OTL logfile created on: 2011-01-27 19:56:01 - Run 1 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Users\Janek\Downloads 64bit- An unknown product (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 48,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 71,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 195,31 Gb Total Space | 72,77 Gb Free Space | 37,26% Space Free | Partition Type: NTFS Drive D: | 101,60 Gb Total Space | 34,11 Gb Free Space | 33,57% Space Free | Partition Type: NTFS Computer Name: JANEKPC | User Name: Janek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-01-27 19:53:56 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Janek\Downloads\OTL.exe PRC - [2011-01-27 18:34:23 | 000,252,928 | ---- | M] (Avira GmbH) -- C:\Users\Janek\AppData\Local\Temp\Hkr.exe PRC - [2010-12-12 18:17:42 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe PRC - [2010-12-12 18:17:41 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2010-12-06 08:31:52 | 001,910,152 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe PRC - [2010-10-07 09:04:26 | 012,661,344 | ---- | M] (GG Network S.A.) -- C:\Program Files (x86)\Gadu-Gadu 10\gg.exe PRC - [2010-07-12 17:32:48 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Winamp\winampa.exe PRC - [2010-05-05 13:53:12 | 000,736,312 | ---- | M] (Conexant Systems, Inc) -- C:\Program Files\CONEXANT\SAII\SmartAudio.exe PRC - [2009-11-24 10:32:22 | 000,234,792 | ---- | M] (Skype Technologies S.A.) -- C:\Program Files (x86)\Skype\Toolbars\Shared\SkypeNames2.exe PRC - [2009-09-12 23:09:10 | 000,103,768 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files (x86)\Citrix\ICA Client\concentr.exe PRC - [2009-09-12 23:09:04 | 000,550,232 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe PRC - [2009-01-08 14:23:07 | 001,038,000 | ---- | M] (G DATA Software AG) -- C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe PRC - [2009-01-08 14:23:07 | 001,019,464 | ---- | M] (G DATA Software) -- C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKProxy.exe PRC - [2009-01-08 14:23:07 | 000,955,464 | ---- | M] (G DATA Software) -- C:\Program Files (x86)\G DATA\InternetSecurity\AVKTray\AVKTray.exe PRC - [2008-12-02 02:34:26 | 000,601,160 | ---- | M] (G DATA Software AG) -- C:\Program Files (x86)\G DATA\InternetSecurity\GUI\avkis.exe PRC - [2008-09-08 14:34:52 | 000,386,120 | ---- | M] (G DATA Software) -- C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKService.exe PRC - [2007-03-12 11:10:00 | 000,091,984 | ---- | M] (G DATA Software AG) -- C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AvkLnk32.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-01-27 19:53:56 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Janek\Downloads\OTL.exe MOD - [2010-08-21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2010-11-25 23:45:48 | 001,436,424 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:[b]64bit:[/b] - [2010-03-25 16:32:02 | 000,445,496 | ---- | M] (Conexant Systems, Inc.) [Auto | Stopped] -- C:\Windows\SysNative\SASrv.exe -- (SAService) SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2011-01-06 10:22:28 | 003,129,432 | ---- | M] () [Auto | Running] -- c:\program files (x86)\common files\akamai\netsession_win_dbc0250.dll -- (Akamai) SRV - [2010-12-15 18:12:59 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2010-12-06 08:31:50 | 002,101,640 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009-01-08 14:23:07 | 001,019,464 | ---- | M] (G DATA Software) [Auto | Running] -- C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKProxy.exe -- (AVKProxy) SRV - [2008-12-18 16:35:08 | 001,996,672 | ---- | M] (G DATA Software AG) [Auto | Running] -- C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKWCtlX64.exe -- (AVKWCtl) SRV - [2008-12-08 12:28:27 | 001,697,496 | R--- | M] (G DATA Software AG) [On_Demand | Running] -- C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.exe -- (GDFwSvc) SRV - [2008-09-08 14:34:52 | 000,386,120 | ---- | M] (G DATA Software) [Auto | Running] -- C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKService.exe -- (AVKService) SRV - [2007-05-31 16:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007-05-31 16:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) SRV - [2007-03-12 11:10:00 | 000,091,984 | ---- | M] (G DATA Software AG) [On_Demand | Running] -- C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AvkLnk32.exe -- (AvkLink32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010-09-21 18:59:49 | 000,064,456 | ---- | M] (G DATA Software AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PktIcpt.sys -- (GDPkIcpt) DRV:[b]64bit:[/b] - [2010-09-21 18:58:37 | 000,060,360 | ---- | M] (G DATA Software AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MiniIcpt.sys -- (GDMnIcpt) DRV:[b]64bit:[/b] - [2010-09-21 18:58:29 | 000,038,856 | ---- | M] (G DATA Software AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HookCentre.sys -- (HookCentre) DRV:[b]64bit:[/b] - [2010-07-14 05:42:58 | 007,821,312 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64) ___ Sterownik karty Intel(R) DRV:[b]64bit:[/b] - [2010-06-08 09:33:14 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2010-04-22 11:11:42 | 000,260,216 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService) DRV:[b]64bit:[/b] - [2010-01-18 16:45:50 | 000,717,368 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService) DRV:[b]64bit:[/b] - [2009-09-15 18:40:42 | 006,952,960 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NETw5s64.sys -- (NETw5s64) Sterownik karty Intel(R) DRV:[b]64bit:[/b] - [2009-09-08 18:13:16 | 000,087,600 | ---- | M] (Citrix Systems, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ctxusbm.sys -- (ctxusbm) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 01:09:50 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx) DRV:[b]64bit:[/b] - [2009-07-14 01:06:32 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser) DRV:[b]64bit:[/b] - [2009-06-10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-06-07 07:04:38 | 005,435,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NETw5v64.sys -- (netw5v64) Intel(R) DRV:[b]64bit:[/b] - [2009-05-19 12:43:32 | 000,026,128 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AcpiVpc.sys -- (ACPIVPC) DRV:[b]64bit:[/b] - [2009-03-18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV:[b]64bit:[/b] - [2009-02-25 23:25:00 | 000,072,224 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:[b]64bit:[/b] - [2008-10-28 10:47:19 | 000,048,072 | ---- | M] (G DATA Software AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gdwfpcd64.sys -- (gdwfpcd) DRV:[b]64bit:[/b] - [2008-05-02 09:59:08 | 000,008,704 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64j.sys -- (UsbserFilt) DRV:[b]64bit:[/b] - [2008-05-02 09:58:48 | 000,023,552 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdcx64) DRV:[b]64bit:[/b] - [2008-02-22 17:54:00 | 000,019,496 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GearAspiWDM) DRV:[b]64bit:[/b] - [2007-06-28 10:47:14 | 000,173,056 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdx64.sys -- (nmwcdx64) DRV:[b]64bit:[/b] - [2007-06-28 10:46:20 | 000,017,408 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdcmx64.sys -- (nmwcdcmx64) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\URLSearchHook: {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll (Conduit Ltd.) IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3910842946-1338297919-1448379615-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT1098640 IE - HKU\S-1-5-21-3910842946-1338297919-1448379615-1001\..\URLSearchHook: {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll (Conduit Ltd.) IE - HKU\S-1-5-21-3910842946-1338297919-1448379615-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3910842946-1338297919-1448379615-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.selectedEngine: "Allegro" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.2 FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198 FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.12.1 FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.2.0185 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..extensions.enabledItems: {ecdee021-0d17-467f-a1ff-c7a115230949}:2.5.6.0 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-12-12 18:17:43 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-12-12 18:17:43 | 000,000,000 | ---D | M] [2010-09-21 14:48:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Janek\AppData\Roaming\mozilla\Extensions [2011-01-27 19:36:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Janek\AppData\Roaming\mozilla\Firefox\Profiles\rgbfify1.default\extensions [2010-11-03 19:09:12 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Users\Janek\AppData\Roaming\mozilla\Firefox\Profiles\rgbfify1.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2010-12-12 18:17:52 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Janek\AppData\Roaming\mozilla\Firefox\Profiles\rgbfify1.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010-12-10 19:39:35 | 000,000,000 | ---D | M] (free-downloads.net Toolbar) -- C:\Users\Janek\AppData\Roaming\mozilla\Firefox\Profiles\rgbfify1.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949} [2010-11-11 20:25:51 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Users\Janek\AppData\Roaming\mozilla\Firefox\Profiles\rgbfify1.default\extensions\DTToolbar@toolbarnet.com [2010-01-20 12:16:28 | 000,000,939 | ---- | M] () -- C:\Users\Janek\AppData\Roaming\Mozilla\Firefox\Profiles\rgbfify1.default\searchplugins\conduit.xml [2010-11-11 20:25:43 | 000,002,059 | ---- | M] () -- C:\Users\Janek\AppData\Roaming\Mozilla\Firefox\Profiles\rgbfify1.default\searchplugins\daemon-search.xml [2010-11-03 19:09:20 | 000,001,196 | ---- | M] () -- C:\Users\Janek\AppData\Roaming\Mozilla\Firefox\Profiles\rgbfify1.default\searchplugins\winamp-search.xml [2010-10-03 22:47:25 | 000,002,075 | ---- | M] () -- C:\Users\Janek\AppData\Roaming\Mozilla\Firefox\Profiles\rgbfify1.default\searchplugins\wyszukiwanie-filmw-wideo-w-youtube.xml [2010-11-26 23:16:28 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2010-09-21 15:58:49 | 000,000,000 | ---D | M] (G DATA WebFilter) -- C:\Program Files (x86)\mozilla firefox\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE} [2010-10-07 17:36:16 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2010-09-23 15:41:40 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010-11-26 23:16:28 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2009-09-12 23:05:42 | 000,124,240 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\CCMSDK.dll [2009-09-12 23:06:22 | 000,070,488 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\CgpCore.dll [2009-09-12 23:06:32 | 000,091,480 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\confmgr.dll [2009-09-12 23:06:28 | 000,022,360 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\ctxlogging.dll [2010-09-15 04:50:38 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2009-09-12 23:08:36 | 000,406,864 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\plugins\npicaN.dll [2010-07-12 17:33:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2009-09-12 23:06:24 | 000,023,896 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\TcpPServ.dll [2010-10-21 22:26:50 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2010-10-21 22:26:50 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2010-10-21 22:26:50 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2010-10-21 22:26:50 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2010-10-21 22:26:50 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2010-10-21 22:26:50 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (G DATA WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G DATA\InternetSecurity\Webfilter\AVKWebIEx64.dll () O2 - BHO: (G DATA WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G DATA\InternetSecurity\Webfilter\AvkWebIE.dll () O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL LLC.) O2 - BHO: (DIALux 3.1 ULDBrowserHelper Class) - {69AB812A-8CE4-4BF3-B49B-3B60A9F31FB2} - C:\Program Files (x86)\DIALux\DLXShellExtension.dll (DIAL GmbH, Germany) O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (FlashGetBHO) - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Users\Janek\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll (Trend Media Group) O2 - BHO: (free-downloads.net Toolbar) - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll (Conduit Ltd.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (G DATA WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G DATA\InternetSecurity\Webfilter\AVKWebIEx64.dll () O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKLM\..\Toolbar: (G DATA WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G DATA\InternetSecurity\Webfilter\AvkWebIE.dll () O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL LLC.) O3 - HKLM\..\Toolbar: (free-downloads.net Toolbar) - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll (Conduit Ltd.) O3:[b]64bit:[/b] - HKU\S-1-5-21-3910842946-1338297919-1448379615-1001\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKU\S-1-5-21-3910842946-1338297919-1448379615-1001\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKU\S-1-5-21-3910842946-1338297919-1448379615-1001\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL LLC.) O3 - HKU\S-1-5-21-3910842946-1338297919-1448379615-1001\..\Toolbar\WebBrowser: (free-downloads.net Toolbar) - {ECDEE021-0D17-467F-A1FF-C7A115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll (Conduit Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited) O4:[b]64bit:[/b] - HKLM..\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (Lenovo(beijing) Limited) O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.dll (NVIDIA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [NvMediaCenter] C:\Windows\SysNative\NvMcTray.dll (NVIDIA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe () O4:[b]64bit:[/b] - HKLM..\Run: [Windows Mobile Device Center] C:\Windows\WindowsMobile\wmdc.exe (Microsoft Corporation) O4 - HKLM..\Run: [ConnectionCenter] C:\Program Files (x86)\Citrix\ICA Client\concentr.exe (Citrix Systems, Inc.) O4 - HKLM..\Run: [G DATA AntiVirus Trayapplication] C:\Program Files (x86)\G DATA\InternetSecurity\AVKTray\AVKTray.exe (G DATA Software) O4 - HKLM..\Run: [GDFirewallTray] C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe (G DATA Software AG) O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) O4 - HKLM..\Run: [VeriFaceManager] File not found O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3910842946-1338297919-1448379615-1001..\Run: [CE8SIIFGSU] C:\Users\Janek\AppData\Local\Temp\Hkq.exe (Avira GmbH) O4 - HKU\S-1-5-21-3910842946-1338297919-1448379615-1001..\Run: [Gadu-Gadu 10] C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-3910842946-1338297919-1448379615-1001..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe () O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:[b]64bit:[/b] - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html () O8:[b]64bit:[/b] - Extra context menu item: Download all by FlashGet3 - C:\Users\Janek\AppData\Roaming\FlashGetBHO\GetAllUrl.htm () O8:[b]64bit:[/b] - Extra context menu item: Download by FlashGet3 - C:\Users\Janek\AppData\Roaming\FlashGetBHO\GetUrl.htm () O8:[b]64bit:[/b] - Extra context menu item: 使用快车3下载 - C:\Users\Janek\AppData\Roaming\FlashGetBHO\GetUrl.htm () O8:[b]64bit:[/b] - Extra context menu item: 使用快车3下载全部链接 - C:\Users\Janek\AppData\Roaming\FlashGetBHO\GetAllUrl.htm () O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html () O8 - Extra context menu item: Download all by FlashGet3 - C:\Users\Janek\AppData\Roaming\FlashGetBHO\GetAllUrl.htm () O8 - Extra context menu item: Download by FlashGet3 - C:\Users\Janek\AppData\Roaming\FlashGetBHO\GetUrl.htm () O8 - Extra context menu item: 使用快车3下载 - C:\Users\Janek\AppData\Roaming\FlashGetBHO\GetUrl.htm () O8 - Extra context menu item: 使用快车3下载全部链接 - C:\Users\Janek\AppData\Roaming\FlashGetBHO\GetAllUrl.htm () O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKU\S-1-5-21-3910842946-1338297919-1448379615-1001\..Trusted Domains: kuaiche.com ([software] http in Local intranet) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 62.179.1.62 O18:[b]64bit:[/b] - Protocol\Handler\dialux {8352FA4C-39C6-11D3-ADBA-00A0244FB1A2} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found O18 - Protocol\Handler\dialux {8352FA4C-39C6-11D3-ADBA-00A0244FB1A2} - C:\Program Files (x86)\DIALux\DLXToolBox.dll (DIAL GmbH, Germany) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-11-25 23:21:08 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ] O33 - MountPoints2\{9678ea3f-edcf-11df-bb02-002556c541fa}\Shell - "" = AutoRun O33 - MountPoints2\{9678ea3f-edcf-11df-bb02-002556c541fa}\Shell\AutoRun\command - "" = F:\setup.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-01-27 18:34:27 | 000,249,856 | ---- | C] (Avira GmbH) -- C:\Windows\Hcuzea.exe [2011-01-17 21:44:54 | 000,000,000 | ---D | C] -- C:\Users\Janek\Desktop\xlator [2011-01-15 17:34:24 | 000,000,000 | ---D | C] -- C:\filmy [2011-01-14 22:57:11 | 000,000,000 | ---D | C] -- C:\Users\Janek\Desktop\www1 [2011-01-12 19:20:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth [2011-01-12 19:20:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google [2011-01-12 09:34:08 | 001,837,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll [2011-01-12 09:34:08 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10warp.dll [2011-01-12 09:34:08 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll [2011-01-12 09:34:08 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d2d1.dll [2011-01-12 09:34:07 | 004,068,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll [2011-01-12 09:34:07 | 001,888,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL [2011-01-12 09:34:07 | 001,540,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll [2011-01-12 09:34:06 | 000,662,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll [2011-01-12 09:34:05 | 003,181,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll [2011-01-12 09:34:05 | 001,074,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DWrite.dll [2011-01-12 09:34:04 | 000,470,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll [2011-01-12 09:34:04 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll [2011-01-12 09:34:03 | 001,863,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll [2011-01-12 09:34:03 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL [2011-01-12 09:34:03 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll [2011-01-12 09:34:03 | 000,283,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll [2011-01-12 09:34:03 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll [2011-01-12 09:34:03 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10_1core.dll [2011-01-12 09:34:02 | 001,495,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll [2011-01-12 09:34:02 | 000,258,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys [2011-01-12 09:34:02 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsRasterService.dll [2011-01-12 09:34:02 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll [2011-01-12 09:34:02 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll [2011-01-12 09:34:02 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll [2011-01-12 09:34:02 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10_1.dll [2011-01-12 09:34:02 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2011-01-12 09:34:02 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsRasterService.dll [2011-01-12 09:33:48 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbc32.dll [2011-01-12 09:33:48 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll [2011-01-07 12:59:07 | 000,000,000 | ---D | C] -- C:\Users\Janek\Desktop\maszyny [2011-01-03 17:47:20 | 000,000,000 | ---D | C] -- C:\Users\Janek\Desktop\WWW [2011-01-03 11:40:28 | 000,000,000 | ---D | C] -- C:\export [2011-01-03 11:35:01 | 000,000,000 | ---D | C] -- C:\Users\Janek\Documents\MATLAB [2011-01-03 11:34:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB [2011-01-03 11:27:09 | 000,000,000 | ---D | C] -- C:\Program Files\MATLAB [2011-01-03 10:27:00 | 000,000,000 | ---D | C] -- C:\Users\Janek\Desktop\12_o [2011-01-02 22:56:17 | 000,000,000 | ---D | C] -- C:\Users\Janek\Desktop\auto [2010-12-31 19:34:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spolszczenie do Europa Universalis III [2010-12-31 19:33:46 | 000,000,000 | ---D | C] -- C:\Users\Janek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spolszczenie do Europa Universalis III [2010-12-31 19:17:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Paradox Interactive [2010-12-31 19:17:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paradox Interactive [2010-12-31 18:33:43 | 000,000,000 | ---D | C] -- C:\Users\Janek\Documents\GTA Vice City User Files [2010-12-29 21:01:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\kED [2010-12-29 21:01:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\kED [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-01-27 19:45:03 | 000,000,286 | -H-- | M] () -- C:\Windows\tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job [2011-01-27 19:32:26 | 000,014,976 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-01-27 19:32:26 | 000,014,976 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-01-27 19:27:07 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TemprQ3448.html [2011-01-27 19:27:07 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempcS3448.html [2011-01-27 19:26:23 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011-01-27 19:25:09 | 000,001,042 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011-01-27 19:24:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-01-27 19:24:46 | 3193,384,960 | -HS- | M] () -- C:\hiberfil.sys [2011-01-27 19:24:05 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempdD3140.html [2011-01-27 19:24:05 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempZR3140.html [2011-01-27 19:15:13 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempGq3196.html [2011-01-27 19:15:13 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TemphJ3196.html [2011-01-27 18:34:17 | 000,249,856 | ---- | M] (Avira GmbH) -- C:\Windows\Hcuzea.exe [2011-01-24 22:43:28 | 001,462,828 | ---- | M] () -- C:\Users\Janek\Desktop\ptcim1-uklady-sekwencyjne-1.pdf [2011-01-21 21:26:26 | 001,674,774 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011-01-21 21:26:26 | 000,742,208 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2011-01-21 21:26:26 | 000,656,024 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011-01-21 21:26:26 | 000,156,880 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2011-01-21 21:26:26 | 000,122,758 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011-01-19 20:59:18 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempHP5320.html [2011-01-19 20:59:18 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempqM5320.html [2011-01-19 17:18:39 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempLc3632.html [2011-01-19 17:18:39 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempTc3632.html [2011-01-18 22:26:38 | 000,237,439 | ---- | M] () -- C:\Users\Janek\Desktop\Dane o budynku.docx [2011-01-18 18:17:04 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempBG2604.html [2011-01-18 18:17:04 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempCr2604.html [2011-01-17 01:07:08 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempzL3532.html [2011-01-17 01:07:08 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempHs3532.html [2011-01-16 20:39:16 | 000,045,056 | ---- | M] () -- C:\Users\Janek\Desktop\nic.doc [2011-01-15 22:40:07 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempLS4764.html [2011-01-15 22:40:07 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempEt4764.html [2011-01-14 23:42:30 | 009,387,789 | ---- | M] () -- C:\Users\Janek\Desktop\www.rar [2011-01-14 15:38:50 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempHx5312.html [2011-01-14 15:38:50 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempzA5312.html [2011-01-13 17:56:51 | 000,002,400 | ---- | M] () -- C:\Users\Janek\Desktop\Google Chrome.lnk [2011-01-10 20:44:21 | 002,419,200 | ---- | M] () -- C:\Users\Janek\Desktop\projekt nadprzewodniki-2-1.pps [2011-01-10 20:43:30 | 002,417,664 | ---- | M] () -- C:\Users\Janek\Desktop\projekt nadprzewodniki-2-1.ppt [2011-01-10 20:42:44 | 000,006,144 | ---- | M] () -- C:\Users\Janek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-01-08 15:17:16 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempBU3344.html [2011-01-08 15:17:16 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempWg3344.html [2011-01-07 14:50:32 | 000,048,078 | ---- | M] () -- C:\Users\Janek\.recently-used.xbel [2011-01-07 13:00:19 | 020,277,655 | ---- | M] () -- C:\Users\Janek\Desktop\maszyny.rar [2011-01-07 00:01:48 | 000,017,031 | ---- | M] () -- C:\Users\Janek\Desktop\łazienka.jpg [2011-01-05 16:47:21 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempQP1700.html [2011-01-05 16:47:21 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempiC1700.html [2011-01-04 16:57:00 | 000,000,000 | ---- | M] () -- C:\Users\Janek\Documents\bez tytułu.bmp [2011-01-03 17:48:17 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempsY3416.html [2011-01-03 17:48:17 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\Tempco3416.html [2011-01-03 13:00:06 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempVA1468.html [2011-01-03 13:00:06 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempAo1468.html [2011-01-03 11:53:49 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempXm3312.html [2011-01-03 11:53:49 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\Temphc3312.html [2011-01-03 11:35:37 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempzN2932.html [2011-01-03 11:35:37 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempBw2932.html [2011-01-03 09:54:41 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempPz2804.html [2011-01-03 09:54:41 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempqX2804.html [2011-01-03 07:18:10 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempKO4404.html [2011-01-03 07:18:10 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempoW4404.html [2011-01-02 23:14:10 | 000,174,086 | ---- | M] () -- C:\Users\Janek\Desktop\sprawko automatyka.docx [2011-01-02 19:59:02 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempUt4364.html [2011-01-01 20:55:24 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempUW3132.html [2011-01-01 20:55:24 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempER3132.html [2010-12-31 19:19:56 | 000,002,222 | ---- | M] () -- C:\Users\Public\Desktop\Europa Universalis III.lnk [2010-12-31 19:05:21 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempLP2800.html [2010-12-31 19:05:21 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\Tempxr2800.html [2010-12-31 18:54:31 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempvI2760.html [2010-12-31 18:54:31 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\Temppk2760.html [2010-12-30 22:42:43 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempRv3136.html [2010-12-30 22:42:43 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\Tempxz3136.html [2010-12-30 21:30:51 | 000,002,432 | ---- | M] () -- C:\Users\Janek\AppData\Local\Tempzr3736.html [2010-12-30 21:30:51 | 000,002,089 | ---- | M] () -- C:\Users\Janek\AppData\Local\TempXH3736.html [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-01-27 19:27:07 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TemprQ3448.html [2011-01-27 19:27:07 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempcS3448.html [2011-01-27 19:18:35 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempdD3140.html [2011-01-27 19:18:35 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempZR3140.html [2011-01-27 18:34:26 | 000,000,286 | -H-- | C] () -- C:\Windows\tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job [2011-01-27 09:16:54 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempGq3196.html [2011-01-27 09:16:54 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TemphJ3196.html [2011-01-24 22:43:36 | 001,462,828 | ---- | C] () -- C:\Users\Janek\Desktop\ptcim1-uklady-sekwencyjne-1.pdf [2011-01-19 20:59:18 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempHP5320.html [2011-01-19 20:59:18 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempqM5320.html [2011-01-18 22:26:37 | 000,237,439 | ---- | C] () -- C:\Users\Janek\Desktop\Dane o budynku.docx [2011-01-18 18:35:20 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempLc3632.html [2011-01-18 18:35:20 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempTc3632.html [2011-01-17 15:10:16 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempBG2604.html [2011-01-17 15:10:16 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempCr2604.html [2011-01-16 20:39:10 | 000,045,056 | ---- | C] () -- C:\Users\Janek\Desktop\nic.doc [2011-01-16 10:02:12 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempzL3532.html [2011-01-16 10:02:12 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempHs3532.html [2011-01-15 18:22:42 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempLS4764.html [2011-01-15 18:22:42 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempEt4764.html [2011-01-14 23:42:27 | 009,387,789 | ---- | C] () -- C:\Users\Janek\Desktop\www.rar [2011-01-12 19:20:08 | 000,001,046 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011-01-12 19:20:07 | 000,001,042 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011-01-12 09:40:24 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempHx5312.html [2011-01-12 09:40:24 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempzA5312.html [2011-01-10 20:44:17 | 002,419,200 | ---- | C] () -- C:\Users\Janek\Desktop\projekt nadprzewodniki-2-1.pps [2011-01-10 20:43:30 | 002,417,664 | ---- | C] () -- C:\Users\Janek\Desktop\projekt nadprzewodniki-2-1.ppt [2011-01-07 14:50:32 | 000,048,078 | ---- | C] () -- C:\Users\Janek\.recently-used.xbel [2011-01-07 13:00:11 | 020,277,655 | ---- | C] () -- C:\Users\Janek\Desktop\maszyny.rar [2011-01-07 00:01:47 | 000,017,031 | ---- | C] () -- C:\Users\Janek\Desktop\łazienka.jpg [2011-01-05 20:16:42 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempBU3344.html [2011-01-05 20:16:42 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempWg3344.html [2011-01-04 16:57:00 | 000,000,000 | ---- | C] () -- C:\Users\Janek\Documents\bez tytułu.bmp [2011-01-03 17:49:38 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempQP1700.html [2011-01-03 17:49:38 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempiC1700.html [2011-01-03 17:19:49 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempsY3416.html [2011-01-03 17:19:49 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempco3416.html [2011-01-03 13:00:06 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempVA1468.html [2011-01-03 13:00:06 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempAo1468.html [2011-01-03 11:38:15 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempXm3312.html [2011-01-03 11:38:15 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Temphc3312.html [2011-01-03 10:24:11 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempzN2932.html [2011-01-03 10:24:11 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempBw2932.html [2011-01-03 09:50:49 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempPz2804.html [2011-01-03 09:50:49 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempqX2804.html [2011-01-02 23:14:08 | 000,174,086 | ---- | C] () -- C:\Users\Janek\Desktop\sprawko automatyka.docx [2011-01-02 19:59:24 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempKO4404.html [2011-01-02 19:59:24 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempoW4404.html [2011-01-01 20:55:46 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempUt4364.html [2010-12-31 19:19:56 | 000,002,222 | ---- | C] () -- C:\Users\Public\Desktop\Europa Universalis III.lnk [2010-12-31 19:08:02 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempUW3132.html [2010-12-31 19:08:02 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempER3132.html [2010-12-31 18:57:28 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempLP2800.html [2010-12-31 18:57:28 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempxr2800.html [2010-12-31 10:24:33 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempvI2760.html [2010-12-31 10:24:33 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Temppk2760.html [2010-12-30 21:45:57 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempRv3136.html [2010-12-30 21:45:57 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempxz3136.html [2010-12-27 15:39:44 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempzr3736.html [2010-12-27 15:39:44 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempXH3736.html [2010-12-23 10:22:38 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempgE2784.html [2010-12-22 11:06:13 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempja3144.html [2010-12-22 11:06:13 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempOv3144.html [2010-12-21 21:49:08 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempoh3328.html [2010-12-21 21:49:08 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempWs3328.html [2010-12-21 10:37:02 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempuW3628.html [2010-12-21 10:37:01 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempMZ3628.html [2010-12-20 19:56:23 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempNR3544.html [2010-12-20 19:56:23 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempXe3544.html [2010-12-19 11:58:56 | 000,006,144 | ---- | C] () -- C:\Users\Janek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-12-18 21:21:12 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempUL3508.html [2010-12-18 21:21:12 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempTM3508.html [2010-12-17 13:32:10 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempzh3140.html [2010-12-17 13:32:10 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempxq3140.html [2010-12-17 13:08:54 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempxs3956.html [2010-12-17 13:08:54 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempfX3956.html [2010-12-17 13:02:08 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempyE6032.html [2010-12-17 13:02:08 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempVD6032.html [2010-12-15 11:43:36 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempMa4976.html [2010-12-15 11:43:36 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempfi4976.html [2010-12-15 11:40:15 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempWJ5256.html [2010-12-15 11:40:15 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempjA5256.html [2010-12-12 18:12:10 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempck2240.html [2010-12-12 18:12:10 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempMU2240.html [2010-12-12 18:10:52 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempEz3248.html [2010-12-12 18:10:52 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempBp3248.html [2010-12-10 20:40:19 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempqK1356.html [2010-12-10 20:40:19 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempqw1356.html [2010-12-10 20:13:00 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempkG2332.html [2010-12-10 20:13:00 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempCX2332.html [2010-12-10 20:04:16 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempbd2516.html [2010-12-10 20:04:16 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempjx2516.html [2010-12-10 19:53:18 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempuV2828.html [2010-12-10 19:53:18 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempZe2828.html [2010-12-10 19:45:02 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempaQ2908.html [2010-12-10 19:45:02 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempaY2908.html [2010-12-10 19:38:37 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempKv2744.html [2010-12-10 19:38:37 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempwx2744.html [2010-12-10 19:28:38 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempnD3032.html [2010-12-10 19:28:38 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempnH3032.html [2010-12-10 11:29:45 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempcR1116.html [2010-12-10 11:29:44 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempiH1116.html [2010-12-10 11:12:25 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempoP1860.html [2010-12-10 11:12:25 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempKG1860.html [2010-12-08 17:17:27 | 000,010,240 | ---- | C] () -- C:\Windows\SysWow64\vidx16.dll [2010-12-07 21:53:13 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempVE4800.html [2010-12-07 21:53:13 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempxG4800.html [2010-12-03 18:41:10 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempHb2936.html [2010-12-03 18:41:10 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Temprd2936.html [2010-12-03 09:56:33 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempEn2908.html [2010-12-03 09:56:33 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempGS2908.html [2010-12-02 23:23:25 | 001,650,804 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010-11-28 22:04:56 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempyk5428.html [2010-11-28 22:04:56 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempyu5428.html [2010-11-25 19:05:40 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempDJ2900.html [2010-11-25 19:05:40 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempVd2900.html [2010-11-25 16:42:38 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempbp3048.html [2010-11-25 16:42:38 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempwF3048.html [2010-11-25 15:31:00 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempao2612.html [2010-11-25 15:31:00 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TemppA2612.html [2010-11-25 15:20:07 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempID1360.html [2010-11-25 15:20:07 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempEX1360.html [2010-11-25 15:12:27 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempMx3056.html [2010-11-25 15:12:27 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempct3056.html [2010-11-25 12:00:56 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempjT3056.html [2010-11-25 12:00:56 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempKK3056.html [2010-11-24 20:50:16 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempOS3568.html [2010-11-24 20:50:16 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempWV3568.html [2010-11-21 19:10:15 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempCz2692.html [2010-11-21 19:10:15 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempwC2692.html [2010-11-20 12:04:17 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempMg2276.html [2010-11-20 12:04:17 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempui2276.html [2010-11-18 21:31:09 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempMM1300.html [2010-11-18 21:31:09 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempAP1300.html [2010-11-17 09:01:32 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempWT2760.html [2010-11-17 09:01:32 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempcj2760.html [2010-11-17 00:31:28 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempjc2464.html [2010-11-15 12:42:14 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempWp2816.html [2010-11-15 12:42:14 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempJC2816.html [2010-11-13 11:40:09 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempza2468.html [2010-11-13 11:40:09 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempjp2468.html [2010-11-12 17:04:01 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempfK1556.html [2010-11-12 17:04:01 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempyK1556.html [2010-11-12 09:34:40 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempHI2820.html [2010-11-12 09:34:40 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempNJ2820.html [2010-11-11 21:11:19 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempXi3048.html [2010-11-11 21:11:19 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempry3048.html [2010-11-10 18:08:38 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempje2288.html [2010-11-10 18:08:38 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Templw2288.html [2010-11-08 15:44:13 | 000,000,025 | ---- | C] () -- C:\Windows\libem.INI [2010-11-07 00:34:48 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempsX2340.html [2010-11-07 00:34:48 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempjx2340.html [2010-11-07 00:10:54 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempcE2856.html [2010-11-07 00:10:54 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempIW2856.html [2010-11-06 15:40:01 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TemplR3320.html [2010-11-06 15:40:01 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempRm3320.html [2010-11-06 07:34:50 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempqx1932.html [2010-11-05 15:14:34 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempPe2564.html [2010-11-05 15:14:34 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Templv2564.html [2010-11-05 09:04:00 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempqS2036.html [2010-11-05 09:04:00 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempbu2036.html [2010-11-04 13:50:00 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempJc2504.html [2010-11-04 13:50:00 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempmY2504.html [2010-11-03 18:23:41 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempfH3012.html [2010-11-03 18:23:41 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempDU3012.html [2010-11-03 12:35:16 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempsX1920.html [2010-11-03 12:35:16 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempwi1920.html [2010-11-02 11:50:13 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempKE1840.html [2010-11-02 11:50:13 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempfR1840.html [2010-11-02 08:15:13 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TemplC2288.html [2010-11-01 09:14:47 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempAQ2812.html [2010-10-30 18:38:19 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempay3124.html [2010-10-30 18:38:19 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempcP3124.html [2010-10-30 17:23:49 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempgF6320.html [2010-10-30 17:23:49 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempef6320.html [2010-10-29 18:19:59 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempgi2272.html [2010-10-29 12:36:51 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempQZ2832.html [2010-10-29 12:36:51 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempAG2832.html [2010-10-28 18:29:58 | 000,000,102 | ---- | C] () -- C:\Windows\Dialux.ini [2010-10-28 16:44:51 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempSh2984.html [2010-10-28 16:44:51 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempBi2984.html [2010-10-27 16:28:40 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempoI4248.html [2010-10-27 09:12:12 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempcC2936.html [2010-10-27 09:12:12 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempCH2936.html [2010-10-26 14:09:57 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempBl1292.html [2010-10-26 14:09:57 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempFK1292.html [2010-10-25 22:02:04 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempPZZ232.html [2010-10-25 22:02:04 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempfRj232.html [2010-10-25 21:44:05 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempWP5336.html [2010-10-25 21:44:05 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempgQ5336.html [2010-10-24 12:22:32 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempBw2056.html [2010-10-24 12:22:31 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempgJ2056.html [2010-10-23 08:31:39 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempWm2708.html [2010-10-23 08:31:39 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempSj2708.html [2010-10-22 21:11:16 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TemplT2908.html [2010-10-22 21:11:16 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Temphw2908.html [2010-10-22 09:26:09 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Temphy3160.html [2010-10-22 09:26:09 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempxN3160.html [2010-10-21 11:49:29 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Temptm5176.html [2010-10-21 11:49:29 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempyp5176.html [2010-10-20 16:23:04 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempPR7392.html [2010-10-17 22:13:42 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempmD2280.html [2010-10-17 22:13:42 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempQw2280.html [2010-10-16 14:14:42 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempxk1260.html [2010-10-16 14:14:42 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempbt1260.html [2010-10-16 12:25:07 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempvO2272.html [2010-10-16 12:25:07 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempBK2272.html [2010-10-15 21:45:11 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempUl2720.html [2010-10-15 21:45:11 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempVS2720.html [2010-10-15 11:04:08 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempRQ2356.html [2010-10-15 11:04:08 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempCl2356.html [2010-10-15 10:56:36 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempXvc392.html [2010-10-15 10:56:36 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempoPG392.html [2010-10-14 15:08:49 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempNs4548.html [2010-10-14 15:08:49 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempum4548.html [2010-10-12 14:36:54 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempzf2976.html [2010-10-12 14:36:54 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempMD2976.html [2010-10-10 09:46:29 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempiI3408.html [2010-10-10 09:46:29 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempBF3408.html [2010-10-08 20:10:10 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempgQ2764.html [2010-10-08 20:10:09 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempEm2764.html [2010-10-08 07:59:47 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempHO2168.html [2010-10-08 07:59:47 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempJx2168.html [2010-10-07 17:37:26 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010-10-06 12:39:10 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempty3492.html [2010-10-06 12:39:10 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempBu3492.html [2010-10-05 15:09:08 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempyx2928.html [2010-10-05 15:09:08 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempCJ2928.html [2010-10-04 17:55:22 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempvy3192.html [2010-10-04 17:55:22 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempTf3192.html [2010-10-04 09:59:20 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempkQ3056.html [2010-10-04 09:59:20 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempSI3056.html [2010-10-03 08:35:27 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempaP2928.html [2010-10-02 21:30:29 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempQR3016.html [2010-10-02 10:03:38 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempnV3068.html [2010-10-02 10:03:38 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempTb3068.html [2010-10-01 21:12:20 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempFQ2716.html [2010-10-01 21:12:20 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempTE2716.html [2010-10-01 13:43:31 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Templd2652.html [2010-09-30 21:57:24 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempWA2752.html [2010-09-30 21:57:24 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Temppv2752.html [2010-09-30 20:15:15 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempgv2996.html [2010-09-30 19:04:29 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2010-09-30 18:40:41 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempyG2448.html [2010-09-30 18:14:04 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempxT2900.html [2010-09-30 18:14:04 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempdh2900.html [2010-09-29 21:36:08 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempUY2948.html [2010-09-29 21:36:08 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempst2948.html [2010-09-29 10:23:49 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TemptQ2672.html [2010-09-29 10:23:49 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempis2672.html [2010-09-28 16:59:29 | 000,000,030 | ---- | C] () -- C:\Windows\Q3version.ini [2010-09-28 16:58:20 | 000,000,551 | ---- | C] () -- C:\Windows\Qiii.INI [2010-09-28 12:25:57 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempPt2744.html [2010-09-27 13:19:52 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempkPM676.html [2010-09-27 13:19:52 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempWas676.html [2010-09-26 22:27:34 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempoq2964.html [2010-09-26 22:27:34 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempXA2964.html [2010-09-26 17:41:46 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempii1704.html [2010-09-26 17:41:46 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempgS1704.html [2010-09-26 17:20:47 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempWb2988.html [2010-09-26 17:20:47 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempYs2988.html [2010-09-25 15:34:07 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempSK3688.html [2010-09-25 15:34:07 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempJH3688.html [2010-09-24 18:19:12 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempkou192.html [2010-09-23 15:35:25 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempVN2488.html [2010-09-23 15:35:25 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempaF2488.html [2010-09-22 18:33:00 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempBm2632.html [2010-09-22 18:33:00 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempMa2632.html [2010-09-21 23:23:50 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempdE2916.html [2010-09-21 23:23:50 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempUJ2916.html [2010-09-21 23:10:19 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempXL2728.html [2010-09-21 23:10:19 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempEe2728.html [2010-09-21 22:54:56 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempzA2596.html [2010-09-21 22:54:56 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempeo2596.html [2010-09-21 22:09:50 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempbf2888.html [2010-09-21 22:09:50 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\Tempmt2888.html [2010-09-21 22:05:09 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TemptW2592.html [2010-09-21 22:05:09 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempfA2592.html [2010-09-21 21:58:52 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempDs2776.html [2010-09-21 21:58:52 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempfI2776.html [2010-09-21 21:33:13 | 002,110,728 | ---- | C] () -- C:\Windows\SysWow64\Apblend.dll [2010-09-21 21:33:13 | 001,171,456 | ---- | C] () -- C:\Windows\SysWow64\PicNotify.dll [2010-09-21 21:31:51 | 001,044,480 | ---- | C] () -- C:\Windows\SysWow64\3DImageRenderer.dll [2010-09-21 19:00:57 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempOH2964.html [2010-09-21 19:00:57 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempWd2964.html [2010-09-21 17:58:42 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TemprW2568.html [2010-09-21 17:58:42 | 000,002,089 | ---- | C] () -- C:\Users\Janek\AppData\Local\TemptH2568.html [2010-09-21 17:00:57 | 000,002,432 | ---- | C] () -- C:\Users\Janek\AppData\Local\TempCu3816.html [2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [color=#E56717]========== LOP Check ==========[/color] [2010-12-07 00:50:59 | 000,000,000 | ---D | M] -- C:\Users\Janek\AppData\Roaming\Autodesk [2010-12-20 22:52:48 | 000,000,000 | ---D | M] -- C:\Users\Janek\AppData\Roaming\BITS [2010-12-10 11:19:05 | 000,000,000 | ---D | M] -- C:\Users\Janek\AppData\Roaming\DAEMON Tools Lite [2010-09-29 20:33:03 | 000,000,000 | ---D | M] -- C:\Users\Janek\AppData\Roaming\DeepBurner [2010-11-08 15:44:00 | 000,000,000 | ---D | M] -- C:\Users\Janek\AppData\Roaming\FlashGet [2010-11-08 15:43:56 | 000,000,000 | ---D | M] -- C:\Users\Janek\AppData\Roaming\FlashGetBHO [2010-09-21 17:04:10 | 000,000,000 | ---D | M] -- C:\Users\Janek\AppData\Roaming\Gadu-Gadu 10 [2011-01-07 14:50:32 | 000,000,000 | ---D | M] -- C:\Users\Janek\AppData\Roaming\gtk-2.0 [2010-11-06 18:29:31 | 000,000,000 | ---D | M] -- C:\Users\Janek\AppData\Roaming\ICAClient [2010-12-14 19:46:11 | 000,000,000 | ---D | M] -- C:\Users\Janek\AppData\Roaming\INTERsoft [2010-12-16 22:35:23 | 000,000,000 | ---D | M] -- C:\Users\Janek\AppData\Roaming\ipla [2010-11-26 22:48:11 | 000,000,000 | ---D | M] -- C:\Users\Janek\AppData\Roaming\IrfanView [2010-09-21 21:32:06 | 000,000,000 | ---D | M] -- C:\Users\Janek\AppData\Roaming\Lenovo [2010-12-10 20:29:41 | 000,000,000 | ---D | M] -- C:\Users\Janek\AppData\Roaming\My Games [2010-11-03 19:34:41 | 000,000,000 | ---D | M] -- C:\Users\Janek\AppData\Roaming\OpenFM [2010-11-16 22:50:03 | 000,000,000 | ---D | M] -- C:\Users\Janek\AppData\Roaming\RDRM [2011-01-17 15:03:59 | 000,032,592 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [2011-01-27 19:45:03 | 000,000,286 | -H-- | M] () -- C:\Windows\Tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 100 bytes -> C:\ProgramData\TEMP:0E08FC17 < End of report >