OTL logfile created on: 2010-12-24 23:37:58 - Run 2
OTL by OldTimer - Version 3.2.18.0     Folder = C:\Users\Ewa\Desktop
Windows Vista Home Premium Edition  (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18882)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1 014,00 Mb Total Physical Memory | 251,00 Mb Available Physical Memory | 25,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 63,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 80,71 Gb Total Space | 26,35 Gb Free Space | 32,65% Space Free | Partition Type: NTFS
Drive D: | 19,36 Gb Total Space | 11,02 Gb Free Space | 56,90% Space Free | Partition Type: NTFS
 
Computer Name: KOMPUTER | User Name: Ewa | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2010-12-24 14:46:24 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Ewa\Desktop\OTL.exe
PRC - [2010-12-11 09:36:53 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010-11-25 10:34:21 | 002,069,344 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgtray.exe
PRC - [2010-11-25 10:33:06 | 000,725,344 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgcsrvx.exe
PRC - [2010-09-24 08:23:23 | 000,621,920 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgnsx.exe
PRC - [2010-09-09 08:24:49 | 001,101,152 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgchsvx.exe
PRC - [2010-09-09 08:24:49 | 000,515,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgrsx.exe
PRC - [2010-09-09 08:24:19 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgwdsvc.exe
PRC - [2009-12-08 20:10:24 | 000,057,344 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\System32\nlssrv32.exe
PRC - [2008-10-29 07:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008-06-24 16:06:06 | 001,840,424 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
PRC - [2007-06-15 11:57:42 | 000,145,504 | ---- | M] (B.H.A Corporation) -- C:\Windows\System32\bgsvcgen.exe
PRC - [2007-02-25 21:55:18 | 000,125,048 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
PRC - [2006-12-08 09:52:04 | 000,204,800 | ---- | M] (Fujitsu Siemens Computers) -- C:\FirstSteps\OnlineDiagnostic\TestManager\TestHandler.exe
PRC - [2006-11-02 20:40:12 | 000,174,656 | ---- | M] () -- C:\Program Files\Common Files\Protexis\License Service\PSIService.exe
PRC - [2006-10-19 14:42:00 | 000,065,536 | ---- | M] (O2Micro International) -- C:\Windows\System32\o2flash.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2010-12-24 14:46:24 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Ewa\Desktop\OTL.exe
MOD - [2010-09-09 08:27:05 | 000,012,536 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\avgrsstx.dll
MOD - [2006-11-02 10:38:57 | 001,648,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Auto | Stopped] -- C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe -- (BlueSoleil Hid Service)
SRV - [2010-09-09 08:24:19 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2009-12-26 15:33:02 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009-12-08 20:10:24 | 000,057,344 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\System32\nlssrv32.exe -- (nlsX86cc)
SRV - [2007-12-10 13:59:04 | 000,353,280 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2007-07-04 03:41:42 | 000,265,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007-06-15 11:57:42 | 000,145,504 | ---- | M] (B.H.A Corporation) [Auto | Running] -- C:\Windows\System32\bgsvcgen.exe -- (bgsvcgen)
SRV - [2007-05-31 09:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007-05-31 09:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2007-02-25 21:55:18 | 000,125,048 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2006-12-08 09:52:04 | 000,204,800 | ---- | M] (Fujitsu Siemens Computers) [Auto | Running] -- C:\FirstSteps\OnlineDiagnostic\TestManager\TestHandler.exe -- (TestHandler)
SRV - [2006-11-02 20:40:12 | 000,174,656 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\Protexis\License Service\PSIService.exe -- (ProtexisLicensing)
SRV - [2006-10-19 14:42:00 | 000,065,536 | ---- | M] (O2Micro International) [Auto | Running] -- C:\Windows\System32\o2flash.exe -- (O2Flash)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\SymIM.sys -- (SymIMMP)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\SymIM.sys -- (SymIM)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt -- (EverestDriver)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2010-09-09 08:27:03 | 000,243,024 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtdix.sys -- (AvgTdiX)
DRV - [2010-09-09 08:26:27 | 000,216,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgldx86.sys -- (AvgLdx86)
DRV - [2010-09-09 08:26:26 | 000,029,584 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\System32\drivers\avgmfx86.sys -- (AvgMfx86)
DRV - [2010-04-06 14:49:10 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009-02-24 17:42:14 | 000,116,736 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mcdbus.sys -- (mcdbus)
DRV - [2008-10-09 14:42:42 | 000,017,408 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\KMWDFILTER.sys -- (KMWDFILTER)
DRV - [2008-07-10 15:29:58 | 000,101,632 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2008-02-11 18:36:10 | 002,302,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\igdkmd32.sys -- (igfx)
DRV - [2008-02-11 18:36:10 | 002,302,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\igdkmd32.sys -- (ialm)
DRV - [2007-11-24 12:16:25 | 000,278,984 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2007-11-24 12:16:24 | 000,025,416 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2007-10-28 11:59:29 | 000,009,856 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\pfc.sys -- (pfc)
DRV - [2007-04-24 19:36:00 | 000,041,856 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfusb.sys -- (Tosrfusb)
DRV - [2007-04-24 13:20:06 | 000,113,920 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbd.sys -- (tosrfbd)
DRV - [2007-04-03 15:53:12 | 000,047,872 | ---- | M] (JMicron Technology Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\jraid.sys -- (JRAID)
DRV - [2007-03-01 16:53:12 | 000,073,728 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Tosrfhid.sys -- (Tosrfhid)
DRV - [2007-01-22 10:43:26 | 000,053,376 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TosRfSnd.sys -- (TosRfSnd)
DRV - [2006-11-20 17:55:16 | 000,036,480 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV - [2006-11-20 15:14:08 | 000,038,400 | ---- | M] (O2Micro ) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\o2media.sys -- (O2MDRDR)
DRV - [2006-11-17 13:58:32 | 000,031,360 | ---- | M] (O2Micro ) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\o2sd.sys -- (O2SDRDR)
DRV - [2006-11-16 14:36:28 | 000,020,480 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\DNISP50.sys -- (DNISp50)
DRV - [2006-11-16 14:36:18 | 000,021,504 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\DNIMP50.sys -- (DNIMp50)
DRV - [2006-11-02 10:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300)
DRV - [2006-11-02 10:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx)
DRV - [2006-11-02 10:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor)
DRV - [2006-11-02 10:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci)
DRV - [2006-11-02 10:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci)
DRV - [2006-11-02 10:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV)
DRV - [2006-11-02 10:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320)
DRV - [2006-11-02 10:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2)
DRV - [2006-11-02 10:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid)
DRV - [2006-11-02 10:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx)
DRV - [2006-11-02 10:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata)
DRV - [2006-11-02 10:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m)
DRV - [2006-11-02 10:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960)
DRV - [2006-11-02 10:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp)
DRV - [2006-11-02 10:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4)
DRV - [2006-11-02 10:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor)
DRV - [2006-11-02 10:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx)
DRV - [2006-11-02 10:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas)
DRV - [2006-11-02 10:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI)
DRV - [2006-11-02 10:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs)
DRV - [2006-11-02 10:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc)
DRV - [2006-11-02 10:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid)
DRV - [2006-11-02 10:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi)
DRV - [2006-11-02 10:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS)
DRV - [2006-11-02 10:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx)
DRV - [2006-11-02 10:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC)
DRV - [2006-11-02 10:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3)
DRV - [2006-11-02 10:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x)
DRV - [2006-11-02 10:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi)
DRV - [2006-11-02 10:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas)
DRV - [2006-11-02 10:49:30 | 000,017,512 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide)
DRV - [2006-11-02 10:49:28 | 000,016,488 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide)
DRV - [2006-11-02 10:49:20 | 000,014,952 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide)
DRV - [2006-11-02 09:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV - [2006-11-02 09:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer)
DRV - [2006-11-02 09:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp)
DRV - [2006-11-02 09:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo)
DRV - [2006-11-02 09:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm)
DRV - [2006-11-02 09:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm)
DRV - [2006-11-02 08:41:49 | 001,010,560 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\smserial.sys -- (smserial)
DRV - [2006-11-02 08:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi)
DRV - [2006-11-02 08:30:56 | 000,047,104 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2006-11-02 08:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R)
DRV - [2006-11-01 16:05:06 | 001,644,968 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006-10-31 13:46:36 | 000,250,368 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\iastor.sys -- (iaStor)
DRV - [2006-10-30 09:42:28 | 001,786,880 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32) Sterownik karty Intel(R)
DRV - [2006-10-10 19:33:00 | 000,041,600 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosporte.sys -- (tosporte)
DRV - [2006-07-14 13:55:42 | 000,089,344 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid) NVIDIA nForce(tm)
DRV - [2006-07-14 13:55:34 | 000,105,088 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvatabus.sys -- (nvatabus)
DRV - [2006-06-23 16:00:26 | 000,031,488 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\blueletaudio.sys -- (BlueletAudio)
DRV - [2006-02-28 16:57:22 | 000,084,836 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VcommMgr.sys -- (VcommMgr)
DRV - [2006-02-20 18:17:40 | 000,033,408 | ---- | M] (B.H.A Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\cdrbsdrv.sys -- (cdrbsdrv)
DRV - [2006-02-07 18:52:58 | 000,006,912 | ---- | M] (JMicron ) [Kernel | Boot | Stopped] -- C:\Windows\system32\drivers\jgogo.sys -- (JGOGO)
DRV - [2006-01-19 13:31:34 | 000,010,068 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\BtNetDrv.sys -- (BT)
DRV - [2005-08-31 10:34:52 | 000,020,480 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\BlueletSCOAudio.sys -- (BlueletSCOAudio)
DRV - [2005-08-01 16:45:00 | 000,064,896 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2005-07-30 07:21:32 | 000,011,988 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VBTEnum.sys -- (BTHidEnum)
DRV - [2005-05-01 05:50:10 | 000,028,271 | ---- | M] (IVT Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\BTHidMgr.sys -- (BTHidMgr)
DRV - [2005-01-11 16:58:48 | 000,030,976 | ---- | M] (Silicon Integrated Systems Corp) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2)
DRV - [2005-01-06 13:42:00 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfnds.sys -- (tosrfnds)
DRV - [2004-11-30 10:51:00 | 000,084,636 | ---- | M] (Aladdin Knowledge Systems, Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\aksifdh.sys -- (AKSIFDH)
DRV - [2004-10-19 13:37:38 | 000,061,312 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VComm.sys -- (VComm)
DRV - [2004-06-10 00:42:38 | 000,015,429 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Sacm2A.sys -- (USBCM)
DRV - [2003-08-10 01:32:14 | 000,014,336 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NetMotCM.sys -- (ndiscm)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1034039110-2923998935-146553954-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-1034039110-2923998935-146553954-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-1034039110-2923998935-146553954-1000\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-1034039110-2923998935-146553954-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\S-1-5-21-1034039110-2923998935-146553954-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKU\S-1-5-21-1034039110-2923998935-146553954-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 209.124.50.41:3128
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.selectedEngine: "Wirtualna Polska"
FF - prefs.js..browser.startup.homepage: "http://www.google.pl/"
FF - prefs.js..extensions.enabledItems: {24cc1362-11c6-4918-a2c0-b9ee5a563185}:2.7.2.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {ca0849e8-2c76-42ae-9abe-34e14d337acf}:1.93
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.872
FF - prefs.js..network.proxy.backup.ftp: "72.254.128.202"
FF - prefs.js..network.proxy.backup.ftp_port: 80
FF - prefs.js..network.proxy.backup.gopher: "72.254.128.202"
FF - prefs.js..network.proxy.backup.gopher_port: 80
FF - prefs.js..network.proxy.backup.socks: "72.254.128.202"
FF - prefs.js..network.proxy.backup.socks_port: 80
FF - prefs.js..network.proxy.backup.ssl: "72.254.128.202"
FF - prefs.js..network.proxy.backup.ssl_port: 80
FF - prefs.js..network.proxy.ftp: "72.254.128.202"
FF - prefs.js..network.proxy.ftp_port: 80
FF - prefs.js..network.proxy.gopher: "72.254.128.202"
FF - prefs.js..network.proxy.gopher_port: 80
FF - prefs.js..network.proxy.http: "72.254.128.202"
FF - prefs.js..network.proxy.http_port: 80
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "72.254.128.202"
FF - prefs.js..network.proxy.socks_port: 80
FF - prefs.js..network.proxy.ssl: "72.254.128.202"
FF - prefs.js..network.proxy.ssl_port: 80
FF - prefs.js..network.proxy.type: 4
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG9\Firefox [2010-11-25 10:37:09 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-12-11 09:37:00 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-12-11 09:37:00 | 000,000,000 | ---D | M]
 
[2009-10-03 11:06:57 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\mozilla\Extensions
[2010-12-24 15:31:38 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\mozilla\Firefox\Profiles\zjzv7crl.default\extensions
[2010-04-27 23:52:33 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Ewa\AppData\Roaming\mozilla\Firefox\Profiles\zjzv7crl.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010-08-23 20:36:21 | 000,000,000 | ---D | M] (ArchiBar Toolbar) -- C:\Users\Ewa\AppData\Roaming\mozilla\Firefox\Profiles\zjzv7crl.default\extensions\{24cc1362-11c6-4918-a2c0-b9ee5a563185}
[2010-08-15 07:15:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ewa\AppData\Roaming\mozilla\Firefox\Profiles\zjzv7crl.default\extensions\{ca0849e8-2c76-42ae-9abe-34e14d337acf}
[2010-04-06 14:49:38 | 000,002,059 | ---- | M] () -- C:\Users\Ewa\AppData\Roaming\Mozilla\FireFox\Profiles\zjzv7crl.default\searchplugins\daemon-search.xml
[2010-12-24 12:33:08 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010-05-26 16:59:35 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010-04-12 16:29:19 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010-04-04 22:55:53 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-04-04 22:55:53 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-04-04 22:55:54 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-04-04 22:55:54 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-04-04 22:55:54 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-04-04 22:55:54 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2006-09-18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKU\S-1-5-21-1034039110-2923998935-146553954-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-1034039110-2923998935-146553954-1000\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.
O3 - HKU\S-1-5-21-1034039110-2923998935-146553954-1000\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKU\S-1-5-21-1034039110-2923998935-146553954-1000\..\Toolbar\WebBrowser: (no name) - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - No CLSID value found.
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-1034039110-2923998935-146553954-1000..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG)
O7 - HKU\S-1-5-21-1034039110-2923998935-146553954-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://download.bitdefender.com/resources/scan8/oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} http://www.ca.com/us/securityadvisor/virusinfo/webscan.cab (WScanCtl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_03-windows-i586.cab (Java Plug-in 1.5.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 192.168.0.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (avgrsstx.dll) - C:\Windows\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\Windows\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Users\Ewa\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\Ewa\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{142fb77a-b169-11dd-a372-00030d58615f}\Shell - "" = AutoRun
O33 - MountPoints2\{142fb77a-b169-11dd-a372-00030d58615f}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- File not found
O33 - MountPoints2\{142fb7aa-b169-11dd-a372-00030d58615f}\Shell - "" = AutoRun
O33 - MountPoints2\{142fb7aa-b169-11dd-a372-00030d58615f}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- File not found
O33 - MountPoints2\{3c4308d4-b1b1-11dd-a288-00030d58615f}\Shell - "" = AutoRun
O33 - MountPoints2\{3c4308d4-b1b1-11dd-a288-00030d58615f}\Shell\AutoRun\command - "" = H:\AutoRun.exe -- File not found
O33 - MountPoints2\{ae058e78-be10-11dd-9633-00030d58615f}\Shell - "" = AutoRun
O33 - MountPoints2\{ae058e78-be10-11dd-9633-00030d58615f}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- File not found
O33 - MountPoints2\{b5d14de4-4183-11df-83e2-00030d000001}\Shell - "" = AutoRun
O33 - MountPoints2\{b5d14de4-4183-11df-83e2-00030d000001}\Shell\AutoRun\command - "" = F:\setup.exe -- File not found
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2010-12-24 16:30:09 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010-12-24 16:30:05 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010-12-24 16:30:05 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010-12-24 14:46:19 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\Ewa\Desktop\OTL.exe
[2008-01-30 11:45:40 | 000,015,429 | ---- | C] ( ) -- C:\Windows\System32\drivers\Sacm2A.sys
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2010-12-24 23:45:00 | 000,000,414 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{9A46B650-AC37-41CB-BE20-CC5E3BF39638}.job
[2010-12-24 23:30:58 | 000,003,200 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010-12-24 23:30:58 | 000,003,200 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010-12-24 23:30:46 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010-12-24 22:42:15 | 156,427,896 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2010-12-24 17:09:45 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2010-12-24 16:30:10 | 000,000,912 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010-12-24 16:20:12 | 000,879,047 | ---- | M] () -- C:\Users\Ewa\Desktop\SecurityCheck.exe
[2010-12-24 14:46:24 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Ewa\Desktop\OTL.exe
[2010-12-24 14:34:06 | 000,124,536 | ---- | M] () -- C:\Users\Ewa\Desktop\Bez tytułu.jpg
[2010-12-24 14:30:07 | 000,000,000 | ---- | M] () -- C:\Users\Ewa\AppData\Local\prvlcl.dat
[2010-12-24 12:28:05 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempCX5240.html
[2010-12-24 12:28:05 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempkY5240.html
[2010-12-24 08:19:14 | 069,277,281 | ---- | M] () -- C:\Windows\System32\drivers\Avg\incavi.avm
[2010-12-24 01:17:41 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempJV5920.html
[2010-12-24 01:17:41 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempZi5920.html
[2010-12-23 10:13:18 | 000,613,046 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010-12-23 10:13:18 | 000,538,916 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2010-12-23 10:13:18 | 000,109,270 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010-12-23 10:13:18 | 000,087,672 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2010-12-23 00:35:41 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempKC4940.html
[2010-12-23 00:35:41 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempcu4940.html
[2010-12-22 00:06:10 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempwW1372.html
[2010-12-22 00:06:10 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempte1372.html
[2010-12-20 22:57:04 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempHk4880.html
[2010-12-20 22:57:04 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempbj4880.html
[2010-12-20 18:09:00 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010-12-20 18:08:40 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010-12-20 11:56:00 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempBL5432.html
[2010-12-20 11:56:00 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempnK5432.html
[2010-12-20 00:09:52 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempzvc364.html
[2010-12-20 00:09:52 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempBxq364.html
[2010-12-18 23:20:02 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempzW4732.html
[2010-12-18 23:20:02 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempqn4732.html
[2010-12-18 01:37:03 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempaA3032.html
[2010-12-18 01:37:03 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempBj3032.html
[2010-12-17 18:14:11 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TemprT4436.html
[2010-12-17 18:14:10 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempMu4436.html
[2010-12-17 00:28:59 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TemptF5912.html
[2010-12-17 00:28:59 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempzs5912.html
[2010-12-16 01:39:35 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempyE3944.html
[2010-12-16 01:39:35 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempYU3944.html
[2010-12-15 23:51:08 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempio4168.html
[2010-12-15 23:51:08 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempaV4168.html
[2010-12-15 01:05:52 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Temphz6136.html
[2010-12-15 01:05:52 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Temptv6136.html
[2010-12-14 01:25:23 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempyw5380.html
[2010-12-14 01:25:23 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempkC5380.html
[2010-12-13 17:16:06 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempaj4732.html
[2010-12-13 17:16:06 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Temppv4732.html
[2010-12-13 00:55:27 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempyi4588.html
[2010-12-13 00:55:27 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempmX4588.html
[2010-12-12 13:31:30 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempAy3068.html
[2010-12-12 13:31:30 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Temptv3068.html
[2010-12-12 00:05:36 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempEA4456.html
[2010-12-12 00:05:36 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempQg4456.html
[2010-12-11 15:06:05 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TemppC5708.html
[2010-12-11 15:06:05 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TemplL5708.html
[2010-12-11 01:02:00 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempem1596.html
[2010-12-11 01:02:00 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempmz1596.html
[2010-12-10 00:30:56 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempvY4348.html
[2010-12-10 00:30:56 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempPV4348.html
[2010-12-09 00:37:17 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempHU3208.html
[2010-12-09 00:37:17 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempdG3208.html
[2010-12-08 01:03:16 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempgo5308.html
[2010-12-08 01:03:16 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempiZ5308.html
[2010-12-08 01:01:42 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempPK4720.html
[2010-12-08 01:01:41 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TemphM4720.html
[2010-12-07 01:23:09 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempgT3996.html
[2010-12-07 01:23:09 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Temphy3996.html
[2010-12-05 23:16:27 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempkB5812.html
[2010-12-05 23:16:27 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempvW5812.html
[2010-12-04 23:43:26 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempbx4424.html
[2010-12-04 23:43:26 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TemphL4424.html
[2010-12-03 01:10:20 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempPO2568.html
[2010-12-03 01:10:20 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempmc2568.html
[2010-12-02 23:23:34 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempAf2900.html
[2010-12-02 23:23:34 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempdW2900.html
[2010-12-02 01:00:44 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempWd4568.html
[2010-12-02 01:00:44 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempAh4568.html
[2010-11-30 23:52:15 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempiq4288.html
[2010-11-30 23:52:15 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempvi4288.html
[2010-11-30 00:31:33 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Temphn3024.html
[2010-11-30 00:31:33 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempVY3024.html
[2010-11-29 15:31:34 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempTH3088.html
[2010-11-29 15:31:34 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempvT3088.html
[2010-11-29 01:52:14 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempyr5276.html
[2010-11-29 01:52:14 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempzT5276.html
[2010-11-27 00:50:23 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempcP5800.html
[2010-11-27 00:50:23 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempqb5800.html
[2010-11-25 01:00:02 | 000,002,432 | ---- | M] () -- C:\Users\Ewa\AppData\Local\Tempda3580.html
[2010-11-25 01:00:02 | 000,002,089 | ---- | M] () -- C:\Users\Ewa\AppData\Local\TempdI3580.html
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2010-12-24 22:41:40 | 156,427,896 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2010-12-24 16:30:10 | 000,000,912 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010-12-24 16:20:11 | 000,879,047 | ---- | C] () -- C:\Users\Ewa\Desktop\SecurityCheck.exe
[2010-12-24 14:34:06 | 000,124,536 | ---- | C] () -- C:\Users\Ewa\Desktop\Bez tytułu.jpg
[2010-12-24 09:40:28 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempCX5240.html
[2010-12-24 09:40:28 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempkY5240.html
[2010-12-23 12:21:17 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempJV5920.html
[2010-12-23 12:21:17 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempZi5920.html
[2010-12-22 15:07:03 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempKC4940.html
[2010-12-22 15:07:03 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempcu4940.html
[2010-12-21 09:03:03 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempwW1372.html
[2010-12-21 09:03:03 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempte1372.html
[2010-12-20 19:18:30 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempHk4880.html
[2010-12-20 19:18:30 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempbj4880.html
[2010-12-20 10:30:33 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempBL5432.html
[2010-12-20 10:30:33 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempnK5432.html
[2010-12-19 09:17:57 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempzvc364.html
[2010-12-19 09:17:57 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempBxq364.html
[2010-12-18 15:06:38 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempzW4732.html
[2010-12-18 15:06:38 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempqn4732.html
[2010-12-17 19:47:39 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempaA3032.html
[2010-12-17 19:47:39 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempBj3032.html
[2010-12-17 11:15:11 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemprT4436.html
[2010-12-17 11:15:11 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempMu4436.html
[2010-12-16 08:58:31 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemptF5912.html
[2010-12-16 08:58:31 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempzs5912.html
[2010-12-16 00:10:10 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempyE3944.html
[2010-12-16 00:10:10 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempYU3944.html
[2010-12-15 18:08:54 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempio4168.html
[2010-12-15 18:08:54 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempaV4168.html
[2010-12-14 11:59:23 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Temphz6136.html
[2010-12-14 11:59:23 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Temptv6136.html
[2010-12-13 20:51:47 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempyw5380.html
[2010-12-13 20:51:47 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempkC5380.html
[2010-12-13 14:12:16 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempaj4732.html
[2010-12-13 14:12:16 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Temppv4732.html
[2010-12-12 19:08:43 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempyi4588.html
[2010-12-12 19:08:43 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempmX4588.html
[2010-12-12 10:22:51 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempAy3068.html
[2010-12-12 10:22:51 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Temptv3068.html
[2010-12-11 22:35:18 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempEA4456.html
[2010-12-11 22:35:18 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempQg4456.html
[2010-12-11 11:19:21 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemppC5708.html
[2010-12-11 11:19:21 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemplL5708.html
[2010-12-10 14:07:13 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempem1596.html
[2010-12-10 14:07:13 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempmz1596.html
[2010-12-09 14:57:51 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempvY4348.html
[2010-12-09 14:57:51 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempPV4348.html
[2010-12-08 14:29:50 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempHU3208.html
[2010-12-08 14:29:50 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempdG3208.html
[2010-12-08 01:02:46 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempgo5308.html
[2010-12-08 01:02:46 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempiZ5308.html
[2010-12-07 22:01:22 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempPK4720.html
[2010-12-07 22:01:22 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemphM4720.html
[2010-12-06 22:54:20 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempgT3996.html
[2010-12-06 22:54:20 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Temphy3996.html
[2010-12-05 18:37:57 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempkB5812.html
[2010-12-05 18:37:57 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempvW5812.html
[2010-12-04 17:05:19 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempbx4424.html
[2010-12-04 17:05:19 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemphL4424.html
[2010-12-02 23:50:43 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempPO2568.html
[2010-12-02 23:50:43 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempmc2568.html
[2010-12-02 18:10:18 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempAf2900.html
[2010-12-02 18:10:18 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempdW2900.html
[2010-12-01 22:07:53 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempWd4568.html
[2010-12-01 22:07:53 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempAh4568.html
[2010-11-30 20:18:53 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempiq4288.html
[2010-11-30 20:18:53 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempvi4288.html
[2010-11-30 00:13:26 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Temphn3024.html
[2010-11-30 00:13:26 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempVY3024.html
[2010-11-29 10:15:02 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempTH3088.html
[2010-11-29 10:15:02 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempvT3088.html
[2010-11-28 16:32:38 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempyr5276.html
[2010-11-28 16:32:38 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempzT5276.html
[2010-11-26 10:16:45 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempcP5800.html
[2010-11-26 10:16:45 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempqb5800.html
[2010-11-24 15:47:03 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempda3580.html
[2010-11-24 15:47:03 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempdI3580.html
[2010-11-23 23:55:13 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempaS4596.html
[2010-11-23 23:55:13 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempGq4596.html
[2010-11-21 19:10:24 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempJr2320.html
[2010-11-21 19:10:24 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempeW2320.html
[2010-11-20 14:26:50 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempLD5904.html
[2010-11-20 14:26:50 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempco5904.html
[2010-11-19 21:19:52 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempNA3412.html
[2010-11-19 21:19:52 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempEG3412.html
[2010-11-19 10:25:00 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempMU3648.html
[2010-11-19 10:25:00 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemptV3648.html
[2010-11-18 21:41:35 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempwv5208.html
[2010-11-18 21:41:35 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempAJ5208.html
[2010-11-14 21:40:49 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempjK4708.html
[2010-11-14 21:40:49 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempCd4708.html
[2010-11-13 23:10:10 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempJt4704.html
[2010-11-13 23:10:10 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempmM4704.html
[2010-11-12 12:46:17 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempPh4972.html
[2010-11-12 12:46:17 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempZS4972.html
[2010-11-10 00:46:56 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempnv6084.html
[2010-11-10 00:46:56 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempWe6084.html
[2010-11-06 23:36:19 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempXK4944.html
[2010-11-06 23:36:19 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempDW4944.html
[2010-11-03 14:54:48 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempGmy308.html
[2010-11-03 14:54:48 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempxxm308.html
[2010-10-31 09:38:43 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempsj1528.html
[2010-10-31 09:38:43 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempYP1528.html
[2010-10-29 20:50:29 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempVw4236.html
[2010-10-29 20:50:29 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempfT4236.html
[2010-10-29 10:19:24 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempKH6000.html
[2010-10-29 10:19:24 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempFt6000.html
[2010-10-27 21:54:30 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempwk8004.html
[2010-10-27 21:54:30 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempsQ8004.html
[2010-10-25 15:30:32 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempOH3424.html
[2010-10-25 15:30:32 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempgz3424.html
[2010-10-24 08:00:58 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempWD4572.html
[2010-10-24 08:00:58 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempus4572.html
[2010-10-23 13:50:17 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempeu1540.html
[2010-10-23 13:50:17 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempaU1540.html
[2010-10-22 17:39:42 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempuJ4764.html
[2010-10-22 17:39:42 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempKV4764.html
[2010-10-21 08:31:05 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempYZ1532.html
[2010-10-21 08:31:05 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempff1532.html
[2010-10-20 08:51:04 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempVb4992.html
[2010-10-20 08:51:04 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempZs4992.html
[2010-10-19 21:11:37 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempFL3116.html
[2010-10-19 21:11:37 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempVx3116.html
[2010-10-18 20:18:47 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempIE1160.html
[2010-10-18 20:18:47 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempgn1160.html
[2010-10-18 14:24:28 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempAX4132.html
[2010-10-18 14:24:28 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempgK4132.html
[2010-10-17 17:47:21 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempGa5980.html
[2010-10-17 17:47:21 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempPX5980.html
[2010-10-16 18:39:37 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempKE5428.html
[2010-10-16 18:39:37 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempNB5428.html
[2010-10-15 20:34:20 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempuw3796.html
[2010-10-15 20:34:20 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempfI3796.html
[2010-10-14 13:53:00 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempVJ4728.html
[2010-10-14 13:53:00 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempZq4728.html
[2010-10-13 14:15:12 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Temphw1520.html
[2010-10-13 14:15:12 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempYv1520.html
[2010-10-12 21:08:59 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempfl1364.html
[2010-10-12 21:08:59 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempEL1364.html
[2010-10-11 21:49:58 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempzC3192.html
[2010-10-11 21:49:58 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempMP3192.html
[2010-10-10 22:05:14 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempPM5588.html
[2010-10-10 22:05:14 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempGM5588.html
[2010-10-09 21:44:58 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempoE5560.html
[2010-10-09 21:44:58 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempkP5560.html
[2010-10-08 13:14:58 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemppB4724.html
[2010-10-08 13:14:58 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempYa4724.html
[2010-10-07 12:31:14 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemprR3872.html
[2010-10-07 12:31:14 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempZL3872.html
[2010-10-05 15:20:59 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemphP5672.html
[2010-10-05 15:20:59 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempvt5672.html
[2010-10-04 20:21:56 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempbW3184.html
[2010-10-04 20:21:56 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempEY3184.html
[2010-10-03 18:04:37 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempBs1068.html
[2010-10-03 18:04:37 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempqF1068.html
[2010-10-02 20:35:56 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempKP4160.html
[2010-10-02 20:35:56 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempZK4160.html
[2010-10-02 10:17:09 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempRs2056.html
[2010-10-02 10:17:09 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempAr2056.html
[2010-10-01 20:42:09 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempWf3948.html
[2010-10-01 20:42:09 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Temppm3948.html
[2010-09-27 13:26:51 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempZb1780.html
[2010-09-27 13:26:51 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempyQ1780.html
[2010-09-26 21:51:16 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempgj4524.html
[2010-09-26 21:51:16 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempYL4524.html
[2010-09-24 18:01:07 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempQJ2492.html
[2010-09-24 18:01:07 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempoI2492.html
[2010-09-21 19:56:38 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempGm4532.html
[2010-09-21 19:56:38 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempfg4532.html
[2010-09-19 20:28:57 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempBS4648.html
[2010-09-19 20:28:57 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempUh4648.html
[2010-09-19 18:51:21 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempVM5384.html
[2010-09-19 18:51:21 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempQi5384.html
[2010-09-14 19:57:17 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010-09-14 16:54:11 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempNf4012.html
[2010-09-14 16:54:11 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempkw4012.html
[2010-09-14 13:59:53 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempHJ1500.html
[2010-09-14 13:59:53 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempqn1500.html
[2010-09-11 12:53:43 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempoK2468.html
[2010-09-11 12:53:43 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempXf2468.html
[2010-09-10 22:18:40 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempfQr300.html
[2010-09-10 22:18:40 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempnka300.html
[2010-09-09 21:08:24 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempGfT156.html
[2010-09-09 21:08:24 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemptuU156.html
[2010-09-09 13:09:22 | 000,000,000 | ---- | C] () -- C:\Users\Ewa\AppData\Local\prvlcl.dat
[2010-09-09 09:25:27 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempzW4500.html
[2010-09-09 09:25:27 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Templh4500.html
[2010-09-08 16:03:38 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempPf2708.html
[2010-09-08 16:03:38 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempoz2708.html
[2010-09-07 22:19:04 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempKm3228.html
[2010-09-07 22:19:04 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempnI3228.html
[2010-09-07 07:47:01 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempXV1876.html
[2010-09-07 07:47:01 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempRR1876.html
[2010-09-06 19:37:14 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempka3920.html
[2010-09-06 19:37:14 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempjg3920.html
[2010-09-02 11:10:45 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempTFl544.html
[2010-09-02 11:10:45 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempTaX544.html
[2010-09-01 13:56:57 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempPcO872.html
[2010-09-01 13:56:57 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempSZb872.html
[2010-08-31 20:33:06 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempdt4628.html
[2010-08-31 20:33:06 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempus4628.html
[2010-08-30 20:38:32 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempxn2456.html
[2010-08-30 20:38:32 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempqM2456.html
[2010-08-30 19:29:31 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempRN3296.html
[2010-08-30 19:29:31 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempZe3296.html
[2010-08-30 13:28:59 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempqLf772.html
[2010-08-30 13:28:59 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempdLH772.html
[2010-08-29 20:56:23 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempxn4224.html
[2010-08-29 20:56:23 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempOi4224.html
[2010-08-27 14:19:57 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempIO3864.html
[2010-08-27 14:19:57 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempzc3864.html
[2010-08-26 21:08:08 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempXq4020.html
[2010-08-26 21:08:08 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempsS4020.html
[2010-08-26 12:32:39 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempOA3552.html
[2010-08-26 12:32:39 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempKL3552.html
[2010-08-25 14:59:17 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempkS1540.html
[2010-08-25 14:59:17 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempbR1540.html
[2010-08-25 07:59:15 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempEeG172.html
[2010-08-25 07:59:15 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempnYT172.html
[2010-08-24 19:02:13 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempiY3672.html
[2010-08-24 19:02:13 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempAd3672.html
[2010-08-23 13:59:23 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempRu1588.html
[2010-08-23 13:59:23 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempnb1588.html
[2010-08-22 13:38:03 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempKs3604.html
[2010-08-22 13:38:03 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempgs3604.html
[2010-08-17 13:11:00 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempDY3816.html
[2010-08-17 13:11:00 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempHH3816.html
[2010-08-16 21:17:40 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempsJ3732.html
[2010-08-16 21:17:40 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempsR3732.html
[2010-08-14 08:38:09 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempbx3744.html
[2010-08-14 08:38:09 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempRv3744.html
[2010-08-06 21:37:34 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemptYM360.html
[2010-08-06 21:37:34 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempSwL360.html
[2010-08-02 19:50:53 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempAPY300.html
[2010-08-02 19:50:53 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempUGt300.html
[2010-08-01 18:22:01 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempBu2844.html
[2010-08-01 18:22:01 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempOQ2844.html
[2010-07-31 17:30:02 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemprP3212.html
[2010-07-31 17:30:02 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempIB3212.html
[2010-07-20 13:34:29 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempdI3116.html
[2010-07-20 13:34:29 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempuD3116.html
[2010-07-13 21:09:56 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempLeS432.html
[2010-07-13 21:09:56 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempzse432.html
[2010-07-13 09:41:06 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempMt2896.html
[2010-07-13 09:41:06 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempFP2896.html
[2010-07-01 20:58:00 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempbO2948.html
[2010-07-01 20:58:00 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempeV2948.html
[2010-06-30 19:58:23 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempzE4448.html
[2010-06-30 19:58:23 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Temphu4448.html
[2010-06-25 21:28:58 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempJN3536.html
[2010-06-25 21:28:58 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempkm3536.html
[2010-06-23 22:42:06 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempsB2104.html
[2010-06-23 22:42:06 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempYj2104.html
[2010-06-17 22:40:01 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempaP3212.html
[2010-06-17 22:40:01 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempqe3212.html
[2010-06-15 18:27:09 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempap3256.html
[2010-06-15 18:27:09 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempjF3256.html
[2010-06-15 17:01:19 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempjS3340.html
[2010-06-15 17:01:19 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempQb3340.html
[2010-06-12 18:41:13 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempVq3604.html
[2010-06-12 18:41:13 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempQQ3604.html
[2010-06-06 20:53:19 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempri2320.html
[2010-06-06 20:53:19 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempmK2320.html
[2010-06-04 22:23:16 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempsK1236.html
[2010-06-04 22:23:16 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempOF1236.html
[2010-05-29 10:30:39 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempDe2240.html
[2010-05-29 10:30:39 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempLe2240.html
[2010-05-27 20:03:12 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempliQ592.html
[2010-05-27 20:03:12 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempjsg592.html
[2010-05-26 10:35:33 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempzk3688.html
[2010-05-26 10:35:33 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempgY3688.html
[2010-05-25 08:41:07 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempoK2164.html
[2010-05-25 08:41:07 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempjz2164.html
[2010-05-22 22:26:21 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempMma876.html
[2010-05-22 22:26:21 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempAyv876.html
[2010-05-21 21:57:47 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempJF2996.html
[2010-05-21 21:57:47 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempJQ2996.html
[2010-05-20 20:10:54 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempHL3120.html
[2010-05-20 20:10:54 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempoD3120.html
[2010-05-18 12:14:06 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempqs2736.html
[2010-05-18 12:14:06 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempQr2736.html
[2010-05-17 12:35:14 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempTF3876.html
[2010-05-17 12:35:14 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempBx3876.html
[2010-05-16 21:08:56 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempQA2752.html
[2010-05-16 21:08:56 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempYE2752.html
[2010-05-14 13:26:16 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempCz2972.html
[2010-05-14 13:26:16 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Temprc2972.html
[2010-05-13 19:48:01 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempRpw712.html
[2010-05-13 19:48:01 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempfFC712.html
[2010-05-13 10:14:04 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempmC2540.html
[2010-05-13 10:14:04 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempsz2540.html
[2010-05-12 20:00:22 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempwU3840.html
[2010-05-12 20:00:22 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempLh3840.html
[2010-05-10 15:01:08 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempuSL312.html
[2010-05-10 15:01:08 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempqwz312.html
[2010-05-10 10:44:35 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempmP1040.html
[2010-05-10 10:44:35 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempuU1040.html
[2010-05-09 18:14:21 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempeQ2212.html
[2010-05-09 18:14:21 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempwI2212.html
[2010-05-09 10:17:18 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempxd2808.html
[2010-05-09 10:17:18 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempzr2808.html
[2010-05-08 12:54:47 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempkn3400.html
[2010-05-08 12:54:47 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempko3400.html
[2010-05-07 20:32:37 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempIf5920.html
[2010-05-07 20:32:37 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempCG5920.html
[2010-05-07 10:20:11 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempPz1284.html
[2010-05-07 10:20:11 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempEJ1284.html
[2010-05-04 21:57:02 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempHu3180.html
[2010-05-04 21:57:02 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempAl3180.html
[2010-05-01 16:42:55 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempgN3192.html
[2010-05-01 16:42:55 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempIE3192.html
[2010-04-30 23:52:07 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemprO1252.html
[2010-04-30 23:52:07 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempxu1252.html
[2010-04-29 22:35:43 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempyG3948.html
[2010-04-29 22:35:43 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempnB3948.html
[2010-04-29 07:21:36 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempPM1972.html
[2010-04-29 07:21:36 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemptU1972.html
[2010-04-28 21:24:57 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempUbv512.html
[2010-04-28 21:24:57 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempyAz512.html
[2010-04-27 09:07:03 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempznq556.html
[2010-04-27 09:07:03 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempPtk556.html
[2010-04-27 09:01:06 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempAs3540.html
[2010-04-27 09:01:06 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempmU3540.html
[2010-04-26 08:26:23 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempuJ3336.html
[2010-04-26 08:26:23 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemptD3336.html
[2010-04-25 09:13:43 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempAl1348.html
[2010-04-25 09:13:43 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempga1348.html
[2010-04-24 22:17:26 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempBd2696.html
[2010-04-24 22:17:26 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Templo2696.html
[2010-04-24 11:21:42 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Temptv2796.html
[2010-04-24 11:21:42 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempBD2796.html
[2010-04-23 19:55:00 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempkH2756.html
[2010-04-23 19:55:00 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempQJ2756.html
[2010-04-22 20:05:38 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempvl3276.html
[2010-04-22 20:05:38 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempQi3276.html
[2010-04-22 08:20:07 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemplW3652.html
[2010-04-22 08:20:07 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempjW3652.html
[2010-04-22 07:14:58 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempAP3352.html
[2010-04-22 07:14:58 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempVh3352.html
[2010-04-21 10:08:35 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempFX1556.html
[2010-04-21 10:08:35 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempmP1556.html
[2010-04-20 09:35:20 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempLT2732.html
[2010-04-20 09:35:20 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempva2732.html
[2010-04-19 08:40:10 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempBR3576.html
[2010-04-19 08:40:10 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempxJ3576.html
[2010-04-18 07:56:57 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempbF1416.html
[2010-04-18 07:56:57 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempkf1416.html
[2010-04-17 13:04:20 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempGW3324.html
[2010-04-17 13:04:20 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempzN3324.html
[2010-04-16 08:32:35 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempgD2948.html
[2010-04-16 08:32:35 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempBC2948.html
[2010-04-15 07:49:30 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempLY2072.html
[2010-04-15 07:49:30 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempcU2072.html
[2010-04-14 09:09:58 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempDX3940.html
[2010-04-14 09:09:57 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempfl3940.html
[2010-04-13 14:19:19 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempVH3996.html
[2010-04-13 14:19:19 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempSc3996.html
[2010-04-12 07:48:26 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempPG3912.html
[2010-04-12 07:48:26 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempDk3912.html
[2010-04-11 17:49:30 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempMS3808.html
[2010-04-11 17:49:30 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempoc3808.html
[2010-04-10 06:49:25 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempEe3592.html
[2010-04-10 06:49:25 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempoz3592.html
[2010-04-09 08:40:13 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempGbK336.html
[2010-04-09 08:40:13 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempdBY336.html
[2010-04-08 08:59:10 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempWS2876.html
[2010-04-08 08:59:10 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempQZ2876.html
[2010-04-07 07:59:59 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempVlm804.html
[2010-04-07 07:59:59 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempImj804.html
[2010-04-06 14:49:09 | 000,691,696 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2010-04-05 20:39:41 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempfL1544.html
[2010-04-05 20:39:41 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempYA1544.html
[2010-04-04 17:20:14 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempiV3648.html
[2010-04-04 17:20:14 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempxt3648.html
[2010-04-03 09:59:56 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempeQ1356.html
[2010-04-03 09:59:56 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempmJ1356.html
[2010-04-02 21:49:35 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempGVF888.html
[2010-04-02 21:49:35 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemppDX888.html
[2010-04-02 07:39:59 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempSZ2972.html
[2010-04-02 07:39:59 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempkP2972.html
[2010-04-01 09:36:49 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemphN2896.html
[2010-04-01 09:36:49 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Templg2896.html
[2010-03-31 15:48:51 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempqy1120.html
[2010-03-31 15:48:51 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempuP1120.html
[2010-03-31 08:34:21 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempad3432.html
[2010-03-31 08:34:21 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempCR3432.html
[2010-03-30 08:22:32 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempRSG888.html
[2010-03-30 08:22:32 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempgjN888.html
[2010-03-29 09:58:28 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempkW3828.html
[2010-03-29 09:58:28 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempjw3828.html
[2010-03-28 08:26:49 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempug1808.html
[2010-03-28 08:26:49 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempax1808.html
[2010-03-27 09:15:13 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempqv3084.html
[2010-03-27 09:15:13 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempHu3084.html
[2010-03-26 08:35:22 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempMv2180.html
[2010-03-26 08:35:22 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempJM2180.html
[2010-03-25 23:56:03 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempYy1800.html
[2010-03-25 23:56:03 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempJQ1800.html
[2010-03-25 09:47:35 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempeQ3396.html
[2010-03-25 09:47:35 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempVd3396.html
[2010-03-24 10:03:50 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempFVl580.html
[2010-03-24 10:03:50 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempxxX580.html
[2010-03-23 09:55:20 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempLq1312.html
[2010-03-23 09:55:20 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempmQ1312.html
[2010-03-22 23:33:19 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempDjx312.html
[2010-03-22 23:33:19 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Temphru312.html
[2010-03-22 09:59:40 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempmP1148.html
[2010-03-22 09:59:40 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempkM1148.html
[2010-03-21 22:54:09 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempdC1352.html
[2010-03-21 22:54:09 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempDk1352.html
[2010-03-21 19:43:20 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempGz3456.html
[2010-03-21 19:43:20 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempOT3456.html
[2010-03-20 16:44:35 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempRw1240.html
[2010-03-20 16:44:35 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempPn1240.html
[2010-03-18 13:53:55 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempTH1800.html
[2010-03-18 13:53:55 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempXj1800.html
[2010-03-18 09:24:31 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempaGj352.html
[2010-03-18 09:24:31 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempIcA352.html
[2010-03-17 09:53:12 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempFSK296.html
[2010-03-17 09:53:12 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemprAl296.html
[2010-03-16 18:17:33 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Temper1600.html
[2010-03-16 18:17:33 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempbk1600.html
[2010-03-16 15:12:57 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempdk1196.html
[2010-03-16 15:12:57 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempdl1196.html
[2010-03-15 20:31:04 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempytd332.html
[2010-03-15 20:31:04 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemphTc332.html
[2010-03-15 10:22:47 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempkK3728.html
[2010-03-15 10:22:47 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempcD3728.html
[2010-03-14 10:46:56 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempHz2452.html
[2010-03-14 10:46:56 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempcW2452.html
[2010-03-13 22:12:29 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempeB3440.html
[2010-03-13 22:12:29 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempWy3440.html
[2010-03-13 11:05:46 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempuU1428.html
[2010-03-13 11:05:46 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempDX1428.html
[2010-03-12 09:40:20 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempwe3428.html
[2010-03-12 09:40:20 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempAy3428.html
[2010-03-11 10:27:04 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempOl1936.html
[2010-03-11 10:27:04 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempER1936.html
[2010-03-10 10:53:14 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempZm1684.html
[2010-03-10 10:53:14 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempbw1684.html
[2010-03-09 10:46:07 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempNT3012.html
[2010-03-09 10:46:07 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempGk3012.html
[2010-03-08 09:13:44 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempBV1632.html
[2010-03-08 09:13:44 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempLx1632.html
[2010-03-07 18:43:34 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempYJ2776.html
[2010-03-07 18:43:34 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempZP2776.html
[2010-03-06 09:26:37 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempicG328.html
[2010-03-06 09:26:37 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempRnJ328.html
[2010-03-05 10:22:22 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempDvW340.html
[2010-03-05 10:22:22 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempCTC340.html
[2010-03-05 10:20:43 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempQnC340.html
[2010-03-05 10:20:43 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempInC340.html
[2010-03-04 17:49:07 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempnq1440.html
[2010-03-04 17:49:07 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempwT1440.html
[2010-03-04 08:47:05 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempoR1320.html
[2010-03-04 08:47:05 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempjF1320.html
[2010-03-03 15:29:31 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempVPv968.html
[2010-03-03 15:29:31 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempSap968.html
[2010-03-03 09:20:05 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempFlO968.html
[2010-03-03 09:20:05 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempwpQ968.html
[2010-03-02 09:51:28 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempeX2940.html
[2010-03-02 09:51:28 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemprV2940.html
[2010-03-01 10:17:08 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempCw3552.html
[2010-03-01 10:17:08 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempRb3552.html
[2010-02-28 14:36:14 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempsJ1228.html
[2010-02-28 14:36:14 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Temprz1228.html
[2010-02-28 13:26:18 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempyJ1392.html
[2010-02-28 13:26:18 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempQY1392.html
[2010-02-28 09:23:30 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempId3552.html
[2010-02-28 09:23:30 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TemptA3552.html
[2010-02-27 14:13:40 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempSl2788.html
[2010-02-27 14:13:40 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempMx2788.html
[2010-02-26 18:36:25 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Temppp1208.html
[2010-02-26 18:36:25 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempcW1208.html
[2010-02-26 10:48:26 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempOk2624.html
[2010-02-26 10:48:26 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempoi2624.html
[2010-02-25 14:55:30 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempoF3568.html
[2010-02-25 14:55:30 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempfH3568.html
[2010-02-24 09:33:33 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\Tempah2328.html
[2010-02-24 09:33:33 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempPR2328.html
[2010-02-24 08:37:45 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempNh3460.html
[2010-02-24 08:37:45 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempUV3460.html
[2010-02-24 00:07:45 | 000,002,432 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempeL3744.html
[2010-02-24 00:07:45 | 000,002,089 | ---- | C] () -- C:\Users\Ewa\AppData\Local\TempDL3744.html
[2010-02-13 10:00:48 | 000,112,688 | ---- | C] () -- C:\Windows\System32\shw32.dll
[2009-12-22 22:25:39 | 000,178,176 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2009-12-08 20:10:24 | 000,003,072 | R--- | C] () -- C:\Windows\System32\Viveza2FC32.dll
[2009-08-03 14:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009-04-26 21:03:41 | 000,000,075 | ---- | C] () -- C:\Users\Ewa\AppData\Roaming\default.pls
[2009-02-18 12:14:11 | 000,003,972 | ---- | C] () -- C:\Windows\System32\drivers\PciBus.sys
[2008-09-26 16:59:32 | 000,000,057 | ---- | C] () -- C:\Windows\wininit.ini
[2008-06-19 22:42:57 | 000,000,680 | ---- | C] () -- C:\Users\Ewa\AppData\Local\d3d9caps.dat
[2008-03-22 17:25:08 | 000,000,268 | RH-- | C] () -- C:\ProgramData\Strings
[2008-03-22 17:25:08 | 000,000,268 | RH-- | C] () -- C:\Users\Ewa\AppData\Roaming\StatusSheet
[2008-03-22 17:25:08 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLds.DAT
[2008-03-22 17:25:08 | 000,000,012 | RH-- | C] () -- C:\ProgramData\Sync Services
[2008-03-11 00:00:07 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLec.DAT
[2008-03-09 19:21:32 | 000,000,088 | RHS- | C] () -- C:\Windows\System32\22CBC07867.sys
[2008-03-08 18:08:32 | 000,000,008 | RHS- | C] () -- C:\ProgramData\7852B21D93.sys
[2008-03-08 18:08:31 | 000,002,828 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2008-03-08 18:06:11 | 000,034,308 | ---- | C] () -- C:\Windows\System32\BASSMOD.dll
[2008-02-11 18:55:18 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1437.dll
[2008-01-30 11:45:40 | 000,053,693 | ---- | C] () -- C:\Windows\UNDPX2A.sys
[2008-01-09 14:01:48 | 000,000,453 | ---- | C] () -- C:\Windows\bdoscandellang.ini
[2008-01-02 16:57:36 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1409.dll
[2007-12-16 12:17:35 | 000,000,035 | ---- | C] () -- C:\Users\Ewa\AppData\Roaming\AVSDVDPlayer.m3u
[2007-12-14 01:44:38 | 000,000,049 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2007-12-12 16:38:57 | 000,000,375 | ---- | C] () -- C:\ProgramData\hpzinstall.log
[2007-12-12 15:33:23 | 000,434,176 | ---- | C] () -- C:\Windows\System32\CNQL3203.DLL
[2007-11-24 12:16:24 | 000,278,984 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2007-11-24 12:16:24 | 000,025,416 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2007-11-17 23:30:07 | 000,000,032 | ---- | C] () -- C:\ProgramData\ezsid.dat
[2007-10-28 12:43:11 | 000,004,704 | -HS- | C] () -- C:\Windows\System32\KGyGaAvL.sys
[2007-10-28 12:43:11 | 000,000,056 | RHS- | C] () -- C:\Windows\System32\931DB25278.sys
[2007-10-28 11:41:59 | 000,062,976 | -H-- | C] () -- C:\Users\Ewa\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007-10-27 20:58:02 | 000,000,418 | ---- | C] () -- C:\Windows\ODBC.INI
[2007-10-18 09:12:20 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1350.dll
[2007-08-24 19:46:48 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1322.dll
[2007-07-04 04:00:43 | 000,204,800 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1114.dll
[2007-07-03 20:32:55 | 000,135,168 | ---- | C] () -- C:\Windows\System32\property.dll
[2006-12-05 13:05:06 | 000,114,688 | ---- | C] () -- C:\Windows\System32\TosBtAcc.dll
[2006-11-02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006-11-02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006-08-11 08:52:02 | 000,012,288 | ---- | C] () -- C:\Windows\System32\EvOnlDiag.dll
[2006-04-14 09:14:12 | 000,014,312 | ---- | C] () -- C:\Windows\System32\drivers\BTNetFilter.sys
[2005-07-30 07:21:32 | 000,011,988 | ---- | C] () -- C:\Windows\System32\drivers\VBTEnum.sys
[2005-07-22 21:30:20 | 000,065,536 | ---- | C] () -- C:\Windows\System32\TosCommAPI.dll
[2005-01-21 12:02:28 | 000,013,312 | ---- | C] () -- C:\Windows\System32\RMDevice.dll
[2004-08-23 12:34:56 | 000,001,008 | ---- | C] () -- C:\Windows\System32\etpass.ini
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-07-07 18:02:17 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Abvent
[2010-07-08 12:37:49 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Abvent_Artlantis3
[2008-04-04 08:10:28 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\ACD Systems
[2010-02-11 23:44:23 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\BESTplayer
[2008-01-07 21:38:32 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Bullzip
[2008-04-04 07:25:19 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Canon
[2009-03-15 11:29:21 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Cream Software
[2010-04-06 15:00:03 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\DAEMON Tools Lite
[2008-11-27 01:16:05 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\DNA
[2008-03-03 18:45:13 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Gadu-Gadu
[2010-03-03 15:29:30 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Gadu-Gadu 10
[2008-07-19 10:36:57 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\GARMIN
[2010-05-26 23:19:58 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Graphisoft
[2010-07-11 13:18:26 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Imagenomic
[2010-12-02 18:17:48 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\ipla
[2009-07-03 13:08:30 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\iPlus
[2008-02-17 13:36:20 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Leadertech
[2008-03-11 00:01:22 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Nikon
[2008-12-12 22:17:48 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Nokia
[2009-06-07 21:59:02 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Nowe Gadu-Gadu
[2009-03-15 13:53:20 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Nvu
[2009-06-07 13:06:11 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\OpenFM
[2009-01-10 13:05:49 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Opera
[2009-06-07 11:09:18 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Panasonic
[2007-12-13 20:17:21 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\PC Suite
[2009-11-15 09:07:09 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\PeaZip
[2010-04-14 17:13:18 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Snappy Fax
[2010-03-30 22:28:26 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Snappy Fax Archives
[2009-11-11 23:30:43 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Uniblue
[2008-03-29 09:41:59 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\URSoft
[2008-04-01 20:51:42 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\VUPlayer
[2010-12-24 17:09:51 | 000,032,578 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010-12-24 23:45:00 | 000,000,414 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{9A46B650-AC37-41CB-BE20-CC5E3BF39638}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 99 bytes -> C:\ProgramData\TEMP:64FFFDC8
@Alternate Data Stream - 173 bytes -> C:\ProgramData\TEMP:B3D74A13

< End of report >