OTL logfile created on: 2012-11-16 08:23:35 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\OTL
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1,87 Gb Total Physical Memory | 0,97 Gb Available Physical Memory | 51,88% Memory free
3,98 Gb Paging File | 3,03 Gb Available in Paging File | 76,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 148,89 Gb Total Space | 72,59 Gb Free Space | 48,76% Space Free | Partition Type: NTFS
Drive D: | 14,91 Gb Total Space | 9,97 Gb Free Space | 66,88% Space Free | Partition Type: NTFS
Drive E: | 147,73 Gb Total Space | 132,39 Gb Free Space | 89,62% Space Free | Partition Type: NTFS
 
Computer Name: MACIEK-PC | User Name: Maciek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-11-15 22:19:40 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\OTL\OTL.exe
PRC - [2012-11-14 23:13:25 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\ProgramData\lsass.exe
PRC - [2011-04-17 01:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton 360\Engine\5.2.2.3\ccsvchst.exe
PRC - [2009-09-22 11:50:36 | 000,073,728 | ---- | M] (Software 2000 Limited) -- C:\Windows\System32\spool\drivers\w32x86\3\HP1006MC.EXE
PRC - [2009-04-11 07:28:15 | 000,117,248 | ---- | M] () -- \\?\C:\Windows\System32\wbem\WMIADAP.EXE
PRC - [2009-04-11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008-08-25 08:58:20 | 000,077,824 | ---- | M] (Toshiba) -- C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatchSrv.exe
PRC - [2008-07-18 19:39:30 | 000,083,312 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
PRC - [2008-06-24 09:06:14 | 000,509,816 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
PRC - [2008-05-09 10:49:30 | 000,716,800 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
PRC - [2008-04-24 12:03:12 | 000,430,080 | ---- | M] (TOSHIBA) -- C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
PRC - [2008-04-24 09:22:10 | 000,103,824 | ---- | M] (Toshiba Europe GmbH) -- C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
PRC - [2008-04-24 09:21:56 | 000,099,720 | ---- | M] (Toshiba Europe GmbH) -- C:\Program Files\Toshiba TEMPRO\TempoSVC.exe
PRC - [2008-04-16 23:21:24 | 001,056,768 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
PRC - [2008-04-16 23:19:48 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
PRC - [2008-04-16 23:19:16 | 000,405,504 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
PRC - [2008-04-08 14:14:50 | 006,037,504 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2008-02-06 13:12:56 | 000,126,976 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
PRC - [2008-01-21 03:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
PRC - [2008-01-21 03:23:24 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\WindowsMobile\wmdSync.exe
PRC - [2008-01-17 15:27:52 | 000,431,456 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
PRC - [2008-01-17 15:27:34 | 000,431,456 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
PRC - [2007-11-21 16:23:32 | 000,129,632 | ---- | M] (TOSHIBA Corporation) -- C:\Windows\System32\TODDSrv.exe
PRC - [2006-10-05 12:10:12 | 000,009,216 | ---- | M] (Agere Systems) -- C:\Windows\System32\agrsmsvc.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-06-23 22:40:23 | 001,711,616 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\2467a133aee73396c830b9b0a9c7ec0d\Microsoft.VisualBasic.ni.dll
MOD - [2012-06-23 22:39:28 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8bbcd31ecc8edc7d1f9cdd83ef2bb2d3\System.ServiceProcess.ni.dll
MOD - [2012-06-23 21:34:31 | 012,433,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\f2691cfa7671cdc58179e56ba9227591\System.Windows.Forms.ni.dll
MOD - [2012-06-23 21:34:18 | 001,592,320 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\18f9789aa214c657113e676b3a9015aa\System.Drawing.ni.dll
MOD - [2012-06-23 21:32:48 | 012,219,392 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\7b6293b0c23321c255c2530aea8e32bb\PresentationCore.ni.dll
MOD - [2012-05-25 21:53:44 | 000,998,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\f3d4d5fe5ab848fbfcf91a49960dc8ae\System.Management.ni.dll
MOD - [2012-05-25 21:49:06 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\846b9cf2756fdd15f704c9bab9c70b6f\System.Runtime.Remoting.ni.dll
MOD - [2012-05-25 21:47:56 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bd76aaaa03ddc15d1840207b5a480644\System.Configuration.ni.dll
MOD - [2012-05-25 21:33:00 | 005,450,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d2630342a066a7cb9056d9eb6157687a\System.Xml.ni.dll
MOD - [2012-05-25 21:31:07 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\54426ee1881b42af5b090e223f43823c\WindowsBase.ni.dll
MOD - [2012-05-25 21:31:04 | 007,953,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\28d633338fc8d29f8af31935ef7d001b\System.ni.dll
MOD - [2012-05-25 21:30:53 | 011,492,352 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\af9c9e9d7e0523cd444f8b551baa9cbf\mscorlib.ni.dll
MOD - [2008-03-06 09:14:54 | 005,121,912 | ---- | M] () -- C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll
MOD - [2007-12-25 11:03:40 | 000,015,184 | ---- | M] () -- C:\Program Files\TOSHIBA\PCDiag\NotifyPCD.dll
MOD - [2007-12-14 20:40:00 | 000,090,112 | ---- | M] () -- C:\Program Files\TOSHIBA\FlashCards\TWarnMsg\TWarnMsg.dll
MOD - [2006-10-10 10:44:16 | 000,009,728 | ---- | M] () -- C:\Program Files\TOSHIBA\TOSHIBA Assist\NotifyX.dll
MOD - [2006-10-07 11:57:04 | 000,053,248 | ---- | M] () -- C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2012-09-06 02:25:06 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-04-23 01:05:03 | 000,489,256 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011-06-08 12:02:00 | 000,633,856 | ---- | M] (Nokia) [Disabled | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2011-04-17 01:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton 360\Engine\5.2.2.3\ccSvcHst.exe -- (N360)
SRV - [2010-12-08 13:38:35 | 000,085,096 | ---- | M] (Autodesk) [Disabled | Stopped] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2008-08-25 08:58:20 | 000,077,824 | ---- | M] (Toshiba) [On_Demand | Running] -- C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatchSrv.exe -- (SmartFaceVWatchSrv)
SRV - [2008-07-18 19:39:30 | 000,083,312 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe -- (TNaviSrv)
SRV - [2008-04-24 09:21:56 | 000,099,720 | ---- | M] (Toshiba Europe GmbH) [Auto | Running] -- C:\Program Files\Toshiba TEMPRO\TempoSVC.exe -- (TempoMonitoringService)
SRV - [2008-04-16 23:19:48 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service)
SRV - [2008-04-16 14:53:00 | 000,954,368 | ---- | M] (Atheros Communications, Inc.) [On_Demand | Stopped] -- C:\Program Files\Jumpstart\jswpsapi.exe -- (jswpsapi)
SRV - [2008-02-06 13:12:56 | 000,126,976 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe -- (TOSHIBA SMART Log Service)
SRV - [2008-01-21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008-01-21 03:23:24 | 000,365,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2008-01-21 03:23:24 | 000,167,936 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2008-01-17 15:27:34 | 000,431,456 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe -- (TosCoSrv)
SRV - [2007-11-21 16:23:32 | 000,129,632 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\System32\TODDSrv.exe -- (TODDSrv)
SRV - [2006-10-05 12:10:12 | 000,009,216 | ---- | M] (Agere Systems) [Auto | Running] -- C:\Windows\System32\agrsmsvc.exe -- (AgereModemAudio)
SRV - [2006-08-23 15:39:48 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - [2012-05-31 22:16:34 | 000,376,480 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2012-05-20 22:46:02 | 001,589,752 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20120614.032\NAVEX15.SYS -- (NAVEX15)
DRV - [2012-05-20 22:46:02 | 000,087,928 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20120614.032\NAVENG.SYS -- (NAVENG)
DRV - [2012-05-01 17:00:29 | 000,368,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\IPSDefs\20120613.007\IDSvix86.sys -- (IDSVix86)
DRV - [2012-04-03 00:38:08 | 000,821,880 | ---- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\BASHDefs\20120531.001\BHDrvx86.sys -- (BHDrvx86)
DRV - [2011-10-20 22:12:26 | 000,126,584 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2011-04-21 02:37:49 | 000,331,384 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\N360\0502020.003\symtdiv.sys -- (SYMTDIv)
DRV - [2011-03-31 04:00:09 | 000,516,216 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\N360\0502020.003\srtsp.sys -- (SRTSP)
DRV - [2011-03-31 04:00:09 | 000,050,168 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\N360\0502020.003\srtspx.sys -- (SRTSPX)
DRV - [2011-03-15 03:31:23 | 000,744,568 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\N360\0502020.003\symefa.sys -- (SymEFA)
DRV - [2011-01-27 07:47:10 | 000,340,088 | ---- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\N360\0502020.003\symds.sys -- (SymDS)
DRV - [2010-12-08 11:44:49 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2010-11-16 02:45:33 | 000,136,312 | R--- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\N360\0502020.003\ironx86.sys -- (SymIRON)
DRV - [2009-09-23 09:41:58 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2009-04-11 05:42:52 | 000,031,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (winusb)
DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008-07-18 17:52:16 | 000,279,376 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tos_sps32.sys -- (tos_sps32)
DRV - [2008-07-15 18:59:06 | 000,017,960 | ---- | M] (Chicony Electronics Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\UVCFTR_S.SYS -- (UVCFTR)
DRV - [2008-05-19 19:42:56 | 000,912,384 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2008-04-28 15:59:18 | 000,020,384 | ---- | M] (Atheros Communications, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\jswpslwf.sys -- (jswpslwf)
DRV - [2008-04-15 09:05:08 | 000,118,784 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2007-11-09 13:00:52 | 000,023,640 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ)
DRV - [2006-11-28 15:11:00 | 001,161,888 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2006-11-20 13:11:14 | 000,007,168 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\FwLnk.sys -- (FwLnk)
DRV - [2006-10-18 10:50:04 | 000,016,128 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tdcmdpst.sys -- (tdcmdpst)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=TSEA&bmod=TSEA
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig/redirectdomain?brand=TSEA&bmod=TSEA
IE - HKLM\..\SearchScopes,DefaultScope = {D2E9D577-9091-46CF-9502-2F487D424DDE}
IE - HKLM\..\SearchScopes\{D2E9D577-9091-46CF-9502-2F487D424DDE}: "URL" = http://www.google.com/search?source=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSEA;
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-322354907-2643511753-1237650681-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=TSEA&bmod=TSEA;
IE - HKU\S-1-5-21-322354907-2643511753-1237650681-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKU\S-1-5-21-322354907-2643511753-1237650681-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-322354907-2643511753-1237650681-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-322354907-2643511753-1237650681-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-322354907-2643511753-1237650681-1000\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKU\S-1-5-21-322354907-2643511753-1237650681-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rlz=1I7TSEA_plPL328&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKU\S-1-5-21-322354907-2643511753-1237650681-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search/web?q={searchTerms}
IE - HKU\S-1-5-21-322354907-2643511753-1237650681-1000\..\SearchScopes\{D2E9D577-9091-46CF-9502-2F487D424DDE}: "URL" = http://www.google.com/search?source=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSEA_plPL328
IE - HKU\S-1-5-21-322354907-2643511753-1237650681-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Fast Browser Search"
FF - prefs.js..browser.search.defaultthis.engineName: "Fast Browser Search"
FF - prefs.js..browser.search.defaulturl: "http://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q="
FF - prefs.js..browser.search.order.1: "Fast Browser Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://tvnwarszawa.pl"
FF - prefs.js..extensions.enabledItems: support@predictad.com:1.11
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}:6.0.31
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:10.1.0.68 - 1
FF - prefs.js..keyword.URL: "http://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=19&tid={086D138A-7D02-7AE0-F17A-50342CCB0BB9}&q="
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.647: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.647: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.647: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.647: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.647: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Users\Maciek\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\support@predictad.com: C:\Program Files\AutocompletePro\support@predictad.com [2012-11-04 23:54:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-11-04 23:55:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\IPSFFPlgn\ [2012-11-04 23:55:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\coFFPlgn_2011_7_12_1 [2012-11-04 23:55:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-11-04 23:55:21 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-09-30 20:32:31 | 000,000,000 | ---D | M]
 
[2009-05-25 09:54:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Maciek\AppData\Roaming\mozilla\Extensions
[2012-10-29 21:55:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Maciek\AppData\Roaming\mozilla\Firefox\Profiles\yitl3b61.default\extensions
[2010-12-08 11:45:35 | 000,002,059 | ---- | M] () -- C:\Users\Maciek\AppData\Roaming\mozilla\firefox\profiles\yitl3b61.default\searchplugins\daemon-search.xml
[2009-12-05 11:45:47 | 000,005,407 | ---- | M] () -- C:\Users\Maciek\AppData\Roaming\mozilla\firefox\profiles\yitl3b61.default\searchplugins\fast-browser-search.xml
[2012-09-30 20:32:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-09-06 02:26:03 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012-04-15 22:51:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012-09-06 03:57:09 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-11-01 00:14:52 | 000,003,544 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
[2012-09-06 03:57:10 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-09-06 03:57:10 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-09-06 03:57:10 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-09-06 03:57:10 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-09-06 03:57:09 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2006-09-18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll (SimplyGen)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\5.2.2.3\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\5.2.2.3\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\5.2.2.3\coieplg.dll (Symantec Corporation)
O3 - HKU\S-1-5-21-322354907-2643511753-1237650681-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-322354907-2643511753-1237650681-1000\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\5.2.2.3\coieplg.dll (Symantec Corporation)
O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [cfFncEnabler.exe] cfFncEnabler.exe File not found
O4 - HKLM..\Run: [NDSTray.exe] NDSTray.exe File not found
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe (TOSHIBA)
O4 - HKLM..\Run: [Toshiba Registration] C:\Program Files\TOSHIBA\Registration\ToshibaRegistration.exe (Toshiba)
O4 - HKLM..\Run: [Toshiba TEMPO] C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe (Toshiba Europe GmbH)
O4 - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-322354907-2643511753-1237650681-1000..\Run: [Ipveyxca] C:\Users\Maciek\AppData\Roaming\Uwhi\riud.exe ()
O4 - HKU\S-1-5-21-322354907-2643511753-1237650681-1000..\Run: [TOSCDSPD] TOSCDSPD.EXE File not found
O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
O4 - Startup: C:\Users\Gość\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
O4 - Startup: C:\Users\Maciek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk = C:\ProgramData\lsass.exe (Microsoft Corporation)
O8 - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found
O9 - Extra Button: eBay - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/4908-44618-9400-3/4 File not found
O9 - Extra Button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home File not found
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{00A2EBB4-C6B8-42D4-9D13-9B52E57DE446}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BBD04F99-B3EE-49F7-969A-31FDFBAE0E76}: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Maciek\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\Maciek\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{95e38ca2-232e-11e0-997c-001e33bb7c13}\Shell\AutoRun\command - "" = D:\urDrive.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-11-16 08:23:13 | 000,000,000 | ---D | C] -- C:\OTL
[2012-11-14 23:13:25 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\ProgramData\lsass.exe
[2012-11-01 00:15:18 | 000,000,000 | ---D | C] -- C:\Users\Maciek\AppData\Local\AVG Secure Search
[2012-11-01 00:15:12 | 000,000,000 | ---D | C] -- C:\Users\Maciek\AppData\Roaming\TuneUp Software
[2012-11-01 00:15:06 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search
[2012-11-01 00:14:56 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AVG Secure Search
[2012-11-01 00:14:55 | 000,000,000 | ---D | C] -- C:\Program Files\AVG Secure Search
[2012-11-01 00:14:03 | 000,000,000 | -H-D | C] -- C:\$AVG
[2012-11-01 00:13:57 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG2013
[2012-11-01 00:12:38 | 000,000,000 | ---D | C] -- C:\Program Files\AVG
[2012-11-01 00:09:23 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012-11-01 00:09:23 | 000,000,000 | ---D | C] -- C:\Users\Maciek\AppData\Local\MFAData
[2012-11-01 00:09:23 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData
[2012-11-01 00:09:23 | 000,000,000 | ---D | C] -- C:\Users\Maciek\AppData\Local\Avg2013
[2012-10-31 23:31:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2012-10-31 23:31:23 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2012-10-30 22:08:35 | 000,000,000 | ---D | C] -- C:\Users\Maciek\AppData\Roaming\Ysifho
[2012-10-30 22:08:35 | 000,000,000 | ---D | C] -- C:\Users\Maciek\AppData\Roaming\Uxhaef
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-11-16 08:18:07 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012-11-16 08:18:06 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012-11-16 08:17:59 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-11-14 23:16:27 | 083,023,306 | ---- | M] () -- C:\ProgramData\dsgsdgdsgdsgw.pad
[2012-11-14 23:13:31 | 000,000,779 | ---- | M] () -- C:\Users\Maciek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012-11-14 23:13:25 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\ProgramData\lsass.exe
[2012-10-29 22:06:01 | 002,529,410 | ---- | M] () -- C:\Windows\System32\drivers\N360\0502020.003\Cat.DB
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-11-14 23:13:31 | 000,000,779 | ---- | C] () -- C:\Users\Maciek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012-10-31 22:57:40 | 083,023,306 | ---- | C] () -- C:\ProgramData\dsgsdgdsgdsgw.pad
[2011-12-31 11:39:27 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempbf2864.html
[2011-12-31 11:39:27 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempFW2864.html
[2011-07-01 18:24:08 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempLR4764.html
[2011-07-01 18:24:08 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TemplG4764.html
[2011-06-26 22:06:06 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempGr3008.html
[2011-06-26 22:06:06 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempGc3008.html
[2011-06-23 10:08:55 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempTA3552.html
[2011-06-23 10:08:55 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempfH3552.html
[2011-06-18 10:39:27 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempdm3516.html
[2011-06-18 10:39:27 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempGO3516.html
[2011-06-05 11:09:25 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempPX7248.html
[2011-06-05 11:09:25 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempig7248.html
[2011-05-28 21:27:44 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempDG4652.html
[2011-05-28 21:27:44 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempxB4652.html
[2011-05-22 12:30:48 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempep4556.html
[2011-05-22 12:30:48 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempyr4556.html
[2011-05-15 12:15:01 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Temptq4684.html
[2011-05-15 12:15:01 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempkl4684.html
[2011-05-07 12:02:07 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempOw6688.html
[2011-05-07 12:02:07 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempxt6688.html
[2011-05-05 13:48:55 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempqG4952.html
[2011-05-05 13:48:55 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempti4952.html
[2011-04-30 19:39:04 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempas5548.html
[2011-04-30 19:39:04 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempbS5548.html
[2011-04-28 02:25:55 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempNq4828.html
[2011-04-28 02:25:55 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempSJ4828.html
[2011-04-24 10:04:58 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempDG4760.html
[2011-04-24 10:04:58 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempYx4760.html
[2011-04-23 18:26:28 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempjQ4896.html
[2011-04-23 18:26:28 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempZo4896.html
[2011-04-18 22:18:33 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempmJ6264.html
[2011-04-18 22:18:32 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempdM6264.html
[2011-04-15 17:15:36 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI
[2011-04-10 18:54:07 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempbR4316.html
[2011-04-10 18:54:06 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempwg4316.html
[2011-04-10 12:32:25 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempth6384.html
[2011-04-10 12:32:25 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempFF6384.html
[2011-04-02 15:48:40 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempro5460.html
[2011-04-02 15:48:40 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempyi5460.html
[2011-03-26 00:14:50 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempaO3876.html
[2011-03-26 00:14:50 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempzY3876.html
[2011-03-25 19:43:00 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempVR4388.html
[2011-03-25 19:43:00 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempom4388.html
[2011-03-24 23:29:13 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempfG4780.html
[2011-03-24 23:29:13 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempVQ4780.html
[2011-03-24 22:54:46 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TemplW6880.html
[2011-03-24 22:54:46 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempTp6880.html
[2011-03-23 22:00:36 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempdU5504.html
[2011-03-23 22:00:36 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempPt5504.html
[2011-03-23 01:21:23 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempUM8004.html
[2011-03-23 01:21:23 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempYJ8004.html
[2011-03-13 19:22:09 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempRX7832.html
[2011-03-13 19:22:09 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempEg7832.html
[2011-03-12 14:49:48 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempsX4724.html
[2011-03-12 14:49:47 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempGm4724.html
[2011-03-08 17:20:07 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempRC4788.html
[2011-03-08 17:20:07 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempVe4788.html
[2011-03-06 02:07:30 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempWl4396.html
[2011-03-06 02:07:30 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempPx4396.html
[2011-03-06 01:47:54 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempoL4648.html
[2011-03-06 01:47:54 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TemprX4648.html
[2011-03-05 18:45:15 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempTT5612.html
[2011-03-05 18:45:15 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempKl5612.html
[2011-03-03 22:32:26 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempOj6244.html
[2011-03-03 22:32:26 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempfp6244.html
[2011-02-27 15:18:02 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempgE6964.html
[2011-02-27 15:18:02 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Templr6964.html
[2011-02-24 08:42:47 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempRM4852.html
[2011-02-24 08:42:47 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempMU4852.html
[2011-02-21 10:07:35 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempLG7096.html
[2011-02-21 10:07:35 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempHy7096.html
[2011-02-12 11:54:19 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempUF5776.html
[2011-02-12 11:54:19 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Temppg5776.html
[2011-02-11 23:23:15 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TemprK4668.html
[2011-02-11 23:23:15 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempAT4668.html
[2011-02-07 22:41:46 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempEt4508.html
[2011-02-07 22:41:45 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempKj4508.html
[2011-02-06 20:53:17 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempVR4944.html
[2011-02-06 20:53:16 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempJO4944.html
[2011-01-29 00:27:41 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempCR4500.html
[2011-01-29 00:27:41 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempQU4500.html
[2011-01-17 21:25:32 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempXc2536.html
[2011-01-17 21:25:32 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempfm2536.html
[2011-01-07 00:31:28 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TemprX5836.html
[2011-01-07 00:31:28 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempLQ5836.html
[2011-01-03 10:36:21 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempbe4828.html
[2011-01-03 10:36:21 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TemppL4828.html
[2011-01-02 12:24:46 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempJY7164.html
[2011-01-02 12:24:46 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempAZ7164.html
[2010-12-24 12:32:30 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempTU4808.html
[2010-12-24 12:32:30 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempVb4808.html
[2010-12-23 13:41:50 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempLc7856.html
[2010-12-23 13:41:50 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempgk7856.html
[2010-12-19 10:29:19 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempdY1416.html
[2010-12-19 10:29:19 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempfM1416.html
[2010-12-14 22:11:47 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempwl4260.html
[2010-12-14 22:11:47 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempsd4260.html
[2010-12-08 14:02:58 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempPE5356.html
[2010-12-08 14:02:58 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempgV5356.html
[2010-12-08 12:39:37 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempbo5116.html
[2010-12-08 12:39:37 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempXo5116.html
[2010-12-06 16:12:02 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempht8136.html
[2010-12-06 16:12:02 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempvS8136.html
[2010-12-02 18:56:19 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempSO4768.html
[2010-12-02 18:56:19 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempLK4768.html
[2010-12-02 13:01:28 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempsx7976.html
[2010-12-02 13:01:28 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempYA7976.html
[2010-11-30 11:27:06 | 000,005,972 | ---- | C] () -- C:\Users\Maciek\AppData\Local\d3d9caps.dat
[2010-11-26 10:08:43 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempYL6680.html
[2010-11-26 10:08:43 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempBw6680.html
[2010-11-12 13:58:34 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempeP5080.html
[2010-11-12 13:58:34 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempXO5080.html
[2010-11-04 22:51:02 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempVd3368.html
[2010-11-04 22:51:02 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempqw3368.html
[2010-10-25 22:17:30 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempgK5804.html
[2010-10-25 22:17:30 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempgX5804.html
[2010-10-16 12:08:23 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempyc7284.html
[2010-10-16 12:08:23 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempbx7284.html
[2010-10-14 21:54:22 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempAu7348.html
[2010-10-14 21:54:22 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempkJ7348.html
[2010-10-12 15:33:47 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempWv5316.html
[2010-10-12 15:33:47 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempiz5316.html
[2010-10-07 02:24:23 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempOC5048.html
[2010-10-07 02:24:23 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempxR5048.html
[2010-10-05 18:27:44 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempKG4476.html
[2010-10-05 18:27:44 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempiY4476.html
[2010-10-01 10:08:01 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempNz4552.html
[2010-10-01 10:08:00 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempcS4552.html
[2010-09-23 16:21:09 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempVS3324.html
[2010-09-23 16:21:09 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempwd3324.html
[2010-09-10 08:04:40 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempNG5176.html
[2010-09-10 08:04:39 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempxR5176.html
[2010-09-10 00:04:28 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempBz3604.html
[2010-09-10 00:04:28 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempJQ3604.html
[2010-08-26 11:14:39 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempVr4660.html
[2010-08-26 11:14:39 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempvp4660.html
[2010-08-23 08:47:20 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempgc4496.html
[2010-08-23 08:47:20 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempLt4496.html
[2010-08-14 21:14:01 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempER4668.html
[2010-08-14 21:14:01 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempEN4668.html
[2010-08-11 02:31:15 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempIW4744.html
[2010-08-11 02:31:14 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempET4744.html
[2010-08-04 02:21:45 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempaO4588.html
[2010-08-04 02:21:45 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempvd4588.html
[2010-08-03 22:39:21 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempeP4580.html
[2010-08-03 22:39:21 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempyc4580.html
[2010-07-26 15:38:49 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempRN5192.html
[2010-07-26 15:38:49 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempij5192.html
[2010-07-20 22:33:14 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Temple3480.html
[2010-07-20 22:33:14 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TemphU3480.html
[2010-07-08 11:40:24 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempmP4700.html
[2010-07-08 11:40:24 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempgO4700.html
[2010-07-04 23:09:15 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempAN2280.html
[2010-07-04 23:09:15 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempqZ2280.html
[2010-06-22 21:56:05 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempZg6592.html
[2010-06-22 21:56:05 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempqf6592.html
[2010-06-21 22:41:43 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempGq6040.html
[2010-06-21 22:41:43 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempXp6040.html
[2010-06-11 02:34:14 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TemplO5012.html
[2010-06-11 02:34:14 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempJR5012.html
[2010-06-09 13:51:38 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempQd4576.html
[2010-06-09 13:51:38 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempeG4576.html
[2010-06-05 20:46:36 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempVyq592.html
[2010-06-05 20:46:36 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempWSd592.html
[2010-05-30 00:34:07 | 000,022,328 | ---- | C] () -- C:\Users\Maciek\AppData\Roaming\PnkBstrK.sys
[2010-05-29 21:12:49 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempri5092.html
[2010-05-29 21:12:49 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempSv5092.html
[2010-04-30 02:26:06 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempZj4544.html
[2010-04-30 02:26:06 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempxR4544.html
[2010-04-25 00:07:27 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempqi4504.html
[2010-04-25 00:07:27 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempRc4504.html
[2010-04-24 18:47:59 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempMm4440.html
[2010-04-24 18:47:59 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempRA4440.html
[2010-04-15 02:25:30 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempKS4720.html
[2010-04-15 02:25:30 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempeE4720.html
[2010-04-14 07:24:35 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempYX5460.html
[2010-04-14 07:24:35 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempGV5460.html
[2010-04-12 09:38:33 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempaq7620.html
[2010-04-12 09:38:33 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempsK7620.html
[2010-04-01 02:23:29 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempbc4272.html
[2010-04-01 02:23:28 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempMe4272.html
[2010-03-28 19:19:02 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempUd4836.html
[2010-03-28 19:19:02 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempCk4836.html
[2010-03-25 20:33:11 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempTg4536.html
[2010-03-25 20:33:11 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempEA4536.html
[2010-03-12 03:25:50 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempGp4992.html
[2010-03-12 03:25:49 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempFL4992.html
[2010-03-09 09:44:20 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempaq4296.html
[2010-03-09 09:44:20 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempbO4296.html
[2010-03-09 09:35:37 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempCk4324.html
[2010-03-09 09:35:31 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempva4324.html
[2010-03-07 19:38:23 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempGb3232.html
[2010-03-07 19:38:23 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempDo3232.html
[2010-03-07 17:27:31 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempwp4492.html
[2010-03-07 17:27:31 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempTI4492.html
[2010-02-25 03:23:07 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Tempqt4524.html
[2010-02-25 03:23:07 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempVj4524.html
[2010-02-24 22:45:04 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempPs4320.html
[2010-02-24 22:45:04 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempXX4320.html
[2010-02-17 12:25:47 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempUe4484.html
[2010-02-17 12:25:47 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Temprn4484.html
[2010-02-11 03:28:41 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempSZ2728.html
[2010-02-11 03:28:41 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempUz2728.html
[2010-02-11 03:04:24 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempDX3796.html
[2010-02-11 03:04:24 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TemppV3796.html
[2010-02-09 19:11:05 | 000,000,000 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TemptIR568.html
[2010-02-09 19:11:05 | 000,000,000 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempBDo568.html
[2010-02-05 16:37:20 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempgB4188.html
[2010-02-05 16:37:20 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TempfS4188.html
[2010-01-31 22:30:38 | 000,002,432 | ---- | C] () -- C:\Users\Maciek\AppData\Local\Temphi3116.html
[2010-01-31 22:30:38 | 000,002,089 | ---- | C] () -- C:\Users\Maciek\AppData\Local\TemptO3116.html
[2009-05-23 22:31:24 | 000,225,792 | ---- | C] () -- C:\Users\Maciek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2006-11-02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012-06-08 18:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-04-11 07:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-04-11 07:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-11-04 23:53:36 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\.ABC
[2012-11-04 23:53:37 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\Autodesk
[2009-08-26 22:30:10 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\BESTplayer
[2010-03-23 00:33:27 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011-01-22 22:36:48 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\com.fiat.convergence.385E4263E7379A5D22A7076E99B02868EFF10711.1
[2010-12-08 11:42:42 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\DAEMON Tools Lite
[2009-07-13 14:43:36 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\Gadu-Gadu
[2012-11-04 23:54:08 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\Gadu-Gadu 10
[2011-05-15 11:23:58 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\Nokia
[2012-11-04 23:54:09 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\OpenFM
[2012-11-04 23:54:03 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\OpenOffice.org
[2012-11-04 23:53:04 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\Opera
[2011-09-09 21:23:17 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\PC Suite
[2012-04-29 00:36:54 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\Toshiba
[2012-11-01 00:15:12 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\TuneUp Software
[2012-11-04 23:53:25 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\Ulead Systems
[2012-11-01 00:40:34 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\Ulnayn
[2012-09-10 20:35:09 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\Utgu
[2012-11-04 23:55:26 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\Uwhi
[2012-10-30 22:08:42 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\Uxhaef
[2012-10-30 22:08:35 | 000,000,000 | ---D | M] -- C:\Users\Maciek\AppData\Roaming\Ysifho
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 64 bytes -> C:\Users\Maciek\Desktop\Watch Snuff Box S01E03 - Punchline Online Free.flv:TOC.WMV

< End of report >