OTL logfile created on: 2012-08-09 17:31:48 - Run 1
OTL by OldTimer - Version 3.2.56.0     Folder = K:\
 Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,00 Gb Total Physical Memory | 2,36 Gb Available Physical Memory | 78,75% Memory free
6,00 Gb Paging File | 5,45 Gb Available in Paging File | 90,83% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 60,00 Gb Total Space | 38,97 Gb Free Space | 64,96% Space Free | Partition Type: NTFS
Drive D: | 389,77 Gb Total Space | 187,35 Gb Free Space | 48,07% Space Free | Partition Type: NTFS
Drive K: | 3,73 Gb Total Space | 1,70 Gb Free Space | 45,64% Space Free | Partition Type: FAT32
 
Computer Name: SLAWEK-KOMPUTER | User Name: Slawek | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-08-09 16:16:34 | 000,596,480 | ---- | M] (OldTimer Tools) -- K:\OTL.exe
PRC - [2012-07-19 21:49:18 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012-07-12 18:09:16 | 001,536,712 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_3_300_265.exe
PRC - [2011-02-25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-07-19 21:49:17 | 002,003,424 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2012-07-12 18:09:16 | 009,465,032 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_3_300_265.dll
MOD - [2011-05-20 22:35:00 | 000,247,400 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2012-08-03 16:52:27 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-07-19 21:49:18 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-03-30 01:14:42 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2012-03-07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011-05-25 09:24:45 | 002,214,504 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011-05-20 22:35:16 | 000,378,472 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2009-07-14 03:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007-05-31 16:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007-05-31 16:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
DRV - [2012-03-30 13:04:04 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012-03-29 22:28:36 | 000,029,696 | ---- | M] (ASUSTek Computer Inc) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ipfnd51.sys -- (ip100Avista)
DRV - [2012-03-07 01:03:51 | 000,612,184 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012-03-07 01:03:38 | 000,337,880 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012-03-07 01:02:14 | 000,044,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr)
DRV - [2012-03-07 01:01:53 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012-03-07 01:01:48 | 000,057,688 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2012-03-07 01:01:30 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011-05-25 09:25:04 | 000,139,368 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2011-05-25 09:24:42 | 010,589,800 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2010-12-14 05:54:12 | 000,050,280 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RtTeam60.sys -- (TEAM)
DRV - [2010-12-14 05:54:12 | 000,050,280 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RtTeam60.sys -- (RTTEAMPT)
DRV - [2010-12-14 05:54:12 | 000,027,648 | ---- | M] (Realtek                                            ) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\RtNdPt60.sys -- (RtNdPt60)
DRV - [2010-12-14 05:54:12 | 000,019,968 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RtVlan60.sys -- (VLAN)
DRV - [2010-12-14 05:54:12 | 000,019,968 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RtVlan60.sys -- (RTVLANPT)
DRV - [2010-11-20 23:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010-11-20 23:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010-11-20 23:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010-11-20 23:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010-11-20 23:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WINUSB)
DRV - [2010-11-20 23:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010-11-20 23:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010-11-20 23:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010-11-20 23:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.funmoods.com/?f=1&a=irtest1
IE - HKCU\..\SearchScopes,DefaultScope = {9913A0AD-24F3-4BFE-89DF-4A9BB5C07D69}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=112454&tt=220512_53all&babsrc=SP_ss&mntrId=166c1e71000000000000002618d91e35
IE - HKCU\..\SearchScopes\{9913A0AD-24F3-4BFE-89DF-4A9BB5C07D69}: "URL" = http://search.softonic.com/MON00005/tb_v1?q={searchTerms}&SearchSource=4&cc=
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?babsrc=HP_Prot"
FF - prefs.js..keyword.URL: "http://search.babylon.com/?affID=112454&tt=220512_53all&babsrc=KW_ss&mntrId=166c1e71000000000000002618d91e35&q="
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-03-29 22:41:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-19 21:49:18 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-19 21:49:18 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
 
[2012-05-27 12:49:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Slawek\AppData\Roaming\mozilla\Extensions
[2012-05-27 12:49:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ummca3mg.default\extensions
[2012-05-27 09:00:26 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ummca3mg.default\extensions\ffxtlbr@babylon.com
[2012-05-27 12:49:49 | 000,000,000 | ---D | M] (Yontoo) -- C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ummca3mg.default\extensions\plugin@yontoo.com
[2012-05-27 12:49:44 | 000,001,801 | ---- | M] () -- C:\Users\Slawek\AppData\Roaming\Mozilla\Firefox\Profiles\ummca3mg.default\searchplugins\funmoods.xml
[2012-05-27 09:00:46 | 000,002,060 | ---- | M] () -- C:\Users\Slawek\AppData\Roaming\Mozilla\Firefox\Profiles\ummca3mg.default\searchplugins\softonic.xml
[2012-07-23 18:27:51 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-07-23 18:27:51 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2012-07-19 21:49:18 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012-06-22 15:41:12 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-05-27 08:59:09 | 000,002,355 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012-06-22 15:41:12 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-06-22 15:41:12 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-06-22 15:41:12 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-06-22 15:41:12 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-06-22 15:41:12 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://www.google.com
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\18.0.1025.142\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\18.0.1025.142\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\18.0.1025.142\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_228.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: Nexon Game Controller (Enabled) = C:\ProgramData\NexonEU\NGM\npNxGameeu.dll
CHR - Extension: YouTube = C:\Users\Slawek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\
CHR - Extension: Szukaj w Google = C:\Users\Slawek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\
CHR - Extension: avast! WebRep = C:\Users\Slawek\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\
CHR - Extension: Gmail = C:\Users\Slawek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\
 
O1 HOSTS File: ([2009-06-10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Help the General-Search Project) - {CA4520F3-AE13-4FB1-A513-58E23991C86D} - C:\Users\Slawek\AppData\Roaming\MEDIAF~1\EXTENS~1\GENCRA~1.DLL ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Yontoo) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo\YontooIEClient.dll (Yontoo LLC)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O4 - HKCU..\Run: [KPeerNexonEU] C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe (NEXON Inc.)
O4 - HKCU..\Run: [Media Finder] "C:\Program Files\Media Finder\Media Finder.exe" /opentotray File not found
O4 - HKCU..\Run: [Microsoft Windows Manager] C:\Users\Slawek\M-10-6897-8685-3464\winmgr.exe ()
O4 - HKCU..\Run: [wmcodecdspps] C:\Users\Slawek\AppData\Local\Microsoft\Windows\2420\wmcodecdspps.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files\Media Finder\hook.html File not found
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Java Plug-in 10.4.1)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Java Plug-in 1.7.0_04)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 10.4.1)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{571C6E54-B2C3-4434-BE6C-6452E76B8B2C}: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2012-08-09 17:12:32 | 000,000,127 | RHS- | M] () - K:\autorun.inf -- [ FAT32 ]
O33 - MountPoints2\{0f8341e4-7a47-11e1-ba31-002618d91e35}\Shell - "" = AutoRun
O33 - MountPoints2\{0f8341e4-7a47-11e1-ba31-002618d91e35}\Shell\AutoRun\command - "" = J:\AutoRun.exe
O33 - MountPoints2\{90539424-79dc-11e1-a53d-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{90539424-79dc-11e1-a53d-806e6f6e6963}\Shell\AutoRun\command - "" = E:\autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-08-08 23:38:46 | 000,000,000 | ---D | C] -- C:\Users\Slawek\AppData\Roaming\hellomoto
[2012-08-08 22:12:06 | 000,000,000 | RHSD | C] -- C:\Users\Slawek\M-10-6897-8685-3464
[2012-07-11 18:40:18 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012-07-11 18:40:17 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012-07-11 18:40:17 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2012-07-11 18:40:17 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012-07-11 18:40:16 | 001,800,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012-07-11 18:40:16 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012-07-11 18:40:15 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012-07-11 18:39:57 | 002,345,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2012-07-11 18:32:24 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2012-07-11 18:32:20 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
[2012-07-11 18:32:18 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll
[2012-07-10 21:30:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES
[2012-07-10 21:30:45 | 000,000,000 | ---D | C] -- C:\Program Files\GameSpy Arcade
[1 C:\Users\Slawek\*.tmp files -> C:\Users\Slawek\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-08-09 17:30:07 | 000,758,824 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012-08-09 17:30:07 | 000,636,230 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012-08-09 17:30:07 | 000,154,954 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012-08-09 17:30:07 | 000,125,650 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012-08-09 17:23:44 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-08-09 17:23:37 | 2414,731,264 | -HS- | M] () -- C:\hiberfil.sys
[2012-08-09 17:22:08 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012-08-09 13:44:12 | 000,022,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-08-09 13:44:12 | 000,022,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-08-09 13:43:10 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012-08-08 23:57:29 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempXk2964.html
[2012-08-08 23:57:29 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempSX2964.html
[2012-08-08 23:53:56 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempAB2660.html
[2012-08-08 23:53:56 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempeY2660.html
[2012-08-08 23:51:30 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempHp3020.html
[2012-08-08 23:51:30 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempQw3020.html
[2012-08-08 23:43:17 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempCy3004.html
[2012-08-08 23:43:17 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempNj3004.html
[2012-08-08 23:08:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-08-07 22:17:24 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\Tempqa2924.html
[2012-08-07 22:17:24 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempeO2924.html
[2012-08-07 17:53:46 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempSU3068.html
[2012-08-07 17:53:46 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempJm3068.html
[2012-08-07 00:11:26 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempFc3320.html
[2012-08-07 00:11:26 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempgC3320.html
[2012-08-05 02:01:14 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempTl3200.html
[2012-08-05 02:01:14 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempEG3200.html
[2012-08-03 19:41:38 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempEP3452.html
[2012-08-03 19:41:38 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempeQ3452.html
[2012-08-03 19:11:38 | 000,001,013 | ---- | M] () -- C:\Windows\eReg.dat
[2012-08-03 19:11:27 | 000,000,667 | ---- | M] () -- C:\Users\Public\Desktop\Medal of Honor Allied Assault(tm) Breakthrough.lnk
[2012-08-03 16:52:24 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012-08-03 16:52:24 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012-08-02 16:20:18 | 000,002,286 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2012-07-31 00:35:24 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TemphA3516.html
[2012-07-31 00:35:24 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempXh3516.html
[2012-07-29 17:18:16 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempJi3124.html
[2012-07-29 17:18:16 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\Tempxa3124.html
[2012-07-26 01:09:08 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\Tempnp3396.html
[2012-07-26 01:09:08 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\Tempgn3396.html
[2012-07-24 01:25:36 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\Templa3212.html
[2012-07-24 01:25:36 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempAQ3212.html
[2012-07-20 00:23:02 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempxD3720.html
[2012-07-20 00:23:02 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\Tempmr3720.html
[2012-07-19 01:33:42 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\Tempac3128.html
[2012-07-19 01:33:42 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempMh3128.html
[2012-07-18 00:25:24 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TemppQ3596.html
[2012-07-18 00:25:24 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\Tempdp3596.html
[2012-07-16 23:13:25 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempwK3240.html
[2012-07-16 23:13:25 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempYM3240.html
[2012-07-16 17:27:16 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\Tempyt3572.html
[2012-07-16 17:27:16 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempXk3572.html
[2012-07-14 17:22:07 | 000,001,116 | ---- | M] () -- C:\Users\Public\Desktop\MOHPA Interactive Timeline.lnk
[2012-07-14 17:22:07 | 000,001,115 | ---- | M] () -- C:\Users\Public\Desktop\Music of MOH.lnk
[2012-07-12 23:34:32 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TemptR3456.html
[2012-07-12 23:34:32 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempLU3456.html
[2012-07-12 16:53:31 | 000,280,640 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012-07-11 18:39:38 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempCK2868.html
[2012-07-11 18:39:38 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempyH2868.html
[2012-07-11 00:04:35 | 000,002,432 | ---- | M] () -- C:\Users\Slawek\AppData\Local\TempHT2128.html
[2012-07-11 00:04:35 | 000,002,089 | ---- | M] () -- C:\Users\Slawek\AppData\Local\Tempzt2128.html
[2012-07-10 21:37:30 | 000,000,624 | ---- | M] () -- C:\Users\Public\Desktop\Medal of Honor Allied Assault.lnk
[1 C:\Users\Slawek\*.tmp files -> C:\Users\Slawek\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-08-08 23:54:10 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempXk2964.html
[2012-08-08 23:54:10 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempSX2964.html
[2012-08-08 23:53:44 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempAB2660.html
[2012-08-08 23:53:44 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempeY2660.html
[2012-08-08 23:51:30 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempHp3020.html
[2012-08-08 23:51:30 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempQw3020.html
[2012-08-08 23:43:17 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempCy3004.html
[2012-08-08 23:43:17 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempNj3004.html
[2012-08-07 22:17:24 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempqa2924.html
[2012-08-07 22:17:24 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempeO2924.html
[2012-08-07 16:29:10 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempSU3068.html
[2012-08-07 16:29:10 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempJm3068.html
[2012-08-05 13:56:12 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempFc3320.html
[2012-08-05 13:56:12 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempgC3320.html
[2012-08-04 14:23:48 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempTl3200.html
[2012-08-04 14:23:48 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempEG3200.html
[2012-08-03 19:11:27 | 000,000,667 | ---- | C] () -- C:\Users\Public\Desktop\Medal of Honor Allied Assault(tm) Breakthrough.lnk
[2012-07-31 16:56:06 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempEP3452.html
[2012-07-31 16:56:06 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempeQ3452.html
[2012-07-30 16:23:02 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TemphA3516.html
[2012-07-30 16:23:02 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempXh3516.html
[2012-07-26 17:44:58 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempJi3124.html
[2012-07-26 17:44:58 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempxa3124.html
[2012-07-24 11:46:39 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempnp3396.html
[2012-07-24 11:46:39 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempgn3396.html
[2012-07-21 15:01:53 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Templa3212.html
[2012-07-21 15:01:53 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempAQ3212.html
[2012-07-19 12:38:00 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempxD3720.html
[2012-07-19 12:38:00 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempmr3720.html
[2012-07-18 17:05:42 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempac3128.html
[2012-07-18 17:05:42 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempMh3128.html
[2012-07-17 16:46:01 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TemppQ3596.html
[2012-07-17 16:46:01 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempdp3596.html
[2012-07-16 21:55:00 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempwK3240.html
[2012-07-16 21:55:00 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempYM3240.html
[2012-07-14 17:22:07 | 000,001,115 | ---- | C] () -- C:\Users\Public\Desktop\Music of MOH.lnk
[2012-07-14 17:22:06 | 000,001,116 | ---- | C] () -- C:\Users\Public\Desktop\MOHPA Interactive Timeline.lnk
[2012-07-13 17:38:30 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempyt3572.html
[2012-07-13 17:38:30 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempXk3572.html
[2012-07-12 16:53:58 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TemptR3456.html
[2012-07-12 16:53:58 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempLU3456.html
[2012-07-11 18:21:14 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempCK2868.html
[2012-07-11 18:21:14 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempyH2868.html
[2012-07-10 21:37:46 | 000,001,013 | ---- | C] () -- C:\Windows\eReg.dat
[2012-07-10 21:37:30 | 000,000,624 | ---- | C] () -- C:\Users\Public\Desktop\Medal of Honor Allied Assault.lnk
[2012-07-10 16:40:01 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempHT2128.html
[2012-07-10 16:40:01 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempzt2128.html
[2012-07-09 16:29:17 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Temptz3188.html
[2012-07-09 16:29:17 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempTD3188.html
[2012-07-06 19:15:53 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempAt3028.html
[2012-07-06 19:15:53 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempAN3028.html
[2012-07-06 18:02:48 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempdT1476.html
[2012-07-06 18:02:48 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempoA1476.html
[2012-07-05 15:59:08 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempjS1584.html
[2012-07-05 15:59:08 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempKD1584.html
[2012-07-05 15:37:08 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempnJ3040.html
[2012-07-05 15:37:08 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempOU3040.html
[2012-07-04 16:36:15 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TemphF3052.html
[2012-07-04 16:36:15 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempmx3052.html
[2012-07-03 18:45:17 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TemprQ2852.html
[2012-07-03 18:45:17 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TemplX2852.html
[2012-07-02 18:00:51 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempPM3048.html
[2012-07-02 18:00:51 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempyV3048.html
[2012-07-02 17:06:18 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempVE3228.html
[2012-07-02 17:06:18 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempgW3228.html
[2012-07-01 11:33:59 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempLo3540.html
[2012-07-01 11:33:59 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempEp3540.html
[2012-06-29 13:33:42 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempsU3248.html
[2012-06-29 13:33:42 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempnJ3248.html
[2012-06-27 22:12:07 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempkw2952.html
[2012-06-27 22:12:07 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempiw2952.html
[2012-06-26 15:33:44 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempQo3200.html
[2012-06-26 15:33:44 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempqh3200.html
[2012-06-25 15:57:19 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempmi3212.html
[2012-06-25 15:57:19 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempJQ3212.html
[2012-06-24 12:08:28 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempxM3280.html
[2012-06-24 12:08:28 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempRu3280.html
[2012-06-23 12:10:01 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempAx3308.html
[2012-06-23 12:10:01 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempLW3308.html
[2012-06-22 15:40:05 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempwN1304.html
[2012-06-22 15:40:05 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempoX1304.html
[2012-06-21 21:18:13 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempAB3328.html
[2012-06-21 21:18:13 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempoh3328.html
[2012-06-20 16:25:59 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempok3240.html
[2012-06-20 16:25:59 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempXs3240.html
[2012-06-19 16:32:24 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempIq3284.html
[2012-06-19 16:32:24 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempTm3284.html
[2012-06-18 15:18:48 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempmz3216.html
[2012-06-18 15:18:48 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempQZ3216.html
[2012-06-14 18:04:07 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempOx3744.html
[2012-06-14 18:04:07 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempHr3744.html
[2012-06-13 17:31:50 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TemphM3356.html
[2012-06-13 17:31:50 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempyP3356.html
[2012-06-12 18:11:30 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempyY3276.html
[2012-06-12 18:11:30 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempSF3276.html
[2012-06-11 19:05:54 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempbj3432.html
[2012-06-11 19:05:54 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempFt3432.html
[2012-06-11 16:42:48 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempkh3224.html
[2012-06-11 16:42:48 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempIG3224.html
[2012-06-10 10:23:38 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Templr3264.html
[2012-06-10 10:23:38 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempJM3264.html
[2012-06-09 23:13:55 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempYd2992.html
[2012-06-09 23:13:55 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TemprB2992.html
[2012-06-08 17:12:00 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempAR3168.html
[2012-06-08 17:12:00 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempiI3168.html
[2012-06-07 08:37:14 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempoe3156.html
[2012-06-07 08:37:14 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempcr3156.html
[2012-06-06 17:05:33 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempMn3280.html
[2012-06-06 17:05:33 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempec3280.html
[2012-06-04 17:25:44 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempZH3440.html
[2012-06-04 17:25:44 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempqo3440.html
[2012-06-02 15:15:48 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempga3672.html
[2012-06-02 15:15:48 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Temprg3672.html
[2012-06-01 23:52:11 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempuT2124.html
[2012-06-01 23:52:11 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempwJ2124.html
[2012-05-31 18:15:32 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempgB3476.html
[2012-05-31 18:15:32 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempDJ3476.html
[2012-05-28 17:29:30 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempSr3652.html
[2012-05-28 17:29:30 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempIP3652.html
[2012-05-27 09:05:25 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempLm3164.html
[2012-05-27 09:05:25 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempyJ3164.html
[2012-05-27 08:45:31 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempLa3244.html
[2012-05-27 08:45:31 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempYn3244.html
[2012-05-25 18:34:23 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempGa3336.html
[2012-05-25 18:34:23 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempYA3336.html
[2012-05-24 23:08:57 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempbJ3096.html
[2012-05-24 23:08:57 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempiM3096.html
[2012-05-23 21:11:38 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempRy3288.html
[2012-05-23 21:11:38 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempEV3288.html
[2012-05-22 17:48:03 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempGG3284.html
[2012-05-22 17:48:03 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TemprS3284.html
[2012-05-21 22:06:18 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempzI3164.html
[2012-05-21 22:06:18 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempiz3164.html
[2012-05-20 09:40:42 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempxo3148.html
[2012-05-20 09:40:42 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempwT3148.html
[2012-05-19 09:13:14 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempdJ2824.html
[2012-05-19 09:13:14 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempDH2824.html
[2012-05-17 17:44:11 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempkz3128.html
[2012-05-17 17:44:11 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TemphX3128.html
[2012-05-13 07:41:01 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Temppt3376.html
[2012-05-13 07:41:01 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempwn3376.html
[2012-05-11 03:20:45 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempKu2504.html
[2012-05-11 03:20:45 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempLH2504.html
[2012-05-10 15:59:50 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempNm2652.html
[2012-05-10 15:59:50 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempxV2652.html
[2012-05-05 20:19:30 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempUA2784.html
[2012-05-05 20:19:30 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempiB2784.html
[2012-05-05 14:38:52 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempIy2796.html
[2012-05-05 14:38:52 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempxL2796.html
[2012-05-04 15:29:12 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempvP2704.html
[2012-05-04 15:29:12 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TemplH2704.html
[2012-05-03 12:00:58 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempsm3208.html
[2012-05-03 12:00:58 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempLe3208.html
[2012-05-03 00:39:11 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempUY2600.html
[2012-05-03 00:39:11 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempmY2600.html
[2012-04-30 15:42:34 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempqf2716.html
[2012-04-30 15:42:34 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempZp2716.html
[2012-04-29 12:13:10 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempaq2708.html
[2012-04-29 12:13:10 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempMC2708.html
[2012-04-28 13:44:37 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempXH3212.html
[2012-04-28 13:44:37 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempUo3212.html
[2012-04-22 14:02:53 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempuE3316.html
[2012-04-22 14:02:53 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempWZ3316.html
[2012-04-21 22:42:44 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempBm2764.html
[2012-04-21 22:42:44 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempzP2764.html
[2012-04-21 20:30:33 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempfh3256.html
[2012-04-21 20:30:33 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempTn3256.html
[2012-04-16 21:00:44 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempRZ3356.html
[2012-04-16 21:00:44 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempOd3356.html
[2012-04-16 17:01:25 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempND3208.html
[2012-04-16 17:01:25 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempnN3208.html
[2012-04-14 14:01:11 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempWs3516.html
[2012-04-14 14:01:11 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempmI3516.html
[2012-04-13 15:44:47 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempqU2612.html
[2012-04-13 15:44:47 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempjN2612.html
[2012-04-12 16:28:41 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TemplD3256.html
[2012-04-12 16:28:41 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempak3256.html
[2012-04-10 17:35:02 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempiH3432.html
[2012-04-10 17:35:02 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempWn3432.html
[2012-04-09 09:12:24 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempIV3408.html
[2012-04-09 09:12:24 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempZW3408.html
[2012-04-08 23:10:54 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempIi3356.html
[2012-04-08 23:10:54 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempnU3356.html
[2012-04-07 15:51:35 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempCg3000.html
[2012-04-07 15:51:35 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempte3000.html
[2012-04-07 12:47:46 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempTo3052.html
[2012-04-07 12:47:46 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempNd3052.html
[2012-04-06 19:40:41 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempIY2976.html
[2012-04-06 19:40:41 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TemplU2976.html
[2012-04-06 10:34:58 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempnm2996.html
[2012-04-06 10:34:58 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TemplP2996.html
[2012-04-05 11:37:03 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempSm3000.html
[2012-04-05 11:37:03 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempYO3000.html
[2012-04-04 16:00:13 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TemplD3076.html
[2012-04-04 16:00:13 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempGD3076.html
[2012-04-02 17:05:00 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempcf2916.html
[2012-04-02 17:05:00 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempmJ2916.html
[2012-04-01 09:56:02 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Temphh2692.html
[2012-04-01 09:56:02 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\Tempvx2692.html
[2012-03-31 03:19:36 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempuW2420.html
[2012-03-31 03:19:36 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempcV2420.html
[2012-03-30 13:05:46 | 000,000,001 | ---- | C] () -- C:\Windows\System32\SI.bin
[2012-03-30 11:16:05 | 000,002,432 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempqZ2844.html
[2012-03-30 11:16:05 | 000,002,089 | ---- | C] () -- C:\Users\Slawek\AppData\Local\TempZT2844.html
[2011-05-20 22:35:28 | 000,304,744 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe
[2011-04-12 07:08:42 | 000,758,824 | ---- | C] () -- C:\Windows\System32\perfh015.dat
[2011-04-12 07:08:42 | 000,337,158 | ---- | C] () -- C:\Windows\System32\perfi015.dat
[2011-04-12 07:08:42 | 000,154,954 | ---- | C] () -- C:\Windows\System32\perfc015.dat
[2011-04-12 07:08:42 | 000,038,710 | ---- | C] () -- C:\Windows\System32\perfd015.dat
[2010-11-20 23:29:26 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe

< End of report >