OTL logfile created on: 11/26/2012 6:07:57 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
Windows Vista (TM) Home Premium Service Pack 1 (Version = 6.0.6001) - Type = System
Internet Explorer (Version = 8.0.6001.19088)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 85.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 48.83 Gb Total Space | 9.10 Gb Free Space | 18.64% Space Free | Partition Type: NTFS
Drive D: | 298.00 Gb Total Space | 294.55 Gb Free Space | 98.84% Space Free | Partition Type: FAT32
Drive E: | 62.96 Gb Total Space | 11.48 Gb Free Space | 18.24% Space Free | Partition Type: NTFS
Drive X: | 284.12 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [On_Demand] --  -- (AresChatServer)
SRV - File not found [Auto] --  -- (AntiVirService)
SRV - File not found [Auto] --  -- (AntiVirSchedulerService)
SRV - [2010/12/06 02:31:48 | 001,238,408 | ---- | M] (LogMeIn Inc.) [Auto] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2010/08/09 07:53:18 | 000,140,608 | ---- | M] (Panda Security, S.L.) [Auto] -- C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe -- (NanoServiceMain)
SRV - [2010/01/15 07:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009/12/17 11:04:18 | 000,185,640 | ---- | M] (TeamViewer GmbH) [Auto] -- C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe -- (TeamViewer5)
SRV - [2008/01/19 02:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | System] --  -- (ssmdrv)
DRV - File not found [Kernel | On_Demand] --  -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand] --  -- (NwlnkFlt)
DRV - File not found [Kernel | System] --  -- (jzsodbyk)
DRV - File not found [Kernel | On_Demand] --  -- (IpInIp)
DRV - File not found [Kernel | System] --  -- (avipbb)
DRV - File not found [File_System | Auto] --  -- (avgntflt)
DRV - [2011/02/11 16:23:34 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto] -- C:\Windows\System32\drivers\npf.sys -- (npf)
DRV - [2010/07/21 15:03:08 | 000,112,712 | ---- | M] (Panda Security, S.L.) [Kernel | Auto] -- C:\Windows\System32\drivers\PSINProt.sys -- (PSINProt)
DRV - [2010/07/21 15:03:06 | 000,099,400 | ---- | M] (Panda Security, S.L.) [File_System | Auto] -- C:\Windows\System32\drivers\PSINFile.sys -- (PSINFile)
DRV - [2010/07/07 10:01:49 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2010/06/20 11:56:41 | 000,281,760 | ---- | M] () [Kernel | Auto] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2010/06/20 11:56:33 | 000,025,888 | ---- | M] () [Kernel | Auto] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2010/06/17 06:41:14 | 000,126,024 | ---- | M] (Panda Security, S.L.) [Kernel | System] -- C:\Windows\System32\drivers\PSINKNC.sys -- (PSINKNC)
DRV - [2010/05/27 11:39:34 | 000,141,384 | ---- | M] (Panda Security, S.L.) [Kernel | Auto] -- C:\Windows\System32\drivers\PSINAflt.sys -- (PSINAflt)
DRV - [2010/04/30 06:46:12 | 000,111,112 | ---- | M] (Panda Security, S.L.) [File_System | Auto] -- C:\Windows\System32\drivers\PSINProc.sys -- (PSINProc)
DRV - [2010/02/03 08:56:56 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2008/02/13 07:17:26 | 000,618,112 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\PFC027.SYS -- (PAC207)
DRV - [2007/07/30 20:39:00 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2007/07/11 08:51:48 | 000,019,840 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\lgusbdiag.sys -- (UsbDiag)
DRV - [2007/07/11 03:45:00 | 000,021,632 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\lgusbmodem.sys -- (USBModem)
DRV - [2007/07/11 03:40:18 | 000,012,416 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\lgusbbus.sys -- (usbbus)
DRV - [2007/01/04 07:48:04 | 000,104,344 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\e4usbaw.sys -- (e4usbaw)
DRV - [2007/01/04 07:47:48 | 000,069,656 | ---- | M] (Analog Deivces) [Kernel | Auto] -- C:\Windows\System32\drivers\e4ldr.sys -- (E4LOADER) General Purpose USB Driver (e4ldr.sys)
DRV - [2006/11/14 11:35:20 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2006/11/02 02:30:56 | 000,044,544 | ---- | M] (Realtek Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2006/10/05 03:20:42 | 000,043,904 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot] -- C:\Windows\System32\drivers\jraid.sys -- (JRAID)
DRV - [2006/08/23 22:37:50 | 004,374,016 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006/02/07 06:52:58 | 000,006,912 | ---- | M] (JMicron ) [Kernel | Boot] -- C:\Windows\System32\drivers\JGOGO.sys -- (JGOGO)
DRV - [2005/12/22 11:02:22 | 000,051,840 | ---- | M] (REDC) [Kernel | On_Demand] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2005/11/16 14:28:32 | 000,028,928 | ---- | M] (REDC) [Kernel | On_Demand] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2005/05/26 11:19:18 | 000,839,724 | ---- | M] (Motorola Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\smserial.sys -- (smserial)
DRV - [2005/02/23 08:58:56 | 000,011,776 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\afc.sys -- (Afc)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.funmoods.com/?f=1&a=nv1&chnl=nv1&cd=2XzutAtN2Y1L1QzutDtDtBtA0CtAyE0A0B0ByC0E0C0D0A0EtN0D0TzutBtDtCtBtDyDtBzz&cr=1925416119
IE - HKLM\Software\Microsoft\Internet Explorer\Search,Local Page = http://www2.iesearch.com/
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\NetworkService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\PAULINA_ON_C\Software\Microsoft\Internet Explorer\Main,Backup.Old.Start Page = http://home.sweetim.com/?crg=3.1010000&st=12&barid={13168760-28F1-4F29-9A52-558D68E3EDD4}
IE - HKU\PAULINA_ON_C\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www2.iesearch.com/ [binary data]
IE - HKU\PAULINA_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://domredi.com/1/
IE - HKU\PAULINA_ON_C\Software\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\PAULINA_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.)
IE - HKU\PAULINA_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\System32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\System32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@bittorrent.com/BitTorrentDNA: C:\Program Files\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\System32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.3088: C:\Program Files\Real Alternative\Browser\Plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.11.3006: C:\Program Files\Real Alternative\Browser\Plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@zylom.com/ZylomGamesPlayer: C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\widgetruntime@surfsecret.com: C:\Program Files\Panda Security\Panda ID Protect\Firefox [2010/11/14 04:03:24 | 000,000,000 | ---D | M]
 
[2008/09/05 15:08:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2008/09/05 15:08:17 | 000,000,000 | ---D | M] (BearShare MediaBar) -- C:\Program Files\Mozilla Firefox\extensions\{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A}
[2008/12/20 12:16:49 | 000,000,000 | ---D | M] (Talkback) -- C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla.org
[2008/12/20 12:16:29 | 000,067,688 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\jar50.dll
[2008/12/20 12:16:29 | 000,054,368 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\jsd3250.dll
[2008/12/20 12:16:29 | 000,034,944 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\myspell.dll
[2008/12/20 12:16:32 | 000,046,712 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\spellchk.dll
[2008/12/20 12:16:32 | 000,172,136 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\xpinstal.dll
[2008/09/03 19:11:24 | 000,054,600 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\mozilla firefox\plugins\npbittorrent.dll
[2008/12/20 12:16:46 | 000,000,904 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2008/12/20 12:16:46 | 000,001,419 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2008/12/20 12:16:46 | 000,000,926 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2008/12/20 12:16:46 | 000,000,866 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2008/12/20 12:16:46 | 000,001,198 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2008/12/20 12:16:46 | 000,001,693 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2006/09/18 16:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (MediaBar) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\Program Files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarDx.dll ()
O2 - BHO: (Codec-V) - {11111111-1111-1111-1111-110011041135} - C:\Program Files\Codec-V\Codec-V.dll (Premiumplay)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (UrlHelper Class) - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\IEBHO.dll (MusicLab, LLC)
O2 - BHO: (Funmoods Helper Object) - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} -  File not found
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Panda Security Toolbar) - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files\Panda Security\Panda Security Toolbar\PandaSecurityDx.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (kikin Plugin) - {E601996F-E400-41CA-804B-CD6373A7EEE2} - C:\Program Files\kikin\ie_kikin.dll (kikin)
O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O2 - BHO: (Yontoo) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo\YontooIEClient.dll (Yontoo LLC)
O3 - HKLM\..\Toolbar: (MediaBar) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\Program Files\BearShare Applications\MediaBar\ToolBar\BearshareMediabarDx.dll ()
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (Funmoods Toolbar) - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} -  File not found
O3 - HKLM\..\Toolbar: (Panda Security Toolbar) - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files\Panda Security\Panda Security Toolbar\PandaSecurityDx.dll ()
O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKU\PAULINA_ON_C\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKU\PAULINA_ON_C\..\Toolbar\WebBrowser: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Alcmtr] C:\Windows\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [DATAMNGR]  File not found
O4 - HKLM..\Run: [DivXUpdate]  File not found
O4 - HKLM..\Run: [dtmcfg] C:\Windows\System32\dtmcfg\dtmcfg.exe (Dyzmond Software)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKLM..\Run: [Onet.pl AutoUpdate]  File not found
O4 - HKLM..\Run: [PAC207_Monitor] C:\Windows\PixArt\PAC207\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKLM..\Run: [Panda Security Toolbar Antiphishing] C:\ProgramData\Panda Security Toolbar Antiphishing\panda2_0dn.exe (Panda Security)
O4 - HKLM..\Run: [Power_Gear] C:\Program Files\Generic\Power4 Gear\BatteryLife.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [PSUNMain] C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUNMain.exe (Panda Security, S.L.)
O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [taskmsr] C:\Users\PAULINA\AppData\Roaming\taskmsr\taskmsr.exe ()
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\LocalService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\NetworkService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\PAULINA_ON_C..\Run: [chromium] C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
O4 - HKU\PAULINA_ON_C..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\PAULINA_ON_C..\Run: [Facebook Update] C:\Users\PAULINA\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\PAULINA_ON_C..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O4 - HKU\PAULINA_ON_C..\Run: [Gadwin PrintScreen] C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe (Gadwin Systems, Inc)
O4 - HKU\PAULINA_ON_C..\Run: [IPLA!] C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.)
O4 - HKU\PAULINA_ON_C..\Run: [Microsoft Windows System] C:\Users\PAULINA\P-7-78-8964-9648-3874\windll.exe ()
O4 - HKU\PAULINA_ON_C..\Run: [Optimizer Pro] C:\Program Files\Optimizer Pro\OptProLauncher.exe (PC Utilities Pro)
O4 - HKU\PAULINA_ON_C..\Run: [taskmsr] C:\Users\PAULINA\AppData\Roaming\taskmsr\taskmsr.exe ()
O4 - Startup: Error locating startup folders.
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\PAULINA_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\PAULINA_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\PAULINA_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O9 - Extra 'Tools' menuitem : My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Program Files\kikin\ie_kikin.dll (kikin)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.4.1)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\datamngr.dll) - C:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngr.dll (MusicLab, LLC)
O20 - AppInit_DLLs: (C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll) - C:\Program Files\BearShare Applications\MediaBar\Datamngr\IEBHO.dll (MusicLab, LLC)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\PAULINA\AppData\Roaming\taskmsr\taskmsr.exe) - C:\Users\PAULINA\AppData\Roaming\taskmsr\taskmsr.exe ()
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 16:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2008/07/05 08:34:24 | 000,000,000 | ---D | M] - C:\Automap -- [ NTFS ]
O32 - AutoRun File - [2012/05/27 09:07:58 | 000,000,345 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2012/05/18 11:52:51 | 000,000,239 | RHS- | M] () - E:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012/11/22 05:22:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/11/22 04:47:00 | 000,000,436 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{1441EA0C-9450-4908-A480-3241A71EF32B}.job
[2012/11/22 04:46:23 | 000,004,048 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/11/22 04:46:23 | 000,004,048 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/11/22 04:46:09 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/11/22 04:32:30 | 000,727,640 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012/11/22 04:32:30 | 000,157,086 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012/11/22 04:32:29 | 000,639,094 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/11/22 04:32:29 | 000,124,466 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012/06/14 12:20:15 | 000,042,248 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2012/06/07 09:29:53 | 000,122,884 | ---- | C] () -- C:\Windows\UnGins.exe
[2012/05/28 00:23:00 | 000,302,425 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\funmoods-speeddial.crx
[2012/05/28 00:22:55 | 000,031,470 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\funmoods.crx
[2012/05/08 17:06:14 | 000,019,968 | ---- | C] () -- C:\Windows\System32\cpuinf32.dll
[2012/05/08 17:06:07 | 000,761,856 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2012/02/24 04:40:44 | 000,000,168 | ---- | C] () -- C:\Windows\adidsl.ini
[2012/02/24 04:40:44 | 000,000,021 | ---- | C] () -- C:\Windows\Fast800.ini
[2012/02/24 04:33:30 | 000,253,008 | ---- | C] () -- C:\Windows\adirasx64.exe
[2012/02/24 04:33:30 | 000,194,128 | ---- | C] () -- C:\Windows\adiras.exe
[2012/02/24 04:33:27 | 000,127,456 | ---- | C] () -- C:\Windows\System32\IPDETECT.EXE
[2012/02/24 04:33:23 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9P2.BIN
[2012/02/24 04:33:23 | 000,024,576 | ---- | C] () -- C:\Windows\enddisk32.exe
[2012/02/24 04:33:22 | 000,046,892 | ---- | C] () -- C:\Windows\System32\ADADIX16.DLL
[2012/02/24 04:33:21 | 000,152,220 | ---- | C] () -- C:\Windows\System32\drivers\L1E4I2.BIN
[2012/02/24 04:33:21 | 000,152,220 | ---- | C] () -- C:\Windows\System32\drivers\L1E4I1.BIN
[2012/02/24 04:33:21 | 000,152,220 | ---- | C] () -- C:\Windows\System32\drivers\L1E4I0.BIN
[2012/02/24 04:33:21 | 000,152,132 | ---- | C] () -- C:\Windows\System32\drivers\L1E4P2.BIN
[2012/02/24 04:33:21 | 000,152,132 | ---- | C] () -- C:\Windows\System32\drivers\L1E4P1.BIN
[2012/02/24 04:33:21 | 000,152,132 | ---- | C] () -- C:\Windows\System32\drivers\L1E4P0.BIN
[2012/02/24 04:33:21 | 000,152,036 | ---- | C] () -- C:\Windows\System32\drivers\L1E4D2.BIN
[2012/02/24 04:33:21 | 000,152,034 | ---- | C] () -- C:\Windows\System32\drivers\L1E4D1.BIN
[2012/02/24 04:33:21 | 000,152,034 | ---- | C] () -- C:\Windows\System32\drivers\L1E4D0.BIN
[2012/02/24 04:33:21 | 000,022,395 | ---- | C] () -- C:\Windows\System32\drivers\fpga.bin
[2012/02/24 04:33:20 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9P1.BIN
[2012/02/24 04:33:20 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9P0.BIN
[2012/02/24 04:33:20 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9I2.BIN
[2012/02/24 04:33:20 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9I1.BIN
[2012/02/24 04:33:20 | 000,152,126 | ---- | C] () -- C:\Windows\System32\drivers\L1E9I0.BIN
[2012/01/07 14:22:27 | 000,000,000 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\{E50B3CFD-1183-45B4-BCFC-D16E1CBCA3A2}
[2011/10/30 13:59:26 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempZC5240.html
[2011/10/30 09:29:17 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempor4548.html
[2011/10/29 15:01:50 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempte2412.html
[2011/08/25 09:08:13 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempoR2272.html
[2011/07/15 11:55:46 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempww4076.html
[2011/07/15 11:55:46 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempKf4076.html
[2011/07/14 12:31:16 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempef3492.html
[2011/07/12 13:14:38 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempmn1620.html
[2011/07/12 13:14:38 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Temptl1620.html
[2011/07/10 17:54:26 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempPX2484.html
[2011/07/10 17:54:26 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempxr2484.html
[2011/07/09 12:21:08 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempHF2640.html
[2011/07/08 07:46:16 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempnZ2264.html
[2011/07/07 09:38:57 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempio2280.html
[2011/07/01 07:03:49 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempkp2316.html
[2011/07/01 07:02:50 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemplC2316.html
[2011/06/30 13:00:15 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempDg2196.html
[2011/06/29 09:13:42 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempGUK764.html
[2011/06/28 16:24:20 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempZF6412.html
[2011/06/26 14:16:35 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempcY2380.html
[2011/06/26 03:11:23 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempa19424.html
[2011/06/26 03:11:23 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempZ19424.html
[2011/06/25 16:30:09 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempQ12896.html
[2011/06/24 13:53:54 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemprV2848.html
[2011/06/23 15:49:39 | 000,000,240 | ---- | C] () -- C:\Windows\cod2demo.ini
[2011/06/22 18:55:40 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempSj2384.html
[2011/06/01 15:24:12 | 000,005,892 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\d3d9caps.dat
[2011/05/13 15:13:37 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011/03/10 14:48:56 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemplL1236.html
[2011/03/07 16:28:29 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempmm3784.html
[2011/02/28 14:39:42 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempto4220.html
[2011/02/28 13:54:48 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemprK5800.html
[2011/02/13 14:31:50 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempuT5404.html
[2011/02/13 03:46:12 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempcU5564.html
[2011/02/13 03:24:04 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Temptt6068.html
[2011/02/12 14:35:33 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempok5464.html
[2011/02/12 12:05:10 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempPV3632.html
[2011/02/12 12:05:10 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempHI3632.html
[2011/02/12 11:58:42 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempNR4524.html
[2011/02/11 16:23:34 | 000,053,299 | ---- | C] () -- C:\Windows\System32\pthreadVC.dll
[2011/02/04 06:04:46 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempSW5116.html
[2011/01/29 11:31:39 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempGv5116.html
[2011/01/29 11:31:39 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempUd5116.html
[2011/01/29 08:49:42 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempyE4244.html
[2011/01/27 10:26:33 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemplJ6088.html
[2011/01/25 03:33:22 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempnP5848.html
[2011/01/25 03:33:22 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempMN5848.html
[2011/01/24 13:18:26 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempni5392.html
[2011/01/23 04:48:02 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempPo2692.html
[2011/01/23 04:43:11 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempXE3048.html
[2011/01/22 10:35:36 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempsl5888.html
[2011/01/22 07:46:39 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemprY2060.html
[2011/01/22 07:38:43 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempKS5132.html
[2011/01/22 05:50:38 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempDL4528.html
[2011/01/21 16:09:21 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempvS5440.html
[2011/01/20 16:35:24 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempLH1588.html
[2011/01/19 12:51:26 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempvD3460.html
[2011/01/19 12:51:06 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempWN3460.html
[2011/01/18 16:25:54 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempvs5672.html
[2011/01/18 16:25:27 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempQf5672.html
[2011/01/18 03:04:01 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Temppu2252.html
[2011/01/18 03:01:23 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempJz2252.html
[2011/01/11 02:03:29 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempmx2636.html
[2011/01/09 06:40:31 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempXS4120.html
[2011/01/08 20:18:37 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemphS4904.html
[2011/01/07 12:21:03 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempfj3836.html
[2011/01/07 03:34:41 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Temphh4976.html
[2011/01/06 13:53:30 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempJB2356.html
[2011/01/06 11:42:46 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempIK4660.html
[2011/01/06 07:04:01 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempho4868.html
[2011/01/05 09:40:28 | 000,000,267 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Images.fl
[2010/12/23 01:29:24 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempVa2324.html
[2010/12/23 01:29:24 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempGB2324.html
[2010/12/22 08:18:49 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempxi6080.html
[2010/12/21 17:06:28 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempzF5704.html
[2010/12/21 09:28:29 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempWw4524.html
[2010/12/20 15:07:03 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempCi5776.html
[2010/12/20 11:53:41 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempjK3784.html
[2010/12/20 11:52:33 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempFo5012.html
[2010/12/20 09:31:33 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempts4056.html
[2010/12/20 04:29:04 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempkY5284.html
[2010/12/19 14:20:06 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempcX4672.html
[2010/12/17 02:15:39 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempfI2100.html
[2010/12/16 11:06:01 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempVt2716.html
[2010/12/15 13:19:28 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempjg4740.html
[2010/12/15 12:52:20 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempMg5556.html
[2010/12/14 01:53:09 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempIm2280.html
[2010/12/14 01:52:51 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempYd2280.html
[2010/12/13 09:44:02 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempkG3896.html
[2010/12/13 09:43:42 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempxn3896.html
[2010/12/11 16:23:29 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Temprm5092.html
[2010/12/11 02:45:00 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempzd5876.html
[2010/12/10 18:12:30 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempmd4684.html
[2010/12/10 16:17:18 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempGpA124.html
[2010/12/10 03:46:13 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempVm2424.html
[2010/12/09 09:15:30 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempqt4512.html
[2010/12/07 16:16:57 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempCx5352.html
[2010/12/06 16:23:26 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempUX2332.html
[2010/12/06 16:23:26 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Temppm2332.html
[2010/12/06 15:39:50 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempuA6112.html
[2010/11/24 17:41:49 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempaf3444.html
[2010/11/15 11:29:48 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempSs4480.html
[2010/11/14 04:02:27 | 000,000,264 | ---- | C] () -- C:\Windows\System32\PSUNCpl.dat
[2010/11/11 11:19:37 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemppP3584.html
[2010/11/09 01:50:23 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempqnS456.html
[2010/11/09 01:50:23 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempYEA456.html
[2010/11/08 00:20:05 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempJYg720.html
[2010/11/07 15:55:31 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempMv2368.html
[2010/11/07 11:37:28 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempVL1260.html
[2010/11/07 02:27:16 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempKw2964.html
[2010/11/06 14:44:03 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemprE3568.html
[2010/11/06 13:43:48 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempAu1500.html
[2010/11/05 11:27:00 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempTx3384.html
[2010/11/05 10:10:04 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempDb2396.html
[2010/11/04 11:43:44 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempen3276.html
[2010/11/02 15:05:14 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempqL1612.html
[2010/11/02 10:21:45 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempHf1436.html
[2010/11/01 09:13:01 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempSH3072.html
[2010/10/31 09:44:23 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempTm5652.html
[2010/10/31 03:38:01 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempmp5964.html
[2010/10/30 13:23:35 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempws2816.html
[2010/10/30 01:06:11 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempMx2312.html
[2010/10/30 01:05:04 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemprSJ472.html
[2010/10/30 01:05:04 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempmmr472.html
[2010/10/28 15:30:46 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempou1976.html
[2010/10/28 11:51:16 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempIn1656.html
[2010/10/16 16:03:15 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempfD1948.html
[2010/10/16 04:16:48 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempIp1624.html
[2010/10/15 14:09:58 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempdY3776.html
[2010/10/14 16:33:57 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempBk2524.html
[2010/10/14 11:22:01 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempkm3372.html
[2010/10/13 18:48:17 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempDE2952.html
[2010/10/13 09:30:50 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempEO3904.html
[2010/10/13 09:30:50 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemphI3904.html
[2010/10/13 07:19:40 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempEQs372.html
[2010/10/12 16:05:48 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemppV1628.html
[2010/10/12 12:59:46 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempHq2644.html
[2010/10/12 09:35:05 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempfc1400.html
[2010/10/11 15:52:16 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempxb3408.html
[2010/10/11 12:21:24 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempdC3504.html
[2010/10/10 15:20:52 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempFnf256.html
[2010/10/10 05:40:58 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempKD3936.html
[2010/10/10 02:50:20 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Temptj3540.html
[2010/10/10 02:50:20 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempDG3540.html
[2010/09/20 11:29:58 | 000,001,094 | ---- | C] () -- C:\Windows\adiras.ini
[2010/09/14 12:23:46 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempiA2932.html
[2010/09/13 12:16:57 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempxM2660.html
[2010/09/08 12:34:28 | 000,000,625 | ---- | C] () -- C:\Windows\ODBC.INI
[2010/07/26 02:31:00 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempFq1116.html
[2010/07/25 11:09:18 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempSFFr12.html
[2010/07/25 09:52:21 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempXhM200.html
[2010/07/25 08:14:02 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempCY2492.html
[2010/07/25 04:07:59 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempLiK576.html
[2010/07/24 08:45:42 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempWM2044.html
[2010/07/23 10:51:42 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempqP4036.html
[2010/07/22 02:22:43 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempJOJ480.html
[2010/07/21 12:24:03 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempBj1336.html
[2010/07/21 03:57:52 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempan4088.html
[2010/07/21 03:57:52 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemptQ4088.html
[2010/06/20 11:56:41 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2010/06/20 11:56:33 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2010/06/09 09:52:35 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempPu3380.html
[2010/06/09 09:52:35 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempVE3380.html
[2010/06/05 13:58:16 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempnrs264.html
[2010/06/05 13:58:16 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempqSO264.html
[2010/06/05 09:08:55 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempeZ1220.html
[2010/06/05 09:08:55 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Temptk1220.html
[2010/06/05 05:18:43 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempbs3868.html
[2010/06/05 05:18:43 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempnZ3868.html
[2010/05/06 02:28:01 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempzOA752.html
[2010/05/06 02:28:01 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempeei752.html
[2010/05/06 02:16:17 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempMCn548.html
[2010/05/06 02:16:16 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempTaM548.html
[2010/05/05 16:31:51 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempgpW544.html
[2010/05/05 16:31:51 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Temprgx544.html
[2010/05/05 15:08:34 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempEYx668.html
[2010/05/05 15:08:33 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempPez668.html
[2010/05/05 12:01:17 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempgDH540.html
[2010/05/05 12:01:17 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempxWE540.html
[2010/05/05 10:55:20 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempSSW352.html
[2010/05/05 10:55:20 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempLwg352.html
[2010/05/05 10:45:31 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempNNQ788.html
[2010/05/05 10:45:31 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempNxl788.html
[2010/05/05 04:16:08 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempeS1876.html
[2010/05/05 04:16:08 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempZp1876.html
[2010/05/05 02:21:11 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempYx1488.html
[2010/05/05 02:21:11 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempvu1488.html
[2010/05/04 15:57:56 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempmq3240.html
[2010/05/04 15:57:56 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempFI3240.html
[2010/05/04 01:46:14 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempJQw668.html
[2010/05/04 01:46:14 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemppYk668.html
[2010/05/03 13:11:12 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempFWt520.html
[2010/05/03 13:11:12 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempkua520.html
[2010/05/03 06:36:39 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempbu2512.html
[2010/05/03 06:36:39 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempDe2512.html
[2010/05/02 18:54:10 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempRe1932.html
[2010/05/02 18:54:10 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemplD1932.html
[2010/02/16 08:19:27 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\Tempnyf736.html
[2010/02/16 08:19:27 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempmBB736.html
[2010/02/15 04:56:23 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempVp2820.html
[2010/02/15 04:56:23 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempNj2820.html
[2010/02/15 04:54:39 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempAM2352.html
[2010/02/15 04:54:39 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempQg2352.html
[2010/02/15 04:53:58 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempXy3140.html
[2010/02/15 04:53:58 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemptI3140.html
[2010/02/15 04:53:22 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempeKK204.html
[2010/02/15 04:53:22 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempCzt204.html
[2010/02/13 12:18:27 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempzVq596.html
[2010/02/13 12:18:27 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TemppcF596.html
[2010/02/10 11:13:32 | 000,002,432 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempKg2936.html
[2010/02/10 11:13:32 | 000,002,089 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\TempbE2936.html
[2009/12/19 12:58:25 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2009/05/14 11:29:35 | 000,031,007 | ---- | C] () -- C:\Users\PAULINA\AppData\Roaming\UserTile.png
[2009/03/28 06:05:35 | 000,066,872 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2009/03/28 06:05:10 | 000,138,184 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2009/03/28 06:05:04 | 000,183,112 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2009/03/14 08:52:36 | 000,130,834 | ---- | C] () -- C:\Windows\hpoins18.dat
[2009/03/14 08:52:14 | 000,006,600 | ---- | C] () -- C:\Windows\hpomdl18.dat
[2009/03/14 05:16:27 | 000,000,095 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\fusioncache.dat
[2009/02/02 14:28:27 | 000,000,399 | ---- | C] () -- C:\Windows\System32\Remover.ini
[2009/02/02 14:28:25 | 000,000,566 | ---- | C] () -- C:\Windows\System32\SP207.INI
[2008/11/13 13:03:11 | 000,106,605 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2008/11/13 13:03:11 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008/10/07 02:13:30 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll
[2008/10/07 02:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2008/10/07 02:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2008/10/07 02:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2008/10/07 02:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2008/10/07 02:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2008/10/07 02:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2008/10/07 02:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2008/10/07 02:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2008/10/07 02:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2008/06/14 02:06:33 | 000,043,520 | ---- | C] () -- C:\Windows\System32\CmdLineExt03.dll
[2008/04/30 12:25:32 | 000,021,840 | ---- | C] () -- C:\Windows\System32\SIntfNT.dll
[2008/04/30 12:25:32 | 000,017,212 | ---- | C] () -- C:\Windows\System32\SIntf32.dll
[2008/04/30 12:25:32 | 000,012,067 | ---- | C] () -- C:\Windows\System32\SIntf16.dll
[2008/04/30 12:12:47 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2008/04/04 10:13:08 | 000,000,032 | ---- | C] () -- C:\ProgramData\ezsid.dat
[2008/03/21 15:30:08 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2008/02/11 12:55:18 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1437.dll
[2007/12/25 05:31:53 | 000,115,712 | ---- | C] () -- C:\Users\PAULINA\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/12/21 07:28:47 | 000,016,480 | ---- | C] () -- C:\Windows\System32\rixdicon.dll
[2007/12/21 07:28:00 | 000,049,152 | R--- | C] () -- C:\Windows\System32\ChCfg.exe
[2007/12/21 07:19:38 | 000,005,824 | ---- | C] () -- C:\Windows\System32\drivers\Asushwio.sys
[2007/10/18 03:12:20 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1350.dll
[2006/12/05 00:22:07 | 000,332,832 | ---- | C] () -- C:\Windows\System32\perfi015.dat
[2006/12/05 00:22:06 | 000,727,640 | ---- | C] () -- C:\Windows\System32\perfh015.dat
[2006/12/05 00:22:06 | 000,157,086 | ---- | C] () -- C:\Windows\System32\perfc015.dat
[2006/12/05 00:22:06 | 000,037,468 | ---- | C] () -- C:\Windows\System32\perfd015.dat
[2006/11/02 07:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 07:47:37 | 000,275,744 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 07:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 05:33:01 | 000,639,094 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 05:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 05:33:01 | 000,124,466 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 05:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 05:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 03:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 03:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 02:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 02:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2005/05/26 11:12:26 | 000,065,536 | ---- | C] () -- C:\Windows\sm56spn.dll
[2005/05/26 11:12:26 | 000,065,536 | ---- | C] () -- C:\Windows\sm56itl.dll
[2005/05/26 11:12:26 | 000,065,536 | ---- | C] () -- C:\Windows\sm56ger.dll
[2005/05/26 11:12:26 | 000,065,536 | ---- | C] () -- C:\Windows\sm56fra.dll
[2005/05/26 11:12:26 | 000,065,536 | ---- | C] () -- C:\Windows\sm56eng.dll
[2005/05/26 11:12:26 | 000,065,536 | ---- | C] () -- C:\Windows\sm56brz.dll
[2005/05/26 11:12:26 | 000,049,152 | ---- | C] () -- C:\Windows\sm56jpn.dll
[2005/05/26 11:12:26 | 000,045,056 | ---- | C] () -- C:\Windows\sm56cht.dll
[2005/05/26 11:12:26 | 000,045,056 | ---- | C] () -- C:\Windows\sm56chs.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010/12/11 15:11:55 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\AutoUpdate
[2012/04/18 14:22:28 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\Babylon
[2012/06/11 04:51:23 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\BabylonToolbar
[2009/03/08 14:10:21 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\DAEMON Tools
[2010/07/08 10:32:14 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\DAEMON Tools Lite
[2010/06/20 11:58:53 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\DAEMON Tools Pro
[2009/03/18 16:10:38 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\DNA
[2012/05/08 23:49:15 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\DVDVideoSoft
[2012/05/08 23:47:43 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\DVDVideoSoftIEHelpers
[2010/12/11 15:11:56 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\Flircik
[2011/06/23 15:52:03 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\fretsonfire
[2007/12/29 04:49:23 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\Gadu-Gadu
[2011/01/25 03:33:22 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\Gadu-Gadu 10
[2010/08/08 06:49:11 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\GetRightToGo
[2009/01/10 11:43:01 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\GlarySoft
[2008/06/16 11:22:11 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\gtk-2.0
[2012/11/22 04:46:25 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\ipla
[2008/04/01 03:54:03 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\ITEDO
[2010/11/08 14:13:18 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\kikin
[2009/03/28 05:40:28 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\Leadertech
[2008/07/21 11:55:18 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\LG Electronics
[2010/01/19 07:12:48 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\Nowe Gadu-Gadu
[2010/03/25 08:58:21 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\OpenFM
[2009/03/03 04:13:13 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\Opera
[2012/04/18 14:30:02 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\Optimizer Pro
[2010/11/14 04:04:07 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\Panda Security
[2011/02/05 13:57:56 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\Pandion
[2009/05/27 12:59:06 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\PeerNetworking
[2012/01/16 07:29:18 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\PlayFirst
[2012/05/08 16:59:04 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\Sony
[2010/11/14 04:03:12 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\SurfSecret Privacy Suite
[2012/06/27 16:05:29 | 000,000,000 | RHSD | M] -- C:\Users\PAULINA\AppData\Roaming\taskmsr
[2009/12/19 13:28:43 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\TeamViewer
[2012/05/05 04:57:04 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\Tibia
[2010/07/29 09:39:23 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\Tibiacast
[2010/12/04 06:29:32 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\TibiaTestserver
[2012/04/25 11:27:03 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\VSO
[2012/06/11 04:49:43 | 000,000,000 | ---D | M] -- C:\Users\PAULINA\AppData\Roaming\YourFileDownloader
[2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data
[2012/04/18 14:22:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Babylon
[2010/07/07 10:01:23 | 000,000,000 | ---D | M] -- C:\ProgramData\DAEMON Tools Lite
[2009/03/08 07:31:06 | 000,000,000 | ---D | M] -- C:\ProgramData\DAEMON Tools Pro
[2007/12/21 07:08:09 | 000,000,000 | -HSD | M] -- C:\ProgramData\Dane aplikacji
[2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop
[2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents
[2007/12/21 07:08:09 | 000,000,000 | -HSD | M] -- C:\ProgramData\Dokumenty
[2010/12/08 11:39:50 | 000,000,000 | -HSD | M] -- C:\ProgramData\dtmcfg
[2009/03/30 06:46:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Electronic Arts
[2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites
[2010/02/10 11:12:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Gadu-Gadu 10
[2012/04/18 14:23:05 | 000,000,000 | ---D | M] -- C:\ProgramData\InstallMate
[2011/05/13 15:19:21 | 000,000,000 | ---D | M] -- C:\ProgramData\ipla
[2007/12/24 05:50:42 | 000,000,000 | ---D | M] -- C:\ProgramData\LightScribe
[2007/12/21 07:08:09 | 000,000,000 | -HSD | M] -- C:\ProgramData\Menu Start
[2010/10/15 17:19:16 | 000,000,000 | ---D | M] -- C:\ProgramData\OpenFM
[2008/02/22 09:09:14 | 000,000,000 | ---D | M] -- C:\ProgramData\OrbNetworks
[2010/11/14 04:02:06 | 000,000,000 | ---D | M] -- C:\ProgramData\Panda Security
[2012/06/25 12:58:51 | 000,000,000 | ---D | M] -- C:\ProgramData\Panda Security Toolbar Antiphishing
[2012/01/16 07:29:18 | 000,000,000 | ---D | M] -- C:\ProgramData\PlayFirst
[2012/04/10 10:13:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Premium
[2007/12/21 07:08:09 | 000,000,000 | -HSD | M] -- C:\ProgramData\Pulpit
[2011/05/13 15:13:55 | 000,000,000 | ---D | M] -- C:\ProgramData\RDRM
[2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu
[2012/05/08 16:42:07 | 000,000,000 | ---D | M] -- C:\ProgramData\SweetIM
[2007/12/21 07:08:09 | 000,000,000 | -HSD | M] -- C:\ProgramData\Szablony
[2012/05/28 00:23:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Tarma Installer
[2011/01/09 03:42:24 | 000,000,000 | ---D | M] -- C:\ProgramData\TEMP
[2006/11/02 08:02:04 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates
[2007/12/21 07:08:09 | 000,000,000 | -HSD | M] -- C:\ProgramData\Ulubione
[2012/01/16 07:28:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom
[2012/06/27 06:07:01 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1734460229-3037530470-1601608831-1000Core.job
[2012/06/27 15:07:02 | 000,000,936 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1734460229-3037530470-1601608831-1000UA.job
[2009/03/28 05:59:59 | 000,000,352 | ---- | M] () -- C:\Windows\Tasks\hwhjkswr.job
[2012/11/22 04:47:23 | 000,032,546 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012/11/22 04:47:00 | 000,000,436 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{1441EA0C-9450-4908-A480-3241A71EF32B}.job
[2012/06/27 16:15:40 | 000,000,436 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{2A8F144A-DABB-40E4-B188-73627AAF1EE7}.job
[2009/03/03 04:22:41 | 000,000,436 | ---- | M] () -- C:\Windows\Tasks\Wise Disk Cleaner 4.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 284 bytes -> C:\ProgramData\TEMP:E41EAF13
@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:D1B5B4F1
< End of report >