OTL logfile created on: 2013-08-14 10:37:25 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\OTL
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1,99 Gb Total Physical Memory | 0,88 Gb Available Physical Memory | 44,40% Memory free
4,22 Gb Paging File | 2,88 Gb Available in Paging File | 68,35% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 220,29 Gb Total Space | 113,73 Gb Free Space | 51,63% Space Free | Partition Type: NTFS
Drive D: | 10,00 Gb Total Space | 6,66 Gb Free Space | 66,64% Space Free | Partition Type: NTFS
 
Computer Name: BEATA-PC | User Name: beata | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 360 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2013-07-02 07:05:16 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\OTL\OTL.exe
PRC - [2013-06-26 21:53:59 | 001,598,128 | ---- | M] (AVG Secure Search) -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe
PRC - [2013-06-25 17:14:00 | 000,308,816 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
PRC - [2013-06-12 17:15:38 | 000,814,472 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\Macromed\Flash\FlashUtil32_11_7_700_224_ActiveX.exe
PRC - [2013-05-09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2013-05-09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2013-01-27 12:11:46 | 000,020,456 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2013-01-27 12:11:06 | 000,947,152 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2009-07-01 18:37:06 | 000,037,888 | ---- | M] () -- C:\Program Files\Winamp\winampa.exe
PRC - [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008-03-04 07:05:24 | 000,036,864 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\OEM02Mon.exe
PRC - [2007-12-21 11:58:06 | 000,184,320 | ---- | M] (CyberLink Corp.) -- C:\Program Files\Dell\MediaDirect\PCMService.exe
PRC - [2007-12-20 11:48:42 | 000,204,800 | ---- | M] (OptionNV) -- C:\Program Files\iPlus\Drivers\DriverVista\GTMax3.6\GtDetectSc.exe
PRC - [2007-12-20 11:48:42 | 000,204,800 | ---- | M] (Option) -- C:\Program Files\iPlus\Drivers\DriverVista\GTMax3.6\GtFlashSwitch.exe
PRC - [2007-11-12 13:07:24 | 000,405,504 | ---- | M] (IDT, Inc.) -- C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
PRC - [2007-11-12 13:07:20 | 000,102,400 | ---- | M] (IDT, Inc.) -- C:\Windows\System32\stacsv.exe
PRC - [2007-11-12 13:07:16 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) -- C:\Windows\System32\AEstSrv.exe
PRC - [2007-09-07 17:27:08 | 001,180,952 | ---- | M] (Dell Inc.) -- C:\Program Files\Dell\QuickSet\quickset.exe
PRC - [2007-09-07 08:50:02 | 000,040,960 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\hidfind.exe
PRC - [2007-09-07 08:49:56 | 000,159,744 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\Apoint.exe
PRC - [2007-09-07 08:49:56 | 000,050,736 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\ApMsgFwd.exe
PRC - [2007-09-07 08:49:56 | 000,049,152 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\ApntEx.exe
PRC - [2007-07-27 17:43:34 | 000,118,784 | ---- | M] (Creative Technology Ltd.) -- C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe
PRC - [2007-03-21 14:00:04 | 000,355,096 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2007-03-21 14:00:00 | 000,174,872 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2006-11-03 18:55:50 | 000,703,280 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2013-07-14 15:02:59 | 011,820,032 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\d8f9327ccf9ae9cd853d9f9c6c8807bc\System.Web.ni.dll
MOD - [2013-07-14 15:02:48 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\59375bfcbdf9a51a963b71c10f6204d4\System.Runtime.Remoting.ni.dll
MOD - [2013-07-14 14:59:18 | 007,977,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\e3cc2cbffd5fb21da64e93d9b6c27c7c\System.ni.dll
MOD - [2013-07-14 14:59:07 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\6a938df70a8b7996a3890b4f34c83906\mscorlib.ni.dll
MOD - [2009-07-01 18:37:06 | 000,037,888 | ---- | M] () -- C:\Program Files\Winamp\winampa.exe
MOD - [2007-12-12 09:02:48 | 000,054,784 | ---- | M] () -- C:\Windows\System32\bcmwlrmt.dll
MOD - [2006-11-03 18:46:24 | 000,126,976 | ---- | M] () -- C:\Program Files\WIDCOMM\Bluetooth Software\BTKeyInd.dll
MOD - [2006-11-03 18:25:56 | 000,389,120 | ---- | M] () -- C:\Windows\System32\btwhidcs.dll
MOD - [2005-04-22 08:43:58 | 000,036,864 | ---- | M] () -- C:\Program Files\Dell Photo AIO Printer 922\JetPrint.dll
MOD - [2005-04-22 08:43:32 | 000,065,536 | ---- | M] () -- C:\Program Files\Dell Photo AIO Printer 922\JetScan.dll
MOD - [2005-04-22 08:42:36 | 000,065,536 | ---- | M] () -- C:\Program Files\Dell Photo AIO Printer 922\JetImage.dll
MOD - [2005-04-22 08:42:18 | 000,028,672 | ---- | M] () -- C:\Program Files\Dell Photo AIO Printer 922\JetPDF.dll
MOD - [2005-04-22 08:42:00 | 000,036,864 | ---- | M] () -- C:\Program Files\Dell Photo AIO Printer 922\JetFunc.dll
MOD - [2004-03-10 10:36:24 | 000,061,440 | ---- | M] () -- C:\Program Files\Dell Photo AIO Printer 922\ConvDIB.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2013-06-26 21:53:59 | 001,598,128 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe -- (vToolbarUpdater15.3.0)
SRV - [2013-06-12 18:13:23 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013-05-09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2013-01-27 12:11:46 | 000,295,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2013-01-27 12:11:46 | 000,020,456 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2012-07-13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2008-01-19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007-12-20 11:48:42 | 000,204,800 | ---- | M] (OptionNV) [Auto | Running] -- C:\Program Files\iPlus\Drivers\DriverVista\GTMax3.6\GtDetectSc.exe -- (GtDetectSc)
SRV - [2007-12-20 11:48:42 | 000,204,800 | ---- | M] (Option) [Auto | Running] -- C:\Program Files\iPlus\Drivers\DriverVista\GTMax3.6\GtFlashSwitch.exe -- (GtFlashSwitch)
SRV - [2007-11-12 13:07:20 | 000,102,400 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\stacsv.exe -- (STacSV)
SRV - [2007-11-12 13:07:16 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\AEstSrv.exe -- (AESTFilters)
SRV - [2007-03-21 14:00:04 | 000,355,096 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)
SRV - [2005-03-03 18:11:32 | 000,466,944 | ---- | M] (Dell) [On_Demand | Stopped] -- C:\Windows\System32\dlbtcoms.exe -- (dlbt_device)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\BCM42RLY.sys -- (BCM42RLY)
DRV - [2013-06-28 09:56:11 | 000,770,344 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2013-06-28 09:56:11 | 000,369,584 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2013-06-28 09:56:11 | 000,175,176 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2013-06-26 21:54:01 | 000,037,664 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtpx86.sys -- (avgtp)
DRV - [2013-05-09 10:59:10 | 000,056,080 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2013-05-09 10:59:10 | 000,049,376 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2013-05-09 10:59:09 | 000,066,336 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2013-05-09 10:59:09 | 000,049,760 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2013-05-09 10:59:08 | 000,029,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2013-01-20 16:59:04 | 000,100,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
DRV - [2008-03-06 09:58:44 | 000,111,616 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcHdmi.sys -- (IntcHdmiAddService)
DRV - [2008-03-04 07:05:34 | 000,007,424 | ---- | M] (EyePower Games Pte. Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\OEM02Vfx.sys -- (OEM02Vfx)
DRV - [2008-03-04 07:05:18 | 000,235,648 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\OEM02Dev.sys -- (OEM02Dev)
DRV - [2007-12-20 11:48:36 | 000,095,744 | ---- | M] (Option NV) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Gt51Ip.sys -- (GT72NDISIPXP)
DRV - [2007-12-20 11:48:36 | 000,051,968 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\gt72ubus.sys -- (GT72UBUS)
DRV - [2007-12-20 11:48:36 | 000,008,064 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\gtptser.sys -- (GTPTSER)
DRV - [2007-11-12 13:07:28 | 000,330,240 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2007-09-07 08:49:56 | 000,155,136 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2007-09-06 18:35:16 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2007-09-06 18:35:14 | 000,039,936 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2007-09-06 18:35:12 | 000,042,496 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2006-11-02 09:36:43 | 002,028,032 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300)
DRV - [2006-11-02 09:30:55 | 000,200,704 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express)
DRV - [2006-08-05 02:39:10 | 000,008,192 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-21-1964731219-1168100378-3124450035-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www1.euro.dell.com/content/default.aspx?c=pl&l=pl&s=pad
IE - HKU\S-1-5-21-1964731219-1168100378-3124450035-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = 
IE - HKU\S-1-5-21-1964731219-1168100378-3124450035-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 
IE - HKU\S-1-5-21-1964731219-1168100378-3124450035-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
IE - HKU\S-1-5-21-1964731219-1168100378-3124450035-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-1964731219-1168100378-3124450035-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1964731219-1168100378-3124450035-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-1964731219-1168100378-3124450035-1000\..\SearchScopes\{4BCE1CA4-BB4E-41D3-88E4-09D3AD367C1A}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz=1I7SUNC_plPL448
IE - HKU\S-1-5-21-1964731219-1168100378-3124450035-1000\..\SearchScopes\{4E1AE8F6-72E1-4EC0-9E4D-CAB473743E66}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=535BCF1C-8AC9-45FA-B584-E210D678AB31&apn_sauid=130349EF-C7B6-42C4-B58D-C4958F3E71E1
IE - HKU\S-1-5-21-1964731219-1168100378-3124450035-1000\..\SearchScopes\{5BE3D8FB-4E15-4B67-9B85-41AC65DF9F48}: "URL" = http://szukaj.onet.pl/query.html?qt={searchTerms}
IE - HKU\S-1-5-21-1964731219-1168100378-3124450035-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-1964731219-1168100378-3124450035-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
 
 
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\28.0.1500.72\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 7 U25 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Yahoo! activeX Plug-in Bridge (Enabled) = C:\Program Files\Yahoo!\Common\npyaxmpb.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll
CHR - plugin: Java Deployment Toolkit 7.0.250.16 (Enabled) = C:\Windows\system32\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Docs = C:\Users\beata\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\
CHR - Extension: Dysk Google = C:\Users\beata\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\
CHR - Extension: YouTube = C:\Users\beata\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Szukaj w Google = C:\Users\beata\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Gmail = C:\Users\beata\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2006-09-18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O4 - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [avast] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [DELL Webcam Manager] C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation)
O4 - HKLM..\Run: [iPlusManager] C:\Program Files\iPlus\iPlusChecker.exe ()
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [PCMService] C:\Program Files\Dell\MediaDirect\PCMService.exe (CyberLink Corp.)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe (IDT, Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe ()
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Java Plug-in 10.25.2)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Java Plug-in 1.6.0)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Java Plug-in 10.25.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{94761F53-6E9C-45EA-A817-B010C4EF7D07}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\beata\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\beata\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 360 Days ==========[/color]
 
[2013-08-14 10:31:53 | 000,000,000 | ---D | C] -- C:\OTL
[2013-07-14 14:35:39 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013-07-14 14:35:37 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013-07-14 14:35:36 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013-07-14 14:35:36 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013-07-14 14:35:36 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013-07-14 14:35:31 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013-07-14 14:35:31 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013-07-14 14:35:27 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013-07-10 18:34:49 | 002,049,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2013-07-10 18:33:49 | 001,069,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2013-07-10 18:33:48 | 000,486,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2013-07-10 18:33:48 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2013-07-10 18:33:47 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2013-07-10 18:33:46 | 001,029,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2013-07-10 18:33:45 | 001,172,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2013-07-10 18:33:45 | 000,683,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2013-07-10 18:33:45 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2013-07-10 18:33:42 | 000,505,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qedit.dll
[2013-07-10 18:33:40 | 001,548,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2013-07-03 08:56:52 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013-06-21 21:30:50 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2013-06-21 21:30:50 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2013-06-21 21:30:50 | 000,094,632 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2013-06-21 21:29:11 | 000,263,592 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2013-06-12 09:29:04 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printcom.dll
[2013-06-12 09:29:00 | 000,812,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certutil.exe
[2013-06-12 09:28:58 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certenc.dll
[2013-06-12 09:28:50 | 003,603,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2013-06-12 09:28:48 | 003,551,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2013-06-12 09:28:44 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptdlg.dll
[2013-05-16 16:38:18 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2013-05-12 08:48:14 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG SafeGuard toolbar
[2013-05-12 08:47:28 | 000,037,664 | ---- | C] (AVG Technologies) -- C:\Windows\System32\drivers\avgtpx86.sys
[2013-05-12 08:47:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AVG Secure Search
[2013-05-12 08:47:21 | 000,000,000 | ---D | C] -- C:\Program Files\AVG SafeGuard toolbar
[2013-05-12 08:47:05 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2013-04-10 20:56:05 | 000,376,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2013-04-10 20:56:01 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2013-03-21 23:32:50 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usb8023.sys
[2013-03-20 14:56:32 | 000,000,000 | ---D | C] -- C:\Program Files\ffdshow
[2013-02-13 09:35:52 | 001,314,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2013-02-03 18:16:52 | 000,000,000 | ---D | C] -- C:\Users\beata\Desktop\zdj
[2013-01-09 13:19:29 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2012-12-29 15:35:43 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wdfres.dll
[2012-12-29 15:35:32 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winusb.dll
[2012-12-29 15:35:30 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFPlatform.dll
[2012-12-29 15:35:27 | 000,047,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfLdr.sys
[2012-12-29 15:35:20 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFCoinstaller.dll
[2012-12-29 15:35:19 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFx.dll
[2012-12-29 15:31:37 | 000,293,376 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2012-12-29 15:31:37 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2012-12-29 15:28:39 | 000,376,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnet.dll
[2012-12-29 15:28:39 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnsvr.exe
[2012-12-29 15:28:08 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2012-12-28 20:12:00 | 000,000,000 | ---D | C] -- C:\Users\beata\AppData\Local\Temp(58)
[2012-12-28 20:12:00 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2012-11-15 12:37:10 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\synceng.dll
[2012-11-06 13:34:07 | 000,692,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012-10-31 20:46:03 | 000,000,000 | ---D | C] -- C:\Firefox
[2012-10-29 09:44:08 | 000,000,000 | ---D | C] -- C:\Z Sieci
[2012-10-28 14:25:18 | 000,000,000 | ---D | C] -- C:\Users\beata\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
[2012-10-28 14:25:18 | 000,000,000 | ---D | C] -- C:\Program Files\HijackThis
[2012-09-05 09:30:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2012-09-05 09:30:44 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2012-09-05 09:30:38 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2012-09-02 20:55:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
 
[color=#E56717]========== Files - Modified Within 360 Days ==========[/color]
 
[2013-08-14 10:32:42 | 000,675,738 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2013-08-14 10:32:42 | 000,599,150 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013-08-14 10:32:42 | 000,132,022 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2013-08-14 10:32:42 | 000,105,164 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013-08-14 10:31:42 | 000,020,480 | ---- | M] () -- C:\Users\beata\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013-08-14 10:17:01 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-08-14 10:15:16 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013-08-14 10:15:16 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013-08-14 10:13:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-08-14 10:06:13 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-08-14 10:06:03 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-08-14 10:06:01 | 2137,042,944 | -HS- | M] () -- C:\hiberfil.sys
[2013-08-13 22:05:03 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2013-07-14 14:56:44 | 000,394,320 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013-07-09 08:24:46 | 026,190,788 | ---- | M] () -- C:\Users\beata\Documents\2013-07-09 08;24;44$$$.tif
[2013-07-09 08:24:22 | 026,190,788 | ---- | M] () -- C:\Users\beata\Documents\2013-07-09 08;24;20$$$.tif
[2013-07-09 08:15:23 | 000,142,766 | ---- | M] () -- C:\Users\beata\Desktop\2013-07-09 08;13;47.jpg
[2013-07-04 16:41:58 | 000,662,238 | ---- | M] () -- C:\Users\beata\Documents\P170111_15.49.jpg
[2013-07-03 09:44:56 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2013-07-03 09:36:48 | 000,000,115 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat
[2013-06-28 09:56:11 | 000,770,344 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2013-06-28 09:56:11 | 000,369,584 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
[2013-06-28 09:56:11 | 000,175,176 | ---- | M] () -- C:\Windows\System32\drivers\aswVmm.sys
[2013-06-28 09:56:11 | 000,000,175 | ---- | M] () -- C:\Windows\System32\drivers\aswVmm.sys.sum
[2013-06-28 09:56:11 | 000,000,175 | ---- | M] () -- C:\Windows\System32\drivers\aswSP.sys.sum
[2013-06-28 09:56:11 | 000,000,175 | ---- | M] () -- C:\Windows\System32\drivers\aswSnx.sys.sum
[2013-06-26 21:54:01 | 000,037,664 | ---- | M] (AVG Technologies) -- C:\Windows\System32\drivers\avgtpx86.sys
[2013-06-12 21:48:23 | 000,867,240 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2013-06-12 21:48:17 | 000,789,416 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2013-06-12 21:48:00 | 000,094,632 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2013-06-12 21:43:48 | 000,263,592 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2013-06-12 21:43:44 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2013-06-12 21:43:25 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2013-06-12 18:13:23 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013-06-12 18:13:22 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013-06-04 03:50:43 | 002,049,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2013-05-29 03:50:14 | 001,800,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013-05-29 03:41:52 | 001,427,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013-05-29 03:40:26 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013-05-29 03:38:29 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013-05-29 03:37:15 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013-05-29 03:35:00 | 000,607,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013-05-29 03:33:22 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013-05-29 03:29:36 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013-05-12 08:48:25 | 000,000,952 | ---- | M] () -- C:\Users\Public\Desktop\GOM Player.lnk
[2013-05-09 10:59:10 | 000,056,080 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
[2013-05-09 10:59:10 | 000,049,376 | ---- | M] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2013-05-09 10:59:09 | 000,066,336 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2013-05-09 10:59:09 | 000,049,760 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys
[2013-05-09 10:59:08 | 000,029,816 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys
[2013-05-09 10:58:37 | 000,041,664 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2013-05-09 10:58:28 | 000,229,648 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2013-05-08 06:04:52 | 001,548,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2013-05-03 00:03:36 | 003,603,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2013-05-03 00:03:36 | 003,551,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2013-05-02 17:28:50 | 000,238,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2013-05-02 06:03:42 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\printcom.dll
[2013-04-24 06:00:24 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certenc.dll
[2013-04-24 03:46:29 | 000,812,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certutil.exe
[2013-04-17 14:30:06 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptdlg.dll
[2013-04-17 13:28:53 | 001,029,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2013-04-17 13:28:53 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2013-04-17 13:28:53 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2013-04-17 13:28:53 | 000,160,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2013-04-17 12:34:33 | 001,172,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2013-04-17 12:33:05 | 000,486,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2013-04-17 12:14:27 | 000,683,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2013-04-17 12:10:35 | 001,069,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2013-04-13 12:56:44 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2013-03-29 17:53:18 | 001,529,111 | ---- | M] () -- C:\Users\beata\Desktop\maly.png
[2013-03-19 09:38:35 | 254,429,966 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013-03-09 05:45:04 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2013-03-08 05:53:50 | 000,376,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2013-02-27 10:13:17 | 000,001,912 | ---- | M] () -- C:\Windows\epplauncher.mif
[2013-02-17 17:13:03 | 000,731,559 | ---- | M] () -- C:\Users\beata\Documents\cv_wzor.PDF
[2013-02-12 03:57:27 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usb8023.sys
[2013-01-20 16:59:04 | 000,100,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\NisDrvWFP.sys
[2013-01-04 23:00:18 | 000,112,640 | ---- | M] () -- C:\Windows\System32\ff_vfw.dll
[2013-01-04 23:00:14 | 000,047,616 | ---- | M] () -- C:\Windows\System32\ff_acm.acm
[2012-12-31 16:05:26 | 003,811,777 | ---- | M] () -- C:\Users\beata\Desktop\Weekend - Ona Ta_czy Dla Mnie.mp3
[2012-12-29 15:04:56 | 000,001,802 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012-12-16 15:12:54 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2012-12-16 12:50:29 | 000,293,376 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2012-11-24 17:33:46 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempHl1180.html
[2012-11-24 17:33:46 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempqI1180.html
[2012-11-20 06:22:50 | 000,204,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2012-11-13 10:37:56 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\Temphj4228.html
[2012-11-13 10:37:56 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempMQ4228.html
[2012-11-13 03:29:51 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2012-11-02 12:18:17 | 000,376,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnet.dll
[2012-11-02 10:26:06 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnsvr.exe
[2012-10-29 10:50:30 | 000,000,658 | ---- | M] () -- C:\Users\beata\Desktop\ATF-Cleaner.lnk
[2012-10-28 16:07:43 | 733,667,328 | ---- | M] () -- C:\Users\beata\Desktop\Istoty.2009.PL.DVDRip.XViD-G0M0Ri45.avi
[2012-10-28 13:40:44 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\Temppa3436.html
[2012-10-28 12:09:47 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempyd2840.html
[2012-10-28 12:09:47 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempnV2840.html
[2012-10-26 11:51:02 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempZF2164.html
[2012-10-26 11:51:02 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempJy2164.html
[2012-10-23 13:56:28 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempni2620.html
[2012-10-23 13:56:28 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempzk2620.html
[2012-10-22 11:20:51 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempek2780.html
[2012-10-22 11:20:51 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempXK2780.html
[2012-10-21 20:37:42 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempxc3636.html
[2012-10-21 20:37:42 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempyl3636.html
[2012-10-12 09:23:16 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempEa3576.html
[2012-10-12 09:23:16 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempBK3576.html
[2012-10-10 13:54:42 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempWw2540.html
[2012-10-10 13:54:42 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempaT2540.html
[2012-10-10 13:43:53 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempil2000.html
[2012-10-10 13:43:52 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempte2000.html
[2012-10-08 22:08:39 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempcF4072.html
[2012-10-08 22:08:39 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TemplV4072.html
[2012-10-08 11:19:33 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempeBR824.html
[2012-10-08 11:19:33 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempRuz824.html
[2012-10-03 14:35:05 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempzZ3600.html
[2012-10-03 14:35:05 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TemprO3600.html
[2012-10-01 17:42:52 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempfw3020.html
[2012-10-01 17:42:52 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempZv3020.html
[2012-10-01 14:25:39 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempwW3756.html
[2012-10-01 14:25:39 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempNH3756.html
[2012-10-01 12:19:15 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempuZ3896.html
[2012-10-01 12:19:15 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempmc3896.html
[2012-10-01 10:27:22 | 002,209,674 | ---- | M] () -- C:\Users\beata\Desktop\darmowy-program-treningowy.pdf
[2012-09-26 15:07:57 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempmt3744.html
[2012-09-26 15:07:57 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TemprD3744.html
[2012-09-25 18:19:41 | 000,075,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\synceng.dll
[2012-09-24 16:06:59 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TemplP4052.html
[2012-09-24 16:06:59 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempat4052.html
[2012-09-22 21:36:24 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempwH1164.html
[2012-09-22 21:36:24 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempkM1164.html
[2012-09-22 15:40:37 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempny3648.html
[2012-09-22 15:40:37 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempym3648.html
[2012-09-20 10:27:56 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempYD3936.html
[2012-09-20 10:27:56 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempnY3936.html
[2012-09-17 09:06:11 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempsk3760.html
[2012-09-17 09:06:11 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempDL3760.html
[2012-09-16 21:11:23 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempvZ3856.html
[2012-09-16 21:11:23 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempXa3856.html
[2012-09-14 14:53:30 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempee3888.html
[2012-09-14 14:53:30 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempzA3888.html
[2012-09-13 12:57:53 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempuJ4064.html
[2012-09-13 12:57:53 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempXF4064.html
[2012-09-12 19:57:40 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempHj3492.html
[2012-09-12 19:57:40 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempTd3492.html
[2012-09-12 13:11:23 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempoG3752.html
[2012-09-12 13:11:23 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempWS3752.html
[2012-09-07 14:37:35 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempBP2416.html
[2012-09-07 14:37:35 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempnu2416.html
[2012-09-05 10:10:30 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempxd1988.html
[2012-09-05 10:10:30 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempLl1988.html
[2012-09-05 09:30:45 | 000,001,880 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2012-09-02 21:32:04 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempCIE712.html
[2012-09-02 21:32:04 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempDns712.html
[2012-09-02 20:43:01 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempyJ1484.html
[2012-09-02 20:43:01 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempwJ1484.html
[2012-08-31 09:29:19 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\Temppf1136.html
[2012-08-31 09:29:19 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempsT1136.html
[2012-08-30 15:59:07 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempeW1320.html
[2012-08-30 15:59:07 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempSc1320.html
[2012-08-28 19:41:19 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempdO2616.html
[2012-08-28 19:41:19 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempSt2616.html
[2012-08-26 15:27:42 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\Temphb1148.html
[2012-08-26 15:27:42 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempVv1148.html
[2012-08-24 22:14:01 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempCw2832.html
[2012-08-24 22:14:01 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempra2832.html
[2012-08-21 15:44:51 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\Tempcj1808.html
[2012-08-21 15:44:51 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TempsO1808.html
[2012-08-19 16:22:05 | 000,002,432 | ---- | M] () -- C:\Users\beata\AppData\Local\TempgL3736.html
[2012-08-19 16:22:05 | 000,002,089 | ---- | M] () -- C:\Users\beata\AppData\Local\TemphV3736.html
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013-07-09 08:24:46 | 026,190,788 | ---- | C] () -- C:\Users\beata\Documents\2013-07-09 08;24;44$$$.tif
[2013-07-09 08:24:22 | 026,190,788 | ---- | C] () -- C:\Users\beata\Documents\2013-07-09 08;24;20$$$.tif
[2013-07-09 08:15:22 | 000,142,766 | ---- | C] () -- C:\Users\beata\Desktop\2013-07-09 08;13;47.jpg
[2013-07-03 09:36:39 | 000,000,115 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat
[2013-06-28 09:56:11 | 000,000,175 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys.sum
[2013-06-26 19:55:59 | 000,000,175 | ---- | C] () -- C:\Windows\System32\drivers\aswSP.sys.sum
[2013-06-26 19:55:59 | 000,000,175 | ---- | C] () -- C:\Windows\System32\drivers\aswSnx.sys.sum
[2013-03-29 17:53:17 | 001,529,111 | ---- | C] () -- C:\Users\beata\Desktop\maly.png
[2013-03-24 19:29:59 | 000,000,952 | ---- | C] () -- C:\Users\Public\Desktop\GOM Player.lnk
[2013-03-20 14:56:35 | 000,047,616 | ---- | C] () -- C:\Windows\System32\ff_acm.acm
[2013-03-20 14:56:34 | 000,112,640 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2013-03-20 10:00:26 | 000,175,176 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys
[2013-03-20 10:00:26 | 000,049,376 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2013-02-17 17:14:26 | 000,731,559 | ---- | C] () -- C:\Users\beata\Documents\cv_wzor.PDF
[2012-12-31 16:05:26 | 003,811,777 | ---- | C] () -- C:\Users\beata\Desktop\Weekend - Ona Ta_czy Dla Mnie.mp3
[2012-12-29 15:35:57 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2012-12-29 15:35:57 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2012-12-29 15:04:56 | 000,001,802 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012-12-28 20:14:02 | 2137,042,944 | -HS- | C] () -- C:\hiberfil.sys
[2012-11-24 16:39:15 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempHl1180.html
[2012-11-24 16:39:15 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempqI1180.html
[2012-11-14 20:06:45 | 003,114,245 | ---- | C] () -- C:\Users\beata\Desktop\Video - Papieros 2011 RedMusic.pl.mp3
[2012-11-13 10:34:27 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Temphj4228.html
[2012-11-13 10:34:27 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempMQ4228.html
[2012-11-06 13:34:08 | 000,000,930 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-10-29 10:50:30 | 000,000,658 | ---- | C] () -- C:\Users\beata\Desktop\ATF-Cleaner.lnk
[2012-10-28 15:29:34 | 733,667,328 | ---- | C] () -- C:\Users\beata\Desktop\Istoty.2009.PL.DVDRip.XViD-G0M0Ri45.avi
[2012-10-28 13:30:40 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Temppa3436.html
[2012-10-28 12:04:47 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempyd2840.html
[2012-10-28 12:04:47 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempnV2840.html
[2012-10-26 11:31:46 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempJy2164.html
[2012-10-26 11:31:45 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempZF2164.html
[2012-10-23 13:29:27 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempni2620.html
[2012-10-23 13:29:27 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempzk2620.html
[2012-10-22 11:13:05 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempek2780.html
[2012-10-22 11:13:05 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempXK2780.html
[2012-10-21 18:43:15 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempxc3636.html
[2012-10-21 18:43:15 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempyl3636.html
[2012-10-12 08:37:16 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempBK3576.html
[2012-10-12 08:37:15 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempEa3576.html
[2012-10-10 13:48:49 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempWw2540.html
[2012-10-10 13:48:49 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempaT2540.html
[2012-10-10 12:36:08 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempte2000.html
[2012-10-10 12:36:08 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempil2000.html
[2012-10-08 14:16:14 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempcF4072.html
[2012-10-08 14:16:14 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TemplV4072.html
[2012-10-08 10:25:21 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempeBR824.html
[2012-10-08 10:25:21 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempRuz824.html
[2012-10-03 13:24:04 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempzZ3600.html
[2012-10-03 13:24:04 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TemprO3600.html
[2012-10-01 14:28:29 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempfw3020.html
[2012-10-01 14:28:29 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempZv3020.html
[2012-10-01 14:17:39 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempwW3756.html
[2012-10-01 14:17:39 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempNH3756.html
[2012-10-01 10:29:07 | 002,209,674 | ---- | C] () -- C:\Users\beata\Desktop\darmowy-program-treningowy.pdf
[2012-10-01 09:26:16 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempuZ3896.html
[2012-10-01 09:26:16 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempmc3896.html
[2012-09-26 14:31:45 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempmt3744.html
[2012-09-26 14:31:45 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TemprD3744.html
[2012-09-24 11:07:35 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TemplP4052.html
[2012-09-24 11:07:35 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempat4052.html
[2012-09-22 15:46:24 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempwH1164.html
[2012-09-22 15:46:24 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempkM1164.html
[2012-09-22 15:20:02 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempny3648.html
[2012-09-22 15:20:02 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempym3648.html
[2012-09-20 09:39:12 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempYD3936.html
[2012-09-20 09:39:12 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempnY3936.html
[2012-09-17 08:31:50 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempsk3760.html
[2012-09-17 08:31:50 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempDL3760.html
[2012-09-16 19:19:41 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempvZ3856.html
[2012-09-16 19:19:41 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempXa3856.html
[2012-09-14 14:00:07 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempee3888.html
[2012-09-14 14:00:07 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempzA3888.html
[2012-09-13 11:19:47 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempuJ4064.html
[2012-09-13 11:19:47 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempXF4064.html
[2012-09-12 16:07:29 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempHj3492.html
[2012-09-12 16:07:29 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempTd3492.html
[2012-09-12 11:01:45 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempoG3752.html
[2012-09-12 11:01:45 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempWS3752.html
[2012-09-07 14:28:52 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempBP2416.html
[2012-09-07 14:28:52 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempnu2416.html
[2012-09-05 09:30:45 | 000,001,880 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2012-09-05 08:53:09 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempxd1988.html
[2012-09-05 08:53:09 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempLl1988.html
[2012-09-02 20:53:37 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempCIE712.html
[2012-09-02 20:53:37 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempDns712.html
[2012-09-02 20:43:01 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempyJ1484.html
[2012-09-02 20:43:01 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempwJ1484.html
[2012-08-31 08:14:00 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Temppf1136.html
[2012-08-31 08:14:00 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempsT1136.html
[2012-08-30 13:38:46 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempeW1320.html
[2012-08-30 13:38:46 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempSc1320.html
[2012-08-28 08:30:02 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempdO2616.html
[2012-08-28 08:30:02 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempSt2616.html
[2012-08-26 11:20:03 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Temphb1148.html
[2012-08-26 11:20:03 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempVv1148.html
[2012-08-24 20:11:46 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempCw2832.html
[2012-08-24 20:11:46 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempra2832.html
[2012-08-21 15:31:33 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempsO1808.html
[2012-08-21 15:31:32 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempcj1808.html
[2012-08-19 10:58:46 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempgL3736.html
[2012-08-19 10:58:46 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TemphV3736.html
[2012-08-16 16:15:07 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Templt3952.html
[2012-08-16 16:15:07 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempnG3952.html
[2012-08-15 10:34:54 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Temppf3960.html
[2012-08-15 10:34:54 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempyX3960.html
[2012-08-14 19:44:22 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempWZ1888.html
[2012-08-14 19:44:22 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempMU1888.html
[2012-08-14 19:03:03 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempzq1184.html
[2012-08-14 19:03:03 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempWU1184.html
[2012-08-13 08:34:03 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempgb3548.html
[2012-08-13 08:34:03 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempFW3548.html
[2012-08-12 15:13:56 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Temply3096.html
[2012-08-12 15:13:56 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempqN3096.html
[2012-08-12 09:20:00 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempGg1884.html
[2012-08-12 09:20:00 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempoQ1884.html
[2012-08-09 21:32:16 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempwQz792.html
[2012-08-09 21:32:16 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempEPk792.html
[2012-08-09 13:14:45 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempUM1652.html
[2012-08-09 13:14:45 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempER1652.html
[2012-08-09 10:45:30 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempWC4064.html
[2012-08-09 10:45:30 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempKM4064.html
[2012-08-07 09:35:32 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempVi3972.html
[2012-08-07 09:35:32 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempUA3972.html
[2012-08-05 20:44:59 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempvu3736.html
[2012-08-05 20:44:59 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempDm3736.html
[2012-08-04 20:24:20 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempzl3768.html
[2012-08-04 20:24:19 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempID3768.html
[2012-07-31 11:20:25 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempIn3024.html
[2012-07-31 11:20:25 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempPB3024.html
[2012-07-30 14:22:09 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempaV2276.html
[2012-07-30 14:22:09 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempod2276.html
[2012-07-30 14:10:44 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempIV3628.html
[2012-07-30 14:10:44 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempja3628.html
[2012-07-26 12:46:31 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempDo1956.html
[2012-07-26 12:46:31 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempzJ1956.html
[2012-07-23 12:17:54 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempqj2928.html
[2012-07-23 12:17:54 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempBl2928.html
[2012-07-22 14:11:04 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempiJ2216.html
[2012-07-22 14:11:03 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempLL2216.html
[2012-07-20 13:36:55 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempRQ4008.html
[2012-07-20 13:36:55 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempMy4008.html
[2012-07-19 08:39:50 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempkx3976.html
[2012-07-19 08:39:50 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempXM3976.html
[2012-07-17 08:50:54 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempUz3772.html
[2012-07-17 08:50:54 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempOn3772.html
[2012-07-16 09:20:28 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempUT4008.html
[2012-07-16 09:20:28 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempAy4008.html
[2012-07-15 14:58:38 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempDb3932.html
[2012-07-15 14:58:38 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempDR3932.html
[2012-07-13 20:14:58 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempyE1188.html
[2012-07-13 20:14:58 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempII1188.html
[2012-07-13 09:44:00 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Temptc4080.html
[2012-07-13 09:44:00 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempiS4080.html
[2012-07-13 09:38:06 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempEb2860.html
[2012-07-13 09:38:06 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempwq2860.html
[2012-07-13 09:18:49 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempeq4052.html
[2012-07-13 09:18:49 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempPw4052.html
[2012-07-13 08:52:29 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempsN2612.html
[2012-07-13 08:52:29 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempeC2612.html
[2012-07-11 10:36:57 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempHX2228.html
[2012-07-11 10:36:57 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempKc2228.html
[2012-07-11 09:58:24 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempiO3600.html
[2012-07-11 09:58:24 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempRE3600.html
[2012-07-10 18:26:23 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempkX3496.html
[2012-07-10 18:26:23 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempiP3496.html
[2012-07-10 13:02:01 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempxM3604.html
[2012-07-10 13:02:01 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempLD3604.html
[2012-07-09 18:09:46 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempqh3956.html
[2012-07-09 18:09:46 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempFK3956.html
[2012-07-06 14:22:18 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempwm3864.html
[2012-07-06 14:22:18 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempKw3864.html
[2012-07-05 11:48:47 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempmB3920.html
[2012-07-05 11:48:47 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TemphM3920.html
[2012-07-04 11:54:53 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempmOa592.html
[2012-07-04 11:54:53 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TemptfO592.html
[2012-07-04 09:27:55 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempiT2656.html
[2012-07-04 09:27:55 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TemplV2656.html
[2012-07-04 08:30:38 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempBB3564.html
[2012-07-04 08:30:38 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempkN3564.html
[2012-07-03 11:11:01 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempRp3608.html
[2012-07-03 11:11:01 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempth3608.html
[2012-07-02 16:56:36 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TemprQ1096.html
[2012-07-02 16:56:36 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempLk1096.html
[2012-06-29 12:03:33 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempec3788.html
[2012-06-29 12:03:33 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempum3788.html
[2012-06-28 09:01:09 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempKB2608.html
[2012-06-28 09:01:09 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TemphK2608.html
[2012-06-26 10:09:30 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempbV3312.html
[2012-06-26 10:09:30 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempTU3312.html
[2012-06-25 19:44:50 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempoh3192.html
[2012-06-25 19:44:50 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempRl3192.html
[2012-06-25 13:44:49 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempKp3232.html
[2012-06-25 13:44:49 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempbf3232.html
[2012-06-25 06:35:57 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempAs3628.html
[2012-06-25 06:35:57 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempiQ3628.html
[2012-06-22 11:10:29 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempYy3432.html
[2012-06-22 11:10:29 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempmt3432.html
[2012-06-20 09:27:59 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempgR3152.html
[2012-06-20 09:27:58 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempRi3152.html
[2012-06-19 14:06:02 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempNy3760.html
[2012-06-19 14:06:02 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempXt3760.html
[2012-06-19 09:54:46 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TemplJ3148.html
[2012-06-19 09:54:46 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempDu3148.html
[2012-06-18 15:41:06 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempZm3516.html
[2012-06-18 15:41:06 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempXd3516.html
[2012-06-18 08:06:15 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempxn4004.html
[2012-06-18 08:06:15 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempAM4004.html
[2012-06-17 14:44:31 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempCy3488.html
[2012-06-17 14:44:31 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempxb3488.html
[2012-06-15 11:54:15 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempkR3348.html
[2012-06-15 11:54:15 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempYA3348.html
[2012-06-14 09:23:17 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempWS1736.html
[2012-06-14 09:23:17 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempQN1736.html
[2012-06-13 09:45:39 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempfF3484.html
[2012-06-13 09:45:39 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempZR3484.html
[2012-06-13 08:27:21 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempiz2348.html
[2012-06-13 08:27:21 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempHC2348.html
[2012-06-12 08:11:43 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempsK1896.html
[2012-06-12 08:11:43 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempEQ1896.html
[2012-06-11 09:40:55 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempvT3556.html
[2012-06-11 09:40:55 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempUF3556.html
[2012-06-10 13:17:10 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempfv2140.html
[2012-06-10 13:17:10 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempqr2140.html
[2012-06-10 12:53:27 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempTX3572.html
[2012-06-10 12:53:27 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempCE3572.html
[2012-06-09 07:42:47 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Temprq1532.html
[2012-06-09 07:42:47 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempvy1532.html
[2012-06-08 18:49:34 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TemphF3936.html
[2012-06-08 18:49:34 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempmO3936.html
[2012-06-08 12:38:57 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempYw1272.html
[2012-06-08 12:38:57 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempum1272.html
[2012-06-08 08:07:30 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TemplV3548.html
[2012-06-08 08:07:30 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempyv3548.html
[2012-06-06 11:18:44 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempwQ3700.html
[2012-06-06 11:18:44 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempCl3700.html
[2012-06-05 15:47:48 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempdz3260.html
[2012-06-05 15:47:48 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempqq3260.html
[2012-06-05 10:06:10 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TemprZ3240.html
[2012-06-05 10:06:10 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempTe3240.html
[2012-06-04 12:36:45 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempFx3664.html
[2012-06-04 12:36:45 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TemptP3664.html
[2012-06-03 11:43:27 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempDG2976.html
[2012-06-03 11:43:27 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempsf2976.html
[2012-06-01 08:44:32 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempqp3464.html
[2012-06-01 08:44:32 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempui3464.html
[2012-05-31 09:55:48 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempZa3572.html
[2012-05-31 09:55:48 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempuH3572.html
[2012-05-30 09:14:33 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempKT3468.html
[2012-05-30 09:14:33 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempgs3468.html
[2012-05-29 13:09:12 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempHF2512.html
[2012-05-29 13:09:12 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempty2512.html
[2012-05-29 12:11:49 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempRo2096.html
[2012-05-29 12:11:49 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempGo2096.html
[2012-05-29 10:27:00 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempXl2832.html
[2012-05-29 10:27:00 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempxC2832.html
[2012-05-29 09:04:09 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempze1272.html
[2012-05-29 09:04:09 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempUH1272.html
[2012-05-28 17:30:14 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Temprp3408.html
[2012-05-28 17:30:14 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TemphR3408.html
[2012-05-28 14:26:49 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempOw3512.html
[2012-05-28 14:26:49 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempig3512.html
[2012-05-26 11:13:05 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempIy3292.html
[2012-05-26 11:13:05 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempsK3292.html
[2012-05-25 22:00:25 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempDb3188.html
[2012-05-25 22:00:25 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempvV3188.html
[2012-05-24 11:22:12 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempqN3252.html
[2012-05-24 11:22:12 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempsE3252.html
[2012-05-22 09:09:28 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempIf1964.html
[2012-05-22 09:09:28 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempZm1964.html
[2012-05-21 18:39:47 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempRi3628.html
[2012-05-21 18:39:47 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempPv3628.html
[2012-05-20 17:38:45 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempPi2792.html
[2012-05-20 17:38:45 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempEj2792.html
[2012-05-19 09:30:47 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempVG3132.html
[2012-05-19 09:30:47 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempBq3132.html
[2012-05-16 15:00:11 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempdi3260.html
[2012-05-16 15:00:11 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempLq3260.html
[2012-05-15 19:15:41 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempJP2524.html
[2012-05-15 19:15:41 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempyg2524.html
[2012-05-13 19:28:12 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempib3892.html
[2012-05-13 19:28:12 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempnM3892.html
[2012-05-13 18:17:52 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempHw3700.html
[2012-05-13 18:17:52 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempyG3700.html
[2012-05-10 10:34:49 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempLd2508.html
[2012-05-10 10:34:49 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempom2508.html
[2012-05-09 14:32:38 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempsX3668.html
[2012-05-09 14:32:38 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempxm3668.html
[2012-05-09 13:30:43 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TemppC4088.html
[2012-05-09 13:30:43 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempwt4088.html
[2012-05-09 13:16:30 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempMR1024.html
[2012-05-09 13:16:30 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempeE1024.html
[2012-05-08 20:22:49 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempGs2820.html
[2012-05-08 20:22:49 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempZw2820.html
[2012-02-09 19:36:44 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempLNt784.html
[2012-02-09 19:36:44 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempRDV784.html
[2011-08-30 10:04:56 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempocV584.html
[2011-08-30 10:04:55 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempwvA584.html
[2011-06-14 15:03:45 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempPaa832.html
[2011-06-14 15:03:45 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempUTs832.html
[2011-06-03 11:28:43 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempRGs908.html
[2011-06-03 11:28:43 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempqri908.html
[2011-04-27 15:22:17 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempfat784.html
[2011-04-27 15:22:17 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempfJz784.html
[2011-04-03 11:11:00 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempfIu656.html
[2011-04-03 11:11:00 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempGDz656.html
[2011-02-09 17:30:44 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempWBG796.html
[2011-02-09 17:30:44 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempagx796.html
[2011-02-09 16:43:57 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempgRM972.html
[2011-02-09 16:43:57 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempRyw972.html
[2011-02-01 11:14:14 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempajR212.html
[2011-02-01 11:14:14 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempCKU212.html
[2011-01-07 20:41:30 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempwbM760.html
[2011-01-07 20:41:30 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempbeb760.html
[2010-12-05 16:51:20 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\Tempytg984.html
[2010-12-05 16:51:20 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempFJm984.html
[2010-11-26 19:44:08 | 000,002,432 | ---- | C] () -- C:\Users\beata\AppData\Local\TempimA332.html
[2010-11-26 19:44:08 | 000,002,089 | ---- | C] () -- C:\Users\beata\AppData\Local\TempusO332.html
[2010-06-06 14:06:37 | 000,008,928 | ---- | C] () -- C:\Users\beata\AppData\Local\pl.ini
[2009-11-02 22:18:29 | 000,004,096 | -H-- | C] () -- C:\Users\beata\AppData\Local\keyfile3.drm
[2008-12-23 16:09:40 | 000,023,405 | ---- | C] () -- C:\Users\beata\D[mp3.teledyski.info].mp3
[2008-06-20 17:50:03 | 011,575,195 | ---- | C] () -- C:\Users\beata\Widget.zip
[2008-06-12 21:32:22 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2008-06-11 22:25:26 | 000,020,480 | ---- | C] () -- C:\Users\beata\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2006-11-02 14:51:16 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012-06-08 19:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-04-11 08:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-04-11 08:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-01-29 23:42:15 | 000,000,000 | ---D | M] -- C:\Users\beata\AppData\Roaming\Codeton
[2008-06-13 20:08:07 | 000,000,000 | ---D | M] -- C:\Users\beata\AppData\Roaming\eSkiMoS R2
[2009-12-07 21:32:13 | 000,000,000 | ---D | M] -- C:\Users\beata\AppData\Roaming\Foxit
[2012-06-03 12:25:50 | 000,000,000 | ---D | M] -- C:\Users\beata\AppData\Roaming\Foxit Software
[2008-06-11 19:42:59 | 000,000,000 | ---D | M] -- C:\Users\beata\AppData\Roaming\Gadu-Gadu
[2012-03-22 11:30:46 | 000,000,000 | ---D | M] -- C:\Users\beata\AppData\Roaming\Gadu-Gadu 10
[2012-12-29 15:00:11 | 000,000,000 | ---D | M] -- C:\Users\beata\AppData\Roaming\iPlus
[2010-04-29 15:01:34 | 000,000,000 | ---D | M] -- C:\Users\beata\AppData\Roaming\Nowe Gadu-Gadu
[2010-11-18 23:52:27 | 000,000,000 | ---D | M] -- C:\Users\beata\AppData\Roaming\OpenFM
[2010-04-16 16:37:32 | 000,000,000 | ---D | M] -- C:\Users\beata\AppData\Roaming\OpenOffice.org
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 64 bytes -> C:\Users\beata\Desktop\zejście 2.avi:TOC.WMV

< End of report >