OTL logfile created on: 4/29/2011 5:52:28 PM - Run 4
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Users\Stachu\Desktop
 An unknown product Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Stany Zjednoczone | Language: ENU | Date Format: M/d/yyyy
 
3.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 47.00% Memory free
6.00 Gb Paging File | 4.00 Gb Available in Paging File | 70.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 80.01 Gb Total Space | 12.28 Gb Free Space | 15.35% Space Free | Partition Type: NTFS
Drive D: | 152.87 Gb Total Space | 31.47 Gb Free Space | 20.58% Space Free | Partition Type: NTFS
Drive E: | 3.55 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: STACHU-PC | User Name: Stachu | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011/04/29 17:51:42 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Stachu\Desktop\OTL.exe
PRC - [2011/04/29 17:41:07 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011/04/29 17:40:45 | 012,594,352 | ---- | M] (Mozilla Messaging) -- C:\Program Files\Mozilla Thunderbird\thunderbird.exe
PRC - [2011/04/29 17:09:54 | 009,034,584 | ---- | M] (Microsoft Corporation) -- C:\Users\Stachu\Desktop\vcredist_x86.exe
PRC - [2011/04/18 19:25:12 | 003,460,784 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2011/04/18 19:25:10 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2011/03/27 20:08:30 | 000,399,736 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe
PRC - [2011/03/23 20:32:24 | 000,619,288 | ---- | M] (http://tortoisesvn.net) -- C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
PRC - [2011/03/15 16:18:04 | 000,066,824 | ---- | M] (Raxco Software, Inc.) -- C:\Program Files\Raxco\PerfectDisk\PDAgentS1.exe
PRC - [2011/03/15 16:18:00 | 001,570,056 | ---- | M] (Raxco Software, Inc.) -- C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
PRC - [2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2011/02/16 00:47:12 | 012,067,432 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe
PRC - [2011/01/17 21:02:06 | 000,220,824 | ---- | M] () -- C:\Program Files\Macrium\Reflect\ReflectService.exe
PRC - [2011/01/07 19:57:38 | 000,078,152 | ---- | M] (Microsoft Corporation) -- d:\5bfdb742495c0fb9fb2522f0\Setup.exe
PRC - [2010/11/20 14:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010/11/20 14:17:00 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmd.exe
PRC - [2010/11/20 14:17:00 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2009/11/17 12:07:46 | 001,528,624 | ---- | M] (Cisco Systems, Inc.) -- C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
PRC - [2008/10/28 23:01:22 | 000,326,192 | ---- | M] (VMware, Inc.) -- C:\Windows\System32\vmnetdhcp.exe
PRC - [2008/10/28 23:00:50 | 000,064,048 | ---- | M] (VMware, Inc.) -- C:\Program Files\VMware\VMware Player\hqtray.exe
PRC - [2008/10/28 23:00:40 | 000,113,200 | ---- | M] (VMware, Inc.) -- C:\Program Files\VMware\VMware Player\vmware-authd.exe
PRC - [2008/10/28 23:00:08 | 000,399,920 | ---- | M] (VMware, Inc.) -- C:\Windows\System32\vmnat.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011/04/29 17:51:42 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Stachu\Desktop\OTL.exe
MOD - [2011/04/18 19:25:09 | 000,199,792 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\snxhk.dll
MOD - [2010/11/20 13:55:09 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Auto | Stopped] --  -- (Nero BackItUp Scheduler 4.0)
SRV - File not found [Auto | Stopped] --  -- (aswUpdSv)
SRV - [2011/04/18 19:25:10 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011/03/15 16:18:00 | 001,570,056 | ---- | M] (Raxco Software, Inc.) [Auto | Running] -- C:\Program Files\Raxco\PerfectDisk\PDAgent.exe -- (PDAgent)
SRV - [2011/03/15 16:17:46 | 001,475,848 | ---- | M] (Raxco Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Raxco\PerfectDisk\PDEngine.exe -- (PDEngine)
SRV - [2011/01/17 21:02:06 | 000,220,824 | ---- | M] () [Auto | Running] -- C:\Program Files\Macrium\Reflect\ReflectService.exe -- (ReflectService)
SRV - [2010/08/30 23:38:47 | 000,867,080 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/06/25 19:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
SRV - [2010/02/25 14:06:34 | 000,148,848 | ---- | M] (TOSHIBA CORPORATION) [On_Demand | Stopped] -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2009/11/17 12:07:46 | 001,528,624 | ---- | M] (Cisco Systems, Inc.) [Auto | Running] -- C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe -- (CVPND)
SRV - [2009/07/14 03:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009/03/27 18:10:56 | 000,014,336 | ---- | M] (LSI Corporation) [On_Demand | Stopped] -- C:\Program Files\LSI SoftModem\agrsmsvc.exe -- (AgereModemAudio)
SRV - [2008/10/28 23:01:22 | 000,326,192 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\System32\vmnetdhcp.exe -- (VMnetDHCP)
SRV - [2008/10/28 23:00:40 | 000,113,200 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files\VMware\VMware Player\vmware-authd.exe -- (VMAuthdService)
SRV - [2008/10/28 23:00:08 | 000,399,920 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\System32\vmnat.exe -- (VMware NAT Service)
SRV - [2008/10/02 18:25:42 | 000,191,024 | ---- | M] (VMware, Inc.) [On_Demand | Stopped] -- C:\Program Files\VMware\VMware Player\vmware-ufad.exe -- (ufad-ws60)
SRV - [2008/07/29 14:10:46 | 003,201,024 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x86\msvsmon.exe -- (msvsmon90)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011/04/18 19:17:46 | 000,441,176 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011/04/18 19:17:34 | 000,307,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011/04/18 19:16:18 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011/04/18 19:13:21 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011/04/18 19:13:09 | 000,053,592 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2011/04/18 19:12:58 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011/03/25 20:27:24 | 000,167,920 | ---- | M] (SpyShelter) [Kernel | System | Running] -- C:\Program Files\SpyShelter Personal Free\SpyShelter.sys -- (SpyShelter)
DRV - [2011/02/17 19:06:10 | 000,111,152 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV - [2011/01/18 18:38:38 | 000,054,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\VSPerfDrv100.sys -- (VSPerfDrv100)
DRV - [2011/01/17 21:02:36 | 000,016,024 | ---- | M] (Macrium Software) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\pssnap.sys -- (pssnap)
DRV - [2010/12/07 15:12:24 | 000,025,088 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgandmodem.sys -- (ANDModem)
DRV - [2010/12/07 15:12:24 | 000,020,096 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgandgps.sys -- (AndGps)
DRV - [2010/12/07 15:12:22 | 000,020,736 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lganddiag.sys -- (AndDiag)
DRV - [2010/12/07 15:12:22 | 000,014,336 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgandbus.sys -- (Andbus)
DRV - [2010/11/26 15:07:10 | 000,025,704 | ---- | M] (Wondershare) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WsAudio_DeviceS(1).sys -- (WsAudio_DeviceS(1)) WsAudio_DeviceS(1)
DRV - [2010/11/20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/11/20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/09/02 18:49:06 | 000,013,312 | ---- | M] (June Fabrics Technology Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\pneteth.sys -- (pneteth)
DRV - [2010/08/02 17:19:22 | 000,025,728 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgandadb.sys -- (androidusb)
DRV - [2010/06/25 19:07:14 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\npf.sys -- (NPF)
DRV - [2010/04/07 06:22:06 | 000,135,184 | ---- | M] (Raxco Software, Inc.) [File_System | Auto | Running] -- C:\Windows\System32\drivers\DefragFs.sys -- (DefragFS)
DRV - [2010/03/31 03:13:28 | 000,379,904 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTL8187B.sys -- (RTL8187B)
DRV - [2010/03/15 09:44:46 | 000,127,488 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcHdmi.sys -- (IntcHdmiAddService) Intel(R)
DRV - [2010/02/03 12:04:00 | 000,050,808 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfusb.sys -- (Tosrfusb)
DRV - [2010/01/29 12:40:04 | 000,082,320 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive)
DRV - [2010/01/23 20:11:21 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009/11/17 12:07:06 | 000,308,859 | ---- | M] (Cisco Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\CVPNDRVA.sys -- (CVPNDRVA)
DRV - [2009/09/29 09:11:22 | 000,012,160 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lgbtport.sys -- (LgBttPort)
DRV - [2009/09/29 09:11:20 | 000,012,928 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lgvmodem.sys -- (LGVMODEM)
DRV - [2009/09/29 09:11:20 | 000,010,496 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lgbtbus.sys -- (lgbusenum)
DRV - [2009/09/24 18:54:00 | 000,169,320 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfbd.sys -- (tosrfbd)
DRV - [2009/09/23 10:41:58 | 000,026,176 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2009/09/07 18:00:28 | 000,048,128 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2009/08/05 13:55:00 | 000,061,168 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TosRfSnd.sys -- (TosRfSnd)
DRV - [2009/07/28 21:01:00 | 000,069,480 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2009/07/24 12:31:00 | 000,021,608 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfnds.sys -- (tosrfnds)
DRV - [2009/07/21 14:18:58 | 001,161,760 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2009/07/13 23:13:00 | 000,015,216 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfec.sys -- (tosrfec)
DRV - [2009/07/02 12:48:30 | 000,017,968 | ---- | M] (Chicony Electronics Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\UVCFTR_S.SYS -- (UVCFTR)
DRV - [2009/07/02 12:48:26 | 000,048,176 | ---- | M] (Chicony Electronics Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\cec_uvc.sys -- (cecnuvc)
DRV - [2009/06/25 17:25:58 | 000,038,400 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2009/06/25 17:10:48 | 000,044,544 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2009/06/19 10:57:00 | 000,079,872 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Tosrfhid.sys -- (Tosrfhid)
DRV - [2009/06/19 10:56:00 | 000,042,472 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV - [2009/06/17 12:59:00 | 000,046,984 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosporte.sys -- (tosporte)
DRV - [2009/05/29 20:13:38 | 000,031,952 | ---- | M] (Sun Microsystems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VBoxUSB.sys -- (VBoxUSB)
DRV - [2009/03/30 04:09:28 | 000,239,336 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\RsFx0103.sys -- (RsFx0103)
DRV - [2009/02/28 10:54:06 | 000,003,567 | ---- | M] (Beyond Logic http://www.beyondlogic.org) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PortTalk.sys -- (PortTalk)
DRV - [2008/11/16 18:39:44 | 000,131,984 | ---- | M] (Deterministic Networks, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dne2000.sys -- (DNE)
DRV - [2008/10/28 23:01:34 | 000,054,960 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\vmci.sys -- (vmci)
DRV - [2008/10/28 23:01:32 | 000,026,288 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\vmnetuserif.sys -- (VMnetuserif)
DRV - [2008/10/28 23:01:32 | 000,023,216 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VMkbd.sys -- (vmkbd)
DRV - [2008/10/28 23:01:30 | 000,857,392 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\vmx86.sys -- (vmx86)
DRV - [2008/10/28 23:01:28 | 000,032,304 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\hcmon.sys -- (hcmon)
DRV - [2008/10/28 17:03:28 | 000,031,280 | R--- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\vmnetbridge.sys -- (VMnetBridge)
DRV - [2008/10/28 17:03:28 | 000,031,280 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmusb.sys -- (vmusb)
DRV - [2008/10/28 17:03:28 | 000,016,560 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vmnetadapter.sys -- (VMnetAdapter)
DRV - [2008/10/02 18:24:48 | 000,022,448 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Program Files\VMware\VMware Player\vstor2-ws60.sys -- (vstor2-ws60)
DRV - [2008/09/11 09:18:14 | 000,028,224 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PCAMp50.sys -- (PCAMp50)
DRV - [2008/09/11 09:18:14 | 000,027,072 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PCASp50.sys -- (PCASp50)
DRV - [2008/07/24 02:00:42 | 000,046,592 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\risdptsk.sys -- (risdptsk)
DRV - [2008/01/19 01:43:20 | 000,131,000 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\WimFltr.sys -- (WimFltr)
DRV - [2007/11/09 05:00:52 | 000,023,640 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\TVALZ_O.SYS -- (TVALZ)
DRV - [2007/01/28 03:08:40 | 000,005,632 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2007/01/18 20:28:02 | 000,005,275 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CVirtA.sys -- (CVirtA)
DRV - [2005/09/23 22:18:32 | 000,171,520 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\MarvinBus.sys -- (MarvinBus)
DRV - [2005/08/17 07:46:26 | 000,093,872 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2005/08/17 07:46:20 | 000,008,272 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2005/08/17 07:45:00 | 000,058,352 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-2074169377-1294808753-2415027573-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-2074169377-1294808753-2415027573-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = B4 12 EE D8 DE 24 CA 01  [binary data]
IE - HKU\S-1-5-21-2074169377-1294808753-2415027573-1001\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2074169377-1294808753-2415027573-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{00ADD29A-66F4-4f22-BCC0-4C1D29DA647B}: C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\{00ADD29A-66F4-4f22-BCC0-4C1D29DA647B}\ [2011/02/04 12:40:23 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011/04/19 18:14:05 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/04/29 17:41:08 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/03/28 01:05:01 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.10\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011/04/29 17:40:45 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.10\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2011/03/23 22:33:44 | 000,000,000 | ---D | M]
 
[2009/12/20 14:17:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Stachu\AppData\Roaming\Mozilla\Extensions
[2009/12/20 14:17:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Stachu\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011/04/08 00:03:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Stachu\AppData\Roaming\Mozilla\Firefox\Profiles\xl962nbc.default\extensions
[2011/01/03 04:22:58 | 000,000,000 | ---D | M] (Dr.Web anti-virus link checker) -- C:\Users\Stachu\AppData\Roaming\Mozilla\Firefox\Profiles\xl962nbc.default\extensions\{6614d11d-d21d-b211-ae23-815234e1ebb5}
[2010/12/16 01:30:36 | 000,000,000 | ---D | M] ("PajacykXPI") -- C:\Users\Stachu\AppData\Roaming\Mozilla\Firefox\Profiles\xl962nbc.default\extensions\{6E21139C-F48B-11DA-B59C-B582C6649067}
[2011/03/30 07:02:10 | 000,000,000 | ---D | M] (HTTPS-Everywhere) -- C:\Users\Stachu\AppData\Roaming\Mozilla\Firefox\Profiles\xl962nbc.default\extensions\https-everywhere@eff.org
[2010/04/27 10:28:36 | 000,000,000 | ---D | M] (YouTube to MP3) -- C:\Users\Stachu\AppData\Roaming\Mozilla\Firefox\Profiles\xl962nbc.default\extensions\youtube2mp3@mondayx.de
[2011/04/27 01:44:30 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/04/27 01:44:30 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2011/02/20 20:51:37 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/04/29 17:41:07 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browsercomps.dll
[2004/07/02 15:51:00 | 000,327,904 | ---- | M] (Macromedia, Inc.) -- C:\Program Files\Mozilla Firefox\components\np32asw.dll
[2004/07/02 15:51:00 | 000,327,904 | ---- | M] (Macromedia, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\np32asw.dll
[2011/02/20 20:51:23 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2011/03/22 20:38:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
[2011/03/22 20:14:57 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2011/03/22 20:14:57 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2011/03/22 20:14:57 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2011/03/22 20:14:57 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2011/03/22 20:14:57 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2011/03/22 20:14:57 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2010/03/09 22:54:52 | 000,000,854 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 activate.adobe.com
O2 - BHO: (HistoryTriggerBHO Class) - {21A88CB9-84D2-4020-A2D1-B25A21034884} - C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll (LG Electronics)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Microsoft Web Test Recorder 10.0 Helper) - {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - C:\Program Files\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O3 - HKU\S-1-5-21-2074169377-1294808753-2415027573-1001\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [VMware hqtray] C:\Program Files\VMware\VMware Player\hqtray.exe (VMware, Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar]  File not found
O4 - HKU\S-1-5-20..\Run: [Sidebar]  File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Stachu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled [2011/04/08 09:37:02 | 000,000,000 | -H-D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: LG Air Sync (R-Click) - Save as Mobile Image - C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\IEContextMenu.dll (Mobile Leader Co.,Ltd.)
O8 - Extra context menu item: LG Air Sync (R-Click) - Save as Mobile Memo - C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\IEContextMenu.dll (Mobile Leader Co.,Ltd.)
O8 - Extra context menu item: LG Air Sync (R-Click) - Save as Mobile Text file - C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\IEContextMenu.dll (Mobile Leader Co.,Ltd.)
O8 - Extra context menu item: LG Air Sync (R-Click) - Set as Mobile Wallpaper - C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\IEContextMenu.dll (Mobile Leader Co.,Ltd.)
O8 - Extra context menu item: LG Air Sync Option - C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\IEContextMenu.dll (Mobile Leader Co.,Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 62.179.1.62
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O27 - HKLM IFEO\taskmgr.exe: Debugger - "D:\PROGRAMY\PORTABLE ALBO BEZ INSTALACJI\PROCESSEXPLORER\PROCEXP.EXE" (Sysinternals - www.sysinternals.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2009/02/26 22:01:39 | 000,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{177a3906-f3ea-11de-ae3c-005056c00008}\Shell - "" = AutoRun
O33 - MountPoints2\{177a390b-f3ea-11de-ae3c-005056c00008}\Shell - "" = AutoRun
O33 - MountPoints2\{23bbe810-96ce-11de-8b05-00037a96b52c}\Shell - "" = AutoRun
O33 - MountPoints2\{2ef0636b-31e2-11df-947a-fba237f589a0}\Shell - "" = AutoRun
O33 - MountPoints2\{2ef06372-31e2-11df-947a-fba237f589a0}\Shell - "" = AutoRun
O33 - MountPoints2\{726a0e83-cace-11de-b87e-005056c00008}\Shell - "" = AutoRun
O33 - MountPoints2\{7810580c-dddf-11de-8bce-005056c00008}\Shell - "" = AutoRun
O33 - MountPoints2\{78105818-dddf-11de-8bce-005056c00008}\Shell - "" = AutoRun
O33 - MountPoints2\{7943f75b-c304-11de-b20d-001e33816a71}\Shell - "" = AutoRun
O33 - MountPoints2\{a7210abe-2312-11df-ab66-b08f43b664ac}\Shell - "" = AutoRun
O33 - MountPoints2\{a7210ac3-2312-11df-ab66-b08f43b664ac}\Shell - "" = AutoRun
O33 - MountPoints2\{ad127826-17b5-11df-8b57-00037a96b52c}\Shell - "" = AutoRun
O33 - MountPoints2\{c58b4f65-733e-11df-98d6-001e33816a71}\Shell - "" = AutoRun
O33 - MountPoints2\{fa1c5bc3-5881-11df-a17d-9eb0f8e87aa3}\Shell - "" = AutoRun
O34 - HKLM BootExecute: (PDBoot.exe) - C:\Windows\System32\PDBoot.exe (Raxco Software, Inc.)
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011/04/29 17:51:33 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\Stachu\Desktop\OTL.exe
[2011/04/29 16:00:00 | 001,055,082 | ---- | C] (www.froggie.sk) -- C:\Users\Stachu\Desktop\Vistalizator.exe
[2011/04/28 15:51:09 | 047,862,552 | ---- | C] (Microsoft Corporation) -- C:\Users\Stachu\Desktop\windows6.1-kb972813-x86-pl-pl_9199018040692bc732a590e9b092a18120d326b2.exe
[2011/04/28 12:06:51 | 009,034,584 | ---- | C] (Microsoft Corporation) -- C:\Users\Stachu\Desktop\vcredist_x86.exe
[2011/04/27 23:44:40 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe
[2011/04/27 23:44:33 | 001,699,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\esent.dll
[2011/04/27 23:44:33 | 000,148,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\storport.sys
[2011/04/27 23:44:32 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fsutil.exe
[2011/04/27 23:44:13 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2011/04/27 23:44:11 | 000,870,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2011/04/27 03:17:49 | 000,000,000 | ---D | C] -- C:\Users\Stachu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
[2011/04/27 03:17:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
[2011/04/27 03:17:42 | 000,000,000 | ---D | C] -- C:\Program Files\Notepad++
[2011/04/27 01:44:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype Extras
[2011/04/27 01:28:11 | 000,000,000 | ---D | C] -- C:\xampp
[2011/04/27 01:10:53 | 000,000,000 | -HSD | C] -- C:\Users\Stachu\AppData\Roaming\.#
[2011/04/27 01:10:50 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SWF Studio
[2011/04/27 01:08:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Page Builder V2.2
[2011/04/27 01:07:08 | 000,000,000 | ---D | C] -- C:\Program Files\CellSoftNet
[2011/04/27 00:56:14 | 000,000,000 | ---D | C] -- C:\Users\Stachu\Desktop\PageBuilder
[2011/04/27 00:55:29 | 000,000,000 | ---D | C] -- C:\Users\Stachu\AppData\Roaming\IObit
[2011/04/27 00:55:27 | 000,000,000 | ---D | C] -- C:\Program Files\IObit
[2011/04/19 22:02:17 | 000,000,000 | ---D | C] -- C:\Users\Stachu\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
[2011/04/19 22:02:11 | 000,000,000 | ---D | C] -- C:\Program Files\e-Deklaracje
[2011/04/18 20:14:48 | 003,803,752 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll
[2011/04/18 20:14:48 | 002,137,192 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll
[2011/04/18 20:14:48 | 000,069,224 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInst.dll
[2011/04/18 20:14:47 | 000,783,360 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RCoRes.dat
[2011/04/18 20:14:45 | 001,563,712 | ---- | C] (Fortemedia Corporation) -- C:\Windows\System32\FMAPO.dll
[2011/04/18 20:14:41 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp
[2011/04/18 13:51:28 | 000,016,560 | ---- | C] (VMware, Inc.) -- C:\Windows\System32\drivers\vmnetadapter.sys
[2011/04/18 13:51:23 | 000,326,192 | ---- | C] (VMware, Inc.) -- C:\Windows\System32\vmnetdhcp.exe
[2011/04/18 13:51:19 | 000,399,920 | ---- | C] (VMware, Inc.) -- C:\Windows\System32\vmnat.exe
[2011/04/18 13:51:19 | 000,026,288 | ---- | C] (VMware, Inc.) -- C:\Windows\System32\drivers\vmnetuserif.sys
[2011/04/18 13:51:16 | 000,050,736 | R--- | C] (VMware, Inc.) -- C:\Windows\System32\vmnetbridge.dll
[2011/04/18 13:51:16 | 000,031,280 | R--- | C] (VMware, Inc.) -- C:\Windows\System32\drivers\vmnetbridge.sys
[2011/04/18 13:51:16 | 000,018,736 | R--- | C] (VMware, Inc.) -- C:\Windows\System32\drivers\vmnet.sys
[2011/04/18 13:51:12 | 000,723,504 | ---- | C] (VMware, Inc.) -- C:\Windows\System32\vnetlib.dll
[2011/04/18 13:50:58 | 000,023,216 | ---- | C] (VMware, Inc.) -- C:\Windows\System32\drivers\VMkbd.sys
[2011/04/18 13:50:56 | 000,031,280 | ---- | C] (VMware, Inc.) -- C:\Windows\System32\drivers\vmusb.sys
[2011/04/18 13:50:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
[2011/04/18 13:50:34 | 000,000,000 | ---D | C] -- C:\Program Files\VMware
[2011/04/17 19:41:21 | 000,000,000 | ---D | C] -- C:\Users\Stachu\AppData\Roaming\kompozer.net
[2011/04/17 19:41:21 | 000,000,000 | ---D | C] -- C:\Users\Stachu\AppData\Local\kompozer.net
[2011/04/17 19:41:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KompoZer
[2011/04/17 19:41:13 | 000,000,000 | ---D | C] -- C:\Program Files\KompoZer
[2011/04/17 18:55:48 | 000,000,000 | ---D | C] -- C:\Users\Stachu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HTML Help Workshop
[2011/04/17 18:55:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTML Help Workshop
[2011/04/13 09:29:17 | 000,000,000 | ---D | C] -- C:\Users\Stachu\AppData\Local\xboot
[2011/04/13 08:42:32 | 002,333,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011/04/13 08:42:30 | 000,294,912 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2011/04/13 08:42:30 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2011/04/13 08:42:30 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2011/04/13 08:42:29 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2011/04/13 08:42:16 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2011/04/13 08:42:15 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2011/04/12 16:58:33 | 000,000,000 | ---D | C] -- C:\Users\Stachu\Desktop\RemoteDroidServer_v1.5
[2011/04/09 02:06:20 | 000,000,000 | ---D | C] -- C:\Users\Stachu\Desktop\BazaWxml
[2011/04/08 10:27:36 | 000,000,000 | ---D | C] -- C:\Users\Stachu\AppData\Roaming\ILOG
[2011/04/08 09:37:02 | 000,000,000 | -H-D | C] -- C:\Users\Stachu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled
[2011/04/07 12:35:38 | 000,000,000 | ---D | C] -- C:\ProgramData\IBM
[2011/04/07 12:35:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IBM WebSphere ILOG Rule Solutions for Office
[2011/04/07 12:24:11 | 000,000,000 | ---D | C] -- C:\Users\Stachu\.eclipse
[2011/04/07 12:05:21 | 000,000,000 | ---D | C] -- C:\Users\Stachu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IBM WebSphere ILOG JRules V7.1.1
[2011/04/07 11:59:27 | 000,000,000 | -H-D | C] -- C:\Program Files\Zero G Registry
[2011/04/07 11:59:27 | 000,000,000 | ---D | C] -- C:\Program Files\IBM
[2011/04/07 11:56:31 | 000,000,000 | -H-D | C] -- C:\Users\Stachu\InstallAnywhere
[2011/04/05 23:29:56 | 000,000,000 | ---D | C] -- C:\Users\Stachu\AppData\Local\DOSBox
[2011/04/05 23:29:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DOSBox-0.74
[2011/04/05 23:29:48 | 000,000,000 | ---D | C] -- C:\Program Files\DOSBox-0.74
[2011/04/05 23:07:39 | 000,000,000 | ---D | C] -- C:\DUKE3D
[2011/04/05 17:42:01 | 000,000,000 | ---D | C] -- C:\Users\Stachu\AppData\Roaming\PandoraRecovery
[2011/04/05 17:41:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pandora Recovery
[2011/04/05 17:41:56 | 000,000,000 | ---D | C] -- C:\Program Files\Pandora Recovery
[2011/03/31 17:44:05 | 000,000,000 | R--D | C] -- C:\Users\Stachu\Dropbox
[2011/03/31 17:42:03 | 000,000,000 | ---D | C] -- C:\Users\Stachu\Desktop\abbs-pwd-gen
[2011/03/31 17:39:25 | 000,000,000 | ---D | C] -- C:\Users\Stachu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
[2011/03/31 17:38:56 | 000,000,000 | ---D | C] -- C:\Users\Stachu\AppData\Roaming\Dropbox
[2011/03/31 11:15:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Systems VPN Client
[2011/03/31 11:15:38 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Deterministic Networks
[2011/03/31 11:15:36 | 000,000,000 | ---D | C] -- C:\Program Files\Cisco Systems
[2011/03/31 11:10:33 | 000,000,000 | ---D | C] -- C:\Users\Stachu\Desktop\LOCALCAP
[2011/02/11 18:40:40 | 000,004,096 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2010/06/08 23:19:02 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\Stachu\AppData\Roaming\pcouffin.sys
[2009/10/27 09:38:20 | 000,005,632 | ---- | C] ( ) -- C:\Windows\System32\drivers\kbfiltr.sys
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011/04/29 17:51:42 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Stachu\Desktop\OTL.exe
[2011/04/29 17:41:19 | 000,002,006 | ---- | M] () -- C:\Users\Stachu\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/04/29 17:39:35 | 000,000,352 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2011/04/29 17:28:38 | 000,013,248 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/04/29 17:28:38 | 000,013,248 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/04/29 17:25:29 | 000,739,774 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/04/29 17:25:29 | 000,150,750 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/04/29 17:24:26 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempvr3884.html
[2011/04/29 17:24:26 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempTL3884.html
[2011/04/29 17:21:00 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2074169377-1294808753-2415027573-1001UA.job
[2011/04/29 17:20:22 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl
[2011/04/29 17:20:04 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/04/29 17:20:02 | 2312,101,888 | -HS- | M] () -- C:\hiberfil.sys
[2011/04/29 17:09:54 | 009,034,584 | ---- | M] (Microsoft Corporation) -- C:\Users\Stachu\Desktop\vcredist_x86.exe
[2011/04/29 17:04:00 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/04/29 17:00:01 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempGj3676.html
[2011/04/29 17:00:01 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempkD3676.html
[2011/04/29 16:26:54 | 000,001,034 | ---- | M] () -- C:\Users\Stachu\Desktop\rejestr.reg
[2011/04/29 16:00:07 | 001,055,082 | ---- | M] (www.froggie.sk) -- C:\Users\Stachu\Desktop\Vistalizator.exe
[2011/04/29 15:51:17 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/04/29 15:22:51 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TemprR4472.html
[2011/04/29 15:22:51 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempQd4472.html
[2011/04/29 14:58:40 | 000,001,010 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2074169377-1294808753-2415027573-1001Core.job
[2011/04/28 18:35:48 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempNg3472.html
[2011/04/28 18:35:48 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempXm3472.html
[2011/04/28 17:22:28 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TemppH4412.html
[2011/04/28 17:22:28 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempzl4412.html
[2011/04/28 15:59:05 | 047,854,144 | ---- | M] () -- C:\windows6.1.cab
[2011/04/28 15:54:42 | 000,042,016 | ---- | M] () -- C:\Users\Stachu\Desktop\exe2cab.exe
[2011/04/28 15:51:49 | 047,862,552 | ---- | M] (Microsoft Corporation) -- C:\Users\Stachu\Desktop\windows6.1-kb972813-x86-pl-pl_9199018040692bc732a590e9b092a18120d326b2.exe
[2011/04/28 11:55:09 | 000,119,535 | ---- | M] () -- C:\Users\Stachu\Desktop\WU.jpg
[2011/04/28 11:54:24 | 000,099,642 | ---- | M] () -- C:\Users\Stachu\Desktop\WUfailed.jpg
[2011/04/28 08:00:00 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempoi9448.html
[2011/04/28 08:00:00 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempKs9448.html
[2011/04/27 14:36:30 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempNW6532.html
[2011/04/27 14:36:30 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempLp6532.html
[2011/04/27 11:06:16 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempfv6608.html
[2011/04/27 11:06:16 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempLr6608.html
[2011/04/27 02:20:59 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempje2168.html
[2011/04/27 02:20:59 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempPF2168.html
[2011/04/27 01:03:26 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempiE1452.html
[2011/04/27 01:03:26 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempLI1452.html
[2011/04/26 22:45:08 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempC14932.html
[2011/04/26 22:45:08 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempH14932.html
[2011/04/26 14:15:36 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempoD9936.html
[2011/04/26 14:15:36 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TemprU9936.html
[2011/04/25 23:51:31 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempys3656.html
[2011/04/25 23:51:31 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempRI3656.html
[2011/04/25 02:14:26 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempJ10600.html
[2011/04/25 02:14:26 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempi10600.html
[2011/04/24 02:51:11 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempfA6116.html
[2011/04/24 02:51:11 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempIW6116.html
[2011/04/23 00:28:14 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempJ10428.html
[2011/04/23 00:28:14 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempV10428.html
[2011/04/22 17:41:59 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempy13640.html
[2011/04/22 17:41:59 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempa13640.html
[2011/04/22 16:22:58 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempeN6852.html
[2011/04/22 16:22:58 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempTI6852.html
[2011/04/22 00:58:24 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TemprM9092.html
[2011/04/22 00:58:24 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TemptU9092.html
[2011/04/20 15:01:33 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempAY8768.html
[2011/04/20 15:01:33 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempKK8768.html
[2011/04/20 11:03:32 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempRs1676.html
[2011/04/20 11:03:32 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempnE1676.html
[2011/04/20 01:38:13 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempoT4492.html
[2011/04/20 01:38:13 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempbn4492.html
[2011/04/19 23:56:01 | 004,759,582 | ---- | M] () -- C:\Users\Stachu\Desktop\DSC_0773.JPG
[2011/04/19 22:02:12 | 000,000,847 | ---- | M] () -- C:\Users\Public\Desktop\e-Deklaracje.lnk
[2011/04/19 18:14:08 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2011/04/19 17:18:25 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempVLI916.html
[2011/04/19 17:18:25 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempSbr916.html
[2011/04/18 20:09:05 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempAY3232.html
[2011/04/18 20:09:05 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempSu3232.html
[2011/04/18 19:25:12 | 000,040,112 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2011/04/18 19:25:10 | 000,199,304 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2011/04/18 19:17:46 | 000,441,176 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2011/04/18 19:17:34 | 000,307,288 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
[2011/04/18 19:16:18 | 000,049,240 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
[2011/04/18 19:13:21 | 000,025,432 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys
[2011/04/18 19:13:09 | 000,053,592 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2011/04/18 19:12:58 | 000,019,544 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys
[2011/04/18 14:14:14 | 524,288,000 | ---- | M] () -- C:\REMOVE_THIS_FILE.livecd.swap
[2011/04/18 13:53:25 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Temptg1860.html
[2011/04/18 13:53:25 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempZX1860.html
[2011/04/18 13:50:54 | 000,001,024 | ---- | M] () -- C:\.rnd
[2011/04/18 08:19:17 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempRj9900.html
[2011/04/18 08:19:17 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempMe9900.html
[2011/04/18 01:53:17 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempjj3796.html
[2011/04/18 01:53:17 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempIp3796.html
[2011/04/18 00:35:17 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempfb3564.html
[2011/04/18 00:35:17 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempzK3564.html
[2011/04/17 19:31:27 | 000,000,219 | ---- | M] () -- C:\Users\Stachu\Documents\K-najblizszych sasiadow.htm
[2011/04/17 04:34:26 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempjT3472.html
[2011/04/17 04:34:26 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempJX3472.html
[2011/04/15 15:39:47 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempe11080.html
[2011/04/15 15:39:47 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempD11080.html
[2011/04/15 11:38:46 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempVz1200.html
[2011/04/15 11:38:46 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempaG1200.html
[2011/04/15 02:03:43 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempgn8756.html
[2011/04/15 02:03:43 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempLI8756.html
[2011/04/14 18:26:43 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TemplA3896.html
[2011/04/14 18:26:43 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempDp3896.html
[2011/04/14 00:16:27 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempTI4008.html
[2011/04/14 00:16:27 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempzf4008.html
[2011/04/13 17:03:01 | 000,418,032 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011/04/13 15:24:47 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempn15036.html
[2011/04/13 15:24:47 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempE15036.html
[2011/04/13 14:02:19 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempk11612.html
[2011/04/13 14:02:19 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempq11612.html
[2011/04/13 14:02:10 | 000,339,084 | ---- | M] () -- C:\Users\Stachu\Desktop\503545470411_faktura.pdf
[2011/04/13 01:14:51 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempoN6256.html
[2011/04/13 01:14:51 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempLj6256.html
[2011/04/12 20:54:35 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TemphH8676.html
[2011/04/12 20:54:35 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempuK8676.html
[2011/04/12 20:51:31 | 002,581,428 | ---- | M] () -- C:\Users\Stachu\Desktop\[www.radiomaryja.pl]2011.04.12.akt03.mp3
[2011/04/12 00:03:28 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempzW3876.html
[2011/04/12 00:03:28 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Templf3876.html
[2011/04/11 16:39:58 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempzt5088.html
[2011/04/11 16:39:58 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempLN5088.html
[2011/04/11 01:20:02 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempaHJ428.html
[2011/04/11 01:20:02 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempSIW428.html
[2011/04/11 00:09:21 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempEC2200.html
[2011/04/11 00:09:21 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempPh2200.html
[2011/04/10 01:25:46 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempQO4148.html
[2011/04/10 01:25:46 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempzZ4148.html
[2011/04/09 14:34:06 | 000,002,641 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VPN Client.lnk
[2011/04/09 01:37:22 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempLw5344.html
[2011/04/09 01:37:22 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempTy5344.html
[2011/04/08 10:13:44 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempQ17368.html
[2011/04/08 10:13:44 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempb17368.html
[2011/04/07 17:29:20 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempY16156.html
[2011/04/07 17:29:20 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Temph16156.html
[2011/04/07 12:35:44 | 000,000,444 | ---- | M] () -- C:\Windows\System32\InstallUtil.InstallLog
[2011/04/07 06:28:32 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempBD2008.html
[2011/04/07 06:28:32 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempss2008.html
[2011/04/06 16:17:37 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempBE8764.html
[2011/04/06 16:17:37 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempqs8764.html
[2011/04/06 07:33:46 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempPS6964.html
[2011/04/06 07:33:46 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempFT6964.html
[2011/04/06 02:03:33 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempaX7532.html
[2011/04/06 02:03:33 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempxe7532.html
[2011/04/05 13:07:19 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempaA5828.html
[2011/04/05 13:07:19 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempqM5828.html
[2011/04/04 00:56:33 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempd18512.html
[2011/04/04 00:56:33 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempN18512.html
[2011/04/03 23:05:15 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempt23184.html
[2011/04/03 23:05:15 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempD23184.html
[2011/04/01 00:56:44 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempCs6272.html
[2011/04/01 00:56:44 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempyV6272.html
[2011/03/31 18:48:19 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempRX3780.html
[2011/03/31 18:48:19 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempqF3780.html
[2011/03/31 11:17:50 | 000,001,594 | ---- | M] () -- C:\Windows\VPNInstall.MIF
[2011/03/31 00:44:02 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempts7020.html
[2011/03/31 00:44:02 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\Tempcs7020.html
[2011/03/31 00:34:27 | 000,002,432 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempFi4192.html
[2011/03/31 00:34:27 | 000,002,089 | ---- | M] () -- C:\Users\Stachu\AppData\Local\TempPs4192.html
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011/04/29 17:24:26 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempvr3884.html
[2011/04/29 17:24:26 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempTL3884.html
[2011/04/29 16:26:54 | 000,001,034 | ---- | C] () -- C:\Users\Stachu\Desktop\rejestr.reg
[2011/04/29 15:59:43 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempGj3676.html
[2011/04/29 15:59:43 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempkD3676.html
[2011/04/29 15:11:25 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TemprR4472.html
[2011/04/29 15:11:25 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempQd4472.html
[2011/04/28 17:27:56 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempNg3472.html
[2011/04/28 17:27:56 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempXm3472.html
[2011/04/28 17:21:22 | 000,000,352 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2011/04/28 15:59:04 | 047,854,144 | ---- | C] () -- C:\windows6.1.cab
[2011/04/28 15:54:42 | 000,042,016 | ---- | C] () -- C:\Users\Stachu\Desktop\exe2cab.exe
[2011/04/28 11:55:08 | 000,119,535 | ---- | C] () -- C:\Users\Stachu\Desktop\WU.jpg
[2011/04/28 11:54:24 | 000,099,642 | ---- | C] () -- C:\Users\Stachu\Desktop\WUfailed.jpg
[2011/04/28 11:20:37 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TemppH4412.html
[2011/04/28 11:20:37 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempzl4412.html
[2011/04/27 14:36:39 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempoi9448.html
[2011/04/27 14:36:39 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempKs9448.html
[2011/04/27 11:58:40 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempNW6532.html
[2011/04/27 11:58:40 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempLp6532.html
[2011/04/27 10:26:05 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempfv6608.html
[2011/04/27 10:26:05 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempLr6608.html
[2011/04/27 01:07:50 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempje2168.html
[2011/04/27 01:07:50 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempPF2168.html
[2011/04/27 00:20:30 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempiE1452.html
[2011/04/27 00:20:30 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempLI1452.html
[2011/04/26 18:37:37 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempC14932.html
[2011/04/26 18:37:37 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempH14932.html
[2011/04/26 11:05:54 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempoD9936.html
[2011/04/26 11:05:54 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TemprU9936.html
[2011/04/25 20:43:43 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempys3656.html
[2011/04/25 20:43:43 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempRI3656.html
[2011/04/24 20:08:16 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempJ10600.html
[2011/04/24 20:08:16 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempi10600.html
[2011/04/24 00:10:55 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempfA6116.html
[2011/04/24 00:10:55 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempIW6116.html
[2011/04/22 20:32:20 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempJ10428.html
[2011/04/22 20:32:20 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempV10428.html
[2011/04/22 16:23:49 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempy13640.html
[2011/04/22 16:23:49 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempa13640.html
[2011/04/22 10:39:11 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempeN6852.html
[2011/04/22 10:39:11 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempTI6852.html
[2011/04/21 23:34:28 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TemprM9092.html
[2011/04/21 23:34:28 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TemptU9092.html
[2011/04/20 14:29:07 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempAY8768.html
[2011/04/20 14:29:07 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempKK8768.html
[2011/04/20 10:27:32 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempRs1676.html
[2011/04/20 10:27:32 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempnE1676.html
[2011/04/19 23:55:13 | 004,759,582 | ---- | C] () -- C:\Users\Stachu\Desktop\DSC_0773.JPG
[2011/04/19 22:02:12 | 000,000,859 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\e-Deklaracje.lnk
[2011/04/19 22:02:12 | 000,000,847 | ---- | C] () -- C:\Users\Public\Desktop\e-Deklaracje.lnk
[2011/04/19 19:10:25 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempoT4492.html
[2011/04/19 19:10:25 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempbn4492.html
[2011/04/19 17:18:25 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempVLI916.html
[2011/04/19 17:18:25 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempSbr916.html
[2011/04/18 20:14:53 | 000,000,852 | ---- | C] () -- C:\Windows\System32\drivers\RTKHDRC2.dat
[2011/04/18 20:14:53 | 000,000,852 | ---- | C] () -- C:\Windows\System32\drivers\RTKHDRC1.dat
[2011/04/18 20:14:53 | 000,000,852 | ---- | C] () -- C:\Windows\System32\drivers\RTKHDRC0.dat
[2011/04/18 20:14:53 | 000,000,520 | ---- | C] () -- C:\Windows\System32\drivers\RTEQEX2.dat
[2011/04/18 20:14:53 | 000,000,520 | ---- | C] () -- C:\Windows\System32\drivers\RTEQEX1.dat
[2011/04/18 20:14:53 | 000,000,520 | ---- | C] () -- C:\Windows\System32\drivers\RTEQEX0.dat
[2011/04/18 20:14:53 | 000,000,024 | ---- | C] () -- C:\Windows\System32\drivers\rtkhdaud.dat
[2011/04/18 14:01:31 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempAY3232.html
[2011/04/18 14:01:31 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempSu3232.html
[2011/04/18 13:51:28 | 000,055,856 | ---- | C] () -- C:\Windows\System32\vnetinst.dll
[2011/04/18 13:29:21 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Temptg1860.html
[2011/04/18 13:29:21 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempZX1860.html
[2011/04/18 03:25:41 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempRj9900.html
[2011/04/18 03:25:41 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempMe9900.html
[2011/04/18 00:35:32 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempjj3796.html
[2011/04/18 00:35:32 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempIp3796.html
[2011/04/17 19:07:30 | 000,000,219 | ---- | C] () -- C:\Users\Stachu\Documents\K-najblizszych sasiadow.htm
[2011/04/17 14:32:44 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempfb3564.html
[2011/04/17 14:32:44 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempzK3564.html
[2011/04/16 22:07:17 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempjT3472.html
[2011/04/16 22:07:17 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempJX3472.html
[2011/04/15 12:21:47 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempe11080.html
[2011/04/15 12:21:47 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempD11080.html
[2011/04/15 09:45:46 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempVz1200.html
[2011/04/15 09:45:46 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempaG1200.html
[2011/04/14 21:20:54 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempgn8756.html
[2011/04/14 21:20:54 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempLI8756.html
[2011/04/14 16:07:30 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TemplA3896.html
[2011/04/14 16:07:30 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempDp3896.html
[2011/04/13 17:09:15 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempTI4008.html
[2011/04/13 17:09:15 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempzf4008.html
[2011/04/13 14:02:35 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempn15036.html
[2011/04/13 14:02:35 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempE15036.html
[2011/04/13 14:02:09 | 000,339,084 | ---- | C] () -- C:\Users\Stachu\Desktop\503545470411_faktura.pdf
[2011/04/13 08:54:06 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempk11612.html
[2011/04/13 08:54:06 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempq11612.html
[2011/04/12 20:54:45 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempoN6256.html
[2011/04/12 20:54:45 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempLj6256.html
[2011/04/12 20:51:29 | 002,581,428 | ---- | C] () -- C:\Users\Stachu\Desktop\[www.radiomaryja.pl]2011.04.12.akt03.mp3
[2011/04/12 17:41:45 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TemphH8676.html
[2011/04/12 17:41:45 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempuK8676.html
[2011/04/11 17:31:03 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempzW3876.html
[2011/04/11 17:31:03 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Templf3876.html
[2011/04/11 15:33:12 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempzt5088.html
[2011/04/11 15:33:12 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempLN5088.html
[2011/04/11 00:26:56 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempaHJ428.html
[2011/04/11 00:26:56 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempSIW428.html
[2011/04/10 16:29:44 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempEC2200.html
[2011/04/10 16:29:44 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempPh2200.html
[2011/04/09 23:47:53 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempQO4148.html
[2011/04/09 23:47:53 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempzZ4148.html
[2011/04/09 16:25:47 | 524,288,000 | ---- | C] () -- C:\REMOVE_THIS_FILE.livecd.swap
[2011/04/09 00:15:55 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempLw5344.html
[2011/04/09 00:15:55 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempTy5344.html
[2011/04/08 09:58:30 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempQ17368.html
[2011/04/08 09:58:30 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempb17368.html
[2011/04/07 16:25:34 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempY16156.html
[2011/04/07 16:25:34 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Temph16156.html
[2011/04/07 12:35:36 | 000,000,444 | ---- | C] () -- C:\Windows\System32\InstallUtil.InstallLog
[2011/04/06 21:18:39 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempBD2008.html
[2011/04/06 21:18:39 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempss2008.html
[2011/04/06 08:13:23 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempBE8764.html
[2011/04/06 08:13:23 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempqs8764.html
[2011/04/06 07:19:00 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempPS6964.html
[2011/04/06 07:19:00 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempFT6964.html
[2011/04/05 14:53:09 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempaX7532.html
[2011/04/05 14:53:09 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempxe7532.html
[2011/04/04 22:06:30 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempaA5828.html
[2011/04/04 22:06:30 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempqM5828.html
[2011/04/03 23:05:38 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempd18512.html
[2011/04/03 23:05:38 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempN18512.html
[2011/04/03 19:34:51 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempt23184.html
[2011/04/03 19:34:51 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempD23184.html
[2011/04/01 00:00:19 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempCs6272.html
[2011/04/01 00:00:19 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempyV6272.html
[2011/03/31 14:39:41 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempRX3780.html
[2011/03/31 14:39:41 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempqF3780.html
[2011/03/31 11:15:41 | 000,002,641 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VPN Client.lnk
[2011/03/31 11:15:24 | 000,001,594 | ---- | C] () -- C:\Windows\VPNInstall.MIF
[2011/03/31 00:34:40 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempts7020.html
[2011/03/31 00:34:40 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempcs7020.html
[2011/03/30 20:16:56 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempFi4192.html
[2011/03/30 20:16:56 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempPs4192.html
[2011/03/30 13:45:33 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempKo3248.html
[2011/03/30 13:45:33 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempTj3248.html
[2011/03/29 20:38:43 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempL11864.html
[2011/03/29 20:38:43 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempo11864.html
[2011/03/29 18:29:26 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Temps12412.html
[2011/03/29 18:29:26 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempZ12412.html
[2011/03/28 19:08:22 | 000,028,160 | ---- | C] () -- C:\Windows\System32\SpyShelterShellExt.dll
[2011/03/28 17:13:41 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempA12144.html
[2011/03/28 17:13:41 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempt12144.html
[2011/03/28 01:15:31 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempA10804.html
[2011/03/28 01:15:31 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempF10804.html
[2011/03/28 00:14:49 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempRW8892.html
[2011/03/28 00:14:49 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempNS8892.html
[2011/03/27 17:23:26 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempYH8612.html
[2011/03/27 17:23:26 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempIP8612.html
[2011/03/26 20:50:31 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempuC7416.html
[2011/03/26 20:50:31 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempzi7416.html
[2011/03/26 13:06:41 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempqj1264.html
[2011/03/26 13:06:41 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Templl1264.html
[2011/03/25 16:33:52 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempMF5312.html
[2011/03/25 16:33:52 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempjn5312.html
[2011/03/25 15:27:00 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Temprh4308.html
[2011/03/25 15:27:00 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempxM4308.html
[2011/03/25 11:43:18 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempdi3308.html
[2011/03/25 11:43:18 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempsv3308.html
[2011/03/23 22:48:29 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempPS5220.html
[2011/03/23 22:48:29 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempfX5220.html
[2011/03/23 18:12:12 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempmb4088.html
[2011/03/23 18:12:12 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempjX4088.html
[2011/03/23 09:51:57 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempLXv864.html
[2011/03/23 09:51:57 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempZcn864.html
[2011/03/22 21:02:36 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Temppc4048.html
[2011/03/22 21:02:36 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TemphJ4048.html
[2011/03/21 18:43:30 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Temptm1060.html
[2011/03/21 18:43:30 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempVe1060.html
[2011/03/21 01:13:10 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempcn2912.html
[2011/03/21 01:13:10 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempYu2912.html
[2011/03/18 16:48:58 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempsB3520.html
[2011/03/18 16:48:58 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempsy3520.html
[2011/03/17 23:37:12 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempQW6040.html
[2011/03/17 23:37:12 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempAK6040.html
[2011/03/17 01:49:07 | 000,000,022 | -HS- | C] () -- C:\Users\Stachu\AppData\Roaming\Sys2662.Config.Repository.bin
[2011/03/15 19:43:43 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempSs5344.html
[2011/03/15 19:43:43 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempKn5344.html
[2011/03/15 16:00:42 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempot2648.html
[2011/03/15 16:00:42 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempkG2648.html
[2011/03/14 20:30:31 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempfU4052.html
[2011/03/14 20:30:31 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempgj4052.html
[2011/03/13 18:16:37 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempxt3704.html
[2011/03/13 18:16:37 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempum3704.html
[2011/03/12 21:58:47 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempvx3120.html
[2011/03/12 21:58:47 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempID3120.html
[2011/03/11 18:50:19 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempNeR564.html
[2011/03/11 18:50:19 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempFhO564.html
[2011/03/11 17:46:41 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempWd3196.html
[2011/03/11 17:46:41 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempyM3196.html
[2011/03/11 14:44:19 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempMS2368.html
[2011/03/11 14:44:19 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempiM2368.html
[2011/03/10 17:42:36 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempjX1356.html
[2011/03/10 17:42:36 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempby1356.html
[2011/03/10 17:38:34 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TemppD1356.html
[2011/03/10 17:38:34 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempWu1356.html
[2011/03/10 17:36:34 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempjd1356.html
[2011/03/10 17:36:34 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempeu1356.html
[2011/03/10 14:35:35 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempDX1356.html
[2011/03/10 14:35:35 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempFe1356.html
[2011/03/10 09:23:35 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempAU5032.html
[2011/03/10 09:23:35 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempKd5032.html
[2011/03/09 19:06:59 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempsyv956.html
[2011/03/09 19:06:59 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempUvO956.html
[2011/03/09 09:21:56 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempmE1276.html
[2011/03/09 09:21:56 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempuN1276.html
[2011/03/08 12:50:29 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\Tempfx3472.html
[2011/03/08 12:50:28 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempmS3472.html
[2011/03/07 09:24:40 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempXI5404.html
[2011/03/07 09:24:40 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TemprH5404.html
[2011/03/05 13:16:40 | 000,002,432 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempCD7344.html
[2011/03/05 13:16:40 | 000,002,089 | ---- | C] () -- C:\Users\Stachu\AppData\Local\TempSC7344.html
[2011/02/22 20:41:49 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2011/02/16 01:07:42 | 000,000,193 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2011/01/25 16:57:44 | 000,000,173 | ---- | C] () -- C:\Users\Stachu\AppData\Local\msmathematics.qat.Stachu
[2011/01/21 07:36:02 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2011/01/16 02:23:38 | 001,740,800 | ---- | C] () -- C:\Windows\System32\Osklauncher.exe
[2011/01/16 02:23:38 | 000,054,784 | ---- | C] () -- C:\Windows\System32\inject_logon_dll.dll
[2010/12/20 19:21:28 | 000,005,120 | ---- | C] () -- C:\Windows\System32\HdmiCoin.dll
[2010/12/01 02:07:54 | 000,153,600 | ---- | C] () -- C:\Windows\System32\WS_ATLMovie.dll
[2010/08/17 00:37:29 | 000,053,248 | ---- | C] () -- C:\Windows\System32\CommonDL.dll
[2010/08/17 00:37:29 | 000,002,413 | ---- | C] () -- C:\Windows\System32\lgAxconfig.ini
[2010/08/06 01:13:29 | 000,075,776 | ---- | C] () -- C:\Windows\cadkasdeinst01e.exe
[2010/07/30 10:57:24 | 000,110,602 | ---- | C] () -- C:\Windows\System32\xcdsfx32.bin
[2010/06/25 19:03:12 | 000,053,299 | ---- | C] () -- C:\Windows\System32\pthreadVC.dll
[2010/06/15 03:29:18 | 000,005,632 | ---- | C] () -- C:\Windows\System32\StarOpen.sys
[2010/06/13 20:14:06 | 000,010,752 | ---- | C] () -- C:\Windows\System32\BASSMOD.dll
[2010/06/08 23:19:02 | 000,087,608 | ---- | C] () -- C:\Users\Stachu\AppData\Roaming\inst.exe
[2010/06/08 23:19:02 | 000,007,887 | ---- | C] () -- C:\Users\Stachu\AppData\Roaming\pcouffin.cat
[2010/06/08 23:19:02 | 000,001,144 | ---- | C] () -- C:\Users\Stachu\AppData\Roaming\pcouffin.inf
[2010/05/11 22:29:33 | 000,000,046 | ---- | C] () -- C:\Windows\System32\DonationCoder_urlsnooper_InstallInfo.dat
[2010/05/06 14:17:31 | 000,000,332 | ---- | C] () -- C:\Windows\pdf2word.INI
[2010/02/24 10:40:35 | 000,069,632 | ---- | C] () -- C:\Windows\System32\GkSui18.EXE
[2010/02/20 16:16:10 | 000,439,308 | ---- | C] () -- C:\Windows\System32\igcompkrng500.bin
[2010/02/20 16:16:08 | 000,982,240 | ---- | C] () -- C:\Windows\System32\igkrng500.bin
[2010/02/20 16:16:08 | 000,092,356 | ---- | C] () -- C:\Windows\System32\igfcg500m.bin
[2010/02/16 00:12:21 | 000,000,551 | ---- | C] () -- C:\Users\Stachu\AppData\Roaming\AutoGK.ini
[2010/02/15 22:28:46 | 000,000,193 | ---- | C] () -- C:\Windows\dvdtoaviconverter.ini
[2010/02/15 22:26:20 | 000,000,001 | ---- | C] () -- C:\Windows\System32\SysDVDtoavi.dat
[2010/02/08 08:33:04 | 000,359,320 | ---- | C] () -- C:\Windows\System32\vfprintpthelper.dll
[2010/02/04 14:20:46 | 000,000,083 | ---- | C] () -- C:\Windows\wininit.ini
[2009/12/15 02:45:44 | 000,000,151 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config
[2009/11/23 20:23:28 | 000,165,996 | ---- | C] () -- C:\Users\Stachu\AppData\Local\debuggee.mdmp
[2009/11/19 13:37:44 | 000,000,083 | ---- | C] () -- C:\Windows\wwp.INI
[2009/11/17 12:08:34 | 000,197,424 | ---- | C] () -- C:\Windows\System32\vpnapi.dll
[2009/11/04 19:08:00 | 000,000,148 | ---- | C] () -- C:\Windows\QIII.INI
[2009/10/12 22:56:08 | 000,002,544 | ---- | C] () -- C:\Windows\checkip.dat
[2009/10/04 22:25:01 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009/09/19 05:12:26 | 000,021,840 | ---- | C] () -- C:\Windows\System32\SIntfNT.dll
[2009/09/19 05:12:26 | 000,017,212 | ---- | C] () -- C:\Windows\System32\SIntf32.dll
[2009/09/19 05:12:26 | 000,012,067 | ---- | C] () -- C:\Windows\System32\SIntf16.dll
[2009/09/19 05:05:35 | 000,035,888 | ---- | C] () -- C:\Windows\DIIUnin.dat
[2009/09/14 10:58:02 | 000,000,126 | ---- | C] () -- C:\Windows\SCRABMAN.INI
[2009/08/31 01:31:48 | 000,000,017 | ---- | C] () -- C:\Users\Stachu\AppData\Local\resmon.resmoncfg
[2009/08/27 11:25:23 | 000,013,576 | ---- | C] () -- C:\Windows\System32\wnaspi32.dll
[2009/08/26 00:01:20 | 000,010,752 | ---- | C] () -- C:\Users\Stachu\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/08/25 23:11:50 | 000,039,424 | ---- | C] () -- C:\Windows\ia32.dll
[2009/08/24 19:25:15 | 000,140,288 | ---- | C] () -- C:\Windows\System32\igfxtvcx.dll
[2009/07/14 06:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/14 06:33:53 | 000,418,032 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009/07/14 04:05:48 | 000,739,774 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009/07/14 04:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009/07/14 04:05:48 | 000,150,750 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009/07/14 04:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009/07/14 04:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009/07/14 04:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009/07/14 01:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009/07/14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009/06/10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2009/06/03 18:07:52 | 000,134,592 | ---- | C] () -- C:\Windows\System32\igfcg500.bin
[2008/05/28 01:16:44 | 000,061,440 | ---- | C] () -- C:\Windows\System32\NormalizeDSP.dll
[2008/05/03 18:31:42 | 000,071,096 | ---- | C] () -- C:\Windows\System32\NMSAccess.exe
[2006/10/21 19:59:59 | 000,262,144 | ---- | C] () -- C:\Windows\System32\Manipulate.dll
[2006/09/25 03:53:56 | 000,268,242 | ---- | C] () -- C:\Windows\System32\erdmpg-parse.dll
[2006/09/25 03:53:44 | 002,518,779 | ---- | C] () -- C:\Windows\System32\erdmpg-enc.dll
[2006/09/25 03:52:06 | 000,030,693 | ---- | C] () -- C:\Windows\System32\erdmpg-int.dll
[2005/11/06 01:34:50 | 000,145,408 | ---- | C] () -- C:\Windows\System32\Lame.exe
[2005/10/15 05:10:24 | 000,065,536 | ---- | C] () -- C:\Windows\System32\comLyricGetter.dll
[2005/05/17 22:37:10 | 000,076,800 | ---- | C] () -- C:\Windows\System32\Faac.exe
[2004/02/01 21:21:56 | 000,097,280 | ---- | C] () -- C:\Windows\System32\Uncommon.dll
[2002/10/16 00:54:04 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2002/07/19 18:48:22 | 000,157,696 | ---- | C] () -- C:\Windows\System32\OggEnc.exe
[1996/04/03 21:33:26 | 000,005,248 | ---- | C] () -- C:\Windows\System32\giveio.sys
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011/04/27 01:17:32 | 000,000,000 | -HSD | M] -- C:\Users\Stachu\AppData\Roaming\.#
[2010/11/16 02:25:21 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Aiseesoft Total Video Converter
[2011/02/13 14:14:42 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Ashampoo
[2011/03/09 11:22:47 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Auslogics
[2011/03/01 08:30:39 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\BESTplayer
[2011/01/19 19:35:33 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\ChomikBox
[2010/01/09 03:36:59 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\CoreCodec
[2010/01/22 21:13:04 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Cream Software
[2010/05/11 22:29:33 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\DonationCoder
[2010/08/20 10:46:50 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\DroidExplorer
[2011/04/17 23:45:32 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Dropbox
[2011/04/19 22:02:17 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
[2010/10/07 14:19:54 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Easy Duplicate Finder
[2011/01/11 20:17:48 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\eSkiMoS R2
[2009/11/12 00:19:32 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\eXPert PDF Editor
[2010/10/12 00:15:37 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\fltk.org
[2010/12/16 14:39:52 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\FMZilla
[2011/03/10 17:50:50 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Gadu-Gadu 10
[2010/06/11 00:22:53 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\GHISLER
[2010/11/03 12:22:33 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\gtk-2.0
[2011/04/08 10:27:36 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\ILOG
[2011/04/27 00:55:29 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\IObit
[2011/03/23 22:25:18 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\KC Softwares
[2011/04/17 19:41:21 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\kompozer.net
[2010/10/12 13:05:24 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\MAXON
[2010/08/31 00:14:35 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\No Company Name
[2011/04/27 03:18:09 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Notepad++
[2009/11/09 15:37:12 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Nowe Gadu-Gadu
[2010/06/10 23:46:36 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Nvu
[2009/09/03 18:26:47 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\OpenFM
[2011/04/05 17:42:02 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\PandoraRecovery
[2009/09/14 10:55:04 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Scrabble Plus
[2010/04/15 17:34:49 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Smith V3
[2011/01/16 02:23:59 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\SpyShelter
[2011/03/03 03:45:23 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Subversion
[2011/03/06 20:52:22 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\SWI-Prolog
[2011/03/21 01:34:26 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\SystemRequirementsLab
[2011/03/10 18:59:24 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\TeamViewer
[2010/06/13 17:47:08 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Thinstall
[2009/12/20 14:17:39 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Thunderbird
[2011/03/05 17:06:24 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Toshiba
[2011/04/29 17:54:57 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\uTorrent
[2010/10/06 12:31:03 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\Vso
[2011/02/15 01:13:12 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\WinBatch
[2011/01/03 21:12:45 | 000,000,000 | ---D | M] -- C:\Users\Stachu\AppData\Roaming\YCanPDF
[2011/04/29 15:51:17 | 000,032,604 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 7 bytes -> C:\Users\Stachu\plik.txt:str.txt
@Alternate Data Stream - 7 bytes -> C:\Users\Stachu\plik.txt:str
@Alternate Data Stream - 136 bytes -> C:\ProgramData\TEMP:587EB586
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:C43ED645

< End of report >