OTL logfile created on: 2012-11-02 14:04:00 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Soniaczek\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,99 Gb Total Physical Memory | 2,40 Gb Available Physical Memory | 80,09% Memory free
6,19 Gb Paging File | 5,81 Gb Available in Paging File | 93,85% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116,44 Gb Total Space | 4,06 Gb Free Space | 3,49% Space Free | Partition Type: NTFS
Drive E: | 114,98 Gb Total Space | 102,61 Gb Free Space | 89,24% Space Free | Partition Type: NTFS
 
Computer Name: SONIACZEK-PC | User Name: Soniaczek | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-11-02 13:58:25 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Soniaczek\Desktop\OTL.exe
PRC - [2009-04-11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008-01-21 03:24:02 | 000,498,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\HelpPane.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2007-05-11 00:49:00 | 000,017,024 | ---- | M] () -- C:\Program Files\Adobe\Reader 8.0\Reader\ViewerPS.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2012-10-08 20:08:30 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-08-30 16:56:10 | 000,722,528 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe -- (vToolbarUpdater12.2.6)
SRV - [2012-07-13 12:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-06-14 23:17:46 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-01-31 15:02:52 | 007,391,072 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2011-11-10 14:17:31 | 000,167,264 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe -- (AVG Security Toolbar Service)
SRV - [2011-02-08 04:33:42 | 000,269,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG10\avgwdsvc.exe -- (avgwd)
SRV - [2010-05-04 12:07:22 | 000,503,080 | ---- | M] (Nero AG) [Auto | Stopped] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2009-04-19 16:06:12 | 000,028,762 | ---- | M] (MyWebSearch.com) [Auto | Stopped] -- C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE -- (MyWebSearchService)
SRV - [2008-09-05 19:21:48 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto | Stopped] -- C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe -- (ConfigFree Service)
SRV - [2008-08-26 15:26:44 | 000,099,720 | ---- | M] (Toshiba Europe GmbH) [Auto | Stopped] -- C:\Program Files\Toshiba TEMPRO\TempoSVC.exe -- (TempoMonitoringService)
SRV - [2008-08-25 09:58:20 | 000,077,824 | ---- | M] (Toshiba) [On_Demand | Stopped] -- C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe -- (SmartFaceVWatchSrv)
SRV - [2008-08-19 21:34:32 | 000,083,312 | ---- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe -- (TNaviSrv)
SRV - [2008-08-18 23:22:02 | 000,431,456 | ---- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe -- (TosCoSrv)
SRV - [2008-07-15 16:16:58 | 000,106,496 | ---- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Program Files\Toshiba\SMARTLogService\TosIPCSrv.exe -- (TOSHIBA SMART Log Service)
SRV - [2008-05-22 22:54:42 | 000,120,168 | ---- | M] (TOSHIBA CORPORATION) [Auto | Stopped] -- c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2008-01-21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007-11-21 18:23:32 | 000,129,632 | ---- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Windows\System32\TODDSrv.exe -- (TODDSrv)
SRV - [2007-07-24 10:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Stopped] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2006-11-02 19:40:12 | 000,174,656 | ---- | M] () [Auto | Stopped] -- C:\Windows\System32\PSIService.exe -- (ProtexisLicensing)
SRV - [2006-10-05 11:10:12 | 000,009,216 | ---- | M] (Agere Systems) [Auto | Stopped] -- C:\Windows\System32\agrsmsvc.exe -- (AgereModemAudio)
SRV - [2006-08-23 16:39:48 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\TpChoice.sys -- (TpChoice)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (Tosrfcom)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - [2012-08-30 16:56:13 | 000,027,496 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtpx86.sys -- (avgtp)
DRV - [2011-05-27 18:05:18 | 000,134,480 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)
DRV - [2011-04-04 23:59:56 | 000,297,168 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2011-03-16 15:03:20 | 000,032,592 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2011-03-01 13:25:18 | 000,034,896 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2011-02-22 07:12:38 | 000,022,992 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AVGIDSEH.sys -- (AVGIDSEH)
DRV - [2011-02-10 06:53:30 | 000,028,624 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AVGIDSShim.sys -- (AVGIDSShim)
DRV - [2011-02-10 06:53:28 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)
DRV - [2011-01-07 05:41:46 | 000,248,656 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2009-07-22 00:22:24 | 000,028,592 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tap0901.sys -- (tap0901)
DRV - [2009-04-22 19:45:16 | 000,005,632 | ---- | M] () [File_System | System | Stopped] -- C:\Windows\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2008-09-17 05:01:02 | 003,930,112 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2008-09-09 11:58:32 | 000,099,216 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\jmcr.sys -- (JMCR)
DRV - [2008-08-19 21:01:44 | 000,279,376 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tos_sps32.sys -- (tos_sps32)
DRV - [2008-08-06 15:26:08 | 000,124,928 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2008-07-15 19:59:06 | 000,017,960 | ---- | M] (Chicony Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\UVCFTR_S.SYS -- (UVCFTR)
DRV - [2008-05-07 11:30:12 | 000,025,896 | ---- | M] (COMPAL ELECTRONIC INC.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\LPCFilter.sys -- (LPCFilter)
DRV - [2008-04-28 05:29:26 | 003,658,752 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32)
DRV - [2008-02-06 23:23:46 | 000,166,448 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2008-01-23 22:25:32 | 000,027,136 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tapvpn.sys -- (tapvpn)
DRV - [2007-12-14 11:53:24 | 000,024,200 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tdcmdpst.sys -- (tdcmdpst)
DRV - [2007-11-09 13:00:52 | 000,023,640 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ)
DRV - [2006-11-28 14:11:00 | 001,161,888 | ---- | M] (Agere Systems) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2006-10-23 16:32:20 | 000,009,216 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfec.sys -- (tosrfec)
DRV - [2005-08-17 06:46:26 | 000,093,872 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2005-08-17 06:46:20 | 000,008,272 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2005-08-17 06:45:00 | 000,058,352 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdbus.sys -- (sscdbus)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=TSEA&bmod=TSEA
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000&st=18&barid={6753F0A6-4362-4A6D-8640-801160A86B9D}
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}: "URL" = http://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZRxdm185YYPL&fl=0&ptb=ote02w5NGwy87vSnjYFmJQ&url=http://search.mywebsearch.com/mywebsearch/dft_redir.jhtml&st=sb&searchfor={searchTerms}&si=36602
IE - HKLM\..\SearchScopes\{A79B1241-E458-43B7-862C-4F08892C3915}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSEA;
IE - HKLM\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=18&q={searchTerms}&barid={6753F0A6-4362-4A6D-8640-801160A86B9D}
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=TSEA&bmod=TSEA;
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.shareazaweb.com/sidebar.html?src=ssb
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchPage = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000&st=18&barid={6753F0A6-4362-4A6D-8640-801160A86B9D}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: *{00A6FAF6-072E-44cf-8957-5838F569A31D} - No CLSID value found
IE - HKCU\..\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (MyWebSearch.com)
IE - HKCU\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKCU\..\URLSearchHook: {CA3EB689-8F09-4026-AA10-B9534C691CE0} - C:\Program Files\Burn4Free DB Toolbar\tbhelper.dll ()
IE - HKCU\..\URLSearchHook: {F08555B0-9CC3-11D2-AA8E-000000000567} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {56256A51-B582-467e-B8D4-7786EDA79AE0}
IE - HKCU\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=NRO&o=101913&src=crm&q={searchTerms}&locale=en_US
IE - HKCU\..\SearchScopes\{18EAB056-9057-F224-FD4C-1F6569C4D8D2}: "URL" = http://www.plusnetwork.com/s/?q={searchTerms}&iesrc={referrer:source?}
IE - HKCU\..\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}: "URL" = http://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZRxdm185YYPL&fl=0&ptb=ote02w5NGwy87vSnjYFmJQ&url=http://search.mywebsearch.com/mywebsearch/dft_redir.jhtml&st=sb&searchfor={searchTerms}&si=36602
IE - HKCU\..\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E}: "URL" = http://127.0.0.1:4664/search&s=7R7pA1zXUymZg2HPUj0SBucGS8s?q={searchTerms}
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = https://isearch.avg.com/search?cid={A0BE0877-49AE-466E-B169-72F4E11B57F9}&mid=f22cc409756647d6a057d16a1ce16944-adc0637e09de574023b0a34866d739343b32e787&lang=pl&ds=AVG&pr=fr&d=2011-12-13 09:43:33&v=12.2.5.32&sap=dsp&q={searchTerms}
IE - HKCU\..\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}: "URL" = http://www.bigseekpro.com/search/browser/burn4free/{E7CF31B8-7A75-4CE0-978C-D9DD8E7FFDEB}?q={searchTerms}
IE - HKCU\..\SearchScopes\{A79B1241-E458-43B7-862C-4F08892C3915}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7GGLL_pl
IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=18&q={searchTerms}&barid={6753F0A6-4362-4A6D-8640-801160A86B9D}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search"
FF - prefs.js..browser.search.defaultthis.engineName: "4shared.com Customized Web Search"
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "SweetIM Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://home.sweetim.com/?crg=3.1010000&st=12&barid={6753F0A6-4362-4A6D-8640-801160A86B9D}"
FF - prefs.js..extensions.enabledAddons: {EEE6C361-6118-11DC-9C72-001320C79847}:1.5.0.2
FF - prefs.js..extensions.enabledAddons: {09ec805c-cb2e-4d53-b0d3-a75a428b81c7}:3.15.1.0
FF - prefs.js..extensions.enabledItems: {09ec805c-cb2e-4d53-b0d3-a75a428b81c7}:3.2.5.2
FF - prefs.js..extensions.enabledItems: radiobar@toolbar:1.0.0
FF - prefs.js..extensions.enabledItems: ShopperReports@ShopperReports.com:3.0.489.0
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:10.0.0.1178
FF - prefs.js..extensions.enabledItems: avg@igeared:6.011.025.001
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2233703&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "AVG Secure Search"
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2233703&SearchSource=3&q={searchTerms}"
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "AVG Secure Search"
FF - prefs.js..browser.startup.homepage: "http://radiobar.toolbarhome.com/?hp=df"
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2233703&q="
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\12.2.6\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Picasa2\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.0: C:\Users\Soniaczek\AppData\Roaming\Facebook\npfbplugin_1_0_0.dll ( )
FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Users\Soniaczek\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( )
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Soniaczek\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Soniaczek\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ShopperReports@ShopperReports.com: C:\Program Files\ShopperReports3\bin\3.0.489.0\firefox\firefoxtoolbar\extensions [2010-08-23 11:40:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@igeared: C:\Program Files\AVG\AVG10\Toolbar\Firefox\avg@igeared [2011-05-12 20:13:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG10\Firefox4\ [2012-09-17 19:03:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\12.2.5.32\ [2012-08-30 16:56:18 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-06-27 18:46:28 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-06-27 18:46:28 | 000,000,000 | ---D | M]
 
[2009-09-01 21:51:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Soniaczek\AppData\Roaming\mozilla\Extensions
[2012-09-28 22:30:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Soniaczek\AppData\Roaming\mozilla\Firefox\Profiles\ix1bimdl.default\extensions
[2012-09-28 22:30:22 | 000,000,000 | ---D | M] (4shared.com Community Toolbar) -- C:\Users\Soniaczek\AppData\Roaming\mozilla\Firefox\Profiles\ix1bimdl.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}
[2010-08-28 11:56:24 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Soniaczek\AppData\Roaming\mozilla\Firefox\Profiles\ix1bimdl.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011-03-10 20:49:19 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Soniaczek\AppData\Roaming\mozilla\Firefox\Profiles\ix1bimdl.default\extensions\engine@conduit.com
[2010-08-23 11:34:51 | 000,000,000 | ---D | M] (RadioBar Toolbar) -- C:\Users\Soniaczek\AppData\Roaming\mozilla\Firefox\Profiles\ix1bimdl.default\extensions\radiobar@toolbar
[2012-06-27 18:39:46 | 000,172,310 | ---- | M] () (No name found) -- C:\Users\Soniaczek\AppData\Roaming\mozilla\firefox\profiles\ix1bimdl.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
[2011-03-11 20:54:01 | 000,002,256 | ---- | M] () -- C:\Users\Soniaczek\AppData\Roaming\mozilla\firefox\profiles\ix1bimdl.default\searchplugins\askcom.xml
[2010-01-20 12:13:42 | 000,000,925 | ---- | M] () -- C:\Users\Soniaczek\AppData\Roaming\mozilla\firefox\profiles\ix1bimdl.default\searchplugins\conduit.xml
[2010-08-23 11:41:59 | 000,009,949 | ---- | M] () -- C:\Users\Soniaczek\AppData\Roaming\mozilla\firefox\profiles\ix1bimdl.default\searchplugins\mywebsearch.xml
[2012-09-02 11:29:53 | 000,004,117 | ---- | M] () -- C:\Users\Soniaczek\AppData\Roaming\mozilla\firefox\profiles\ix1bimdl.default\searchplugins\sweetim.xml
[2010-08-23 11:39:39 | 000,001,598 | ---- | M] () -- C:\Users\Soniaczek\AppData\Roaming\mozilla\firefox\profiles\ix1bimdl.default\searchplugins\web-search.xml
[2012-06-25 09:08:26 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-06-14 23:19:07 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2009-04-19 16:06:12 | 000,024,684 | ---- | M] (MyWebSearch.com) -- C:\Program Files\mozilla firefox\plugins\NPMyWebS.dll
[2012-06-15 00:13:23 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-08-30 16:56:25 | 000,003,769 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
[2012-06-15 00:13:23 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-06-15 00:13:23 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-06-15 00:13:23 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-06-15 00:13:23 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-06-15 00:13:23 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - homepage: http://home.sweetim.com/?crg=3.1010000&st=12&barid={6753F0A6-4362-4A6D-8640-801160A86B9D}
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://home.sweetim.com/?crg=3.1010000&st=12&barid={6753F0A6-4362-4A6D-8640-801160A86B9D}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Soniaczek\AppData\Local\Google\Chrome\Application\22.0.1229.94\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Soniaczek\AppData\Local\Google\Chrome\Application\22.0.1229.94\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Soniaczek\AppData\Local\Google\Chrome\Application\22.0.1229.94\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: AVG Internet Security (Enabled) = C:\Users\Soniaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\10.0.0.1409_0\plugins/avgnpss.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java(TM) Platform SE 6 U13 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeploytk.dll
CHR - plugin: Java(TM) Platform SE 6 U15 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Picasa2\npPicasa3.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)  (Enabled) = C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Soniaczek\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll
CHR - plugin: Facebook Plugin (Enabled) = C:\Users\Soniaczek\AppData\Roaming\Facebook\npfbplugin_1_0_0.dll
CHR - plugin: Facebook Plugin (Enabled) = C:\Users\Soniaczek\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Users\Soniaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Szukaj w Google = C:\Users\Soniaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: SweetIM for Facebook = C:\Users\Soniaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of 
CHR - Extension: SweetIM for Facebook = C:\Users\Soniaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\
CHR - Extension: AVG Safe Search = C:\Users\Soniaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\10.0.0.1409_0\
CHR - Extension: AVG Secure Search = C:\Users\Soniaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\12.2.5.32_0\
CHR - Extension: Gmail = C:\Users\Soniaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: YouTube = C:\Users\Soniaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Szukaj w Google = C:\Users\Soniaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: SweetIM for Facebook = C:\Users\Soniaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of 
CHR - Extension: SweetIM for Facebook = C:\Users\Soniaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\
CHR - Extension: AVG Safe Search = C:\Users\Soniaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\10.0.0.1409_0\
CHR - Extension: AVG Secure Search = C:\Users\Soniaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\12.2.5.32_0\
CHR - Extension: Gmail = C:\Users\Soniaczek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2006-09-18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (MyWebSearch Search Assistant BHO) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (MyWebSearch.com)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (mwsBar BHO) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (MyWebSearch.com)
O2 - BHO: (ShopperReports) - {100EB1FD-D03E-47fd-81F3-EE91287F9465} - C:\Program Files\ShopperReports3\bin\3.0.489.0\ShopperReports.dll File not found
O2 - BHO: (My Global Search Bar BHO) - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (My Global Search)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\12.2.5.32\AVG Secure Search_toolbar.dll ()
O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll File not found
O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Burn4Free DB Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (MyWebSearch.com)
O3 - HKLM\..\Toolbar: (Burn4Free DB Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\Burn4Free DB Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (My Global Search Bar) - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (My Global Search)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\12.2.5.32\AVG Secure Search_toolbar.dll ()
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {196C3A46-4758-433D-A600-802C804AF39C} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Burn4Free DB Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\Burn4Free DB Toolbar\tbcore3.dll ()
O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\Toshiba\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [49269873] C:\ProgramData\49269873\49269873.exe File not found
O4 - HKLM..\Run: [49270873] C:\ProgramData\49270873\ctfmon.exe File not found
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [Camera Assistant Software] C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe (Chicony)
O4 - HKLM..\Run: [cfFncEnabler.exe] cfFncEnabler.exe File not found
O4 - HKLM..\Run: [Google EULA Launcher] c:\Program Files\Google\Google EULA\GoogleEULALauncher.exe ( )
O4 - HKLM..\Run: [HDMICtrlMan] C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe (TOSHIBA Corporation.)
O4 - HKLM..\Run: [HF_G_Jul] C:\Program Files\AVG Secure Search\HF_G_Jul.exe ()
O4 - HKLM..\Run: [HSON] C:\Program Files\Toshiba\TBS\HSON.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe (TOSHIBA Electronics, Inc.)
O4 - HKLM..\Run: [ITSecMng] C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe ( TOSHIBA CORPORATION)
O4 - HKLM..\Run: [KeNotify] C:\Program Files\Toshiba\Utilities\KeNotify.exe ()
O4 - HKLM..\Run: [My Web Search Bar Search Scope Monitor] C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE (MyWebSearch.com)
O4 - HKLM..\Run: [MyWebSearch Email Plugin] C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (MyWebSearch.com)
O4 - HKLM..\Run: [MyWebSearch Plugin] C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL (MyWebSearch.com)
O4 - HKLM..\Run: [NDSTray.exe] NDSTray.exe File not found
O4 - HKLM..\Run: [ROC_roc_dec12] C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe ()
O4 - HKLM..\Run: [ROC_ROC_JULY_P1] C:\Program Files\AVG Secure Search\ROC_ROC_JULY_P1.exe ()
O4 - HKLM..\Run: [SmoothView] C:\Program Files\Toshiba\SmoothView\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe (TOSHIBA)
O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe (TOSHIBA)
O4 - HKLM..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe (Toshiba)
O4 - HKLM..\Run: [Toshiba TEMPO] C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe (Toshiba Europe GmbH)
O4 - HKLM..\Run: [TPwrMain] C:\Program Files\Toshiba\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [vProt] C:\Program Files\AVG Secure Search\vprot.exe ()
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe ()
O4 - HKCU..\Run: [MyWebSearch Email Plugin] C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (MyWebSearch.com)
O4 - HKCU..\Run: [TOSCDSPD] TOSCDSPD.EXE File not found
O4 - HKCU..\Run: [tveoaj] C:\Users\Soniaczek\AppData\Roaming\rcoecqbd.dll ()
O4 - Startup: C:\Users\Soniaczek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk = C:\ProgramData\lsass.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Soniaczek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O4 - Startup: C:\Users\Soniaczek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Spis treści programu OneNote.onetoc2 ()
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZRxdm185YYPL File not found
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O9 - Extra Button: eBay - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/4908-44618-9400-3/4 File not found
O9 - Extra Button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home File not found
O9 - Extra Button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShopperReports3\bin\3.0.489.0\ShopperReports.dll File not found
O9 - Extra Button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShopperReports3\bin\3.0.489.0\ShopperReports.dll File not found
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: samsungsetup.com ([www] http in Zaufane witryny)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/PopularScreenSaversInitialSetup1.0.1.1.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.62 62.179.1.63
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{41BD8D66-69BD-40C9-AECC-9700E152C0AD}: DhcpNameServer = 62.179.1.62 62.179.1.63
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\12.2.6\ViProtocol.dll ()
O20 - AppInit_DLLs: (C:\PROGRA~1\GOOGLE\GOOGLE~2\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Soniaczek\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\Soniaczek\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{19bcb1a4-1bc1-11de-a2d9-00235a0580b7}\Shell - "" = AutoRun
O33 - MountPoints2\{19bcb1a4-1bc1-11de-a2d9-00235a0580b7}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{69a6f510-8c74-11e1-b9e5-00235a0580b7}\Shell - "" = AutoRun
O33 - MountPoints2\{69a6f510-8c74-11e1-b9e5-00235a0580b7}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{6c4b9cc9-d67d-11de-8608-00235a0580b7}\Shell\AutoRun\command - "" = D:\d1vmq.exe
O33 - MountPoints2\{6c4b9cc9-d67d-11de-8608-00235a0580b7}\Shell\open\Command - "" = D:\d1vmq.exe
O33 - MountPoints2\{b547b8df-4eef-11de-9e16-00235a0580b7}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE      .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{b547b9d4-4eef-11de-9e16-00235a0580b7}\Shell - "" = AutoRun
O33 - MountPoints2\{b547b9d4-4eef-11de-9e16-00235a0580b7}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{fa079571-cfb0-11de-95e4-00235a0580b7}\Shell - "" = AutoRun
O33 - MountPoints2\{fa079571-cfb0-11de-95e4-00235a0580b7}\Shell\AutoRun\command - "" = D:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-11-02 13:58:23 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Soniaczek\Desktop\OTL.exe
[2012-11-01 01:01:18 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\ProgramData\lsass.exe
[2012-10-10 13:44:40 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2012-10-10 13:44:36 | 003,602,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2012-10-10 13:44:36 | 003,550,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2012-10-05 12:54:23 | 000,000,000 | ---D | C] -- C:\Users\Soniaczek\Documents\praca
[2009-06-13 00:45:20 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\Soniaczek\AppData\Roaming\pcouffin.sys
[2 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\Soniaczek\Desktop\*.tmp files -> C:\Users\Soniaczek\Desktop\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-11-02 13:58:25 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Soniaczek\Desktop\OTL.exe
[2012-11-02 13:46:57 | 000,671,154 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012-11-02 13:46:57 | 000,595,386 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012-11-02 13:46:57 | 000,129,932 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012-11-02 13:46:57 | 000,103,460 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012-11-02 13:42:42 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-11-01 22:52:42 | 083,023,306 | ---- | M] () -- C:\ProgramData\dsgsdgdsgdsgw.pad
[2012-11-01 22:50:04 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012-11-01 22:50:04 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012-11-01 18:51:12 | 000,001,356 | ---- | M] () -- C:\Users\Soniaczek\AppData\Local\d3d9caps.dat
[2012-11-01 18:28:49 | 099,133,670 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2012-11-01 01:12:00 | 000,001,074 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3575671021-212598696-319229104-1000UA.job
[2012-11-01 01:08:22 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-11-01 01:01:30 | 000,000,783 | ---- | M] () -- C:\Users\Soniaczek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012-11-01 01:01:18 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\ProgramData\lsass.exe
[2012-10-31 15:12:02 | 000,001,022 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3575671021-212598696-319229104-1000Core.job
[2012-10-30 13:22:24 | 023,142,144 | ---- | M] () -- C:\Users\Soniaczek\Desktop\beznazwy.png
[2012-10-27 16:27:53 | 000,429,620 | ---- | M] () -- C:\Users\Soniaczek\Documents\cytaty.rtf
[2012-10-11 02:05:41 | 000,002,067 | ---- | M] () -- C:\Users\Soniaczek\Desktop\Google Chrome.lnk
[2012-10-08 20:08:29 | 000,696,760 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012-10-08 20:08:29 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\Soniaczek\Desktop\*.tmp files -> C:\Users\Soniaczek\Desktop\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-11-01 01:01:30 | 000,000,783 | ---- | C] () -- C:\Users\Soniaczek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012-11-01 01:01:20 | 083,023,306 | ---- | C] () -- C:\ProgramData\dsgsdgdsgdsgw.pad
[2012-10-30 13:22:14 | 023,142,144 | ---- | C] () -- C:\Users\Soniaczek\Desktop\beznazwy.png
[2012-06-25 09:07:33 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempdi4528.html
[2012-06-25 09:07:33 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempeI4528.html
[2012-06-21 20:01:34 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempVh6424.html
[2012-06-21 20:01:34 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempoP6424.html
[2012-06-16 09:57:35 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempkP4236.html
[2012-06-16 09:57:35 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Temprz4236.html
[2012-05-02 22:54:32 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempu41392.html
[2012-05-02 22:54:32 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempO41392.html
[2012-04-23 22:19:28 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempi21468.html
[2012-04-23 22:19:28 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempk21468.html
[2012-02-22 19:35:36 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempVR7008.html
[2012-02-22 19:35:36 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempPQ7008.html
[2012-02-05 16:06:25 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempNmO720.html
[2012-02-05 16:06:25 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Temppkp720.html
[2012-01-29 20:28:02 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempg14012.html
[2012-01-29 20:28:02 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempi14012.html
[2012-01-14 16:34:52 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempX17512.html
[2012-01-14 16:34:52 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempo17512.html
[2012-01-09 21:40:31 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempT10640.html
[2012-01-09 21:40:31 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempa10640.html
[2011-12-18 15:43:49 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempAA6512.html
[2011-12-18 15:43:49 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempsx6512.html
[2011-12-09 17:14:31 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempTy6412.html
[2011-12-09 17:14:31 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempRh6412.html
[2011-12-07 23:51:32 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempjb7724.html
[2011-12-07 23:51:32 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempfn7724.html
[2011-11-22 21:41:49 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempDo5388.html
[2011-11-22 21:41:49 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TemplE5388.html
[2011-11-10 22:04:13 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempEr8756.html
[2011-11-10 22:04:13 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempbK8756.html
[2011-10-15 11:02:18 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempBP6296.html
[2011-10-15 11:02:18 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempbU6296.html
[2011-09-30 19:24:08 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempuZ7648.html
[2011-09-30 19:24:08 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempoe7648.html
[2011-09-14 19:32:01 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempE20100.html
[2011-09-14 19:32:01 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempL20100.html
[2011-08-30 09:31:55 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempA16008.html
[2011-08-30 09:31:55 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempv16008.html
[2011-08-12 23:09:58 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempWw7180.html
[2011-08-12 23:09:58 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempPG7180.html
[2011-08-09 20:00:15 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TemplO4868.html
[2011-08-09 20:00:15 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempCW4868.html
[2011-08-07 18:19:24 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempjR7904.html
[2011-08-07 18:19:24 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempAq7904.html
[2011-07-22 19:35:42 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempKcM620.html
[2011-07-22 19:35:42 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempUre620.html
[2011-07-21 22:15:32 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempou2444.html
[2011-07-21 22:15:32 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempqZ2444.html
[2011-07-16 19:02:00 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempRw9068.html
[2011-07-16 19:02:00 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempNP9068.html
[2011-07-09 22:17:36 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempkr6388.html
[2011-07-09 22:17:36 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempHn6388.html
[2011-07-06 20:38:16 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempFm3444.html
[2011-07-06 20:38:16 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempaf3444.html
[2011-07-03 11:02:56 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempI16188.html
[2011-07-03 11:02:56 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Templ16188.html
[2011-06-26 18:15:22 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempfH4784.html
[2011-06-26 18:15:22 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempBS4784.html
[2011-06-20 22:39:50 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempMf4744.html
[2011-06-20 22:39:50 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempGy4744.html
[2011-06-16 20:42:12 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempNR3684.html
[2011-06-16 20:42:12 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempbm3684.html
[2011-06-16 09:31:27 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempnB6736.html
[2011-06-16 09:31:27 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempvi6736.html
[2011-06-12 09:17:16 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempjr8496.html
[2011-06-12 09:17:16 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Temprz8496.html
[2011-06-08 21:25:21 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempwm4288.html
[2011-06-08 21:25:21 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempOJ4288.html
[2011-06-08 16:34:53 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempRPt592.html
[2011-06-08 16:34:53 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempGyZ592.html
[2011-06-07 20:37:11 | 000,000,020 | ---- | C] () -- C:\Users\Soniaczek\AppData\Roaming\RCOECQBD.DLL
[2011-06-07 09:44:28 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempWe8324.html
[2011-06-07 09:44:28 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempDb8324.html
[2011-06-02 20:05:45 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempCCu652.html
[2011-06-02 20:05:45 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempURp652.html
[2011-05-31 17:37:46 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempEI6676.html
[2011-05-31 17:37:46 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempvV6676.html
[2011-05-22 11:21:40 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempyU7560.html
[2011-05-22 11:21:40 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempRx7560.html
[2011-05-14 12:24:27 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempOI4596.html
[2011-05-14 12:24:27 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempZJ4596.html
[2011-05-03 16:00:40 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TemphCw664.html
[2011-05-03 16:00:40 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempklI664.html
[2011-04-28 21:31:28 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempDC3696.html
[2011-04-28 21:31:28 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempWS3696.html
[2011-04-25 10:25:18 | 000,024,064 | ---- | C] () -- C:\Windows\System32\ssj1mlm.dll
[2011-04-21 21:59:03 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempBX7532.html
[2011-04-21 21:59:03 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempge7532.html
[2011-04-18 08:46:35 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempGN3456.html
[2011-04-18 08:46:35 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempvg3456.html
[2011-04-14 22:21:58 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempDN6784.html
[2011-04-14 22:21:58 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TemphL6784.html
[2011-04-07 09:53:45 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempPY5748.html
[2011-04-07 09:53:45 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempmL5748.html
[2011-04-03 22:51:23 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempIR7376.html
[2011-04-03 22:51:23 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempyk7376.html
[2011-04-02 23:11:00 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempfd5008.html
[2011-04-02 23:11:00 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempyS5008.html
[2011-03-24 22:59:27 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempdT5360.html
[2011-03-24 22:59:27 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempxk5360.html
[2011-03-22 21:39:32 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TemplsS288.html
[2011-03-22 21:39:32 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempPhg288.html
[2011-03-17 23:16:40 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Templa6124.html
[2011-03-17 23:16:40 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempRY6124.html
[2011-03-15 21:55:04 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempmx3576.html
[2011-03-15 21:55:04 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempSn3576.html
[2011-03-12 15:20:03 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Temphi5212.html
[2011-03-12 15:20:03 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempui5212.html
[2011-03-04 19:08:45 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempsO3280.html
[2011-03-04 19:08:45 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempOD3280.html
[2011-03-02 08:02:14 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempCe2420.html
[2011-03-02 08:02:14 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempxk2420.html
[2011-02-28 21:37:39 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempFK6016.html
[2011-02-28 21:37:39 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempqX6016.html
[2011-02-24 22:18:22 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempYf3940.html
[2011-02-24 22:18:22 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempGZ3940.html
[2011-02-23 23:32:51 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempqr5836.html
[2011-02-23 23:32:51 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempZt5836.html
[2011-02-18 17:07:35 | 000,042,584 | ---- | C] () -- C:\Windows\SETUPQSB.EXE
[2011-02-16 23:51:56 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempzX4756.html
[2011-02-16 23:51:56 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempMw4756.html
[2011-02-13 21:13:46 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempKU4384.html
[2011-02-13 21:13:46 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempDl4384.html
[2011-02-12 11:27:55 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempSH6140.html
[2011-02-12 11:27:55 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempJe6140.html
[2011-02-11 15:48:12 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempGY4716.html
[2011-02-11 15:48:12 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempgR4716.html
[2011-02-10 21:51:53 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempFs6068.html
[2011-02-10 21:51:53 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempfp6068.html
[2011-02-10 12:22:47 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempCj3540.html
[2011-02-10 12:22:47 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempCB3540.html
[2011-02-09 17:36:26 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempPn5748.html
[2011-02-09 17:36:26 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempOc5748.html
[2011-02-08 17:51:02 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempCv5568.html
[2011-02-08 17:51:02 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempZQ5568.html
[2011-02-07 22:50:11 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempMR5552.html
[2011-02-07 22:50:11 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempdT5552.html
[2011-02-06 22:56:43 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempnz4880.html
[2011-02-06 22:56:43 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempKd4880.html
[2011-02-06 16:49:53 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempYii876.html
[2011-02-06 16:49:53 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempAxT876.html
[2011-02-03 21:20:38 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempnk4344.html
[2011-02-03 21:20:38 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempWG4344.html
[2011-02-03 11:59:36 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempRB5972.html
[2011-02-03 11:59:36 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempvp5972.html
[2011-02-01 21:23:20 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempDr5816.html
[2011-02-01 21:23:20 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempuG5816.html
[2011-02-01 11:10:52 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempFy4496.html
[2011-02-01 11:10:52 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempAL4496.html
[2011-01-31 17:15:21 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempee5740.html
[2011-01-31 17:15:21 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempzJ5740.html
[2011-01-31 16:51:54 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempuT6040.html
[2011-01-31 16:51:54 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempDo6040.html
[2011-01-31 16:23:49 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempcE4552.html
[2011-01-31 16:23:49 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempKT4552.html
[2011-01-28 23:49:53 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Temphm5816.html
[2011-01-28 23:49:53 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempRA5816.html
[2011-01-28 15:37:57 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Templl4716.html
[2011-01-28 15:37:57 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempCW4716.html
[2011-01-25 21:57:36 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempgh4568.html
[2011-01-25 21:57:36 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempyU4568.html
[2011-01-20 22:03:11 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempve3540.html
[2011-01-20 22:03:11 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempAO3540.html
[2011-01-18 21:22:06 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempzK3788.html
[2011-01-18 21:22:06 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempnV3788.html
[2011-01-16 13:07:30 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempRC8124.html
[2011-01-16 13:07:30 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempik8124.html
[2011-01-15 19:37:03 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempBy5372.html
[2011-01-15 19:37:03 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempwv5372.html
[2011-01-15 11:11:56 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempgd5956.html
[2011-01-15 11:11:56 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempoy5956.html
[2011-01-14 19:06:57 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempoQ5700.html
[2011-01-14 19:06:57 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempGM5700.html
[2011-01-13 21:39:50 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempSv5372.html
[2011-01-13 21:39:50 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempIo5372.html
[2011-01-13 10:52:53 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempBE4988.html
[2011-01-13 10:52:53 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempNm4988.html
[2011-01-10 21:57:05 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempzn5336.html
[2011-01-10 21:57:05 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempvf5336.html
[2011-01-09 09:38:52 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempPu5680.html
[2011-01-09 09:38:52 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempKz5680.html
[2011-01-05 00:32:39 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempOy4108.html
[2011-01-05 00:32:39 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempxl4108.html
[2011-01-04 23:24:38 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempqb3344.html
[2011-01-04 23:24:38 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempEA3344.html
[2011-01-01 12:19:04 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempwUA904.html
[2011-01-01 12:19:04 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempOHC904.html
[2010-12-28 22:08:25 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Temptv1824.html
[2010-12-28 22:08:25 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempUK1824.html
[2010-12-26 00:58:17 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempds3436.html
[2010-12-26 00:58:17 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempoP3436.html
[2010-12-15 16:43:31 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempMV1716.html
[2010-12-15 16:43:31 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TemprZ1716.html
[2010-12-11 21:35:22 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempSe4844.html
[2010-12-11 21:35:22 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempVS4844.html
[2010-12-10 00:25:31 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempwJ5652.html
[2010-12-10 00:25:31 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempjx5652.html
[2010-12-01 23:58:46 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempHi7048.html
[2010-12-01 23:58:46 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempyg7048.html
[2010-11-28 16:48:53 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempsC4680.html
[2010-11-28 16:48:53 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempji4680.html
[2010-11-24 07:49:50 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempNH4924.html
[2010-11-24 07:49:50 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempgS4924.html
[2010-11-22 16:47:55 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempEm4260.html
[2010-11-22 16:47:55 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TemprF4260.html
[2010-11-22 16:46:24 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempYQ4720.html
[2010-11-22 16:46:24 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempXX4720.html
[2010-11-22 16:18:52 | 000,258,048 | ---- | C] () -- C:\Windows\System32\libFLAC.dll
[2010-11-13 19:32:56 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempzG4308.html
[2010-11-13 19:32:56 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempDl4308.html
[2010-11-12 13:02:20 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempdrU540.html
[2010-11-12 13:02:20 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempRYl540.html
[2010-11-07 19:24:11 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempGb4876.html
[2010-11-07 19:24:11 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempuU4876.html
[2010-10-28 08:59:25 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempjx5040.html
[2010-10-28 08:59:25 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempkW5040.html
[2010-10-26 17:41:21 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempDn1072.html
[2010-10-26 17:41:21 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempvH1072.html
[2010-10-21 20:28:45 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempEm1992.html
[2010-10-21 20:28:45 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempWf1992.html
[2010-10-17 14:03:47 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempWe4576.html
[2010-10-17 14:03:47 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TemppD4576.html
[2010-10-14 11:16:39 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempba4968.html
[2010-10-14 11:16:39 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempnw4968.html
[2010-10-13 06:48:18 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempDt4720.html
[2010-10-13 06:48:18 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempOo4720.html
[2010-10-08 16:19:18 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Templt5248.html
[2010-10-08 16:19:18 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempzH5248.html
[2010-10-04 20:26:40 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempQf3700.html
[2010-10-04 20:26:40 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempEh3700.html
[2010-09-27 20:08:31 | 000,002,828 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2010-09-27 20:08:31 | 000,000,088 | RHS- | C] () -- C:\ProgramData\D39617AC25.sys
[2010-09-24 21:49:48 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempKh2800.html
[2010-09-24 21:49:48 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempSV2800.html
[2010-09-22 20:50:08 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempoa4504.html
[2010-09-22 20:50:08 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempYr4504.html
[2010-09-16 20:02:46 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempGg3380.html
[2010-09-16 20:02:46 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempnX3380.html
[2010-09-16 08:22:00 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempbJ4756.html
[2010-09-16 08:21:59 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempET4756.html
[2010-08-29 17:03:52 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempLz5372.html
[2010-08-29 17:03:52 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempcN5372.html
[2010-08-27 15:44:29 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempTW5108.html
[2010-08-27 15:44:29 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempzm5108.html
[2010-08-23 14:50:01 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempEU1604.html
[2010-08-23 14:50:01 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempKz1604.html
[2010-08-22 15:46:34 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempeO2732.html
[2010-08-22 15:46:34 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempZS2732.html
[2010-08-18 20:24:09 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempPn5132.html
[2010-08-18 20:24:09 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempcM5132.html
[2010-08-17 20:26:22 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempsb5856.html
[2010-08-17 20:26:22 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempzv5856.html
[2010-08-13 16:06:29 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempYL5072.html
[2010-08-13 16:06:29 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempXW5072.html
[2010-08-13 06:40:05 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempeG4428.html
[2010-08-13 06:40:05 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempEj4428.html
[2010-08-12 20:00:25 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempRo3404.html
[2010-08-12 20:00:25 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempcW3404.html
[2010-08-11 06:18:29 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempvM4944.html
[2010-08-11 06:18:29 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempff4944.html
[2010-08-03 06:12:46 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempPGI304.html
[2010-08-03 06:12:46 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempFaq304.html
[2010-07-25 21:13:58 | 000,476,752 | ---- | C] () -- C:\ProgramData\pswi_preloaded.exe
[2010-07-22 21:54:34 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempani232.html
[2010-07-22 21:54:34 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempZUM232.html
[2010-07-20 20:52:58 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempBF5928.html
[2010-07-20 20:52:58 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempbz5928.html
[2010-07-18 03:05:41 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempDt4856.html
[2010-07-18 03:05:41 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempvu4856.html
[2010-07-13 17:29:08 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempbo4676.html
[2010-07-13 17:29:08 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempfc4676.html
[2010-07-12 20:01:44 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempqT4960.html
[2010-07-12 20:01:44 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempzX4960.html
[2010-07-11 18:59:26 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempQW5844.html
[2010-07-11 18:59:26 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempqp5844.html
[2010-07-07 06:34:07 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempax4656.html
[2010-07-07 06:34:07 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempBK4656.html
[2010-07-02 22:01:39 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempWp4408.html
[2010-07-02 22:01:39 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempUU4408.html
[2010-07-02 08:39:45 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempHi2328.html
[2010-07-02 08:39:45 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempNS2328.html
[2010-07-01 21:36:29 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempUc4736.html
[2010-07-01 21:36:29 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempIf4736.html
[2010-06-30 20:02:53 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempga4784.html
[2010-06-30 20:02:53 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempuR4784.html
[2010-06-29 06:55:55 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempjr3536.html
[2010-06-29 06:55:55 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempwF3536.html
[2010-06-28 14:45:36 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempJp5024.html
[2010-06-28 14:45:36 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempEo5024.html
[2010-06-25 06:34:14 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempZR5076.html
[2010-06-25 06:34:14 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempZa5076.html
[2010-06-24 18:29:01 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempJx4652.html
[2010-06-24 18:29:01 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempJA4652.html
[2010-06-23 07:16:53 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TemplJ2352.html
[2010-06-23 07:16:53 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempOF2352.html
[2010-06-21 21:22:22 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempvG5372.html
[2010-06-21 21:22:22 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempDP5372.html
[2010-06-20 14:44:47 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempRO4388.html
[2010-06-20 14:44:47 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TemppC4388.html
[2010-06-20 11:04:22 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempdf3564.html
[2010-06-20 11:04:22 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempQB3564.html
[2010-06-19 10:18:29 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempxg3192.html
[2010-06-19 10:18:29 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempxD3192.html
[2010-06-17 23:30:04 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempEYB548.html
[2010-06-17 23:30:04 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempola548.html
[2010-06-17 08:09:18 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempXV6116.html
[2010-06-17 08:09:18 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempHw6116.html
[2010-06-15 20:36:55 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempHr5380.html
[2010-06-15 20:36:55 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempHv5380.html
[2010-06-14 14:44:04 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempqG5072.html
[2010-06-14 14:44:04 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempij5072.html
[2010-06-10 21:39:24 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempkk4612.html
[2010-06-10 21:39:24 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempEP4612.html
[2010-06-09 08:18:33 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempjH4148.html
[2010-06-09 08:18:33 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempeL4148.html
[2010-06-08 20:47:37 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempmf5972.html
[2010-06-08 20:47:37 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Temppw5972.html
[2010-06-07 20:35:49 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempWg3980.html
[2010-06-07 20:35:49 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempis3980.html
[2010-06-04 22:33:08 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempjg4032.html
[2010-06-04 22:33:08 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempXQ4032.html
[2010-06-04 22:04:59 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Temptc4772.html
[2010-06-04 22:04:59 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempDZ4772.html
[2010-06-01 09:45:18 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempjB4704.html
[2010-06-01 09:45:18 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempBk4704.html
[2010-05-31 22:34:55 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempxA5604.html
[2010-05-31 22:34:55 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempbp5604.html
[2010-05-29 21:49:33 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempWb1668.html
[2010-05-29 21:49:33 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempSk1668.html
[2010-05-25 21:33:25 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempSQ3180.html
[2010-05-25 21:33:25 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempow3180.html
[2010-05-22 18:12:37 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempjk3504.html
[2010-05-22 18:12:36 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempYm3504.html
[2010-05-22 18:10:49 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempMk4688.html
[2010-05-22 18:10:49 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempCM4688.html
[2010-05-21 20:12:18 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempJo3208.html
[2010-05-21 20:12:18 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempLh3208.html
[2010-05-21 12:17:28 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempXN5712.html
[2010-05-21 12:17:28 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempEy5712.html
[2010-05-19 20:02:12 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempWh5984.html
[2010-05-19 20:02:12 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempDC5984.html
[2010-05-19 14:09:39 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempEn4220.html
[2010-05-19 14:09:39 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempEl4220.html
[2010-05-18 21:52:36 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempRF1904.html
[2010-05-18 21:52:36 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempTf1904.html
[2010-05-16 09:35:08 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempkt5004.html
[2010-05-16 09:35:08 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Temphi5004.html
[2010-05-14 22:50:38 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempJH3616.html
[2010-05-14 22:50:38 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempZy3616.html
[2010-05-14 18:33:58 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempZR5512.html
[2010-05-14 18:33:58 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempws5512.html
[2010-05-11 21:03:41 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempQY3240.html
[2010-05-11 21:03:41 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempgb3240.html
[2010-05-01 18:40:43 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempVx3764.html
[2010-05-01 18:40:43 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempmw3764.html
[2010-04-29 04:34:31 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempWW4632.html
[2010-04-29 04:34:31 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TemphY4632.html
[2010-04-20 20:18:01 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempHA4380.html
[2010-04-20 20:18:01 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempSB4380.html
[2010-04-20 06:53:12 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempGj5260.html
[2010-04-20 06:53:12 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempcA5260.html
[2010-04-19 20:14:19 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempcl4628.html
[2010-04-19 20:14:19 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempzN4628.html
[2010-04-18 09:56:31 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempih6060.html
[2010-04-18 09:56:31 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempro6060.html
[2010-04-14 15:54:03 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempiK5436.html
[2010-04-14 15:54:03 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempIG5436.html
[2010-04-09 16:36:58 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempPS5240.html
[2010-04-09 16:36:58 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempUi5240.html
[2010-04-08 08:43:56 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempSK5428.html
[2010-04-08 08:43:56 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempGA5428.html
[2010-04-07 20:25:15 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempQB5688.html
[2010-04-07 20:25:15 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempaY5688.html
[2010-04-01 20:30:42 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempHK1564.html
[2010-04-01 20:30:42 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempcD1564.html
[2010-03-31 15:59:18 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempGF3840.html
[2010-03-31 15:59:18 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempRq3840.html
[2010-03-26 10:52:11 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempHN5108.html
[2010-03-26 10:52:11 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempoN5108.html
[2010-03-19 20:57:06 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempers156.html
[2010-03-19 20:57:06 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempcwX156.html
[2010-03-14 20:05:44 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempWl2400.html
[2010-03-14 20:05:44 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempvb2400.html
[2010-03-13 11:49:41 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempCh3996.html
[2010-03-13 11:49:41 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempCw3996.html
[2010-03-12 21:20:21 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempvQy516.html
[2010-03-12 21:20:21 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempMDo516.html
[2010-03-11 10:34:35 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempaZ5768.html
[2010-03-11 10:34:35 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempMn5768.html
[2010-03-07 15:03:59 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempSN3984.html
[2010-03-07 15:03:59 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempRL3984.html
[2010-03-05 16:34:11 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempiP4564.html
[2010-03-05 16:34:11 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempsy4564.html
[2010-03-04 21:56:48 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempNX5248.html
[2010-03-04 21:56:48 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempYR5248.html
[2010-03-04 12:34:32 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempTL2208.html
[2010-03-04 12:34:32 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempQR2208.html
[2010-03-01 21:20:18 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempRl4236.html
[2010-03-01 21:20:18 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempKV4236.html
[2010-02-26 19:02:58 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempaa5180.html
[2010-02-26 19:02:58 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempgL5180.html
[2010-02-24 16:12:00 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempcL5648.html
[2010-02-24 16:12:00 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempPc5648.html
[2010-02-23 21:14:44 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempwl3508.html
[2010-02-23 21:14:44 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\Tempcf3508.html
[2010-02-23 21:13:44 | 000,001,356 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\d3d9caps.dat
[2010-02-19 20:58:45 | 000,002,432 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TempVk4688.html
[2010-02-19 20:58:45 | 000,002,089 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\TemphC4688.html
[2010-02-04 21:41:43 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009-11-21 08:13:00 | 000,000,610 | ---- | C] () -- C:\Users\Soniaczek\AppData\Roaming\wklnhst.dat
[2009-06-13 00:56:17 | 000,000,074 | ---- | C] () -- C:\Users\Soniaczek\AppData\Roaming\Printer.ini
[2009-06-13 00:45:20 | 000,087,608 | ---- | C] () -- C:\Users\Soniaczek\AppData\Roaming\inst.exe
[2009-06-13 00:45:20 | 000,007,887 | ---- | C] () -- C:\Users\Soniaczek\AppData\Roaming\pcouffin.cat
[2009-06-13 00:45:20 | 000,001,144 | ---- | C] () -- C:\Users\Soniaczek\AppData\Roaming\pcouffin.inf
[2009-04-22 19:00:10 | 000,000,000 | ---- | C] () -- C:\ProgramData\LauncherAccess.dt
[2009-04-05 19:37:12 | 000,000,395 | ---- | C] () -- C:\Users\Soniaczek\AppData\Roaming\settings.ini
[2009-03-28 13:01:17 | 000,080,896 | ---- | C] () -- C:\Users\Soniaczek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2006-11-02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012-06-08 18:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-04-11 07:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-04-11 07:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2011-08-10 09:26:25 | 000,000,000 | R--D | M](C:\Users\Soniaczek\Documents\Do dziĹ?c pielÄ?gnujesz jego Ĺ?lad dĹ?oni) -- C:\Users\Soniaczek\Documents\Do dziśc pielęgnujesz jego ślad dłoni
[2011-08-10 09:21:28 | 000,000,000 | R--D | C](C:\Users\Soniaczek\Documents\Do dziĹ?c pielÄ?gnujesz jego Ĺ?lad dĹ?oni) -- C:\Users\Soniaczek\Documents\Do dziśc pielęgnujesz jego ślad dłoni

< End of report >