GMER 1.0.15.15641 - http://www.gmer.net Rootkit scan 2012-08-25 11:13:41 Windows 6.1.7601 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2 ST31000524AS rev.JC4B Running: 2w72fw6e.exe; Driver: C:\Users\Mariusz\AppData\Local\Temp\pxdiypow.sys ---- Kernel code sections - GMER 1.0.15 ---- .text ntkrnlpa.exe!ZwRollbackEnlistment + 140D 82C8A3C9 1 Byte [06] .text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82CC3D52 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3} ---- User code sections - GMER 1.0.15 ---- .text C:\Program Files\ESET\ESET Smart Security\ekrn.exe[1924] kernel32.dll!SetUnhandledExceptionFilter 75FBF4FB 4 Bytes [C2, 04, 00, 00] ---- Devices - GMER 1.0.15 ---- Device \Driver\usbuhci \Device\USBPDO-0 hcmon.sys Device \Driver\usbuhci \Device\USBPDO-1 hcmon.sys Device \Driver\usbuhci \Device\USBPDO-2 hcmon.sys Device \Driver\usbuhci \Device\USBPDO-3 hcmon.sys Device \Driver\usbehci \Device\USBPDO-4 hcmon.sys Device \Driver\usbuhci \Device\USBPDO-5 hcmon.sys Device \Driver\usbuhci \Device\USBPDO-6 hcmon.sys AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) Device \Driver\usbehci \Device\USBPDO-7 hcmon.sys AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) Device \Driver\usbhub \Device\USBPDO-8 hcmon.sys AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) AttachedDevice \Driver\volmgr \Device\HarddiskVolume4 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) Device \Driver\usbhub \Device\00000075 hcmon.sys Device \Driver\usbhub \Device\00000076 hcmon.sys Device \Driver\usbhub \Device\00000077 hcmon.sys Device \Driver\usbhub \Device\00000078 hcmon.sys Device \Driver\usbhub \Device\00000079 hcmon.sys Device \Driver\ACPI_HAL \Device\0000005c halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) Device \Driver\usbuhci \Device\USBFDO-0 hcmon.sys Device \Driver\usbuhci \Device\USBFDO-1 hcmon.sys Device \Driver\usbhub \Device\0000007a hcmon.sys Device \Driver\usbuhci \Device\USBFDO-2 hcmon.sys Device \Driver\usbhub \Device\0000007b hcmon.sys Device \Driver\usbuhci \Device\USBFDO-3 hcmon.sys Device \Driver\usbhub \Device\0000007c hcmon.sys Device \Driver\usbehci \Device\USBFDO-4 hcmon.sys Device \Driver\usbuhci \Device\USBFDO-5 hcmon.sys Device \Driver\usbuhci \Device\USBFDO-6 hcmon.sys Device \Driver\usbehci \Device\USBFDO-7 hcmon.sys ---- Threads - GMER 1.0.15 ---- Thread System [4:1588] B2835F2E ---- Files - GMER 1.0.15 ---- File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0003\opr0FTA6.tmp 109398 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0004\opr0FTAB.tmp 24999 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0004\opr0FTAM.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0006\opr0FTI0.tmp 172963 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\sesn\opr0FX4K.tmp 6156 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001A\opr0FVJL.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001A\opr0FVJU.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001A\opr0FVJW.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKH.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKZ.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVK8.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVK9.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKA.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKB.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKC.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKD.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKE.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKF.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKG.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKI.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKJ.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKK.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKL.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKM.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKN.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKO.tmp 12044 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKP.tmp 11936 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKR.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKS.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKT.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKU.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKV.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKW.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKX.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVKY.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVL0.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVL2.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVL3.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVL4.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVL5.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVL6.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVL7.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVL8.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVL9.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVLA.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVLB.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVLC.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVLD.tmp 14321 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVLF.tmp 67577 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVLX.tmp 4892 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVM6.tmp 16920 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVMN.tmp 84964 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVMO.tmp 94861 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001B\opr0FVN2.tmp 49456 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVPI.tmp 5451 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVNM.tmp 75870 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVOD.tmp 28765 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVOQ.tmp 28602 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVOR.tmp 28855 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVOY.tmp 31567 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVP0.tmp 17907 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVP2.tmp 24994 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVP3.tmp 17278 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVP5.tmp 7441 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVP8.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVP9.tmp 8645 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVPA.tmp 8105 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVPC.tmp 30390 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVPM.tmp 25247 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVPN.tmp 13531 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVPQ.tmp 150631 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVPR.tmp 256505 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVPS.tmp 367021 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVPT.tmp 70621 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVPU.tmp 30102 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVPW.tmp 39367 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVPX.tmp 49819 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVPY.tmp 19466 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVPZ.tmp 22631 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVQ0.tmp 27464 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVQ1.tmp 25096 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVQ3.tmp 10272 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVQ4.tmp 18953 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVQ5.tmp 35150 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVQ6.tmp 30678 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVQ7.tmp 13283 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVQ8.tmp 3213 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVQ9.tmp 6424 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVQB.tmp 4921 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVQH.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVQK.tmp 13860 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVQL.tmp 70850 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVQP.tmp 24728 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVQQ.tmp 55355 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001C\opr0FVQT.tmp 15015 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001D\opr0FVTG.tmp 67732 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001D\opr0FVTH.tmp 48245 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001D\opr0FVTI.tmp 63504 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001D\opr0FVTJ.tmp 5183 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001D\opr0FVTL.tmp 18362 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001D\opr0FVTM.tmp 8993 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001D\opr0FVTN.tmp 10191 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001D\opr0FVTS.tmp 44995 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001D\opr0FVTV.tmp 39634 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001D\opr0FVTY.tmp 41862 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001E\opr0FVUS.tmp 76225 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001E\opr0FVUT.tmp 100931 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001E\opr0FVUU.tmp 35324 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001E\opr0FVUV.tmp 39141 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001E\opr0FVUW.tmp 8952 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001E\opr0FVUX.tmp 50467 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001E\opr0FVUY.tmp 26839 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001E\opr0FVUZ.tmp 14941 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001E\opr0FVX2.tmp 63427 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001E\opr0FVX5.tmp 11950 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001E\opr0FVX7.tmp 28360 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001E\opr0FVXA.tmp 27320 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001E\opr0FVXB.tmp 35340 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001E\opr0FVXC.tmp 50051 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZT.tmp 11473 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW0I.tmp 9970 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVYH.tmp 63739 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZ1.tmp 54856 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZ4.tmp 120600 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZ5.tmp 108802 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZ6.tmp 54515 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZ7.tmp 52195 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZ8.tmp 59109 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZ9.tmp 21001 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZC.tmp 46009 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZD.tmp 56479 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZE.tmp 32130 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZF.tmp 39978 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZG.tmp 26727 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZO.tmp 50339 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZP.tmp 29530 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZQ.tmp 36274 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZS.tmp 22532 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZU.tmp 17697 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZV.tmp 27169 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZX.tmp 23335 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZY.tmp 15340 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FVZZ.tmp 17318 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW00.tmp 18257 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW01.tmp 35771 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW04.tmp 3236 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW05.tmp 97085 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW06.tmp 19957 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW07.tmp 17613 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW08.tmp 3371 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW09.tmp 21898 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW0A.tmp 17826 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW0B.tmp 17451 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW0G.tmp 2918 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW0H.tmp 4981 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW0R.tmp 10477 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW0Z.tmp 20376 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW11.tmp 31940 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW13.tmp 33728 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW16.tmp 13329 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW18.tmp 376231 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW19.tmp 41729 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW1A.tmp 29917 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW1B.tmp 23401 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW1C.tmp 34233 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW1D.tmp 26205 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW1E.tmp 41942 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW1F.tmp 43943 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW1G.tmp 37378 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW1H.tmp 22098 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW1I.tmp 62437 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW1J.tmp 28992 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW1L.tmp 29260 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW1M.tmp 22700 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW1N.tmp 43223 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW1O.tmp 20233 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW1P.tmp 62060 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_001F\opr0FW1Q.tmp 18103 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW2H.tmp 23290 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW3G.tmp 31940 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW1S.tmp 18536 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW1V.tmp 12547 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW20.tmp 39263 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW21.tmp 19058 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW24.tmp 37698 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW25.tmp 12547 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW26.tmp 10645 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW27.tmp 19543 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW28.tmp 10970 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW2I.tmp 378629 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW2J.tmp 19018 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW2L.tmp 32545 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW2M.tmp 57793 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW2N.tmp 19023 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW2O.tmp 21154 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW34.tmp 24039 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW35.tmp 12657 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW37.tmp 28464 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW38.tmp 13571 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW39.tmp 26046 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW3A.tmp 13192 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW3B.tmp 18369 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW3C.tmp 12467 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW3H.tmp 0 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW3I.tmp 7749 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW3N.tmp 28845 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW3O.tmp 35065 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW3Q.tmp 17815 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW3R.tmp 40365 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW3U.tmp 27880 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW3W.tmp 40888 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW3X.tmp 15615 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW3Y.tmp 101659 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW43.tmp 41676 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW45.tmp 25689 bytes File C:\Users\Mariusz\AppData\Local\Opera\Opera\cache\g_0020\opr0FW4C.tmp 61823 bytes ---- EOF - GMER 1.0.15 ----