OTL logfile created on: 2012-08-06 22:34:23 - Run 1
OTL by OldTimer - Version 3.2.56.0     Folder = C:\Users\Grzesiek\Desktop
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,40 Gb Available Physical Memory | 70,00% Memory free
4,00 Gb Paging File | 3,43 Gb Available in Paging File | 85,84% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 146,48 Gb Total Space | 84,25 Gb Free Space | 57,51% Space Free | Partition Type: NTFS
Drive D: | 48,83 Gb Total Space | 8,12 Gb Free Space | 16,62% Space Free | Partition Type: NTFS
Drive E: | 48,83 Gb Total Space | 15,13 Gb Free Space | 30,99% Space Free | Partition Type: NTFS
Drive F: | 51,39 Gb Total Space | 34,34 Gb Free Space | 66,84% Space Free | Partition Type: NTFS
Drive G: | 156,25 Gb Total Space | 82,84 Gb Free Space | 53,02% Space Free | Partition Type: NTFS
Drive H: | 163,02 Gb Total Space | 32,03 Gb Free Space | 19,65% Space Free | Partition Type: NTFS
 
Computer Name: GRZESIEKXD | User Name: Grzesiek | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-08-06 22:05:34 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Grzesiek\Desktop\OTL.exe
PRC - [2011-02-25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2012-07-09 19:46:16 | 000,935,008 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe -- (vToolbarUpdater11.2.0)
SRV - [2012-06-27 12:29:22 | 001,385,896 | ---- | M] (LogMeIn Inc.) [Auto | Stopped] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012-06-07 19:12:14 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-04-06 04:15:50 | 000,217,600 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2012-04-04 07:53:50 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012-03-09 19:06:15 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Grzesiek\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | Auto | Stopped] -- C:\Users\Grzesiek\AppData\Local\Temp\3019.sys -- (3019)
DRV - [2012-06-28 11:03:18 | 000,023,456 | ---- | M] (Phoenix Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\DrvAgent32.sys -- (DrvAgent32)
DRV - [2012-06-16 15:41:45 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012-04-06 07:21:10 | 009,334,784 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2012-04-06 03:10:22 | 000,275,968 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2012-02-23 14:31:58 | 000,086,544 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AtihdW73.sys -- (AtiHDAudioService)
DRV - [2010-11-20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010-11-20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010-11-20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010-11-20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010-11-20 12:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010-11-20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010-11-20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010-05-05 23:21:42 | 000,108,560 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2009-07-14 00:02:47 | 000,050,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\L1C62x86.sys -- (L1C)
DRV - [2009-03-18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.v9.com/fft/fft_1332675329_266337
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://isearch.avg.com/?cid={367E9912-F7F3-4FDF-8A85-1D0359CA28D5}&mid=6a9e21b892de47d0a945bdb90f0c24bf-ce6d43fb4232988b0d097ef1f6dc0805a1bc3325&lang=pl&ds=gm011&pr=sa&d=2012-05-13 08:24:34&v=11.0.0.9&sap=hp
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{73A66782-E1D3-4737-B915-05DC91382CD9}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=FF&o=14594&src=kw&q={searchTerms}&locale=&apn_ptnrs=FV&apn_dtid=YYYYYYNHPL&apn_uid=05793c75-b097-4fae-974e-72a1e6cd5e54&apn_sauid=5F52A827-8C73-4019-A4D8-DC73E819D3A6
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={367E9912-F7F3-4FDF-8A85-1D0359CA28D5}&mid=6a9e21b892de47d0a945bdb90f0c24bf-ce6d43fb4232988b0d097ef1f6dc0805a1bc3325&lang=pl&ds=gm011&pr=sa&d=2012-05-13 08:24:34&v=11.0.0.9&sap=dsp&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\11.1.0.12\ [2012-07-09 19:46:22 | 000,000,000 | ---D | M]
 
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: https://www.google.pl/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Grzesiek\AppData\Local\Google\Chrome\Application\17.0.963.56\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Grzesiek\AppData\Local\Google\Chrome\Application\17.0.963.56\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Grzesiek\AppData\Local\Google\Chrome\Application\17.0.963.56\gcswf32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Motive Plugin (Enabled) = C:\Program Files (x86)\Common Files\Motive\npMotive.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Szukaj w Google = C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Battlefield Play4Free = C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkejhbcdagodjdndmfnhaibnealjonei\1.0.80.2_0\
CHR - Extension: SweetIM for Facebook = C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of 
CHR - Extension: SweetIM for Facebook = C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\
CHR - Extension: Gmail = C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: YouTube = C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Szukaj w Google = C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Battlefield Play4Free = C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkejhbcdagodjdndmfnhaibnealjonei\1.0.80.2_0\
CHR - Extension: SweetIM for Facebook = C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of 
CHR - Extension: SweetIM for Facebook = C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\
CHR - Extension: Gmail = C:\Users\Grzesiek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2012-08-06 22:25:45 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll ()
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll ()
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKLM..\Run: [AMD AVT] C:\Windows\System32\cmd.exe (Microsoft Corporation)
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [Chew7Hale] C:\Windows\System32\hale.exe ()
O4 - HKLM..\Run: [ExpressFiles] C:\Program Files\ExpressFiles\ExpressFiles.exe (http://www.express-files.com/)
O4 - HKLM..\Run: [HTV Agent] G:\Admax Keylogger\HTV\HTV.exe File not found
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [PsCfg32] "G:\Szpieg\PSCFG32.EXE" /silent File not found
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [TimeDateMUICallback] C:\Users\Grzesiek\AppData\Local\Microsoft\Windows\2455\TimeDateMUICallback.exe ()
O4 - HKLM..\Run: [vProt] C:\Program Files\AVG Secure Search\vprot.exe ()
O4 - HKCU..\Run: [DAEMON Tools Lite] G:\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Microsoft Windows Manager] C:\Users\Grzesiek\M-10-6897-8685-3464\winmgr.exe ()
O4 - HKCU..\Run: [Mjjicrt ddd Manager] C:\Users\Grzesiek\M-10-8754-86589-55555\windog.exe (trew soft)
O4 - HKCU..\Run: [RocketDock] F:\RocketDock\RocketDock.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3CB10C66-3360-4ABD-B4FF-667903B3CB51}: DhcpNameServer = 192.168.1.1 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-08-06 22:25:54 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012-08-06 22:23:57 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\AppData\Local\temp
[2012-08-06 22:18:12 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012-08-06 22:18:12 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012-08-06 22:18:12 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012-08-06 22:18:07 | 000,000,000 | ---D | C] -- C:\ComboFix
[2012-08-06 22:18:05 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012-08-06 22:17:54 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2012-08-06 22:17:36 | 004,725,168 | R--- | C] (Swearware) -- C:\Users\Grzesiek\Desktop\ComboFix.exe
[2012-08-06 22:17:36 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Grzesiek\Desktop\OTL.exe
[2012-08-06 21:58:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2012-08-06 21:58:14 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012-08-06 21:19:58 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\AppData\Roaming\hellomoto
[2012-08-05 08:31:33 | 000,000,000 | ---D | C] -- C:\totalcmd
[2012-08-04 20:41:00 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2012-08-04 12:39:26 | 000,000,000 | RHSD | C] -- C:\Users\Grzesiek\M-10-8754-86589-55555
[2012-08-03 17:40:58 | 000,000,000 | RHSD | C] -- C:\Users\Grzesiek\M-10-6897-8685-3464
[2012-07-31 22:33:08 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\Desktop\Zdj
[2012-07-26 10:22:14 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\Documents\Battlefield Play4Free
[2012-07-26 00:18:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Games
[2012-07-24 13:08:29 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\AppData\Roaming\Mozilla
[2012-07-24 12:17:07 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\AppData\Roaming\Sierra Entertainment
[2012-07-24 12:17:07 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\Documents\Empire Earth III
[2012-07-19 17:16:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2012-07-19 17:16:18 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2012-07-18 10:47:47 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\Documents\FIFA 11
[2012-07-14 18:12:12 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\Documents\FIFA 12
[2012-07-13 22:41:26 | 000,000,000 | ---D | C] -- C:\ProgramData\HP
[2012-07-13 09:07:33 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\AppData\Local\LogMeIn Hamachi
[2012-07-13 09:07:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2012-07-13 09:07:09 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2012-07-12 19:45:15 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
[2012-07-12 19:44:42 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\AppData\Local\Deployment
[2012-07-12 19:44:42 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\AppData\Local\Apps
[2012-07-11 12:34:12 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\AppData\Roaming\dll-files.com
[2012-07-11 12:34:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dll-Files.com Fixer
[2012-07-11 12:34:02 | 000,000,000 | ---D | C] -- C:\Program Files\Dll-Files.com Fixer
[2012-07-10 20:13:31 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\Documents\Might & Magic Heroes VI
[2012-07-10 20:13:31 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\AppData\Roaming\Might & Magic Heroes VI
[2012-07-10 12:49:29 | 000,000,000 | ---D | C] -- C:\Users\Grzesiek\Documents\My Games
[2012-07-10 12:48:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubisoft
[2012-07-09 23:35:20 | 000,000,000 | ---D | C] -- C:\Might.and.Magic.Heroes.VI-SKIDROW
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-08-06 22:35:25 | 000,701,022 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012-08-06 22:35:25 | 000,618,714 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012-08-06 22:35:25 | 000,136,040 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012-08-06 22:35:25 | 000,107,034 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012-08-06 22:31:03 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-08-06 22:28:40 | 000,010,128 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-08-06 22:28:40 | 000,010,128 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-08-06 22:28:33 | 564,338,961 | ---- | M] () -- C:\Windows\System32\cwlog.dtl
[2012-08-06 22:25:45 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2012-08-06 22:16:32 | 004,725,168 | R--- | M] (Swearware) -- C:\Users\Grzesiek\Desktop\ComboFix.exe
[2012-08-06 22:05:34 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Grzesiek\Desktop\OTL.exe
[2012-08-06 21:58:15 | 000,000,969 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012-08-06 16:24:47 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempVs2464.html
[2012-08-06 14:22:23 | 1657,110,372 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012-08-06 14:12:55 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempga3436.html
[2012-08-06 10:36:38 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Temphi1248.html
[2012-08-06 10:36:37 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempXE1248.html
[2012-08-06 09:17:08 | 000,139,424 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2012-08-06 09:17:00 | 000,282,104 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr
[2012-08-06 09:16:34 | 000,234,768 | ---- | M] () -- C:\Windows\System32\PnkBstrB.ex0
[2012-08-06 09:11:22 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempnd3692.html
[2012-08-06 09:11:21 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempNe3692.html
[2012-08-05 23:26:20 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempQx2520.html
[2012-08-05 23:26:19 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempSp2520.html
[2012-08-05 19:48:26 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempIo1824.html
[2012-08-05 19:48:26 | 000,002,089 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempJd1824.html
[2012-08-05 18:45:35 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempDQ2240.html
[2012-08-05 09:46:35 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempKY3488.html
[2012-08-05 08:40:55 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempEE1580.html
[2012-08-04 23:16:01 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempRx3316.html
[2012-08-04 23:16:01 | 000,002,089 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempCb3316.html
[2012-08-04 20:37:46 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Temprl1048.html
[2012-08-04 15:29:59 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempfk2808.html
[2012-08-04 15:29:01 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TemprV3216.html
[2012-08-04 13:39:23 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2012-08-04 13:39:23 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2012-08-04 13:03:15 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempgQ2668.html
[2012-08-04 12:59:07 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempmB4092.html
[2012-08-04 10:46:01 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempOX1864.html
[2012-08-04 09:03:11 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempdl3240.html
[2012-08-03 22:22:33 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempMmq792.html
[2012-08-03 18:40:39 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempar3064.html
[2012-08-03 18:40:39 | 000,002,089 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempjH3064.html
[2012-08-03 16:31:56 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempIx2588.html
[2012-08-03 13:54:40 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempSq1696.html
[2012-08-03 13:50:05 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempSa2784.html
[2012-08-03 13:46:16 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempkj2884.html
[2012-08-03 13:45:08 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempsA3068.html
[2012-08-03 10:42:08 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempnQ2208.html
[2012-08-03 09:43:26 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempAX1492.html
[2012-08-02 23:05:16 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempVg2308.html
[2012-08-02 21:19:34 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempQO1552.html
[2012-08-02 17:39:49 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempJi2260.html
[2012-08-02 17:39:49 | 000,002,089 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempzj2260.html
[2012-08-02 14:21:43 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Templn2436.html
[2012-08-02 11:05:51 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempRq2300.html
[2012-08-01 21:58:10 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempET1192.html
[2012-08-01 21:58:10 | 000,002,089 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempwd1192.html
[2012-08-01 20:44:29 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempdX4032.html
[2012-08-01 18:21:24 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempog1844.html
[2012-08-01 16:41:15 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempkb3920.html
[2012-08-01 14:07:26 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempmK1732.html
[2012-08-01 09:13:34 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempnL2904.html
[2012-07-31 23:20:04 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempDyW812.html
[2012-07-31 23:20:04 | 000,002,089 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempGWl812.html
[2012-07-31 22:01:18 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempFI4024.html
[2012-07-31 08:51:54 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempzf3188.html
[2012-07-31 08:04:35 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempfC3828.html
[2012-07-30 22:57:11 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempNA3748.html
[2012-07-30 21:36:00 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempFe3696.html
[2012-07-30 20:56:45 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempOd2760.html
[2012-07-30 20:40:31 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempph3952.html
[2012-07-30 20:38:53 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempcu3312.html
[2012-07-30 13:59:27 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempVv1356.html
[2012-07-30 13:59:27 | 000,002,089 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempMX1356.html
[2012-07-30 09:30:16 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempfa4276.html
[2012-07-30 08:36:19 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempezz496.html
[2012-07-29 22:39:12 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempTY3572.html
[2012-07-29 22:04:53 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempWL1484.html
[2012-07-29 20:12:42 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Temprbm896.html
[2012-07-29 20:09:06 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempSB2408.html
[2012-07-29 16:30:20 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempYZ2708.html
[2012-07-29 15:57:46 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempZy2648.html
[2012-07-29 15:02:07 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempMI3216.html
[2012-07-29 12:41:56 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempBT3992.html
[2012-07-29 10:59:27 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempCzk492.html
[2012-07-29 10:49:35 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempWa4012.html
[2012-07-28 23:22:53 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempGg2256.html
[2012-07-28 18:25:23 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempHD3100.html
[2012-07-28 18:22:16 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempnzZ272.html
[2012-07-28 18:08:42 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Temptt3308.html
[2012-07-28 15:54:19 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempwU3680.html
[2012-07-28 12:42:04 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempNs3828.html
[2012-07-27 23:15:41 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempKF1008.html
[2012-07-27 20:55:34 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempYB1276.html
[2012-07-27 15:21:09 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TemplW4076.html
[2012-07-27 13:47:55 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TemprJ4044.html
[2012-07-27 11:44:12 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempHG4036.html
[2012-07-26 23:20:41 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempFC2768.html
[2012-07-26 21:20:55 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempcU1492.html
[2012-07-26 16:35:31 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempsa3072.html
[2012-07-26 14:05:28 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempJy2468.html
[2012-07-26 11:03:08 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempVu3284.html
[2012-07-26 00:18:46 | 000,138,056 | ---- | M] () -- C:\Users\Grzesiek\AppData\Roaming\PnkBstrK.sys
[2012-07-25 21:54:27 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempRu1684.html
[2012-07-25 20:04:24 | 000,000,286 | ---- | M] () -- C:\Windows\tasks\DLL-files.com Fixer_UPDATES.job
[2012-07-25 17:18:49 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempUY2772.html
[2012-07-25 15:14:36 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TemprV4008.html
[2012-07-25 11:37:01 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempcS3064.html
[2012-07-24 22:11:26 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempuE3288.html
[2012-07-24 20:43:58 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempqu2684.html
[2012-07-24 13:19:21 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempyP2852.html
[2012-07-24 10:04:03 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempfE3964.html
[2012-07-23 22:34:28 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempqsB312.html
[2012-07-23 20:56:07 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempTI2988.html
[2012-07-22 22:04:18 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempCS2948.html
[2012-07-22 22:03:45 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TemphY1328.html
[2012-07-22 20:53:15 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempUj3252.html
[2012-07-22 18:31:04 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempvF3656.html
[2012-07-22 15:56:20 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempmI1796.html
[2012-07-22 15:56:20 | 000,002,089 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempYK1796.html
[2012-07-22 09:44:33 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempHY3680.html
[2012-07-21 23:24:20 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempqG3888.html
[2012-07-21 10:52:55 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempqY1848.html
[2012-07-21 10:40:35 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempKU4012.html
[2012-07-20 23:08:58 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempCu3736.html
[2012-07-20 23:06:39 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempWh3520.html
[2012-07-20 21:26:28 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempwNn272.html
[2012-07-20 15:53:24 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TemppW3896.html
[2012-07-20 10:18:02 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempHk1576.html
[2012-07-19 22:22:43 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempMX2372.html
[2012-07-19 18:02:24 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TemplH2660.html
[2012-07-19 14:35:06 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempNF3796.html
[2012-07-19 11:30:58 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempCn1016.html
[2012-07-18 22:52:29 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempUZ4052.html
[2012-07-18 16:31:00 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempix2936.html
[2012-07-18 11:54:09 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempnO2616.html
[2012-07-18 10:51:52 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempSb2440.html
[2012-07-17 22:55:49 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempTn3588.html
[2012-07-17 21:27:46 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TemppK2740.html
[2012-07-17 09:33:54 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempIW3564.html
[2012-07-16 23:34:45 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempDC2728.html
[2012-07-16 23:34:45 | 000,002,089 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempnx2728.html
[2012-07-16 22:11:19 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempDY2880.html
[2012-07-16 15:59:10 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TemphK3188.html
[2012-07-16 14:07:02 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempBl1896.html
[2012-07-16 09:50:25 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempcJ2748.html
[2012-07-15 22:21:11 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempjd3064.html
[2012-07-15 18:40:44 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempJa1136.html
[2012-07-15 18:18:49 | 002,670,423 | ---- | M] () -- C:\Users\Grzesiek\Documents\DSCF2886.JPG
[2012-07-15 12:31:21 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempQO3860.html
[2012-07-15 12:31:21 | 000,002,089 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempjV3860.html
[2012-07-15 12:17:58 | 000,579,760 | ---- | M] () -- C:\Users\Grzesiek\Documents\m4 003.jpg
[2012-07-14 21:53:16 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempNs3984.html
[2012-07-14 12:59:34 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TemprF2908.html
[2012-07-14 12:59:34 | 000,002,089 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempqt2908.html
[2012-07-14 12:56:10 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempXv4040.html
[2012-07-14 09:52:36 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempQW2296.html
[2012-07-13 22:29:49 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempfZ3156.html
[2012-07-13 16:33:37 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempRv3840.html
[2012-07-13 08:32:15 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempuf3692.html
[2012-07-12 22:31:05 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempzi2988.html
[2012-07-12 19:50:04 | 000,000,038 | ---- | M] () -- C:\Windows\AviSplitter.INI
[2012-07-12 19:47:09 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempND2520.html
[2012-07-12 19:45:15 | 000,000,324 | ---- | M] () -- C:\Users\Grzesiek\Desktop\Ghost Recon Online.appref-ms
[2012-07-12 11:12:29 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempvn3760.html
[2012-07-11 23:40:08 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempEh3444.html
[2012-07-11 20:29:44 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempwh4080.html
[2012-07-11 16:00:08 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempcO3484.html
[2012-07-11 15:57:40 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempwe2920.html
[2012-07-11 12:32:07 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempyR2980.html
[2012-07-11 12:23:55 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempBs3248.html
[2012-07-11 09:45:31 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempkm2012.html
[2012-07-10 23:26:53 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempYFy964.html
[2012-07-10 21:36:51 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempgmc792.html
[2012-07-10 20:10:07 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempPO3640.html
[2012-07-10 10:44:16 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempAt3924.html
[2012-07-10 10:19:43 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Tempqu3348.html
[2012-07-10 10:18:58 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempTTF768.html
[2012-07-09 22:22:14 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempLkg960.html
[2012-07-08 22:49:28 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempVs3672.html
[2012-07-08 13:19:47 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempFO3660.html
[2012-07-08 10:46:01 | 000,002,432 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\Temppdj708.html
[2012-07-08 10:46:01 | 000,002,089 | ---- | M] () -- C:\Users\Grzesiek\AppData\Local\TempCPr708.html
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-08-06 22:18:12 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012-08-06 22:18:12 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012-08-06 22:18:12 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012-08-06 22:18:12 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012-08-06 22:18:12 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012-08-06 21:58:15 | 000,000,969 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012-08-06 16:24:00 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempVs2464.html
[2012-08-06 11:07:56 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempga3436.html
[2012-08-06 09:52:38 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempXE1248.html
[2012-08-06 09:52:38 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temphi1248.html
[2012-08-06 08:24:03 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempNe3692.html
[2012-08-06 08:24:03 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempnd3692.html
[2012-08-05 23:24:18 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempQx2520.html
[2012-08-05 23:03:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempSp2520.html
[2012-08-05 19:48:26 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempIo1824.html
[2012-08-05 19:48:26 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempJd1824.html
[2012-08-05 18:20:08 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDQ2240.html
[2012-08-05 09:44:16 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempKY3488.html
[2012-08-05 08:39:19 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempEE1580.html
[2012-08-05 08:31:33 | 000,000,545 | ---- | C] () -- C:\Windows\UC.PIF
[2012-08-05 08:31:33 | 000,000,545 | ---- | C] () -- C:\Windows\RAR.PIF
[2012-08-05 08:31:33 | 000,000,545 | ---- | C] () -- C:\Windows\NOCLOSE.PIF
[2012-08-05 08:31:33 | 000,000,545 | ---- | C] () -- C:\Windows\LHA.PIF
[2012-08-05 08:31:33 | 000,000,545 | ---- | C] () -- C:\Windows\ARJ.PIF
[2012-08-04 22:06:37 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempRx3316.html
[2012-08-04 22:06:37 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempCb3316.html
[2012-08-04 20:40:57 | 1657,110,372 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2012-08-04 19:50:48 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temprl1048.html
[2012-08-04 15:29:30 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempfk2808.html
[2012-08-04 14:38:30 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemprV3216.html
[2012-08-04 13:39:23 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2012-08-04 13:39:23 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2012-08-04 13:01:09 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempgQ2668.html
[2012-08-04 12:58:23 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempmB4092.html
[2012-08-04 10:45:49 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempOX1864.html
[2012-08-04 08:59:33 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempdl3240.html
[2012-08-03 22:10:10 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempMmq792.html
[2012-08-03 18:37:36 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempar3064.html
[2012-08-03 18:37:36 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempjH3064.html
[2012-08-03 16:19:36 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempIx2588.html
[2012-08-03 13:54:25 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempSq1696.html
[2012-08-03 13:47:45 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempSa2784.html
[2012-08-03 13:46:07 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempkj2884.html
[2012-08-03 13:00:48 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempsA3068.html
[2012-08-03 10:41:10 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempnQ2208.html
[2012-08-03 09:35:46 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAX1492.html
[2012-08-02 22:58:29 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempVg2308.html
[2012-08-02 21:14:20 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempQO1552.html
[2012-08-02 17:32:25 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempJi2260.html
[2012-08-02 17:32:25 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempzj2260.html
[2012-08-02 14:17:12 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Templn2436.html
[2012-08-02 11:03:37 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempRq2300.html
[2012-08-01 21:51:04 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempET1192.html
[2012-08-01 21:51:04 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempwd1192.html
[2012-08-01 20:42:23 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempdX4032.html
[2012-08-01 18:20:33 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempog1844.html
[2012-08-01 16:41:02 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempkb3920.html
[2012-08-01 13:35:22 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempmK1732.html
[2012-08-01 09:11:19 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempnL2904.html
[2012-07-31 22:31:25 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDyW812.html
[2012-07-31 22:31:25 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempGWl812.html
[2012-07-31 20:44:53 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempFI4024.html
[2012-07-31 08:50:47 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempzf3188.html
[2012-07-31 07:51:36 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempfC3828.html
[2012-07-30 22:18:54 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempNA3748.html
[2012-07-30 21:35:48 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempFe3696.html
[2012-07-30 20:40:41 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempOd2760.html
[2012-07-30 20:39:03 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempph3952.html
[2012-07-30 20:25:48 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempcu3312.html
[2012-07-30 13:19:02 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempVv1356.html
[2012-07-30 13:19:02 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempMX1356.html
[2012-07-30 09:29:55 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempfa4276.html
[2012-07-30 08:27:47 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempezz496.html
[2012-07-29 22:25:40 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempTY3572.html
[2012-07-29 21:51:42 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempWL1484.html
[2012-07-29 20:12:03 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temprbm896.html
[2012-07-29 20:08:18 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempSB2408.html
[2012-07-29 16:29:59 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempYZ2708.html
[2012-07-29 15:57:30 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempZy2648.html
[2012-07-29 14:28:15 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempMI3216.html
[2012-07-29 12:24:28 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempBT3992.html
[2012-07-29 10:56:20 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempCzk492.html
[2012-07-29 08:54:26 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempWa4012.html
[2012-07-28 22:38:50 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempGg2256.html
[2012-07-28 18:22:29 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempHD3100.html
[2012-07-28 18:21:55 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempnzZ272.html
[2012-07-28 17:11:12 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temptt3308.html
[2012-07-28 15:24:21 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempwU3680.html
[2012-07-28 11:17:59 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempNs3828.html
[2012-07-27 22:56:32 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempKF1008.html
[2012-07-27 20:54:30 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempYB1276.html
[2012-07-27 15:21:01 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemplW4076.html
[2012-07-27 13:25:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemprJ4044.html
[2012-07-27 11:39:34 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempHG4036.html
[2012-07-26 23:20:27 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempFC2768.html
[2012-07-26 20:50:35 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempcU1492.html
[2012-07-26 16:35:22 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempsa3072.html
[2012-07-26 14:04:58 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempJy2468.html
[2012-07-26 09:58:56 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempVu3284.html
[2012-07-25 21:31:26 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempRu1684.html
[2012-07-25 16:33:02 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUY2772.html
[2012-07-25 15:08:43 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemprV4008.html
[2012-07-25 11:22:52 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempcS3064.html
[2012-07-24 22:05:47 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempuE3288.html
[2012-07-24 20:41:40 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempqu2684.html
[2012-07-24 11:28:53 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempyP2852.html
[2012-07-24 09:12:35 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempfE3964.html
[2012-07-23 22:34:06 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempqsB312.html
[2012-07-23 20:31:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempTI2988.html
[2012-07-22 22:03:55 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempCS2948.html
[2012-07-22 20:53:31 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemphY1328.html
[2012-07-22 20:41:12 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUj3252.html
[2012-07-22 18:06:25 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempvF3656.html
[2012-07-22 14:12:10 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempmI1796.html
[2012-07-22 14:12:10 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempYK1796.html
[2012-07-22 09:28:16 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempHY3680.html
[2012-07-21 21:26:18 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempqG3888.html
[2012-07-21 10:41:44 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempqY1848.html
[2012-07-21 10:40:14 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempKU4012.html
[2012-07-20 23:08:12 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempCu3736.html
[2012-07-20 23:06:11 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempWh3520.html
[2012-07-20 21:24:48 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempwNn272.html
[2012-07-20 15:23:43 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemppW3896.html
[2012-07-20 10:02:04 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempHk1576.html
[2012-07-19 21:31:24 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempMX2372.html
[2012-07-19 16:49:45 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemplH2660.html
[2012-07-19 14:34:10 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempNF3796.html
[2012-07-19 11:20:34 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempCn1016.html
[2012-07-18 22:15:04 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUZ4052.html
[2012-07-18 16:10:35 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempix2936.html
[2012-07-18 11:53:51 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempnO2616.html
[2012-07-18 09:17:09 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempSb2440.html
[2012-07-17 21:27:58 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempTn3588.html
[2012-07-17 19:28:10 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemppK2740.html
[2012-07-17 09:32:28 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempIW3564.html
[2012-07-16 23:33:04 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDC2728.html
[2012-07-16 23:33:04 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempnx2728.html
[2012-07-16 22:02:05 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDY2880.html
[2012-07-16 15:55:44 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemphK3188.html
[2012-07-16 14:01:07 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempBl1896.html
[2012-07-16 09:19:53 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempcJ2748.html
[2012-07-15 19:58:42 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempjd3064.html
[2012-07-15 18:18:14 | 002,670,423 | ---- | C] () -- C:\Users\Grzesiek\Documents\DSCF2886.JPG
[2012-07-15 17:55:16 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempJa1136.html
[2012-07-15 12:17:24 | 000,579,760 | ---- | C] () -- C:\Users\Grzesiek\Documents\m4 003.jpg
[2012-07-15 12:13:56 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempQO3860.html
[2012-07-15 12:13:56 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempjV3860.html
[2012-07-14 21:32:29 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempNs3984.html
[2012-07-14 12:56:21 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemprF2908.html
[2012-07-14 12:56:21 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempqt2908.html
[2012-07-14 12:18:06 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempXv4040.html
[2012-07-14 09:46:08 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempQW2296.html
[2012-07-13 19:45:56 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempfZ3156.html
[2012-07-13 16:16:32 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempRv3840.html
[2012-07-13 08:10:20 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempuf3692.html
[2012-07-12 19:56:52 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempzi2988.html
[2012-07-12 19:45:15 | 000,000,324 | ---- | C] () -- C:\Users\Grzesiek\Desktop\Ghost Recon Online.appref-ms
[2012-07-12 19:36:08 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempND2520.html
[2012-07-12 11:07:45 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempvn3760.html
[2012-07-11 23:27:09 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempEh3444.html
[2012-07-11 20:05:45 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempwh4080.html
[2012-07-11 15:59:06 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempcO3484.html
[2012-07-11 15:56:22 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempwe2920.html
[2012-07-11 12:34:17 | 000,000,286 | ---- | C] () -- C:\Windows\tasks\DLL-files.com Fixer_UPDATES.job
[2012-07-11 12:24:03 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempyR2980.html
[2012-07-11 11:30:09 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempBs3248.html
[2012-07-11 09:42:24 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempkm2012.html
[2012-07-10 23:26:38 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempYFy964.html
[2012-07-10 21:35:21 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempgmc792.html
[2012-07-10 20:09:14 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempPO3640.html
[2012-07-10 10:34:51 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAt3924.html
[2012-07-10 10:19:09 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempqu3348.html
[2012-07-10 09:56:47 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempTTF768.html
[2012-07-09 19:48:21 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempLkg960.html
[2012-07-08 21:56:49 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempVs3672.html
[2012-07-08 13:02:17 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempFO3660.html
[2012-07-08 10:20:16 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temppdj708.html
[2012-07-08 10:20:16 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempCPr708.html
[2012-07-07 21:27:47 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temprq2252.html
[2012-07-07 21:27:34 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temple1536.html
[2012-07-07 20:31:07 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempwA3980.html
[2012-07-06 21:18:51 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempbp1884.html
[2012-07-06 21:04:29 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempIN3948.html
[2012-07-06 20:52:32 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempIU2944.html
[2012-07-05 23:23:30 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemppX3020.html
[2012-07-05 14:38:58 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempJI4092.html
[2012-07-05 14:38:58 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempqW4092.html
[2012-07-05 10:32:32 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempya3540.html
[2012-07-04 22:13:09 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempME3464.html
[2012-07-04 13:24:30 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempmw2232.html
[2012-07-03 23:12:06 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempjM3060.html
[2012-07-03 19:00:33 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempMp1268.html
[2012-07-02 23:18:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempEe2960.html
[2012-07-01 22:01:10 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempgF3580.html
[2012-07-01 21:39:30 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Templd3144.html
[2012-07-01 21:39:30 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempfz3144.html
[2012-07-01 13:22:22 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemphO3556.html
[2012-07-01 12:27:28 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempiB3316.html
[2012-07-01 10:20:53 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempXa3340.html
[2012-07-01 09:56:04 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempfhF192.html
[2012-07-01 08:05:14 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempbD2352.html
[2012-06-30 22:04:17 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempak1088.html
[2012-06-30 16:38:23 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUL3848.html
[2012-06-30 12:50:41 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempHM3684.html
[2012-06-30 12:50:41 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempGS3684.html
[2012-06-30 12:10:03 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempJv2764.html
[2012-06-30 09:40:13 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempOJ1652.html
[2012-06-29 22:56:52 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temphn3144.html
[2012-06-29 19:16:37 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAZp728.html
[2012-06-29 16:50:27 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempao2152.html
[2012-06-29 13:24:03 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempLQ2856.html
[2012-06-29 12:40:14 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAa2732.html
[2012-06-29 07:11:38 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempsn4024.html
[2012-06-28 21:15:17 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempRd2944.html
[2012-06-28 20:41:10 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempBI1876.html
[2012-06-28 11:01:18 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempir3876.html
[2012-06-28 08:59:42 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempQY1016.html
[2012-06-28 08:57:23 | 002,169,856 | -HS- | C] () -- C:\Windows\System32\hale.exe
[2012-06-28 08:54:18 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempYF3676.html
[2012-06-27 20:59:37 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempOO2412.html
[2012-06-27 20:44:58 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempCV1324.html
[2012-06-27 19:22:38 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempYA3488.html
[2012-06-27 18:52:15 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temprw1480.html
[2012-06-27 17:50:14 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempHr2212.html
[2012-06-27 15:04:31 | 000,138,056 | ---- | C] () -- C:\Users\Grzesiek\AppData\Roaming\PnkBstrK.sys
[2012-06-27 15:04:03 | 003,130,440 | ---- | C] () -- C:\Windows\System32\pbsvc_blr.exe
[2012-06-27 14:35:19 | 000,139,424 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2012-06-27 12:44:12 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempqS3848.html
[2012-06-27 09:05:26 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempRQ3736.html
[2012-06-27 09:05:26 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemppE3736.html
[2012-06-26 23:22:01 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempqBb288.html
[2012-06-26 18:01:33 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temprx2228.html
[2012-06-26 12:10:04 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempwS3624.html
[2012-06-25 22:34:03 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempXW1092.html
[2012-06-25 20:14:23 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempgmG324.html
[2012-06-25 19:38:40 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempIE2568.html
[2012-06-25 15:59:29 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temptc3316.html
[2012-06-25 14:31:28 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempVe3824.html
[2012-06-25 07:41:31 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempmv3312.html
[2012-06-24 21:19:04 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempOZ2376.html
[2012-06-24 11:25:37 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempSt2756.html
[2012-06-24 11:20:58 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempvy3772.html
[2012-06-23 15:53:21 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temptu2056.html
[2012-06-22 22:30:35 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempaO1620.html
[2012-06-22 18:34:55 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempEA2304.html
[2012-06-22 18:34:55 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempNh2304.html
[2012-06-22 13:16:56 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDc1912.html
[2012-06-22 12:25:05 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempXM2860.html
[2012-06-21 22:50:23 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempBf3036.html
[2012-06-21 19:39:50 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemphC2900.html
[2012-06-20 23:02:48 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempEH3640.html
[2012-06-20 23:02:48 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempBJ3640.html
[2012-06-20 21:40:21 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempXn1528.html
[2012-06-20 20:08:56 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAy3764.html
[2012-06-20 20:08:56 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempPk3764.html
[2012-06-20 16:02:22 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempsa2688.html
[2012-06-19 21:50:25 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempnt3848.html
[2012-06-19 17:36:51 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempPYW264.html
[2012-06-19 12:39:45 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemplY3660.html
[2012-06-19 08:42:35 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempLR3084.html
[2012-06-18 22:40:39 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempfa4080.html
[2012-06-18 22:40:39 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempJJ4080.html
[2012-06-18 20:31:22 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempgt3320.html
[2012-06-18 16:11:26 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempae3024.html
[2012-06-17 20:13:17 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temphyp264.html
[2012-06-17 18:14:43 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempXr2272.html
[2012-06-17 11:22:27 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDz2496.html
[2012-06-17 09:15:32 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempsXK504.html
[2012-06-16 23:35:23 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUC1684.html
[2012-06-16 23:29:45 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempKZY108.html
[2012-06-16 15:12:06 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempxY3684.html
[2012-06-16 13:57:13 | 000,282,104 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2012-06-16 13:57:12 | 000,076,888 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2012-06-15 22:09:02 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempyp2416.html
[2012-06-15 20:36:06 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempbg2940.html
[2012-06-15 18:11:06 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempQX3060.html
[2012-06-15 16:07:54 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempVR3160.html
[2012-06-14 20:41:56 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempwp2896.html
[2012-06-14 19:19:42 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempvm3728.html
[2012-06-14 18:28:23 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempvST904.html
[2012-06-14 16:31:06 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempEm3736.html
[2012-06-13 21:34:16 | 000,000,127 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2012-06-13 20:59:53 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temptr2468.html
[2012-06-13 18:06:54 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempgm3412.html
[2012-06-12 22:43:08 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDG2084.html
[2012-06-12 19:36:45 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempNw3000.html
[2012-06-12 17:31:41 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempiF2612.html
[2012-06-11 20:23:11 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempWMp928.html
[2012-06-11 20:14:14 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempMw3492.html
[2012-06-11 20:13:01 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempSv2548.html
[2012-06-11 19:07:31 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempFE2952.html
[2012-06-11 13:10:39 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemprN3824.html
[2012-06-11 12:35:30 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemppU2728.html
[2012-06-10 22:06:29 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDF1156.html
[2012-06-10 19:56:50 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempOti668.html
[2012-06-10 17:43:40 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempgc3232.html
[2012-06-07 22:48:23 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempax2840.html
[2012-06-07 21:11:58 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempnG3976.html
[2012-06-07 18:14:37 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDs3416.html
[2012-06-07 11:42:00 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempVN1420.html
[2012-06-07 11:42:00 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempQx1420.html
[2012-06-07 09:07:43 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempid2276.html
[2012-06-07 08:29:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempom3912.html
[2012-06-06 22:49:41 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempTr1388.html
[2012-06-06 19:44:35 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempKh3532.html
[2012-06-05 22:36:52 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempxR3672.html
[2012-06-05 22:26:13 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempKr1732.html
[2012-06-05 20:31:39 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempOGL692.html
[2012-06-05 18:22:00 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempfL2764.html
[2012-06-05 15:33:46 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempwG2028.html
[2012-06-04 20:47:02 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempfW4036.html
[2012-06-04 15:45:29 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempgu3976.html
[2012-06-04 15:45:29 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempGl3976.html
[2012-06-03 20:51:04 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempnE3400.html
[2012-06-03 14:31:31 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempbM3920.html
[2012-06-03 12:21:28 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempzq3744.html
[2012-06-02 21:28:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempkS1068.html
[2012-06-02 20:24:24 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempMk3336.html
[2012-06-02 14:23:14 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempJs3320.html
[2012-06-02 14:23:14 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempse3320.html
[2012-06-02 12:30:40 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempfh3264.html
[2012-06-02 08:09:25 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAi2516.html
[2012-06-02 08:00:14 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempCRp684.html
[2012-06-01 21:25:30 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempvY1564.html
[2012-06-01 20:21:11 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempZo3424.html
[2012-06-01 18:28:24 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempMu2684.html
[2012-06-01 17:55:29 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempmT4060.html
[2012-06-01 16:13:52 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemphN2640.html
[2012-06-01 16:13:52 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempoK2640.html
[2012-06-01 14:22:32 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temprw1688.html
[2012-05-31 22:34:51 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempWw5056.html
[2012-05-31 16:07:13 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempIF3376.html
[2012-05-31 13:55:21 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempFO3644.html
[2012-05-31 13:55:21 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempaH3644.html
[2012-05-30 20:58:52 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2012-05-30 20:26:36 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUu3248.html
[2012-05-30 19:15:04 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempLD3388.html
[2012-05-30 15:10:45 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempIV3560.html
[2012-05-30 15:10:45 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempht3560.html
[2012-05-29 21:34:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempyr4044.html
[2012-05-29 15:39:16 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempWE3464.html
[2012-05-28 22:22:22 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempPsj880.html
[2012-05-28 20:02:29 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempLk1740.html
[2012-05-28 14:39:06 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempXq3568.html
[2012-05-28 14:39:06 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempFV3568.html
[2012-05-27 21:24:28 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDp2104.html
[2012-05-27 18:45:11 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempoL3608.html
[2012-05-27 16:20:55 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempRx3720.html
[2012-05-27 13:43:21 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempLr3304.html
[2012-05-27 11:10:10 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempzh2504.html
[2012-05-27 08:03:08 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDx2996.html
[2012-05-26 22:05:31 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempnid888.html
[2012-05-26 20:40:47 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempJS3904.html
[2012-05-26 20:39:52 | 000,049,152 | RHS- | C] () -- C:\Windows\System32\guegae.exe
[2012-05-26 15:53:16 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempcr1920.html
[2012-05-26 14:33:04 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temppw3860.html
[2012-05-26 12:14:15 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Templl2276.html
[2012-05-26 12:14:15 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempQB2276.html
[2012-05-26 11:37:41 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempEl4892.html
[2012-05-26 10:29:58 | 000,000,038 | ---- | C] () -- C:\Windows\AviSplitter.INI
[2012-05-26 09:18:37 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temppe4068.html
[2012-05-25 23:08:24 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempjt3816.html
[2012-05-25 17:05:51 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempae1372.html
[2012-05-24 23:06:30 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempdbu796.html
[2012-05-24 20:38:33 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemppW3120.html
[2012-05-24 14:48:46 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDo4016.html
[2012-05-23 22:10:48 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempzS3072.html
[2012-05-23 17:38:12 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemplR2356.html
[2012-05-23 15:38:28 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempjf3472.html
[2012-05-22 22:54:27 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempPHg864.html
[2012-05-22 20:02:42 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempGH3696.html
[2012-05-22 18:41:19 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempXX1912.html
[2012-05-22 16:30:15 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDp3328.html
[2012-05-21 22:59:34 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempXn4016.html
[2012-05-21 20:53:33 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempCo3436.html
[2012-05-21 20:10:47 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempeyV720.html
[2012-05-21 15:15:24 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempxB3272.html
[2012-05-20 22:36:41 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAx3576.html
[2012-05-20 21:33:58 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempWC2636.html
[2012-05-20 21:25:53 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempTS3244.html
[2012-05-20 21:20:23 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempTB2568.html
[2012-05-20 18:28:30 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temprl3708.html
[2012-05-20 15:19:38 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempML3208.html
[2012-05-20 15:19:38 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempnP3208.html
[2012-05-20 13:46:10 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempkM2792.html
[2012-05-20 11:43:49 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempKZ3708.html
[2012-05-19 21:18:47 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempIE2760.html
[2012-05-19 15:57:43 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempol3272.html
[2012-05-19 13:28:39 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempMn2464.html
[2012-05-19 13:26:41 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempoG1144.html
[2012-05-19 08:08:48 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempwl3824.html
[2012-05-18 22:35:26 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempre3480.html
[2012-05-18 21:04:18 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempPT3736.html
[2012-05-18 20:02:23 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempTK1352.html
[2012-05-18 18:58:54 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempbd3276.html
[2012-05-18 17:04:25 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempMn2168.html
[2012-05-17 23:02:19 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempHP3320.html
[2012-05-17 19:06:48 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempTO3232.html
[2012-05-17 16:08:51 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempYV2628.html
[2012-05-17 13:49:38 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempSY3136.html
[2012-05-16 23:10:05 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempyM1224.html
[2012-05-16 18:58:50 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempqr3948.html
[2012-05-16 15:36:32 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempuZ1592.html
[2012-05-15 21:58:27 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempuQ3216.html
[2012-05-15 18:51:33 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempmJ3124.html
[2012-05-15 16:15:53 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempBk3504.html
[2012-05-15 15:50:14 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempGL3768.html
[2012-05-14 22:46:52 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemphW1676.html
[2012-05-14 21:07:56 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temphj3132.html
[2012-05-14 16:02:48 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempPr3024.html
[2012-05-14 15:29:09 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempev2256.html
[2012-05-14 14:49:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempVC3188.html
[2012-05-13 22:48:40 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempwX3368.html
[2012-05-13 19:55:12 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempQQ2928.html
[2012-05-13 19:27:37 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempKT2488.html
[2012-05-13 15:30:04 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempFr3868.html
[2012-05-13 15:30:04 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAu3868.html
[2012-05-13 13:56:06 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUt1864.html
[2012-05-13 07:43:08 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAv2276.html
[2012-05-12 21:18:19 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempWu3088.html
[2012-05-12 19:57:03 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAC1560.html
[2012-05-12 15:41:15 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUU3232.html
[2012-05-12 08:12:23 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempNq3592.html
[2012-05-11 21:42:43 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempkQ1320.html
[2012-05-11 21:42:43 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempKV1320.html
[2012-05-11 19:13:00 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempLQ2916.html
[2012-05-10 22:46:14 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempPm3332.html
[2012-05-10 20:14:38 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDg3228.html
[2012-05-10 16:39:49 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempRY3844.html
[2012-05-10 16:13:45 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempnV1752.html
[2012-05-10 13:54:39 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempuJ3392.html
[2012-05-09 22:21:13 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempvx1560.html
[2012-05-09 20:49:55 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempxf2072.html
[2012-05-09 18:44:46 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempTAS340.html
[2012-05-09 16:36:28 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempEq1588.html
[2012-05-09 15:36:12 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempJa1156.html
[2012-05-08 22:25:09 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempCB1976.html
[2012-05-08 22:20:39 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempnb3496.html
[2012-05-08 20:33:55 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempXN2688.html
[2012-05-08 18:15:44 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempHU1792.html
[2012-05-08 16:31:15 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempfZY988.html
[2012-05-08 15:48:40 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempGt3272.html
[2012-05-07 21:58:52 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempzL3768.html
[2012-05-07 21:58:52 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempWI3768.html
[2012-05-07 21:38:06 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempSu2460.html
[2012-05-07 19:34:58 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempLi3048.html
[2012-05-07 15:53:01 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempuW3188.html
[2012-05-06 22:51:14 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempOG3608.html
[2012-05-06 22:51:14 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemphP3608.html
[2012-05-06 21:01:16 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempFF3452.html
[2012-05-06 20:08:50 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempjX3332.html
[2012-05-06 18:03:45 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempRr3024.html
[2012-05-06 18:03:45 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempvn3024.html
[2012-05-06 15:10:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempSt3308.html
[2012-05-05 22:34:14 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempXA2060.html
[2012-05-05 20:23:40 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemplSz192.html
[2012-05-05 13:25:29 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemptT1224.html
[2012-05-05 09:35:40 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempkK3332.html
[2012-05-05 08:19:11 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempkW4076.html
[2012-05-04 22:05:08 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempofm192.html
[2012-05-04 21:01:53 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempEX3904.html
[2012-05-04 17:55:00 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempcq1188.html
[2012-05-04 15:35:23 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempsZ3196.html
[2012-05-04 15:35:23 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempjj3196.html
[2012-05-04 13:59:07 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempob1564.html
[2012-05-04 13:59:07 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempzE1564.html
[2012-05-04 12:04:50 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempcz1020.html
[2012-05-03 21:41:40 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempQL1568.html
[2012-05-03 19:10:15 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempgW3504.html
[2012-05-03 08:00:35 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemplM3524.html
[2012-05-03 08:00:35 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempnm3524.html
[2012-05-02 23:01:11 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempsO2964.html
[2012-05-02 16:35:25 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempBf2808.html
[2012-05-02 15:53:16 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempZUn188.html
[2012-05-02 07:58:25 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDw3976.html
[2012-05-01 21:38:31 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempOr4044.html
[2012-05-01 20:37:38 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAVP404.html
[2012-05-01 15:13:09 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempwD3268.html
[2012-05-01 11:57:49 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempzJ1564.html
[2012-05-01 11:57:49 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempRn1564.html
[2012-05-01 11:48:52 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempaG2928.html
[2012-05-01 08:46:54 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempvd2856.html
[2012-05-01 07:48:40 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempcN2544.html
[2012-04-30 21:51:18 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempCs3556.html
[2012-04-30 18:33:58 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempxB3644.html
[2012-04-30 17:45:51 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempyzQ148.html
[2012-04-30 15:39:08 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempWe2076.html
[2012-04-29 19:23:28 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempVw2564.html
[2012-04-29 18:45:28 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempxd3516.html
[2012-04-29 15:15:34 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempQj3584.html
[2012-04-29 13:08:09 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempPu1488.html
[2012-04-28 20:26:12 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempSV3036.html
[2012-04-28 19:44:42 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempxc3236.html
[2012-04-28 15:41:45 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempnK3244.html
[2012-04-28 12:53:45 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempwl3012.html
[2012-04-28 08:01:50 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempXD3720.html
[2012-04-27 21:47:38 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempZr3924.html
[2012-04-27 20:44:08 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempgL2968.html
[2012-04-27 16:32:30 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempYf3848.html
[2012-04-27 15:24:21 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempcr1760.html
[2012-04-27 15:13:49 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempsp3084.html
[2012-04-27 13:00:55 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempKR3228.html
[2012-04-26 22:06:44 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempyU1484.html
[2012-04-26 20:58:08 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempmDI920.html
[2012-04-26 19:41:54 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempRR3464.html
[2012-04-26 14:38:47 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempNO3140.html
[2012-04-26 14:11:25 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temphq3720.html
[2012-04-26 12:23:24 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempoM3380.html
[2012-04-26 08:24:43 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempLr1068.html
[2012-04-25 19:31:24 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemppM2016.html
[2012-04-25 14:14:10 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempzZ3344.html
[2012-04-25 11:39:22 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemptP3384.html
[2012-04-25 08:00:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemphJ3100.html
[2012-04-24 20:44:15 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempGq2324.html
[2012-04-24 19:36:55 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempSR2872.html
[2012-04-24 14:00:13 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempqr2484.html
[2012-04-24 14:00:13 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempjh2484.html
[2012-04-24 10:00:47 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempRJ2880.html
[2012-04-24 08:48:18 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempIm2404.html
[2012-04-23 21:55:53 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempjg2160.html
[2012-04-22 19:18:58 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempGU3004.html
[2012-04-22 15:34:51 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temple1996.html
[2012-04-22 08:22:48 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempOc3552.html
[2012-04-21 20:47:25 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempgG1448.html
[2012-04-21 20:47:25 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempWx1448.html
[2012-04-21 20:12:51 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDVD296.html
[2012-04-21 16:07:24 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempwq2092.html
[2012-04-21 14:36:03 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempjq2148.html
[2012-04-21 13:26:02 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempgg4068.html
[2012-04-21 09:14:08 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempZA3600.html
[2012-04-20 22:01:49 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempuM1824.html
[2012-04-20 21:14:33 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDR3560.html
[2012-04-20 19:02:45 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempMt2424.html
[2012-04-19 22:49:53 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempoV1700.html
[2012-04-19 20:46:03 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempgK3388.html
[2012-04-19 20:08:52 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempqm3276.html
[2012-04-19 15:55:34 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempgg3076.html
[2012-04-19 14:33:11 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemprW2932.html
[2012-04-18 20:35:35 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempqF3368.html
[2012-04-18 18:27:22 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempEI3156.html
[2012-04-17 21:59:23 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempyR3212.html
[2012-04-17 19:48:02 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempzF3224.html
[2012-04-16 22:45:12 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempWW1336.html
[2012-04-16 20:39:00 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2012-04-16 19:35:56 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempKG3480.html
[2012-04-15 20:59:41 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempmQ3172.html
[2012-04-15 20:34:24 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempWJ3892.html
[2012-04-15 19:47:15 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempxt2616.html
[2012-04-15 18:22:34 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAm2644.html
[2012-04-15 16:24:41 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempog4016.html
[2012-04-15 15:44:05 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempsNl540.html
[2012-04-15 15:04:13 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempIW2916.html
[2012-04-15 07:50:36 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempnhR420.html
[2012-04-14 21:29:38 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempYx2348.html
[2012-04-14 19:49:18 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempwk2264.html
[2012-04-14 09:38:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempPG1812.html
[2012-04-14 07:45:22 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempMp3656.html
[2012-04-13 20:40:55 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempyT1148.html
[2012-04-13 18:03:09 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemppP3104.html
[2012-04-12 20:20:31 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemplC2080.html
[2012-04-12 19:39:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempGi2608.html
[2012-04-12 19:39:57 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempGe2608.html
[2012-04-12 14:50:12 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempZo3112.html
[2012-04-11 19:49:34 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUL1728.html
[2012-04-11 19:49:34 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempmY1728.html
[2012-04-10 22:49:48 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temptir676.html
[2012-04-10 19:49:23 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempmv3088.html
[2012-04-10 19:49:23 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempEQ3088.html
[2012-04-10 17:48:53 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempCT2376.html
[2012-04-10 17:37:04 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempBw3016.html
[2012-04-10 14:13:26 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempRd1256.html
[2012-04-10 12:55:06 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempIc3256.html
[2012-04-10 08:53:56 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempSv3356.html
[2012-04-09 19:59:51 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempqP3056.html
[2012-04-09 18:11:11 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempvS3476.html
[2012-04-09 11:56:08 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempTs3076.html
[2012-04-09 06:53:14 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempwd2756.html
[2012-04-08 11:38:22 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUD4032.html
[2012-04-08 08:34:01 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemptS2912.html
[2012-04-07 20:56:52 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempuW3932.html
[2012-04-07 13:09:59 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempmne776.html
[2012-04-07 08:49:50 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temple3872.html
[2012-04-07 08:24:47 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempsf3700.html
[2012-04-06 22:45:35 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempVw3180.html
[2012-04-06 21:09:25 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempqv2936.html
[2012-04-06 19:21:01 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemplF1064.html
[2012-04-06 16:02:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempdz2324.html
[2012-04-06 14:44:29 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempOQ2316.html
[2012-04-06 13:09:29 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempHM2188.html
[2012-04-06 10:03:33 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemphI3576.html
[2012-04-06 07:58:00 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempga3640.html
[2012-04-06 03:21:42 | 000,204,952 | ---- | C] () -- C:\Windows\System32\ativvsvl.dat
[2012-04-06 03:21:42 | 000,157,144 | ---- | C] () -- C:\Windows\System32\ativvsva.dat
[2012-04-05 22:34:22 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2012-04-05 22:26:34 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAO4048.html
[2012-04-05 21:39:55 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempeS2888.html
[2012-04-05 20:20:47 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temphf2460.html
[2012-04-05 20:20:47 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempIZ2460.html
[2012-04-05 19:04:20 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemptA2852.html
[2012-04-05 17:17:25 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempyV2452.html
[2012-04-05 15:50:23 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemptG2668.html
[2012-04-05 11:57:05 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempGI3436.html
[2012-04-05 10:35:38 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempOt3612.html
[2012-04-04 20:41:34 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempBF1172.html
[2012-04-04 13:27:00 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempZj3476.html
[2012-04-03 21:28:31 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempiN2232.html
[2012-04-03 20:53:31 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempHY3720.html
[2012-04-03 18:20:55 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempLF3436.html
[2012-04-03 15:54:39 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempLq3312.html
[2012-04-02 22:54:44 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUs4028.html
[2012-04-02 20:54:59 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempao1056.html
[2012-04-02 20:44:07 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempOZ3740.html
[2012-04-02 20:42:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUv2852.html
[2012-04-02 16:15:50 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temprn3768.html
[2012-04-02 15:02:20 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempHp2788.html
[2012-04-01 21:08:56 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempis2872.html
[2012-04-01 20:11:18 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAK3292.html
[2012-04-01 20:11:18 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempip3292.html
[2012-04-01 19:03:49 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemppQN748.html
[2012-04-01 16:23:11 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAd2784.html
[2012-04-01 13:07:13 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAq3760.html
[2012-04-01 11:12:53 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempaY2228.html
[2012-04-01 08:06:58 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempyCW764.html
[2012-03-31 21:05:14 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempbq2828.html
[2012-03-31 19:36:36 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempFa2896.html
[2012-03-31 17:46:45 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempSG2820.html
[2012-03-31 13:40:09 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempNd2852.html
[2012-03-31 10:57:19 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempMz1832.html
[2012-03-31 10:57:19 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temper1832.html
[2012-03-31 09:48:20 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempTK3172.html
[2012-03-31 08:26:46 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempCh1844.html
[2012-03-30 22:19:19 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempzq1268.html
[2012-03-30 20:26:49 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempZL2832.html
[2012-03-30 18:26:43 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempYX3804.html
[2012-03-30 16:13:05 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempIL3428.html
[2012-03-30 12:41:19 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempmx1740.html
[2012-03-29 22:07:13 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAr1988.html
[2012-03-29 21:11:45 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempwS3332.html
[2012-03-29 19:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempka1144.html
[2012-03-29 19:01:54 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUY4456.html
[2012-03-29 18:53:19 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempCk5716.html
[2012-03-29 16:04:53 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemptP3332.html
[2012-03-29 15:58:25 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUZ3332.html
[2012-03-29 15:58:25 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUQ3332.html
[2012-03-29 13:09:41 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempnk2628.html
[2012-03-29 11:06:36 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempQQ3560.html
[2012-03-28 22:08:16 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempJk3976.html
[2012-03-28 20:47:03 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempif3720.html
[2012-03-28 19:51:14 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempkX2548.html
[2012-03-28 14:36:03 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempEW3432.html
[2012-03-28 11:45:11 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempMK3864.html
[2012-03-27 22:37:42 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempgS3340.html
[2012-03-27 20:47:13 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempMt3280.html
[2012-03-27 15:59:22 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempgD3436.html
[2012-03-27 14:16:31 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempFB3716.html
[2012-03-27 14:16:31 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempij3716.html
[2012-03-27 13:32:06 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempeO3428.html
[2012-03-26 22:41:51 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Temphs2608.html
[2012-03-26 22:41:51 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempsv2608.html
[2012-03-26 19:16:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempCF3044.html
[2012-03-26 14:14:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempvd2844.html
[2012-03-25 20:59:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempIa1984.html
[2012-03-25 19:48:05 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempKt2804.html
[2012-03-25 19:02:17 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempQA2912.html
[2012-03-25 14:08:32 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempgC2476.html
[2012-03-25 13:10:07 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUf2772.html
[2012-03-25 00:07:16 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempwd4032.html
[2012-03-24 23:38:43 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempKt3000.html
[2012-03-24 19:45:20 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempOh2788.html
[2012-03-24 15:21:20 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempEV1060.html
[2012-03-24 14:50:44 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempzb1816.html
[2012-03-24 14:02:16 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempwZ2808.html
[2012-03-24 08:51:52 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempwm3228.html
[2012-03-23 19:31:51 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempZWN992.html
[2012-03-23 15:16:01 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempzp1316.html
[2012-03-23 14:24:05 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempuM2016.html
[2012-03-22 23:42:44 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempMZ2860.html
[2012-03-22 22:02:03 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempKX2340.html
[2012-03-22 19:45:21 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempQC2712.html
[2012-03-22 18:55:24 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempOL3760.html
[2012-03-22 16:32:03 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempgf3764.html
[2012-03-21 23:53:09 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempsb3752.html
[2012-03-21 19:53:37 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempWzq640.html
[2012-03-21 19:21:35 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUK3064.html
[2012-03-21 17:43:36 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempud3296.html
[2012-03-21 15:31:26 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempoH3336.html
[2012-03-21 11:56:28 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempgA2848.html
[2012-03-21 11:56:28 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempra2848.html
[2012-03-20 22:34:27 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempEO2988.html
[2012-03-20 20:00:07 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempUg4008.html
[2012-03-20 15:45:12 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempiT3516.html
[2012-03-19 21:01:30 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempYS2908.html
[2012-03-19 16:04:30 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempGn3808.html
[2012-03-18 18:44:08 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempdc3688.html
[2012-03-18 18:44:08 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempuo3688.html
[2012-03-18 16:24:52 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempAZ3236.html
[2012-03-18 11:00:17 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempmD3172.html
[2012-03-18 09:15:51 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempxDD952.html
[2012-03-18 00:01:27 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempyX3972.html
[2012-03-18 00:01:27 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempuT3972.html
[2012-03-17 23:31:26 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempsJd648.html
[2012-03-17 21:39:25 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemppU3636.html
[2012-03-17 15:17:50 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemplE3724.html
[2012-03-17 12:24:44 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempcK2756.html
[2012-03-17 09:02:28 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempib3516.html
[2012-03-16 23:47:55 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempCRo652.html
[2012-03-16 22:05:31 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemppB3996.html
[2012-03-15 23:28:40 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempEb4084.html
[2012-03-15 22:26:18 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempxz2940.html
[2012-03-15 18:51:46 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempij3972.html
[2012-03-14 21:00:31 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempvg3016.html
[2012-03-13 23:41:14 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempBY2584.html
[2012-03-13 21:40:31 | 000,200,468 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT
[2012-03-13 20:07:48 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempLh3260.html
[2012-03-12 23:22:43 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempfX2308.html
[2012-03-12 23:22:43 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempZh2308.html
[2012-03-12 20:45:13 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TemplN2928.html
[2012-03-11 23:32:08 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempwy4068.html
[2012-03-11 22:32:30 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\Tempew3772.html
[2012-03-11 22:14:57 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempBS1772.html
[2012-03-11 20:48:06 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempEo2452.html
[2012-03-11 10:28:28 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempJn3620.html
[2012-03-11 09:42:19 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2012-03-11 09:41:29 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2012-03-10 23:03:56 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempQB3544.html
[2012-03-10 17:39:38 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempdJ3092.html
[2012-03-10 17:33:13 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempET3592.html
[2012-03-09 23:10:30 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempBj1368.html
[2012-03-09 23:10:30 | 000,002,089 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempfW1368.html
[2012-03-09 21:44:41 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempDs3916.html
[2012-03-09 19:27:39 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempYM2864.html
[2012-03-09 19:24:41 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012-03-09 14:06:14 | 000,024,576 | ---- | C] () -- C:\Windows\System32\kdbsdk32.dll
[2012-03-08 21:18:17 | 000,002,432 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\TempbF2564.html
[2012-03-08 21:01:52 | 000,006,144 | ---- | C] () -- C:\Users\Grzesiek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-01-10 23:10:08 | 000,601,728 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2011-09-13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\System32\atipblag.dat

< End of report >