie\AppData\Roaming\mozilla\Firefox\Profiles\dmdphx0l.default\extensions
[2011/11/07 20:11:10 | 000,000,000 | ---D | M] ("Avira SearchFree Toolbar plus WebGuard") -- C:\Users\Marie\AppData\Roaming\mozilla\Firefox\Profiles\dmdphx0l.default\extensions\toolbar@ask.com
[2011/11/07 20:11:08 | 000,002,578 | ---- | M] () -- C:\Users\Marie\AppData\Roaming\Mozilla\Firefox\Profiles\dmdphx0l.default\searchplugins\askcom.xml
[2011/07/17 12:09:25 | 000,006,941 | ---- | M] () -- C:\Users\Marie\AppData\Roaming\Mozilla\Firefox\Profiles\dmdphx0l.default\searchplugins\wyszukiwarka-onetpl.xml
[2012/06/23 22:02:57 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012/07/27 17:55:04 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012/07/30 20:56:07 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/02/27 23:45:39 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012/06/18 06:08:45 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012/06/18 06:08:45 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012/06/18 06:08:45 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012/06/18 06:08:45 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012/06/18 06:08:45 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012/06/18 06:08:45 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2009/06/10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (ArcSoft Video Helper) - {4E18E9A4-95B3-4F8B-AE3B-AB7478DE92EE} - C:\Program Files\ArcSoft\TotalMedia Theatre 3\Codec\ArcIEVideoUp.dll (ArcSoft Inc.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Avira SearchFree Toolbar plus WebGuard) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar plus WebGuard) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Avira SearchFree Toolbar plus WebGuard) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe (ASUS)
O4 - HKLM..\Run: [ASUSWebStorage] C:\Program Files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe (ecareme)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [DTRun] C:\Program Files\ArcSoft\TotalMedia Theatre 3\uDTRun.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe ()
O4 - HKLM..\Run: [EeeStorageBackup] C:\Program Files\ASUS\Asus WebStorage\BackupService.exe (ECAREME)
O4 - HKLM..\Run: [HotkeyMon] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [HotkeyService] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [iPlusManager] C:\Program Files\iPlus\iPlusChecker.exe ()
O4 - HKLM..\Run: [LivCam] C:\Program Files\ASUS\LivCam\LivCam.exe (ASUSTek)
O4 - HKLM..\Run: [LiveUpdate] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [MFARestart] "C:\ProgramData\MFAData\pack\avgrunasx.exe" /usereg File not found
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [OOBESetup] C:\Program Files\asus\OOBERegBackup\OOBERegBackup.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [SuperHybridEngine] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [SynAsusAcpi] C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe (Synaptics Incorporated)
O4 - HKCU..\Run: [ALLUpdate] "C:\Program Files\ALLPlayer\ALLUpdate.exe" "sleep" File not found
O4 - HKCU..\Run: [OfficeSyncProcess] C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation)
O4 - HKCU..\Run: [PC Remote Server] C:\Program Files\PC Remote\PC Remote\PCRemote.exe (PC Remote)
O4 - HKCU..\Run: [Wwanpref] C:\Users\Marie\AppData\Local\Microsoft\Windows\1906\Wwanpref.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Wyślij &do programu OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{25E858B1-CC1A-4C8D-B152-8D2E1A969825}: DhcpNameServer = 192.168.2.1 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8703C408-6733-40CE-ACAF-AA3EA3020905}: DhcpNameServer = 212.2.96.53 212.2.96.54
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8C959E2D-E854-48F2-869B-FFE12FADF099}: DhcpNameServer = 212.2.96.54 212.2.96.52
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B3C8BD8F-3FFC-43DB-9DAC-1C50F4FAA797}: DhcpNameServer = 62.179.1.63 62.179.1.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C4D56874-4541-4500-9760-5725D5CAA494}: DhcpNameServer = 212.2.96.53 212.2.96.51
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D5FB8029-60B4-466A-B4D6-EA5E3398CF8D}: DhcpNameServer = 212.2.96.53 212.2.96.51
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{0a97cd69-a0c8-11df-9301-1c4bd60cef37}\Shell - "" = AutoRun
O33 - MountPoints2\{0a97cd69-a0c8-11df-9301-1c4bd60cef37}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{15806c4c-af70-11df-a0bc-485b3963d59c}\Shell - "" = AutoRun
O33 - MountPoints2\{15806c4c-af70-11df-a0bc-485b3963d59c}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{a165886f-a0ca-11df-9b00-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{a165886f-a0ca-11df-9b00-806e6f6e6963}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{bd2c2edf-fb33-11e0-b5aa-001e101fb4df}\Shell - "" = AutoRun
O33 - MountPoints2\{bd2c2edf-fb33-11e0-b5aa-001e101fb4df}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{bd2c2f01-fb33-11e0-b5aa-001e101fb4df}\Shell - "" = AutoRun
O33 - MountPoints2\{bd2c2f01-fb33-11e0-b5aa-001e101fb4df}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{cdad91f3-a128-11df-a5f4-1c4bd60cef37}\Shell - "" = AutoRun
O33 - MountPoints2\{cdad91f3-a128-11df-a5f4-1c4bd60cef37}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 7 Days ==========[/color]
 
[2012/08/05 18:02:15 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Marie\Desktop\OTL.exe
[2012/08/05 17:41:33 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012/08/05 17:40:58 | 003,889,704 | ---- | C] (Piriform Ltd) -- C:\Users\Marie\Desktop\ccsetup320.exe
[2012/08/05 17:25:22 | 000,000,000 | ---D | C] -- C:\Users\Marie\AppData\Roaming\hellomoto
 
[color=#E56717]========== Files - Modified Within 7 Days ==========[/color]
 
[2012/08/05 18:00:49 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Marie\Desktop\OTL.exe
[2012/08/05 17:41:34 | 000,000,969 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012/08/05 17:41:13 | 000,703,122 | ---- | M] () -- C:\windows\System32\perfh015.dat
[2012/08/05 17:41:13 | 000,620,814 | ---- | M] () -- C:\windows\System32\perfh009.dat
[2012/08/05 17:41:13 | 000,137,040 | ---- | M] () -- C:\windows\System32\perfc015.dat
[2012/08/05 17:41:13 | 000,108,034 | ---- | M] () -- C:\windows\System32\perfc009.dat
[2012/08/05 17:37:31 | 003,889,704 | ---- | M] (Piriform Ltd) -- C:\Users\Marie\Desktop\ccsetup320.exe
[2012/08/05 17:36:39 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2012/08/05 17:36:31 | 1408,638,976 | -HS- | M] () -- C:\hiberfil.sys
[2012/08/04 08:57:27 | 000,009,920 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/08/04 08:57:27 | 000,009,920 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/07/30 19:35:31 | 000,001,124 | ---- | M] () -- C:\Users\Public\Desktop\Avira APC.lnk
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012/08/05 17:41:34 | 000,000,969 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012/07/30 19:35:31 | 000,001,124 | ---- | C] () -- C:\Users\Public\Desktop\Avira APC.lnk
[2012/07/29 06:55:40 | 000,020,480 | ---- | C] () -- C:\Users\Marie\AppData\Roaming\client.db
[2012/04/25 21:44:14 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempgT5812.html
[2012/04/25 21:44:14 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempWr5812.html
[2012/01/23 22:27:32 | 000,011,761 | ---- | C] () -- C:\Users\Marie\AppData\Local\unins000.msg
[2012/01/23 22:27:31 | 000,707,504 | ---- | C] () -- C:\Users\Marie\AppData\Local\unins000.exe
[2012/01/23 22:27:31 | 000,002,162 | ---- | C] () -- C:\Users\Marie\AppData\Local\unins000.dat
[2011/07/01 22:50:13 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TemphnL124.html
[2011/07/01 22:50:13 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempwsE124.html
[2011/04/24 08:56:12 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempiO4076.html
[2011/04/24 08:56:12 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempyD4076.html
[2011/04/23 07:25:43 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempqT3108.html
[2011/04/23 07:25:43 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempTG3108.html
[2011/04/22 14:23:14 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempPy3984.html
[2011/04/22 14:23:14 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempCX3984.html
[2011/04/22 08:31:30 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempxa4084.html
[2011/04/22 08:31:30 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempnj4084.html
[2011/04/21 11:33:48 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempqH2364.html
[2011/04/21 11:33:48 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempfy2364.html
[2011/04/19 19:43:37 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempcQ4080.html
[2011/04/19 19:43:37 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempCE4080.html
[2011/04/17 09:48:20 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempdJ2996.html
[2011/04/17 09:48:20 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempDt2996.html
[2011/04/17 08:40:18 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempxv3680.html
[2011/04/17 08:40:18 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempac3680.html
[2011/04/16 21:17:57 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempBG3580.html
[2011/04/16 21:17:57 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempRE3580.html
[2011/04/16 13:26:19 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TemprT3588.html
[2011/04/16 13:26:19 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempyV3588.html
[2011/04/16 07:20:13 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempWb3816.html
[2011/04/16 07:20:13 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempOl3816.html
[2011/04/15 21:08:21 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempmYT320.html
[2011/04/15 21:08:21 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TemphvZ320.html
[2011/04/15 19:10:58 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempJX3704.html
[2011/04/15 19:10:58 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempSm3704.html
[2011/04/14 19:56:43 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Temppv3740.html
[2011/04/14 19:56:43 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempBg3740.html
[2011/04/13 19:45:21 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempjI3728.html
[2011/04/13 19:45:21 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempoc3728.html
[2011/04/12 18:34:10 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempir3980.html
[2011/04/12 18:34:10 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempUL3980.html
[2011/04/11 19:47:34 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempsp3640.html
[2011/04/11 19:47:34 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempVw3640.html
[2011/04/10 08:27:11 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempKx3872.html
[2011/04/10 08:27:11 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempNb3872.html
[2011/04/09 07:23:24 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempic3608.html
[2011/04/09 07:23:24 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempsh3608.html
[2011/04/08 18:17:39 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Temptu3588.html
[2011/04/08 18:17:39 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempTR3588.html
[2011/04/07 22:36:54 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempdz3720.html
[2011/04/07 22:36:54 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempdE3720.html
[2011/04/07 17:01:50 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempOF3744.html
[2011/04/07 17:01:50 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Temppp3744.html
[2011/04/06 18:54:56 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempUH3764.html
[2011/04/06 18:54:56 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TemptU3764.html
[2011/04/05 19:22:23 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempzK1864.html
[2011/04/05 19:22:23 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempkR1864.html
[2011/04/04 19:07:41 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempNT3944.html
[2011/04/04 19:07:41 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempLr3944.html
[2011/04/03 21:45:04 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TemppI3736.html
[2011/04/03 21:45:04 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempoi3736.html
[2011/04/02 21:43:43 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TemprS3896.html
[2011/04/02 21:43:43 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempqn3896.html
[2011/04/02 07:40:07 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempVH3692.html
[2011/04/02 07:40:07 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TemptN3692.html
[2011/04/01 19:05:51 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempWT3528.html
[2011/04/01 19:05:51 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempzT3528.html
[2011/03/31 18:58:55 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempyM3368.html
[2011/03/31 18:58:55 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempks3368.html
[2011/03/30 20:14:59 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempvV3868.html
[2011/03/30 20:14:59 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TemppR3868.html
[2011/03/30 11:10:00 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempcC3304.html
[2011/03/30 11:10:00 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempLp3304.html
[2011/03/29 18:15:54 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempsp3444.html
[2011/03/29 18:15:54 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempSl3444.html
[2011/03/28 20:02:22 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempmS3564.html
[2011/03/28 20:02:22 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempNU3564.html
[2011/03/27 06:47:50 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempIW3728.html
[2011/03/27 06:47:50 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempbr3728.html
[2011/03/26 08:54:47 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempja3504.html
[2011/03/26 08:54:47 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempmP3504.html
[2011/03/25 20:28:55 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempqx3588.html
[2011/03/25 20:28:55 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempbX3588.html
[2011/03/24 19:33:51 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempJs3648.html
[2011/03/24 19:33:51 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempkw3648.html
[2011/03/23 18:52:46 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempAd3488.html
[2011/03/23 18:52:46 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempeO3488.html
[2011/03/22 23:24:19 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempVR3008.html
[2011/03/22 23:24:19 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempAN3008.html
[2011/03/22 19:49:47 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempdw3556.html
[2011/03/22 19:49:47 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempMU3556.html
[2011/03/22 07:38:30 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempDs3556.html
[2011/03/22 07:38:30 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TemplU3556.html
[2011/03/21 21:41:09 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempGw2212.html
[2011/03/21 21:41:09 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempvb2212.html
[2011/03/20 17:19:38 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempZP3448.html
[2011/03/20 17:19:38 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TemplK3448.html
[2011/03/20 08:38:48 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempbZ3792.html
[2011/03/20 08:38:48 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempNT3792.html
[2011/03/20 00:07:47 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TemptX3644.html
[2011/03/20 00:07:47 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempHZ3644.html
[2011/03/19 17:00:27 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempRI3864.html
[2011/03/19 17:00:26 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempjT3864.html
[2011/03/19 08:33:02 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempwm3556.html
[2011/03/19 08:33:02 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempYS3556.html
[2011/03/18 19:18:43 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempnk3548.html
[2011/03/18 19:18:43 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempRg3548.html
[2011/03/17 18:43:22 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempJA3580.html
[2011/03/17 18:43:22 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempgQ3580.html
[2011/03/16 19:23:59 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempkL3784.html
[2011/03/16 19:23:59 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempBL3784.html
[2011/03/15 18:39:20 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempFS3684.html
[2011/03/15 18:39:20 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempgD3684.html
[2011/03/13 16:39:44 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Temptp3872.html
[2011/03/13 16:39:44 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempbN3872.html
[2011/03/13 16:09:02 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempCw3672.html
[2011/03/13 16:09:02 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempLC3672.html
[2011/03/13 08:55:22 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempJg2120.html
[2011/03/13 08:55:22 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempZT2120.html
[2011/03/12 13:35:05 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempep3652.html
[2011/03/12 13:35:05 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempCj3652.html
[2011/03/12 08:17:07 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempRl3648.html
[2011/03/12 08:17:07 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempPR3648.html
[2011/03/11 19:31:07 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempvA3792.html
[2011/03/11 19:31:07 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempbT3792.html
[2011/03/10 19:25:56 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempQD3584.html
[2011/03/10 19:25:56 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempqb3584.html
[2011/03/09 18:49:46 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempkv3712.html
[2011/03/09 18:49:46 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempza3712.html
[2011/03/08 19:31:24 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempwP3752.html
[2011/03/08 19:31:24 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempKI3752.html
[2011/03/07 19:01:45 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempyW3760.html
[2011/03/07 19:01:45 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempSV3760.html
[2011/03/06 17:54:21 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempvT3552.html
[2011/03/06 17:54:21 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempFz3552.html
[2011/03/05 22:02:27 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempNn3736.html
[2011/03/05 22:02:27 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempLb3736.html
[2011/03/04 19:33:10 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempVd3572.html
[2011/03/04 19:33:10 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempgl3572.html
[2011/03/03 18:50:31 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempOt3292.html
[2011/03/03 18:50:31 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempNl3292.html
[2011/03/02 19:36:22 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempVh3580.html
[2011/03/02 19:36:22 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Temped3580.html
[2011/03/01 20:43:57 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Templp3576.html
[2011/03/01 20:43:57 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempTl3576.html
[2011/02/28 19:51:29 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempLS3964.html
[2011/02/28 19:51:29 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempRT3964.html
[2011/02/27 22:35:58 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempki3612.html
[2011/02/27 22:35:58 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempSO3612.html
[2011/02/27 19:03:47 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempFS3744.html
[2011/02/27 19:03:47 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempjz3744.html
[2011/02/27 08:43:13 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempih3756.html
[2011/02/27 08:43:13 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempkD3756.html
[2011/02/26 15:07:56 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempoR3892.html
[2011/02/26 15:07:56 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempOO3892.html
[2011/02/26 14:58:03 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempEY3484.html
[2011/02/26 14:58:03 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempoh3484.html
[2011/02/25 21:36:52 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempEt3780.html
[2011/02/25 21:36:52 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempjb3780.html
[2011/02/24 20:40:11 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempXr3732.html
[2011/02/24 20:40:11 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempDx3732.html
[2011/02/24 19:26:27 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempBZ3812.html
[2011/02/24 19:26:27 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempSQ3812.html
[2011/02/22 19:43:38 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempSv1328.html
[2011/02/22 19:43:38 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempig1328.html
[2011/02/21 18:47:18 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempUV3828.html
[2011/02/21 18:47:18 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempOX3828.html
[2011/02/20 17:28:40 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempuK3680.html
[2011/02/20 17:28:40 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempNJ3680.html
[2011/02/19 08:35:02 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempDg3764.html
[2011/02/19 08:35:02 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempTd3764.html
[2011/02/18 19:28:54 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempsr3812.html
[2011/02/18 19:28:54 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempfP3812.html
[2011/02/17 20:08:02 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempqS3508.html
[2011/02/17 20:08:02 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempiD3508.html
[2011/02/16 18:49:19 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempeR3684.html
[2011/02/16 18:49:19 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempSD3684.html
[2011/02/15 18:53:22 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempGP3624.html
[2011/02/15 18:53:22 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempMF3624.html
[2011/02/14 19:04:37 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempps2472.html
[2011/02/14 19:04:37 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TemplY2472.html
[2011/02/14 00:13:24 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempIS3728.html
[2011/02/14 00:13:24 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempuS3728.html
[2011/02/13 20:52:39 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempbI3620.html
[2011/02/13 20:52:39 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempxA3620.html
[2011/02/13 09:00:25 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempNd3684.html
[2011/02/12 13:50:22 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempEt2952.html
[2011/02/12 13:50:22 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempeE2952.html
[2011/02/12 12:47:06 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempkk3716.html
[2011/02/12 12:47:06 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempqJ3716.html
[2011/02/11 18:35:23 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Temple1380.html
[2011/02/11 18:35:23 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempvY1380.html
[2011/02/10 23:33:10 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempHQ3792.html
[2011/02/10 23:33:10 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempPK3792.html
[2011/02/10 21:48:05 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Temppk3496.html
[2011/02/10 21:48:05 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempMs3496.html
[2011/02/09 21:03:54 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempvr3516.html
[2011/02/09 21:03:54 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempfv3516.html
[2011/02/08 21:43:44 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TemptS3840.html
[2011/02/08 21:43:44 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempeJ3840.html
[2011/02/07 20:17:11 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempTL3740.html
[2011/02/07 20:17:11 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Temply3740.html
[2011/02/06 20:28:05 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempNp3756.html
[2011/02/06 20:28:05 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempAU3756.html
[2011/02/06 17:59:17 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempAo3880.html
[2011/02/06 17:59:17 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempfJ3880.html
[2011/02/06 16:47:02 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempVL3524.html
[2011/02/06 16:47:02 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempcV3524.html
[2011/02/06 09:48:43 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempTV3784.html
[2011/02/06 09:48:43 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempoZ3784.html
[2011/02/05 14:54:11 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempdb3776.html
[2011/02/05 14:54:11 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempNw3776.html
[2011/02/03 20:42:55 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempVd3688.html
[2011/02/03 20:42:55 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempur3688.html
[2011/02/02 19:44:37 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Temppg3744.html
[2011/02/02 19:44:36 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempKi3744.html
[2011/02/01 20:14:47 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempMs3848.html
[2011/02/01 20:14:46 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Temptt3848.html
[2011/01/31 19:33:58 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempvC3880.html
[2011/01/31 19:33:58 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempop3880.html
[2011/01/30 16:39:37 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempBC4036.html
[2011/01/30 16:39:37 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempdG4036.html
[2011/01/30 11:54:49 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempZi3596.html
[2011/01/30 11:54:49 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempKY3596.html
[2011/01/30 00:54:33 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempKv3528.html
[2011/01/30 00:54:33 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempFx3528.html
[2011/01/29 17:25:36 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempCc3620.html
[2011/01/29 17:25:36 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempYI3620.html
[2011/01/28 19:42:29 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempgj3844.html
[2011/01/28 19:42:29 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempmF3844.html
[2011/01/25 23:06:19 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempBv3912.html
[2011/01/25 23:06:19 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempHh3912.html
[2011/01/24 20:48:01 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempQS3800.html
[2011/01/24 20:48:01 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempBe3800.html
[2011/01/23 09:44:59 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempIW2060.html
[2011/01/23 09:44:58 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempsu2060.html
[2011/01/22 08:13:46 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempoT3820.html
[2011/01/22 08:13:46 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempMc3820.html
[2011/01/21 20:16:32 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempnk5400.html
[2011/01/21 20:16:32 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempia5400.html
[2011/01/15 11:06:11 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempRA6092.html
[2011/01/15 11:06:11 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempUj6092.html
[2011/01/14 14:15:44 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempBo5912.html
[2011/01/14 14:15:44 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempAs5912.html
[2011/01/13 19:55:39 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempoD3448.html
[2011/01/13 19:55:39 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempNM3448.html
[2010/12/25 14:47:48 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempFY5996.html
[2010/12/24 15:21:12 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempQC5556.html
[2010/11/12 21:04:11 | 000,000,112 | ---- | C] () -- C:\Users\Marie\AppData\Roaming\wklnhst.dat
[2010/10/31 19:13:03 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempIM5072.html
[2010/10/31 17:28:10 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempHX4884.html
[2010/10/31 15:39:51 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TemprO2396.html
[2010/10/31 09:54:53 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempdq4920.html
[2010/10/30 22:35:25 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempWs1244.html
[2010/10/30 17:29:11 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempfQ3368.html
[2010/09/07 20:43:34 | 000,006,144 | ---- | C] () -- C:\windows\System32\drivers\ASUSHWIO.SYS
[2010/09/01 20:00:09 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TemphF5876.html
[2010/09/01 13:49:57 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempsy4748.html
[2010/08/31 21:15:58 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempHw2000.html
[2010/08/31 10:56:01 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempqv1152.html
[2010/08/29 15:44:46 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Templb2304.html
[2010/08/28 18:54:41 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempsA4576.html
[2010/08/28 18:54:41 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempBT4576.html
[2010/08/25 17:51:51 | 000,007,168 | ---- | C] () -- C:\Users\Marie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/08/25 13:28:46 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempnC1028.html
[2010/08/24 22:11:48 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempBV3360.html
[2010/08/09 21:27:56 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010/08/09 08:37:04 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempaj1940.html
[2010/08/08 21:23:29 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempga5324.html
[2010/08/08 20:28:25 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempeC5660.html
[2010/08/08 10:34:36 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TemprM2960.html
[2010/08/07 18:23:30 | 000,002,089 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempXk3060.html
[2010/08/07 18:23:29 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempge3060.html
[2010/08/07 15:44:19 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempBG2920.html
[2010/08/07 09:53:45 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\Tempgc5508.html
[2010/08/06 21:55:20 | 000,172,016 | ---- | C] () -- C:\windows\hpoins27.dat
[2010/08/06 21:55:20 | 000,000,442 | ---- | C] () -- C:\windows\hpomdl27.dat
[2010/08/06 17:58:43 | 000,002,432 | ---- | C] () -- C:\Users\Marie\AppData\Local\TempkZ2560.html
[2009/11/04 01:23:05 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 144 bytes -> C:\ProgramData\Temp:AB689DEA

< End of report >